Last updated: 2026-10-15
- Phase 3 (tasks on web) is in review on branch
feature/tasks(PR pending owner merge). PRs #1–#3 (Phases 0–2) are merged. - Live GitHub check: still not done. It needs a person (or a connected browser) to click "Create GitHub App" on github.com, and a public webhook URL. See Chores.
- Before any work:
git fetch origin && git status -sb. - Toolchain: pnpm comes from corepack (
corepack enablewas run on this machine). Run checks from the repo root:pnpm lint && pnpm typecheck && pnpm test && pnpm test:e2e && pnpm smoke.
None. Next step: Phase 4 — Docs on web.
| Item | Date | Doc |
|---|---|---|
| Product design and decisions 001–015 | 2026-10-15 | spec.md |
| Phase 0 — Scaffold | 2026-10-15 | features/scaffold.md |
| Phase 1 — Identity | 2026-10-15 | features/identity.md |
| Phase 2 — GitHub App (PR #3) | 2026-10-15 | features/github-app.md |
| Phase 3 — Tasks on web (in review) | 2026-10-15 | features/tasks.md |
- Phase 4 — Docs on web (editor, round-trip fidelity, images, PR fallback, conflicts)
- Phase 5 — Activity (audit log, history, inbox)
- Phase 6 — Mac app v1
- Phase 7 — Ship (Cloudflare button, docker-compose, self-host guide)
Chores:
- Live GitHub check (approved 2026-10-15, blocked). Nothing in Phases 2–3 has touched real
GitHub. The 2026-10-15 attempt stopped at two points: the session may not open a tunnel
(
cloudflared), and no browser was connected for GitHub's "Create GitHub App" click. Plan without a tunnel: create the App againstlocalhost(if GitHub accepts a localhost webhook URL), install it on one selected repo, then fetch real deliveries with the App JWT (GET /app/hook/deliveries/{id}) and replay them to the local webhook route, re-signed with the stored secret (the API returns parsed JSON, not the signed bytes). Diff real payloads againsttest/fake-github.ts; exercise linking and a task write with a real user token. - Workers bundle is 3.40 MiB gzipped, over the Free plan's 3 MiB (main was already 3.23 MiB). Decide: require the Paid plan for Cloudflare, or cut the bundle.
- Owner question (decision 020): should a workspace unlink when the Admin who linked it loses GitHub access?
- Before a hosted launch:
/github/installedshould show org names only to users whose GitHub token can see the installation (now it shows none). - Upgrade Next 16.3.8 → 16.4.x with OpenNext ≥1.20.12 once it passes the pnpm age policy.
Later: Mac timeline (1.1), email notifications, live co-editing, API tokens, billing / Agency plan.