tracker

10.4 KB

1. # STATUS — tracker.worldapi.org
3. ## 2026-09-27 — ticket #3: no border on the header or filled buttons
5. Design notes from the first test (architect): "the application-header should have no bottom
6. border" and "the buttons also no border except they are inverted". Two changes in
7. `styles.hl`:
9. - `applicationHeader`: dropped `borderBottom`.
10. - `ident-selector::part(button)` (the signed-out "choose ident" button): added
11. `border = 'none'` — the element's own CSS gave it a 1px border the same colour as its
12. background (`--_accent`), invisible but still a real border in the computed style; this is
13. the app-side restyling hook ident's README documents (`::part(button)`), not a change to
14. ident's vendored `selector.js`.
16. Left unchanged, already correct: the native `button` rule (filled, e.g. no other filled
17. buttons on this page yet) already has `border = '0'`; `button.quiet` ("Log out") and the
18. selector's dropdown `[part="identity"]` rows keep their border (transparent background —
19. inverted style); `a.button` ("Log in with ident") has no border rule and browsers give `<a>`
20. none by default. The selector's signed-in "logged in with ident" status pill
21. (`::part(status)`) is not one of the buttons the ticket names and isn't a button element
22. (a `<span>`) — left with its border.
24. **Gate** (`tests/browser.mjs`, now 16 checks): added computed-style checks — the header's
25. `borderBottomWidth` is `0px`; `#loginbutton`'s border is `0px`; the selector's
26. `[part~="button"]` (inside its shadow root) border is `0px`; `#logout`'s border is NOT `0px`
27. (still inverted-bordered) once signed in.
29. ```
30. node tests/browser.mjs
31. 16 passed, 0 failed
32. ```
34. ## 2026-09-27 — ticket #1 reopened: login redone to match calendar exactly (header selector, empty page)
36. The architect rejected the first build of ticket #1: the sign-in sat centered on the page
37. (its own "Sign in with ident" card, identity + sign-out shown in a `homeCard`) instead of
38. the header identity selector calendar/gitoria use, and there was no `<ident-selector>` at
39. all. Rebuilt the login by copying calendar.worldapi.org's own files (unchanged in shape, per
40. the architect's instruction "Copy calendar.worldapi.org's login unchanged"):
42. - **`users.hl`** (new): the ident exchange + a `usersTable` (`storage/mpackdb/users.db`,
43. `identity` → this app's user id), copied from calendar's `users.hl` with `TRACKER_KEY` /
44. `TRACKER_SECRET` / `TRACKER_URL` / `TRACKER_STORAGE` in place of calendar's names (kept
45. the names already in this app's `docker-compose.yml`/README/DECISIONS rather than
46. switching to calendar's generic `IDENT_API_KEY`/`IDENT_API_SECRET`).
47. - **`login.js`** (new): calendar's bridge between `<ident-selector>`'s `ident-login` DOM
48. event and the hidden `#identcode` input, copied verbatim (creator: "login.js is correct,
49. as thats for externals in general").
50. - **`components/main.hl`**: now the header carries `userBox` (`<ident-selector>` + "Log in
51. with ident" / "Log out"), the `trackerLogin`/`trackerLogOut` faces and the
52. `trackerSignedIn`/`trackerSignedOut` client push — calendar's shell renamed to this app's
53. event names.
54. - **`components/home.hl`**: now truly empty (`View { home {} }`) — no sign-in link, no
55. identity/sign-out duplicated on the page; that is entirely the header's job now.
56. - **`components/loginfailed.hl`** (new) + **`project.hl`**: the login routes are now
57. `/login/callback` (function route, the button's return AND the code exchange) and
58. `/login/failed`, copied from calendar's `project.hl` (`safePath`, `failed()`,
59. `loginCallback`) in place of the old `/login` + `/callback` + `/logout` routes; the old
60. `/logout` POST route is gone (logout is a face, like calendar's).
61. - **`styles.hl`**: added the header selector styles (`userBox`, `identSelector`,
62. `ident-selector::part(...)`, sticky header) from calendar's `styles.hl`; dropped the
63. now-unused `homeCard`/`accountBar`/`userName` rules from the rejected centered sign-in.
65. **Gate rewritten** (`tests/browser.mjs`, 12 checks): replaced the old gate (which drove
66. ident's full email-code UI through a vendored dev copy of ident at `.scratch/ident-dev`)
67. with calendar's own pattern — `tests/identkit.mjs` (copied from calendar unchanged) starts a
68. throwaway ident (a fresh copy of `/media/STORAGE/projects/ident.worldapi.org`'s code, no
69. `.env`/storage copied, codes to a mail sink, never the live ident), signs in over its REST
70. API and registers this app, then the gate proves the header in a real headless Chrome:
71. signed out → `#selector` + `#loginbutton` in the header, **`main` is empty** → sign in
72. (`/login/callback?ident_code=`, the same exchange the selector would trigger) → `#selector`
73. shows `class="in"`, `#logout` appears, **`main` still empty** → sign out → signed out again
74. → a reload stays signed out. No console errors.
76. ```
77. node tests/browser.mjs
78. 12 passed, 0 failed
79. ```
81. `./deploy.sh --dry-run --target .scratch/deploy-preview --url http://127.0.0.1:0/`: gate
82. passed as step [1/4], rsync preview held none of `storage/`, `.sessions/`, `.env`,
83. `.scratch/`, `server.*`, logs. Removed the stale `.scratch/ident-dev` (the old gate's vendored
84. ident copy) and `.scratch/browser-gate` (the old gate's storage) — unused by the new gate.
86. **Still open**: the app is registered in ident's dev copies only (this gate's own throwaway
87. ident). The LIVE ident registration (`TRACKER_KEY`/`TRACKER_SECRET` in `.env` next to
88. `docker-compose.yml`) is the architect's first-deploy step (README "Deploy"), not built here.
90. ## 2026-09-27 — ticket #2: data migration — blocked twice on sandbox access, nothing done
92. Two workers in a row (`s-20260927T1029-f57b0f`, then this session) could not start: the
93. migration source the ticket names, `/media/STORAGE/projects/old-tracker/mongo-export/*.jsonl`
94. + its `README-RECONSTRUCTED.md`, is not reachable from this worker's sandbox. Verified fresh
95. this session:
97. ```
98. $ ls -la /media/STORAGE/projects/
99. antcolony-docs hybriel ident.worldapi.org tracker.worldapi.org # no old-tracker
100. $ mount | grep STORAGE
101. /dev/nvme1n1p6 on /media/STORAGE/projects/tracker.worldapi.org type btrfs (rw,...)
102. /dev/nvme1n1p6 on /media/STORAGE/projects/hybriel type btrfs (ro,...)
103. /dev/nvme1n1p6 on /media/STORAGE/projects/ident.worldapi.org type btrfs (ro,...)
104. /dev/nvme1n1p6 on /media/STORAGE/projects/antcolony-docs type btrfs (ro,...)
105. # old-tracker is not among the mounted subvolumes at all
106. ```
108. So this is not a data problem (the export is "complete" per the ticket) — it's the worker
109. sandbox for this ticket that never got `old-tracker` mounted (read-only, like `hybriel` /
110. `ident.worldapi.org` / `antcolony-docs` above). Nothing was built or changed this session:
111. no `storage/`, no `tools/`, no id-mapping — writing the migration tool blind, guessing the
112. JSONL shape from the ticket text alone, risks silently wrong data and was avoided on purpose
113. (see the project's "Build it properly" rule). Filed as an antcolony issue so the next worker's
114. sandbox includes `old-tracker` before another attempt.
116. ## 2026-09-27 — ticket #1: the empty shell, ident login
118. Built the app from scratch: vendored `bin/hybriel` + `plugins/` + `shared/tokens.hl` from
119. `ident.worldapi.org` (newest local build, hybriel master 837fe120, no local patch — see
120. README "Vendored Hybriel"). `project.hl` (routes `/login`, `/callback`, `/logout`, `/`),
121. `components/home.hl` (the empty homepage), `components/main.hl` (shell), `styles.hl`
122. (accent green `#4ec9b0`, per `antcolony/README.md` "look and style" / `CONCEPT.md`).
123. `docker-compose.yml` / `Dockerfile` / `deploy.sh` following ident's own house pattern
124. (port 45008, container `tracker.worldapi.org`).
126. **Login**: the ident login BUTTON flow (ident.worldapi.org README "How apps use ident"),
127. server-side exchange (`POST <ident>/api/exchange`), this app's own framework session
128. (`session.user = { identity }`, cookie `trackersid`). ident hands over only the identity's
129. public **short id** — no display name yet (ident#11, properties handover, is on hold) — so
130. "your name" on the homepage is `Signed in as <shortid>`, the same identifier every other
131. worldapi app would show; see `decided` in the report.
133. **Lesson (Hybriel)**: a face that mutates `session.user` (e.g. `signOut`) does NOT
134. automatically re-render the page — a component's reactive members (`signedIn`, `identity`,
135. …) are computed once at mount from the framework's read-only session snapshot; a client
136. handler that calls `emit server X()` must ALSO flip the affected members itself afterwards
137. (ident's own `components/home.hl` `on doSignOut(e)` does exactly this: `emit server
138. signOut()` then `signedIn = false` …). Missing that made the sign-out button silently do
139. nothing client-side (the ack came back `ok:true`, the server-side session really was
140. cleared — proven by a reload — but the DOM never updated) until copied.
142. **Gate** (`tests/browser.mjs`, 13 checks): a fresh copy of `ident.worldapi.org`'s code (no
143. `.env`, no `storage/`, no `.sessions/` — verified empty of secrets/data before first use)
144. runs as this gate's own ident, on its own storage and its own mail sink (no live ident, no
145. real mail). The gate registers this app in that dev ident once over the `/__hl/emit` API
146. (the same one-time step a person does by hand in ident's `/apps` page), then drives the
147. REAL login-button flow in a real headless Chrome: signed out → click "Sign in with ident" →
148. ident's email form → the mail-sink code → the first-login optional-names form (Skip) → the
149. one-identity choice (one click) → back on tracker, "Signed in as `<shortid>`" → "Sign out" →
150. signed out again → a reload stays signed out. No console errors. Ran twice for stability, 0
151. failures; no leftover Chrome/hybriel processes after either run.
153. ```
154. node tests/browser.mjs
155. 13 passed, 0 failed
156. ```
158. `./deploy.sh --dry-run --target .scratch/deploy-preview --url http://127.0.0.1:0/` (a local
159. directory, per ident's own convention for testing deploy.sh without touching Byrodin): gate
160. passed, rsync preview held none of `storage/`, `.sessions/`, `.env`, `.scratch/`, `server.*`,
161. logs — confirmed by the same grep the script refuses on.
163. **Open**: the app is not registered with the LIVE ident yet — `TRACKER_KEY`/`TRACKER_SECRET`
164. are unset until the architect's first deploy does that (README "Deploy"); until then
165. `/login` on the live site answers a plain error page instead of redirecting (`/` itself
166. still renders). This is normal for a brand-new app, the same as ident's own SMTP `.env`
167. before its first deploy — not something this ticket's worker can set (no `.env` access,
168. and it is a LIVE ident registration).