Merge pull request #126 from jamals86/feature/pubsub

Feature/pubsub

Author: jamals86

.github/workflows/release.yml

@@ -4,9 +4,9 @@ on:
   workflow_dispatch:
     inputs:
       version_tag:
-        description: "Version tag for release (e.g. v0.2.0)"
+        description: "Version tag for release (e.g. v0.3.0)"
         required: true
-        default: "v0.2.0"
+        default: "v0.3.0"
 
       platforms:
         description: "Comma-separated platforms (like --platforms). Ignored if all_platforms=true"

Cargo.lock

@@ -24,7 +24,7 @@ members = [
 ]
 
 [workspace.package]
-version = "0.2.0"
+version = "0.3.0-alpha1"
 edition = "2021"
 rust-version = "1.92"
 authors = ["KalamDB Team"]
@@ -39,7 +39,7 @@ serde_json = "1.0.149"
 
 # Error handling
 thiserror = "2.0.18"
-anyhow = "1.0"
+anyhow = "1.0.101"
 
 # Logging
 log = "0.4.29"
@@ -105,7 +105,7 @@ wait-timeout = "0.2"
 serial_test = "3.3.1"
 
 # Benchmarking
-criterion = { version = "0.8.1", features = ["html_reports"] }
+criterion = { version = "0.8.2", features = ["html_reports"] }
 
 # Raft consensus
 openraft = { version = "0.9.21", features = ["serde"] }

Cargo.toml

@@ -735,7 +735,7 @@ Run: `.specify/scripts/bash/update-agent-context.sh copilot`
 
 ### CLI Credential Storage
 
-**Decision**: Store encrypted credentials in config file at `~/.config/kalamdb/credentials.toml` (XDG Base Directory)
+**Decision**: Store encrypted credentials in config file at `~/.kalam/credentials.toml` (same directory as config.toml)
 
 **Rationale**:
 - XDG standard for config files on Linux/macOS

specs/007-user-auth/plan.md

@@ -675,10 +675,10 @@ kalam> SELECT CURRENT_USER();
 
 ### Credential Storage
 
-The CLI stores credentials in `~/.kalamdb/credentials.toml`:
+The CLI stores credentials in `~/.kalam/credentials.toml`:
 
 ```toml
-# ~/.kalamdb/credentials.toml
+# ~/.kalam/credentials.toml
 
 [[connections]]
 name = "localhost"

specs/007-user-auth/quickstart.md

@@ -403,7 +403,7 @@ async fn create_table(
 
 ### Decision
 
-**Store credentials in `~/.config/kalamdb/credentials.toml` with file permissions 0600 (owner read/write only)**
+**Store credentials in `~/.kalam/credentials.toml` with file permissions 0600 (owner read/write only)**
 
 ### Rationale
 
@@ -415,7 +415,7 @@ async fn create_table(
 
 2. **File Structure**:
    ```toml
-   # ~/.config/kalamdb/credentials.toml
+   # ~/.kalam/credentials.toml
 
    [default]
    instance_name = "local"
@@ -693,7 +693,7 @@ pub async fn authenticate_request(req: &ServiceRequest) -> Result<AuthenticatedU
 | **Password Hashing** | Bcrypt cost 12, async via spawn_blocking | Industry standard, 250ms acceptable, prevents blocking |
 | **JWT Validation** | jsonwebtoken crate, JWKS caching, RS256/ES256 | Battle-tested library, reduces HTTP requests 99% |
 | **Middleware Architecture** | AuthService (library) → AuthMiddleware (HTTP) | Reusable auth logic, clean separation of concerns |
-| **CLI Credentials** | ~/.config/kalamdb/credentials.toml with 0600 perms | XDG standard, file perms for security, multi-instance |
+| **CLI Credentials** | ~/.kalam/credentials.toml with 0600 perms | Consistent with config.toml, file perms for security, multi-instance |
 | **Migration** | 3-phase gradual (dual auth → deprecation → removal) | Zero downtime, 6-month notice, user choice |
 | **Cost Factor** | 12 (not 13 or 14) | Balance security and UX (~250ms vs 500ms+) |
 | **Algorithm Support** | RS256, ES256, HS256 | Cover external OAuth and internal tokens |

specs/007-user-auth/research.md

@@ -444,7 +444,7 @@
 
 #### CLI-Specific Implementation (cli crate)
 
-- [x] T119 [US6] Implement FileCredentialStore in cli/src/credentials.rs (store at ~/.config/kalamdb/credentials.toml with 0600 permissions, implements CredentialStore trait from link) - **COMPLETED**: Full implementation with TOML serialization, secure file permissions, instance management
+- [x] T119 [US6] Implement FileCredentialStore in cli/src/credentials.rs (store at ~/.kalam/credentials.toml with 0600 permissions, implements CredentialStore trait from link) - **COMPLETED**: Full implementation with TOML serialization, secure file permissions, instance management
 - [x] T120 [US6] Implement automatic authentication in CLI session in cli/src/session.rs (read credentials via FileCredentialStore, create BasicAuth provider, pass to KalamLinkClient) - **COMPLETED**: CLISession::with_auth() accepts AuthProvider, creates authenticated KalamLinkClient
 - [x] T121 [US6] Add CLI commands to view system user credentials in cli/src/commands/credentials.rs (show-credentials command, uses FileCredentialStore) - **COMPLETED**: \\show-credentials command displays instance, username, server URL (password hidden), security warnings about storage location and file permissions
 - [x] T122 [US6] Add CLI commands to update system user credentials in cli/src/commands/credentials.rs (update-credentials command, uses FileCredentialStore) - **COMPLETED**: \\update-credentials <username> <password> and \\delete-credentials commands implemented with colored output and security reminders