ident

13.3 KB

1. # LOG — ident.worldapi.org
3. Append-only, one short dated line per step. History up to 2026-09-30 moved here from the antcolony LOG
4. (byrodin:/CONTAINERS/projects/antcolony/LOG.md) on 2026-10-01 (antcolony#40); dates reconstructed from its
5. day sections and times. "mission N (old O)" = `missions/N-*.md` here; "antcolony mission O" =
6. byrodin:/CONTAINERS/projects/antcolony/missions/; every old number: antcolony docs/mission-map.md
7. (Loreana copy: /media/STORAGE/projects/antcolony-docs/docs/mission-map.md).
9. ## 2026-09-24
10. - Creator confirmed #1 in the UI. Filed #10 (review fixes). Started tickets mission 002 (#10) and mission 001 (old 003) (#2 ident, redirect+code-exchange login flow) in parallel as Opus subagents.
11. - Mission 001 (old 003) (ident) done, verified by architect (gate 60/60, smoke OK, negatives). #2 awaiting creator. Filed hybriel #16-#21, ident hardening #22.
12. - Creator: mission 001 (old 003) ident is wrong (architect briefed from one sentence without asking). Concept written to ident CONCEPT.md, #2 reopened. Lesson: never brief a worker on a project whose concept is not written down - ask the creator first.
13. - ident concept completed with creator (CONCEPT.md), split into #24-#29, #30 filed (parent/child). Mission 002 (old 005) (#24) started.
14. - Mission 002 (old 005) done, verified (gate 81/81, smoke, session-forge repro confirmed). #24 awaiting creator. Filed hybriel #31-#33, guide updated.
15. - #24 confirmed by creator. Real mail on for ident dev (creator: copy social .env), verified delivery. Mission 003 (old 006) (#25) started with Hybriel guide block.
16. - Creator agreed: architect acts as scheduler until #4/#5 exist; order ident #25, #26, #34, then scheduler/agent.
17. - Mission 003 (old 006) done, verified (apps gate 94/94, live negatives, screenshots). #25 awaiting creator. Filed hybriel #35 #36, ident #37 (obsolete gate checks). Guide updated.
18. - #25 confirmed by creator. Mission 004 (old 007) (#26 selector, +#37) started.
19. - Creator filed #38 (per-project ticket numbers). tickets Mission 004 (old 008) started (#38 + UUID + storage/mpackdb). Filed #39 (same conventions for ident, after 007).
20. - Mission 004 (old 007) done, verified (3 gates, CORS 403, screenshots). #26 #37 awaiting creator, hybriel #40 filed. #39 waits until the creator has tested #26 (it restarts ident).
21. - #26 test: selector showed "not signed in" — ident and test app opened under different hostnames (tailnet vs LAN IP). Not a bug; noted in ident STATUS. Argument for deploying to real domains.
22. - #26 confirmed by creator. Mission 005 (old 009) (ident UUID + storage/mpackdb, old #39) started.
23. - Mission 005 (old 009) done, verified (4 gates, 200s). ident#10 awaiting creator. hybriel#22 #23 filed (first tickets filed with per-project numbers).
24. - Deploy prep: old ident container purged, cloudflare-client-ip.conf, tickets bootstrap vhost + cert, ports in web README. Mission 006 (old 010) started.
25. - Mission 006 (old 010) done in dev copies (all gates re-run green by architect). Its copy-to-live + dev restart was refused by the permission check ("Production Deploy") - waiting for the creator. Filed hybriel#24-#27, guide updated.
26. - DEPLOYED tickets + ident to Byrodin (real domains). Data moved, Loreana dev servers stopped, nginx vhosts (ident 45002 + X-Client-IP, tickets 45003), deploy.sh used for both. Verified with curl + real Chrome.
27. - Login mail failed on Byrodin: no libssl/CAs in debian:12-slim. Added Dockerfile (libssl3 + ca-certificates) to both apps, deploy.sh --build, redeployed. Lesson in worker guide.
28. - Mission 007 (old 013) (ident#6 notifications API + inbox) started in parallel to 012.
29. - Mission 007 (old 013) done. Its deploy failed twice on ident apps gate: port collision with tickets mission 007 (old 014) dev pair (8372/8373). Deploy postponed until 014 ends. Lesson: disjoint ports per worker (README, scheduler draft).
30. - tickets Mission 007 (old 014) revealed a live stored XSS in hl:webex (hybriel#34). Patched tickets + ident, deployed both (tickets with 014, ident with 013), verified escaping live. Filed hybriel#34-#36. Guide updated.
31. - Creator: Math is a plugin (hl:math) - corrected hybriel#38 and the guide. antcolony Mission 018 (shared tokens) deployed to tickets + ident; accents verified live (purple / orange win after the shared :root).
32. - Creator: "why are you waiting on things I know nothing about - its nowhere in the system". Filed all 9 open questions as awaiting-creator tickets (antcolony#5-7, tickets#13-15, ident#12-14). Found antcolony#3 REJECTED ("not even remotely solved as described") - missed it. Lessons added. Redo #3 as described (antcolony mission 021).
33. - antcolony Mission 020 verified (e2e 144). Questions filed antcolony#8-#10, hybriel#40. Blockers linked (tickets#12<-#14, ident#7<-ident#14), ident#8 + #11 on hold. antcolony Mission 022 started. Colony identity dropped: scheduler uses the Archi Tect token (copied to Loreana).
34. - Creator answered 13 question tickets (bypass stays, weekly limit 84%, wysiwyg concept accepted, icons any URL, urgent within switches, time zones = hybriel). Applied: concept updates, unlinked answered questions, tickets#12 unblocked, ident#7 on hold (waits for hybriel time zones). Creator: will reject unreadable tickets -> hard limits added to the ticket-text convention.
35. - Creator: avatar comes from ident. ident CONCEPT: avatar as optional identity property. Filed ident ticket (delivery via property handover, ident#11).
36. - antcolony Mission 023 verified (e2e 187). FIRST LIVE colony cycle started on ident#2 (Sonnet, 120 turns).
37. - FIRST LIVE cycle on ident#2: worker did the work (6 gates green in dev copy) but hit max-turns 120 before the report -> no report, back to open, $4.67. antcolony Mission 025: finalize step (resume session to write the report) + salvage this run.
38. - antcolony Mission 025 verified (e2e 215, real salvage PASS 15/15). Salvaged report says work unfinished -> NOT posted as ready; ident#2 stays open with a readable note. Killed 2 leftover dev servers of the live worker (ports 8700/8701, cwd ident .scratch/dev-m022). Next: antcolony mission 026 (continuation + incomplete->open + worker cleanup + cheaper finalize).
39. - antcolony Mission 026 verified (e2e 234, continuation brief checked for ident#2). Live batch started: ident#2, tickets#12, gitoria#2.
40. - LIVE batch 1 done: ident#2, tickets#12, gitoria#2 all PASS ($6.36). Architect deployed ident + tickets (all gates), wrote readable live test steps. Found: test steps unreadable one-liners, "ready to test" before deploy, trivial/answered questions -> antcolony mission 027. Decision recorded: shared components live in layouts.worldapi.org.
41. - Deployed the first two tickets the live scheduler built on its own: ident#15 (avatar URL), tickets#16 (tidy); gates green; colony deployed -> awaiting creator.
42. - Answered 4 needless worker questions myself (ident#18, tickets#17, #18, gitoria#3); creator only needs to confirm them.
43. - ident#17 was the creator's "dumb question" (internal detail, no decision needed); answered. Architect answered a list instead of the one link given.
44. - Creator on ident#17: sign-out-everywhere is a shortcut (epoch), should really delete sessions + log open pages out live. Filed ident ticket for the proper version. Added 'build it properly, no shortcuts, no questions about internals' to the scheduler's conventions template.
45. - BUG in live scheduler (pre-029 code): rejected QUESTION tickets treated as rework: ident#17 (built something), gitoria#3 x2, gitoria#4 x5 (edited gitoria docs). ~$1.50. Scheduler STOPPED (idle, nothing parked) until fixed. Also: my e2e run of 029 gave 150/57 fail (suspected port overlap with the live pool 8700-8759).
46. - antcolony Mission 030 verified (e2e 320/320 with live .env present). #23 retitled (was mistaken for a question), ident#17 back to awaiting creator, gitoria#3/#4 got "ignore the worker comments" notes. Scheduler restarted 22:21: librarian filed 2 new creator texts, then started gitoria#5.
47. - 23:06 ident deployed (all 6 gates) with #19 (sign out everywhere really ends every session) and #15 (avatar upload); colony deployed -> both awaiting creator.
48. - Night shift 23:20: BUG found: lease expiry acted on a stale survey and pulled the deployed ident#19 out of the creator inbox (-> back to open, redundant 2nd session $0.23, no changes). #19 set back to awaiting creator; antcolony mission 031 fixes the race. gitoria #8 NOT deployed: gate failed because #9 is being built in the same folder right now (half-done code) - deploy waits until no session runs on gitoria. Rule for the shift: never deploy a project while a worker works in its folder.
50. ## 2026-09-25
51. - 06:40 Creator: ident sign-in loses the code step on reload (/signin/<rid> shows the email form again) - code step only lived in client memory. Filed ident#20 (in progress, scheduler skips), mission 008 (old 032) briefed to an Opus worker (session-backed pending step + real-browser reload check). Mail itself was fine: codes delivered (einicher.net -> markus@ mailbox).
52. - 06:45 Creator: "just make a /code where it checks a pending code" -> worker redirected, ticket + mission updated.
53. - 07:00 ident#20 deployed (mission 008 (old 032): /code and /signin/<rid>/code pages backed by the session; gates browser 132, apps 105, selector 99, migration 23, iplimit 39, notify 130 - all pass). Live check in real Chrome: send -> /code -> Page.reload -> code field + address still there; /code without pending -> 302 /. Test mail deleted. -> awaiting creator.
54. - deploy.sh (ident) refused because of other sessions' headless Chromes (Anton's framework/social tests + an orphan from 02:14): check now counts only Chromes new since the gates began and not owned by a running node test (tested against the live process list). Same check copied to tickets/gitoria deploy.sh (identical block, syntax checked; first real run at their next deploy).
55. - Seen live: Cloudflare "Email Address Obfuscation" rewrites addresses in ident's server-rendered HTML to "[email protected]" until its script decodes them -> better switched off for worldapi.org (creator, Cloudflare dashboard).
56. - Watch 07:05: creator confirmed hybriel#54, asked Anton on #52/#53 (Anton's to answer); Anton filed #55-#61 + questions #62-#73. Noted on #61 (leftover Chromes) that it blocked the ident deploy.
57. - 07:15 Creator: repo "ident" refused ("'ident' is reserved for the system") - gitoria's worker had invented a reserved list with the creator's app names. Removed ident/tickets/gitoria/hybriel/antcolony/layouts/notes/calendar/tracker (technical names like www stay). gitoria gate broke on ident#20 (/code navigation) -> helper waits for ident's /code page + hydration. Deployed, gate 116/116, live container restarted with the new list.
58. - Creator: "ident has no notifications" - ident's inbox + /api/notify exist (piece 4), but NO app sends any (tickets/gitoria never call /api/notify).
59. - 19:00 Creator worked his inbox: ident#17 answer -> ident#21 (logout event to all live pages, delete sessions at once), gitoria#13 answer -> gitoria#17 (merge button, dev clicks). Anton #88-#91 done on branches (gitoria transport workarounds can go at re-vendor).
60. - 19:15 ident#21 = no code change (already built by #19, live since the 07:00 ident deploy; creator answered the older #17 question). Redeployed ident anyway (all 6 gates pass) to keep live = dev; marked deployed. Running: gitoria#17 (merge button), calendar#2 (ident + events).
62. ## 2026-09-26
63. - 01:30 Anton fixed hybriel#103/#104 on master (d9aa12e7..0c285350, general range ownership + awaited client calls). antcolony Mission 036 started: re-vendor ident + tickets (no open tickets there -> scheduler stays out). The other 4 apps get 0c285350 later (same client fixes).
64. - 02:00 antcolony Mission 036: ident + tickets on hybriel master 837fe120 (incl. #103/#104), all gates green (ident 132/105/99/23/39/130 + hardening 17, signoutall 6; tickets 423). ident DEPLOYED: hashed URLs, plugins/webex parked (/CONTAINERS/projects/ident-stale-20260926), live sign-in send->/code->reload OK, test mail removed. tickets NOT deployed (folder holds undecided #19 half-state).
65. - 09:20 ident#22 invite service deployed (all 6 ident gates pass; live: /api/invites refuses a wrong key 401, unknown /invite/<token> -> 404 'Unknown invitation'). Full flow testable via the dev test app (README Invites); first real user: the creator's tickets projects ticket (not filed yet) -> blocked by ident#22.
66. - 09:55 Creator: yes to the tickets<->gitoria proposal; identity ids: ONE public short id per identity (like a68sz) for all apps, per-app ids removed. Filed: ident#23 (public short id + migration mapping), tickets#21 (connect an app to a project), gitoria#18 (connect repo, #12 links both ways), hybriel#108 (embed another app's component). Order via holds: ident#23 -> tickets#20 -> tickets#21 -> gitoria#18 (architect opens each after the previous is live). tickets#20/#21 deploy only with the scheduler update for new states/roles.
67. - 12:25 components#4 (single upload via emit) deployed (154/0; live upload of a PNG listed as uploaded) -> marked. ident#23 (public short ids) built but NOT deployed: exchange would hand apps new ids -> all known users look new. antcolony Mission 039: per-app migration scripts (tickets, gitoria, notes, calendar) + proof on copies + switch runbook (docs/short-id-switch.md); then one coordinated switch by the architect. No open tickets in those 4 folders (scheduler stays out).
68. - 13:35 Switch-day parts ready: ident#23, tickets#20, antcolony#27; tickets#22 (author userId on events, filed by the #27 worker) building in the tickets folder. Switch after #22.