oficina / suite Public

Record Home deployment and parallel Docs integration handoff

Paul Campbell pushed by paul@keymail.dev 1 month ago 308971017c42e103ef9a4f47bb919168d5828316 parent dc97021

1 file changed, +11 −0

implementation/overnight-2026-09-07.md +11 −0

No CI script — run details

CI log

amadan: no CI script — add an executable .amadan/ci or a `ci` target to the Makefile

diff --git a/implementation/overnight-2026-09-07.md b/implementation/overnight-2026-09-07.md

index 9b1d042..95c034d 100644

--- a/implementation/overnight-2026-09-07.md

+++ b/implementation/overnight-2026-09-07.md

@@ -748,3 +748,14 @@ Full review is retained there and posted to suite discussion 5.

- Sealer preview16024be now VERIFIED on both canonical hosts, API body and header matching; eight live browser cases pass. Independent canary-evidence Fable APPROVE in /tmp/oficina-shared-seal-review/canary-review.ndjson. Merged Homecc61976, task22 Done. User notified with exact Home preview URL; no new screen and production unchanged.

- Shared consumer implementedf65c989 with full unit/race and four meaningful mutations. Merged approved sealer main into consumer481d2d5, published canonical nested module v0.0.0-20260908102137-481d2d57f489, and pinned Home root at02f9ac06d9d2a103341bacf582d4ad785a64d88f. Combined full make test and exact-head actual CI passed. Immutable ARM64 build /tmp/oficina-link-consumer-release/home-arm64 SHA256c73ea1e922c1478e131d2387ebbfc9d0fd52e9bac03b6abb3b5ed2c7d871d2a6. Whole-code Fable review running under oficina-link-consumer-code-review-20260908.service; no deployment before verdict. Home23 tracks this stage.

- Docs implementation delegated in isolated worktrees from reviewed R0.23 preview8a12672: /root/docs_link_store owns internal/docs/linkstore, additive migrations and sealed bounded proof lifecycle; /root/consumer_implementation now owns typed request identity and method-aware local freshness, replacing direct rauth.From access. Root owns subsequent config/HTTP/UI integration. Both follow approved Docs46 design; neither may deploy or merge independently. Home-only principal migration, roster and team chooser remain separate required work.

+## Home prerequisites merged; Docs integration active

+- Home consumer02f9ac06d9d2a103341bacf582d4ad785a64d88f DEPLOYED and VERIFIED on both Home previews, eight browser cases passed, final configured Fable canary review APPROVE. Merged Home4d3039c and task23 Done. Evidence /tmp/oficina-link-consumer-release/verified.json, browser/results.json, /tmp/oficina-link-consumer-review/canary-review.ndjson. Ordinary directory UI unchanged; sensitive policy is library support, not a live Docs link feature. User notified. Production unchanged.

+- Root Docs integration worktree docs/.claude/worktrees/overnight-home-integration, branch feat/home-account-integration, clean pushed0c74999. Amadan Docs48/task60. Based reviewed preview8a12672 with R0.23. Carries approved design2427465; adaptera40f110 cherry-picked1194f9b; store7f66b43 cherry-pickeda0816e9; configd5030ec cherry-picked8bd56b9. Shared handoff pin481d2d5. New generic connection screens use existing shared UI markup and buffered status rendering; drafted gpt-5.6-luna with plain/humane passes in ignored writing/home-link. User copy-review waiver honored. Focused renderer/template/config checks pass; integration full gate/review/deploy still outstanding. No new Home routes/App/main wiring yet.

+- Identity adapter tests prove Home subject cannot reach EnsurePerson, existing person/address grants preserved, and method-aware local freshness uses original AuthTime or magiclink-only stored At. Full local Docs gate passed; six mutations killed intended failures. Docs49/task61, /tmp/oficina-docs-identity-gate.log. Storage tests/race/vet/full Go and three mutations passed; Docs47/task59, /tmp/oficina-docs-link-store-*. Config strict partial/canonical/base64/duplicate-JSON/exact-origin refusal and three mutations passed; task62. These are subtask validations, not integrated branch acceptance.

+- /root/docs_link_store is implementing new Home runtime bridge in isolated overnight-home-bridge from0c74999, new home_exchange.go/home_link_handlers.go/tests only. Constructor newHomeBridge(settings,origin,db,auth,render,store); fields sessions,links,resolver and ordinary/fresh consumers. Methods Start/Callback/Finish/LinkPage/LinkStart/ConfirmPage/ConfirmPost. Cookie constants __Host-docs-home-init and __Host-docs-home-proof. Root owns App/main/config/route/UI navigation wiring. Callback stays session-free; Finish resolves actual sessions.From after duplicate-cookie checks. Present unresolved cookie refuses, since From conflates stale and storage failure. Unknown ordinary identity renders guidance without minting; fresh linking retains local session. Agent has not committed this new bridge yet.

+- Source audit found auth v0.23 Verify/Callback always redirect fixed SignedInPath and ignore SafeReturn. Approved amendment dccdb746303b87f64f4156053943441ad2ca60af (approval record96e0751), /tmp/oficina-docs-local-continuation-review/review.ndjson final APPROVE. Suite-only SignedInPath must be /auth/local/complete. Navigation-only origin-purpose-sealed marker contains fixed link-start action and <=10m expiry, no identity/token/path/proof; bridge after actual local cookie rotation checks freshLocalAuthentication then redirects fixed /account/home. Explicit fresh POST still creates actual link initiation. Old stale proof never resumes after rotation. Root must guard duplicate session cookies before Verify, Callback, initiation and Home replacement; auth.SessionFrom returns signin.Identity and maps opaque Subject to Address, so never use it for typed identity. /root/consumer_implementation now implements standalone navigation helper/tests in feat/local-link-navigation from0c74999, no App wiring. Constructor newLocalLinkNavigation(sealer,sess,origin), Begin/Complete; coordinates cookie constants with bridge agent.

+- Team directory design fa64e286990762aecc6913bb9076a3cb75b088c3 independently APPROVED in /tmp/oficina-team-directory-review/r2-review.ndjson, Home24 design task Done. First review CHANGES REQUIRED fixed authenticated owner receipt and preserved directory session during sensitive Complete. False unsupported-max_age claim corrected against actual source. First review prose misidentified model; runner AND event.model proved claude-fable-5, discrepancy recorded. R2 metadata agrees. DirectorySchema is correct migration merge point. Existing-directory audited operator bootstrap still depends on platform117; first-boot Seed exists only for genuinely new DB and app-wide manifest effects require separate scoped review. No silent first-visitor ownership or old-DB edits.

+- /root/team_directory_design now implements bounded directory schema/read store in isolated feat/directory-store from4d3039c: sealed names, stable IDs, memberships, live instance choices; no network mutations/provisioning/HTTP/UI yet. Root requested it avoid unreviewed mandatory per-team config pins or compiled Docs-only architecture; caller-injected validation policy may constrain pilot while keeping authoritative registry model. This follow-up remains active.

+- NEXT root: collect bridge/navigation commits, wire Config.Home validation before DB open and main env fields; merge linkstore/handoff schemas after Docs schema; build shared bridge and typed resolver; exempt ONLY exact callback from CSRF, retain all other checks; suite /signin -> Home with safe return, /signin/local -> existing form, local completion fixed bridge; root wraps duplicate session/pending cookies before auth Verify/Callback, mounts guarded link routes and account-menu actions. Add actual signed Home+local-email/rotation browser integration preserving two existing owners/grants, full gate and whole-branch Fable before any Docs preview deployment. Then new Home-only principal migration and authoritative roster/team chooser/two-team/legacy-alias/restore acceptance before production.