ident

4.0 KB

1. # Mission 002 (old 005) — ident 1/6: account and identities (ticket #24)
3. One-shot worker. The architect (Claude Code on Byrodin) verifies your report, then the creator tests.
5. ## Read first — in this order
6. 1. **`loreana:/media/STORAGE/projects/ident.worldapi.org/CONCEPT.md`** — the creator's concept of ident.
7. It is the source of truth. Do not add features it does not describe; if something you need is not
8. in it, make the smallest choice and list it under "Questions for the creator".
9. 2. The app's current `README.md` and `STATUS.md` in the same folder (built in mission 001 (old 003) WITHOUT the
10. concept — its email-code login is reusable, its data model and app flow are not).
11. 3. `/CONTAINERS/projects/antcolony/README.md` (how this project works; section "Lessons learned").
12. 4. Ticket: `GET http://100.77.141.84:8350/api/tickets/24`.
14. ## Where
15. - Host Loreana (`ssh loreana`, fish login shell → `bash -c '…'` or script files).
16. - App: `/media/STORAGE/projects/ident.worldapi.org` (vendored `bin/hybriel` + `plugins/`, same binary
17. as tickets, sha256 c51d163d…). Dev port **8351**. Hybriel repo `/media/STORAGE/projects/hybriel` READ ONLY.
18. - Stack and conventions exactly as the tickets app (`/media/STORAGE/projects/tickets.worldapi.org`, read only).
20. ## Scope (piece 1 of 6 only)
21. 1. **Login to ident** with an email one-time code (keep mission 001 (old 003)'s OTP rules: 6 digits, 10 min,
22. single use, 5 tries, send rate limit; mail goes to the file sink, no real mail).
23. 2. **No registration**: the first successful OTP login creates the user **with a default identity**,
24. then shows the name fields and **clearly states they are optional** (skippable).
25. 3. **Identities**: no mandatory fields; optional nickname, firstname, lastname; an **identity name**
26. (the one the selector will show later). The user can create further identities and edit them.
27. A user always has at least one identity. Deleting identities: only if it is not the last one.
28. 4. **Time zone**: taken from the browser at first ident use, stored on the account, visible and
29. changeable in ident.
30. 5. UI: signed-out = login; signed-in = the user's identities (list, create, edit). Accent orange
31. `#ce9178`, tokens + conventions as in the tickets app. Phone (390px) and desktop.
33. **Out of scope** (later tickets #25–#29): apps, API keys, per-app ids, login button flow, selector,
34. notifications. The mission-003 app flow (`/login?app=…`, `/api/exchange`, `testclient/`, the `.env`
35. allow list) does not fit the concept: **remove it** from the app and the gate (and stop the test client
36. on :8354 — PID in `testclient/testclient.pid`). Piece 2 rebuilds it per the concept. Record the removal.
38. ## Data
39. Current `storage/` holds only test data from mission 001 (old 003). Back it up to `.scratch/storage-backup-<ts>/`,
40. then you may start with an empty store.
42. ## Rules
43. - No git. Don't touch other project folders. Only kill your own PIDs or the ones in ident's
44. `server.pid` / `testclient/testclient.pid`. Clean up headless Chromes (`--disable-gpu`). Scratch in `.scratch/`.
45. - Do NOT POST to the live tickets server (:8350). The architect files tickets.
46. - A test is the whole process: real headless browser drives first login → default identity → optional
47. names skipped AND filled → second identity → edit → delete → time zone; plus API/negative cases.
48. Look at your screenshots at 390px and 1280px.
49. - Strict API: unknown/missing fields → 400 naming the field; invalid JSON → 400 (see tickets' `jsoncheck.hl`).
50. - Hybriel bugs: don't fix in the repo; report with repro (check open hybriel tickets #6–#23 first,
51. `GET /api/tickets?project=hybriel`, and don't re-report known ones).
52. - Leave the dev server RUNNING on 8351 (setsid/nohup, `server.pid`, `server.log`).
53. - Update the app's `README.md` and `STATUS.md` (concise). Do NOT edit `CONCEPT.md`.
55. ## Report (final answer, this structure)
56. ```
57. ## Done
58. ## Verified (each: command run + observed output)
59. ## Not verified / open
60. ## Hybriel issues (repro, observed, expected)
61. ## Questions for the creator
62. ## Running (URL, PID, log path)
63. ```