luckberg/familysync
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
dbd09bc2bbdeb2ea452bfb324004e18c0a579cc2
familysync/.planning/STATE.md
T

7.0 KiB
Raw Blame History

gsd_state_version, milestone, milestone_name, status, stopped_at, last_updated, last_activity, progress
gsd_state_version milestone milestone_name status stopped_at last_updated last_activity progress
1.0 v1.0 milestone executing Completed 03-05-PLAN.md 2026-06-05T22:32:25.900Z 2026-06-05
total_phases completed_phases total_plans completed_plans percent
6 2 17 15 33

Project State

Project Reference

See: .planning/PROJECT.md (updated 2026-06-03)

Core value: One color-coded family calendar (shared + personal) and shared lists from a single low-friction PWA — cross-ecosystem, no app store Current focus: Phase 03 — event-write-back-pwa-install

Current Position

Phase: 03 (event-write-back-pwa-install) — EXECUTING Plan: 7 of 8 Status: Ready to execute Last activity: 2026-06-05

Progress: [███████░░░] 65%

Performance Metrics

Velocity:

  • Total plans completed: 5
  • Average duration: -
  • Total execution time: 0 hours

By Phase:

Phase Plans Total Avg/Plan
02 5 - -

Recent Trend:

  • Last 5 plans: -
  • Trend: -

Updated after each plan completion | Phase 03 P01 | 45 | 5 tasks | 8 files | | Phase 03 P03-02 | 4 | 2 tasks | 2 files | | Phase 03 P03-03 | 7 | 3 tasks | 2 files | | Phase 03 P03-07 | 5 | 2 tasks | 7 files | | Phase 03 P03-04 | 15 | 2 tasks | 3 files | | Phase 03 P03-05 | 6 | 3 tasks | 6 files |

Accumulated Context

Decisions

Decisions are logged in PROJECT.md Key Decisions table. Recent decisions affecting current work:

  • CAL-08 RESOLVED → GO (Phase 1): per-member Fastmail app password reaches all of that account's calendars; no cross-account ACL needed. Unified view stands; no shared-only fallback. See CAL-08-DECISION.md.
  • D-14 (2026-06-04): Phase 1 Gate 2 (live Authelia/Pangolin) deferred. SSE-over-Pangolin smoke = hard gate before Phase 4; live AUTH smoke incl. iOS standalone-PWA folded into Phase 3. Phases 2–3 build behind a dev-auth bypass. Tracked in 01-HUMAN-UAT.md + docs/deployment.md.
  • D-15 (2026-06-04): Validate real topology via local Newt connector + test subdomain through Pangolin (Mode A), not an Unraid deploy; Unraid reserved for go-live.
  • CalDAV locked: Fastmail does not expose calendars over JMAP. CalDAV via tsdav is the only protocol. No reconsideration.
  • Identity: Use oidc_iss + oidc_sub as stable composite key. Never email.
  • Real-time transport: Prefer SSE over WebSocket (proxy-resilient through Pangolin). SSE pass-through STILL UNVERIFIED — gate before Phase 4 (D-14).
  • Recurring events: Create + display only in v1 (CALDAV:expand on server side). Single-occurrence edit deferred to v1.x.
  • [Phase ?]: D-Task5-DDL: drizzle-kit push unsafe on MariaDB 11 (mysql dialect misreads metadata, schedules truncate). Additive DDL hand-applied; adopt drizzle-kit generate+migrate before next schema change.
  • [Phase ?]: D-02-RRULE: use ICAL.Recur.fromString + ICAL.Property for RRULE serialization — addPropertyWithValue produces char-split output for RECUR types
  • [Phase ?]: resolveUserId helper uses any type to avoid Hono context generic complexity — internal helper only
  • [Phase ?]: Write endpoints enqueue-only (calendarOutbox) with 202 optimistic-accept; no Fastmail call in routes (D-12/D-05)
  • [Phase ?]: GET /writable-calendars is authoritative D-03 writable-set endpoint: WHERE userId=currentUser.id OR isShared=1
  • [Phase ?]: D-03-07-icons: PWA icons generated via pure Node.js (zlib/Buffer) when ImageMagick/sharp unavailable; placeholder art; operator can replace in public/ without code changes
  • [Phase ?]: D-03-07-layout: InstallPrompt desktop layout wraps CalendarContent in flex-column div so banner appears above calendar grid
  • [Phase ?]: D-03-04-hoisting: vi.hoisted() required for vi.mock() factory variables when test file has static import of module under test (TDZ issue)
  • [Phase ?]: D-03-04-where: Drizzle types disallow chained .where().where(); use and() in single .where() call
  • [Phase ?]: D-01 calendar default: last-used URL from localStorage (eventForm.lastCalendarUrl), first writable calendar as fallback
  • [Phase ?]: D-02 calendar picker: hidden when writableCalendars.length === 1, shown when >1 — authoritative from GET /api/events/writable-calendars
  • [Phase ?]: T-03-15 XSS: EventForm renders all values as plain-text JSX children; no dangerouslySetInnerHTML in code

Pending Todos

  • Fix docs/deployment.md local-dev command — the documented dev run is wrong: the API dev script (node --watch dist/index.js) does NOT load .env, and DB_HOST defaults to localhost with an empty password. Correct local-dev command is: pnpm --filter @familysync/api build && set -a; source .env; set +a && DEV_AUTH_BYPASS=true DB_HOST=localhost pnpm --filter @familysync/api dev (+ pnpm --filter @familysync/pwa dev). Consider adding --env-file=.env to the dev script so this is automatic. (Surfaced during Phase 2 UAT.)
  • REQUIREMENTS.md traceability gap — phase.complete flagged 6 REQ-IDs in the body missing from the Traceability table: CAL-09, CAL-10, CAL-11, CAL-12, DISP-01, DISP-02. Add them to keep traceability in sync (likely Phase 4/5/display requirements).
  • DST spring-forward spot-check (Phase 2) — recurring/DST is implemented and code-verified (VTIMEZONE before expansion + local display TZ), and operator approved general times; navigating to March 2026 to eyeball the spring-forward transition is a recommended future spot-check.

Blockers/Concerns

  • Phase 1: Personal-calendar CalDAV ACL RESOLVED → CAL-08 GO (per-member app password; no cross-account ACL).
  • Phase 4 ENTRY GATE: Pangolin SSE pass-through (issue #1034) still unverified — deferred from Phase 1 Gate 2 (D-14). Must pass the 5-min SSE smoke (docs/deployment.md) before building live sync.
  • Phase 3: iOS standalone-PWA + Authelia login is load-bearing for the wife and is the first real external auth test (carried Gate 2 item, D-14). Also: iOS install guide is load-bearing — she gets no push notifications if she does not install the PWA.
  • Phase 2/3 dev: build behind a documented dev-auth bypass until Gate 2 deploy (D-14).
  • Phase 5: iOS push subscriptions silently revoked after 3 silent pushes. Subscription health-check and event.waitUntil() are mandatory from day one.

Deferred Items

Category Item Status Deferred At
Calendar Single-occurrence recurring edit (RECURRENCE-ID) v1.x Roadmap
Calendar "This and following" recurring edit v1.x Roadmap
Calendar Apple Calendar native subscribe URL docs v1.x Roadmap
Calendar Secondary timezone display toggle v1.x Roadmap
Display Wall-display / kiosk dashboard v2 PROJECT.md
Calendar Mark shared-family calendar is_shared=1 — operator must first create a "Family" calendar on the primary Fastmail account + share it, let the poller sync it, then run UPDATE calendars SET is_shared=1 WHERE id=<new row>. Until then the shared color lane is empty (correct). Phase 2 (deferred, D-16) 2026-06-05

Session Continuity

Last session: 2026-06-05T22:32:25.896Z Stopped at: Completed 03-05-PLAN.md Resume file: None

Reference in New Issue View Git Blame Copy Permalink