Bottybotsterson 9a28c929ed Restructure: public/-only IIS webroot, physical separation over hiddenSegments At Daniel's explicit direction (overrides SPEC.md $5's originally fixed tree, updated in place per AGENTS.md precedence rules): - Default.asp + web.config moved into public/; Framework/Controllers/ tests/tools/docs/logs are now siblings entirely outside the served root - physical separation, not a web.config rule, is what protects them now - IIS site physicalPath changed to C:\Projects\wsc-mvc\public - enableParentPaths enabled, scoped to just this site via `appcmd ... /commit:apphost` (writes a <location> block in applicationHost.config, not a machine-wide unlock of the locked system.webServer/asp section) - Default.asp now uses Server.MapPath("../logs") to reach logs/ - tools/Setup-Site.ps1 automates and reconciles all of the above, verified idempotent (safe to re-run) - Verified enableParentPaths does not open a client-side traversal hole: direct/encoded/double-encoded ../ URL attempts all correctly 404/403 - Full regression re-run (WSH, HTTP, curl+JSON self-test) all pass unchanged from the client's point of view - SPEC.md, docs/ARCHITECTURE.md, docs/DECISIONS.md, docs/TEST-RESULTS.md updated to reflect the new structure as current, not left stale		il y a 2 semaines
Controllers	Add frontend-agnostic HTTP+JSON test harness (GET /self-test)	il y a 2 semaines
Framework	Add frontend-agnostic HTTP+JSON test harness (GET /self-test)	il y a 2 semaines
docs	Restructure: public/-only IIS webroot, physical separation over hiddenSegments	il y a 2 semaines
public	Restructure: public/-only IIS webroot, physical separation over hiddenSegments	il y a 2 semaines
tests	Restructure: public/-only IIS webroot, physical separation over hiddenSegments	il y a 2 semaines
tools	Restructure: public/-only IIS webroot, physical separation over hiddenSegments	il y a 2 semaines
.gitignore	M2: per-request context, central error/outcome logging, three real WSC/VBScript defects fixed	il y a 2 semaines
AGENTS.md	Import WSC-MVC agent starter pack (SPEC, AGENTS, IMPLEMENTATION_PLAN, CLAUDE, README)	il y a 2 semaines
CLAUDE.md	Import WSC-MVC agent starter pack (SPEC, AGENTS, IMPLEMENTATION_PLAN, CLAUDE, README)	il y a 2 semaines
IMPLEMENTATION_PLAN.md	M2: per-request context, central error/outcome logging, three real WSC/VBScript defects fixed	il y a 2 semaines
README.md	Import WSC-MVC agent starter pack (SPEC, AGENTS, IMPLEMENTATION_PLAN, CLAUDE, README)	il y a 2 semaines
SPEC.md	Restructure: public/-only IIS webroot, physical separation over hiddenSegments	il y a 2 semaines

README.md

WSC-MVC Agent Starter Pack

This is a planning and agent-control package, not yet an executable framework.

Files

SPEC.md — authoritative product, architectural, security, milestone and acceptance specification.
AGENTS.md — shared instructions for coding agents.
CLAUDE.md — Claude Code entry point; defers to AGENTS.md.
IMPLEMENTATION_PLAN.md — gated execution checklist.

Start a coding agent

Copy these files to the root of the new WSC-MVC repository, then issue:

Read AGENTS.md, SPEC.md, IMPLEMENTATION_PLAN.md. Execute M0 and then the smallest testable piece of M1. Record actual commands/results and do not claim IIS tests passed unless you ran them on Windows IIS.

Choose the Windows/IIS machine as the execution host for M0/M1 wherever possible. A Linux-only agent can prepare text/config but cannot establish Windows COM/IIS behavior.