ident

4.1 KB

1. # Mission 007 (old 013) — ident 4/6: notifications API and inbox (ticket ident.worldapi.org#6)
3. One-shot worker. The architect (Claude Code on Byrodin) verifies your report and deploys; you do NOT deploy
4. and do NOT touch Byrodin.
6. ## Read first — in this order
7. 1. **`loreana:/media/STORAGE/projects/ident.worldapi.org/CONCEPT.md`** — the creator's concept, section
8. "Notifications" and "Per-app page". Source of truth; don't add what it doesn't describe; where it is silent,
9. make the smallest choice and list it under "Questions for the creator".
10. 2. ident's `README.md` / `STATUS.md` (pieces 1–3 done and deployed; per-IP limit; `storage/mpackdb/`, `@id`).
11. 3. Ticket: `GET https://tickets.worldapi.org/api/projects/ident.worldapi.org/tickets/6` (send a `user-agent`).
12. 4. `/CONTAINERS/projects/antcolony/README.md` — conventions (UUID keys, storage/mpackdb, JSON writes + Markdown
13. text fields), lessons.
15. ## Hybriel (standard block)
16. Read `/CONTAINERS/projects/antcolony/docs/hybriel-for-app-workers.md` first — known pitfalls (#31 forged face
17. sessions, #25 faces get no request context, #40 open only COPIES of stores, hybriel#23 never pass client
18. objects to put()), conventions, deploy notes. Report new Hybriel findings under "Hybriel issues"; do not edit it.
20. ## Scope (piece 4 of 6 — NOT delivery)
21. From the concept:
22. - **Send API**: an app sends a notification in its name with its API key + app secret and the per-app identity id.
23. A notification has **name**, **text**, optional **icon**, optional **action link**, and an **urgent** flag.
24. Unknown identity for that app / wrong secret → refused. Strict JSON body.
25. - **Notification kinds**: an app registers the kinds (by name) it sends, with its **preset channels**; a kind
26. must be registered before the app can send **push** directly. Sending an unregistered name: decide the
27. smallest consistent rule from the concept (e.g. allowed, default channel = daily mail) and list it.
28. - **Inbox in ident**: the signed-in user sees their notifications (all identities), newest first, with
29. identity, app, name, text, icon, action link, time; read/unread.
30. - **Per-app page per identity**: when they registered in that app (the connection's created time), all that
31. app's notification kinds with **push** and **email** switches, and on top **one override for all**.
32. The app presets, the user's switches override. Store the effective settings.
33. - **Delivery is OUT of scope** (piece 5/6: daily mail at 17:00, urgent immediately; piece 6/6: push). Store
34. what delivery will need (channel per notification, delivered-or-not), but send nothing.
36. ## Mail — IMPORTANT
37. Never trigger an OTP on any live server. Your gate uses its own ident servers with `IDENT_MAIL_SINK` (as the
38. existing gates do). **Do not read, print, copy or edit any `.env`.**
40. ## Rules
41. - Develop in `loreana:/media/STORAGE/projects/ident.worldapi.org` via a dev copy (`.scratch/dev-m013`), copy back
42. when green (it is DEVELOPMENT only; live is on Byrodin; its `storage/` is a stale copy).
43. - No git. Don't touch Byrodin. Don't POST to the live tickets server. Only kill your own PIDs. Clean up headless
44. Chromes (`--disable-gpu`). Only open copies of mpackdb stores.
45. - If any action is refused by the permission system, don't retry or work around it; report it.
46. - A test is the whole process: real headless browsers + API: an app registers kinds, sends to an identity
47. (normal + urgent, with/without icon/link), the user sees them in the inbox, marks read, opens the per-app
48. page, flips switches + the override, the stored effective settings change; negatives: wrong secret, other
49. app's identity id, unknown fields, forged face sessions (#31), another account can't see or change them.
50. All five existing gates stay green. Screenshots at 390px and 1280px (inbox, per-app page), look at them.
51. - Live data must survive the deploy: new tables only, no manual migration step if avoidable.
52. - Update `README.md` ("How apps send notifications") and `STATUS.md`. Do NOT edit `CONCEPT.md`.
54. ## Report (final answer, this structure)
55. ```
56. ## Done
57. ## Verified (each: command run + observed output)
58. ## Not verified / open
59. ## Hybriel issues (repro, observed, expected)
60. ## Questions for the creator
61. ## Running (URL, PID, log path)
62. ```