tracker

8.8 KB

1. # STATUS — tracker.worldapi.org
3. ## 2026-09-27 — ticket #1 reopened: login redone to match calendar exactly (header selector, empty page)
5. The architect rejected the first build of ticket #1: the sign-in sat centered on the page
6. (its own "Sign in with ident" card, identity + sign-out shown in a `homeCard`) instead of
7. the header identity selector calendar/gitoria use, and there was no `<ident-selector>` at
8. all. Rebuilt the login by copying calendar.worldapi.org's own files (unchanged in shape, per
9. the architect's instruction "Copy calendar.worldapi.org's login unchanged"):
11. - **`users.hl`** (new): the ident exchange + a `usersTable` (`storage/mpackdb/users.db`,
12. `identity` → this app's user id), copied from calendar's `users.hl` with `TRACKER_KEY` /
13. `TRACKER_SECRET` / `TRACKER_URL` / `TRACKER_STORAGE` in place of calendar's names (kept
14. the names already in this app's `docker-compose.yml`/README/DECISIONS rather than
15. switching to calendar's generic `IDENT_API_KEY`/`IDENT_API_SECRET`).
16. - **`login.js`** (new): calendar's bridge between `<ident-selector>`'s `ident-login` DOM
17. event and the hidden `#identcode` input, copied verbatim (creator: "login.js is correct,
18. as thats for externals in general").
19. - **`components/main.hl`**: now the header carries `userBox` (`<ident-selector>` + "Log in
20. with ident" / "Log out"), the `trackerLogin`/`trackerLogOut` faces and the
21. `trackerSignedIn`/`trackerSignedOut` client push — calendar's shell renamed to this app's
22. event names.
23. - **`components/home.hl`**: now truly empty (`View { home {} }`) — no sign-in link, no
24. identity/sign-out duplicated on the page; that is entirely the header's job now.
25. - **`components/loginfailed.hl`** (new) + **`project.hl`**: the login routes are now
26. `/login/callback` (function route, the button's return AND the code exchange) and
27. `/login/failed`, copied from calendar's `project.hl` (`safePath`, `failed()`,
28. `loginCallback`) in place of the old `/login` + `/callback` + `/logout` routes; the old
29. `/logout` POST route is gone (logout is a face, like calendar's).
30. - **`styles.hl`**: added the header selector styles (`userBox`, `identSelector`,
31. `ident-selector::part(...)`, sticky header) from calendar's `styles.hl`; dropped the
32. now-unused `homeCard`/`accountBar`/`userName` rules from the rejected centered sign-in.
34. **Gate rewritten** (`tests/browser.mjs`, 12 checks): replaced the old gate (which drove
35. ident's full email-code UI through a vendored dev copy of ident at `.scratch/ident-dev`)
36. with calendar's own pattern — `tests/identkit.mjs` (copied from calendar unchanged) starts a
37. throwaway ident (a fresh copy of `/media/STORAGE/projects/ident.worldapi.org`'s code, no
38. `.env`/storage copied, codes to a mail sink, never the live ident), signs in over its REST
39. API and registers this app, then the gate proves the header in a real headless Chrome:
40. signed out → `#selector` + `#loginbutton` in the header, **`main` is empty** → sign in
41. (`/login/callback?ident_code=`, the same exchange the selector would trigger) → `#selector`
42. shows `class="in"`, `#logout` appears, **`main` still empty** → sign out → signed out again
43. → a reload stays signed out. No console errors.
45. ```
46. node tests/browser.mjs
47. 12 passed, 0 failed
48. ```
50. `./deploy.sh --dry-run --target .scratch/deploy-preview --url http://127.0.0.1:0/`: gate
51. passed as step [1/4], rsync preview held none of `storage/`, `.sessions/`, `.env`,
52. `.scratch/`, `server.*`, logs. Removed the stale `.scratch/ident-dev` (the old gate's vendored
53. ident copy) and `.scratch/browser-gate` (the old gate's storage) — unused by the new gate.
55. **Still open**: the app is registered in ident's dev copies only (this gate's own throwaway
56. ident). The LIVE ident registration (`TRACKER_KEY`/`TRACKER_SECRET` in `.env` next to
57. `docker-compose.yml`) is the architect's first-deploy step (README "Deploy"), not built here.
59. ## 2026-09-27 — ticket #2: data migration — blocked twice on sandbox access, nothing done
61. Two workers in a row (`s-20260927T1029-f57b0f`, then this session) could not start: the
62. migration source the ticket names, `/media/STORAGE/projects/old-tracker/mongo-export/*.jsonl`
63. + its `README-RECONSTRUCTED.md`, is not reachable from this worker's sandbox. Verified fresh
64. this session:
66. ```
67. $ ls -la /media/STORAGE/projects/
68. antcolony-docs hybriel ident.worldapi.org tracker.worldapi.org # no old-tracker
69. $ mount | grep STORAGE
70. /dev/nvme1n1p6 on /media/STORAGE/projects/tracker.worldapi.org type btrfs (rw,...)
71. /dev/nvme1n1p6 on /media/STORAGE/projects/hybriel type btrfs (ro,...)
72. /dev/nvme1n1p6 on /media/STORAGE/projects/ident.worldapi.org type btrfs (ro,...)
73. /dev/nvme1n1p6 on /media/STORAGE/projects/antcolony-docs type btrfs (ro,...)
74. # old-tracker is not among the mounted subvolumes at all
75. ```
77. So this is not a data problem (the export is "complete" per the ticket) — it's the worker
78. sandbox for this ticket that never got `old-tracker` mounted (read-only, like `hybriel` /
79. `ident.worldapi.org` / `antcolony-docs` above). Nothing was built or changed this session:
80. no `storage/`, no `tools/`, no id-mapping — writing the migration tool blind, guessing the
81. JSONL shape from the ticket text alone, risks silently wrong data and was avoided on purpose
82. (see the project's "Build it properly" rule). Filed as an antcolony issue so the next worker's
83. sandbox includes `old-tracker` before another attempt.
85. ## 2026-09-27 — ticket #1: the empty shell, ident login
87. Built the app from scratch: vendored `bin/hybriel` + `plugins/` + `shared/tokens.hl` from
88. `ident.worldapi.org` (newest local build, hybriel master 837fe120, no local patch — see
89. README "Vendored Hybriel"). `project.hl` (routes `/login`, `/callback`, `/logout`, `/`),
90. `components/home.hl` (the empty homepage), `components/main.hl` (shell), `styles.hl`
91. (accent green `#4ec9b0`, per `antcolony/README.md` "look and style" / `CONCEPT.md`).
92. `docker-compose.yml` / `Dockerfile` / `deploy.sh` following ident's own house pattern
93. (port 45008, container `tracker.worldapi.org`).
95. **Login**: the ident login BUTTON flow (ident.worldapi.org README "How apps use ident"),
96. server-side exchange (`POST <ident>/api/exchange`), this app's own framework session
97. (`session.user = { identity }`, cookie `trackersid`). ident hands over only the identity's
98. public **short id** — no display name yet (ident#11, properties handover, is on hold) — so
99. "your name" on the homepage is `Signed in as <shortid>`, the same identifier every other
100. worldapi app would show; see `decided` in the report.
102. **Lesson (Hybriel)**: a face that mutates `session.user` (e.g. `signOut`) does NOT
103. automatically re-render the page — a component's reactive members (`signedIn`, `identity`,
104. …) are computed once at mount from the framework's read-only session snapshot; a client
105. handler that calls `emit server X()` must ALSO flip the affected members itself afterwards
106. (ident's own `components/home.hl` `on doSignOut(e)` does exactly this: `emit server
107. signOut()` then `signedIn = false` …). Missing that made the sign-out button silently do
108. nothing client-side (the ack came back `ok:true`, the server-side session really was
109. cleared — proven by a reload — but the DOM never updated) until copied.
111. **Gate** (`tests/browser.mjs`, 13 checks): a fresh copy of `ident.worldapi.org`'s code (no
112. `.env`, no `storage/`, no `.sessions/` — verified empty of secrets/data before first use)
113. runs as this gate's own ident, on its own storage and its own mail sink (no live ident, no
114. real mail). The gate registers this app in that dev ident once over the `/__hl/emit` API
115. (the same one-time step a person does by hand in ident's `/apps` page), then drives the
116. REAL login-button flow in a real headless Chrome: signed out → click "Sign in with ident" →
117. ident's email form → the mail-sink code → the first-login optional-names form (Skip) → the
118. one-identity choice (one click) → back on tracker, "Signed in as `<shortid>`" → "Sign out" →
119. signed out again → a reload stays signed out. No console errors. Ran twice for stability, 0
120. failures; no leftover Chrome/hybriel processes after either run.
122. ```
123. node tests/browser.mjs
124. 13 passed, 0 failed
125. ```
127. `./deploy.sh --dry-run --target .scratch/deploy-preview --url http://127.0.0.1:0/` (a local
128. directory, per ident's own convention for testing deploy.sh without touching Byrodin): gate
129. passed, rsync preview held none of `storage/`, `.sessions/`, `.env`, `.scratch/`, `server.*`,
130. logs — confirmed by the same grep the script refuses on.
132. **Open**: the app is not registered with the LIVE ident yet — `TRACKER_KEY`/`TRACKER_SECRET`
133. are unset until the architect's first deploy does that (README "Deploy"); until then
134. `/login` on the live site answers a plain error page instead of redirecting (`/` itself
135. still renders). This is normal for a brand-new app, the same as ident's own SMTP `.env`
136. before its first deploy — not something this ticket's worker can set (no `.env` access,
137. and it is a LIVE ident registration).