Implementation plan

Prioritized by smallest testable benefit. Every milestone ends with green tests and a final report.

Approval point 1 – done (2026-10-21)

• Stack: Rust (ADR 0001)
• No OxiCloud spike
• License: MIT OR Apache-2.0
• Reference app: current stable Android version at the start of M3

Phase 2: Minimal prototype (P0)

M0 – Skeleton ✅ (2026-10-21)

• Cargo workspace with the crates from docs/architecture.md
• rostdav serve, configuration, structured logs, /healthz, /readyz
• CI: cargo fmt --check, clippy -D warnings, tests, cargo deny / cargo audit
• Acceptance: server starts, health endpoints respond, CI green

M1 – Metadata and storage ✅ (2026-10-21)

• Approval point 2: schema per ADR 0002
• Migrations, BlobStore with atomic placement, path validation and resolution
• rostdav admin user add (CLI), Argon2id
• Acceptance: unit tests for naming rules (incl. Unicode, .., percent-encoding); crash simulation between blob and commit leaves no inconsistent state

M2 – WebDAV core ✅ (2026-10-21)

• Basic Auth with account password (app passwords follow in M4)
• OPTIONS, PROPFIND (Depth 0/1), GET/HEAD with Range, PUT (streaming), MKCOL, DELETE, MOVE, COPY
• ETag, Last-Modified, If-Match/If-None-Match, Overwrite, recursive folder ETags
• Result: rclone (copy up/down, check, moveto, purge, mkdir) verified manually; litmus basic 16/16 and copymove 13/13 pass (scripts/litmus.sh, CI job litmus). litmus props is not run: it needs PROPPATCH/dead properties, which are not implemented. cadaver (mkdir, put, get, ls, move, copy, delete) verified manually in Docker.
• Acceptance: integration tests of all methods incl. error cases; a second user demonstrably cannot access the first user's files; rclone and cadaver work; litmus basic tests run in CI

Phase 3: App compatibility (P1)

M3 – Reference recordings (server side done 2026-10-21; app side open)

• Nextcloud (same major version as emulated) in Docker, reference app in the Android emulator, record traffic with mitmproxy
• Flows: add server, Login Flow v2, open folder, upload small/large, download, rename, move, delete, sign out
• Sanitized fixtures to tests/fixtures/nextcloud/, findings with sources in docs/compatibility.md
• Result so far: Nextcloud 35.0.2 in Docker recorded with synthetic requests (scripts/record_nextcloud.py, ~110 fixtures, findings in docs/compatibility.md). Not done: capture of the real Android app via emulator + mitmproxy.
• Acceptance: every flow present as a fixture, open questions documented

M4 – Sign-in like Nextcloud ✅ (2026-10-21; ADR 0003 accepted 2026-10-23)

• status.php, capabilities (implemented features only), OCS user endpoints
• Login Flow v2 incl. HTML sign-in page, app passwords (create, hash, revoke, last use)
• Rate limiting for all sign-in paths
• Result: implemented with contract tests against the fixtures (crates/rostdav/tests/signin.rs); design in ADR 0003, accepted on 2026-10-23 (approval point 3). Real-app verification is part of M6.
• Acceptance: contract tests against fixtures green; revoking an app password results in 401

M5 – Nextcloud WebDAV extensions ✅ (2026-10-22)

• oc:/nc: properties, upload headers (X-OC-MTime, OC-Checksum, OC-FileId, OC-ETag)
• Chunked upload v2, quota properties and HTTP 507
• Preview and avatar endpoints cleanly answered with 404
• Result: implemented and checked against the fixtures in crates/rostdav/tests/nextcloud_dav.rs (property sets, headers, Sabre error classes, name rules, chunk flow incl. a 105 MiB upload). Differences that remain are listed in docs/compatibility.md. Verified with the real app only in M6.
• Acceptance: contract tests green; upload > 100 MB via chunks

M6 – End-to-end with the app ✅ (2026-10-23, closed for now by the project owner)

• Manual or automated test with the unmodified app (emulator)
• Capture deviations as reproducible tests and fix them
• Acceptance: acceptance list from section 6 of the instructions complete, test status in docs/compatibility.md
• Closed for now: the Android app and the desktop sync engine are verified; the desktop GUI and the iOS client were not tried (they need a graphical session or a device) and can be added later as new rows in docs/compatibility.md.
• Status (2026-10-23, Android 35.0.1 on an Android 15 emulator): sign-in (also with 2FA), file list, create folder, upload, chunked upload (30 MB), download, rename, delete, favorites, share with a user and public link, versions (list, restore) and offline/reconnect verified; five bugs found and fixed (/remote.php/dav root, GET/HEAD on collections, /index.php/204, bigfilechunking, version restore destination) plus favorites implemented. trash (list, restore) verified. desktop sync engine (nextcloudcmd) verified. Open: desktop GUI, iOS client.

Phase 4: Extensions (P2)

Phase 5: Hardening and delivery

• Security tests: authorization matrix ✅, robustness tests for paths/XML/headers ✅ (seeded random inputs; coverage-guided cargo fuzz targets in fuzz/ ✅, 30 s per target without findings), load tests ✅ (tests/load.rs, results in docs/deployment.md)
• Container image ✅ (Dockerfile, CI job), Compose example with Caddy ✅ (deploy/, nginx and Traefik in deployment.md), backup/restore ✅ (admin backup, tested)
• Operations documentation ✅ (deployment.md)

Biggest risks