oficina / slides Public

Slice 1: live on slides.bds.oncarlos.com; DNS for slides.oficina.works and copy review need Paul open

On branch worktree-slice-1

claude agent, operated by paul@keymail.dev driven by paul@keymail.dev session 2420c44b · claude-code/2.1.263 · DOCS-T1

Slice 1 of Slides is built, reviewed task by task, CI green at d8ec71e, and deployed as a canary on slides.bds.oncarlos.com. This thread is the branch record for worktree-slice-1 and the handover for Paul.

What is live

Magic-link sign-in gated by SLIDES_ALLOWED_ADDRESSES (Docs' shape, ported). Mail goes out through the platform's SES identity (carlos email enable); a test message was accepted for delivery.
Decks persisted as Yjs updates and replayed through the Rust yrs core under wazero (core/, internal/slides/core). Every write names an actor.
A sample "Welcome to Slides" deck on first sign-in: every flow template, a canvas slide, a phone-reflow canvas slide, notes on each.
The HTML renderer with six themes and a phone reflow; the paged viewer; the notes page; read-only share links (hashed, shown once, revocable, view-counted).
Presentation sessions: fullscreen surface, presenter notes view with a pairing QR, SSE stream, phone remote (/r/{code}), audience follow from a share link. Everything works with scripts off; present.js is the only script beyond rastrillo's.
The drive API (docs/api.md): agent tokens minted from /agents, bearer-only, mounted outside CSRF, every op of spec §7.2, ETag reads, present from the API.
AGENTS.md, README, PRODUCT.md, and one CI gate (.amadan/ci.d/10-gate).

What is not

No browser editor (slice 2), no images or object store (the deployment has no store backend yet), no PDF (slice 3).
slides.oficina.works is attached on the platform but the zone needs a CNAME slides.oficina.works -> edge.oncarlos.com; no credential for the oficina.works zone exists on this machine. Until it resolves, SLIDES_ORIGIN is https://slides.bds.oncarlos.com so magic links work. Flip the env var back once DNS is live.
Copy: every string is a catalog key in internal/slides/locales/en.toml, but none of it has been through the copy-review gate (no interactive user overnight). slides.viewer.empty.body still mentions an editor that does not exist.

Rulings made overnight (in `.superpowers/sdd/.../progress.md`, summarised)

Concern packages nest under internal/slides/<pkg> because rastrillo migration check requires one directory under internal/.
Reviewers and fix rounds ran on a lighter model after two session rate limits; the final whole-branch review runs on the most capable model.
CARLOS_SMTP_* is read as the fallback for SLIDES_SMTP_*.
"Slides" as the product name stays a literal in templates.

Filed elsewhere

oficina/suite discussion 4: agents drive every app as their own principal, on behalf of a person (Paul's 2026-09-07 ruling), asking for a numbered ruling and an Appendix A entry.

Merge is Paul's call after the final review lands here.

claude agent, operated by paul@keymail.dev driven by paul@keymail.dev session 2420c44b · claude-code/2.1.263 · DOCS-T1

Final whole-branch review (Fable 5.1) returned five blocking findings, all fixed in 3e2b142 and verified by a scoped re-review: the write-conflict retry was dead code (a losing writer got a 500, now a 409 with a real test); an agent's set_meta left the decks row stale (now synced in the same transaction); the agent token travelled in a GET URL (now rendered from the POST with Cache-Control: no-store); deleting a deck did not end its presentations (now cascaded, subscribers hear ended); the empty-deck copy mentioned an editor. CI passed at 3e2b142; that build is live on slides.bds.oncarlos.com.

Rulings made without Paul, in order, each with its cost if wrong:

The core's view JSON is the contract; Go adapts to it. Cost: none seen.
Task 2 built in a separate worktree and cherry-picked. Cost: one go.mod conflict, resolved.
SLIDES_SMTP_* first, CARLOS_SMTP_* as the per-variable fallback. Cost: no mail; verified working.
"Slides" stays a literal in templates. Cost: three strings to key later.
Reviews and fix rounds on a lighter model after two session rate limits. Cost: shallower gates; the final review on the strongest model caught five defects, which argues the cost was real.
Concern packages nest under internal/slides/ because rastrillo migration check wants one directory under internal/. Cost: import-path churn only.
No Present button on the deck list; one entry point in the viewer. Cost: one extra click.
SLIDES_ORIGIN is the oncarlos host until the CNAME exists. Cost: one env flip.
Copy-review deferred to Paul: every new string is a catalog key, none reviewed. Cost: rewording.
Sqids are ten random characters over Docs' alphabet, not sqids-go from the row id. Cost: none; unguessable.
POST /agents answers 200; a refresh re-POST mints another revocable agent. Cost: a stray row the person revokes.

Deferred minors are listed in the final review and stay open here: transitions not rendered on the present surface; no API rate limit; share.go still shows a share-link token via ?new= (a URL capability by spec); two simultaneous presenters pick the newest session; render.go/decks.go sizes; meta.aspect; a rastrillo field-text readonly request.

Owed by Paul: the CNAME slides.oficina.works -> edge.oncarlos.com, then carlos env set --app slides --account oficina SLIDES_ORIGIN=https://slides.oficina.works and a restart; a pass over internal/slides/locales/en.toml and docs/api.md; the squash-merge.