lectio.git/docs/superpowers/specs/2026-07-27-lectio-calendar-api-design.md, branch main

lectio.git/docs/superpowers/specs/2026-07-27-lectio-calendar-api-design.md, branch main offline Catholic daily readings and liturgical calendar in Go, with CLI, TUI and web clients https://git.labunix.xyz/lectio.git/atom?h=main 2026-07-27T19:18:47Z docs: design spec for calendar API (JSON + iCal), security-first 2026-07-27T19:18:47Z Lukasz Kasprzak lukas@labunix.xyz 2026-07-27T19:18:47Z urn:sha1:512e6681418c354fea02761440e701c0f7ade693 Two surfaces, one engine: CLI --format json|ical (offline/pipeable) + thin lectio-web /api/calendar.json + /calendar.ics endpoints. Pure internal/calfeed renderer. Identity + reading citations (no full text). Security section: range-cap DoS control (1830d web), RFC-5545 iCal injection escaping (custom calendar names are untrusted), strict input validation, nosniff content types, no file/layer injection over HTTP, GET-only.