cairnquire/.project/STATUS.md

Project Status Report

Generated: 2026-06-24 Branch: main Last Commit: b6d2ded - passkey existing (2026-06-16)

Quick Stats

Metric	Value
Total Tracked Files	189
Go Files	46
Swift Files	14 (macOS app)
Test Files	10
Avg Test Coverage	~39% (markdown 87%, store 70%, auth 55%, sync 54%)
Milestones Complete	3/6 (50%)

Recent Activity (since 2026-06-01 report)

16 commits on main between fb0673a (2026-06-01) and b6d2ded (2026-06-16): 71 files changed, +7908 / -812 lines.

Highlights:

• b6d2ded passkey existing-user login flow
• 4655008 text editor link autocomplete
• 0adb980 CodeMirror editor integration
• c39c50b dropdown menu + comment side panel (wires M4 comment UI)
• 6c30fd8 sync service update
• 04a1f2b ops design + app scaffolding (entrypoint.sh)
• 632621b/1e939f3 macOS menu-bar app: live search popover, drop-target icon
• ddc7d5c accounts and email wiring
• 93e96be/73d505a UI CSS expansion (~1900 lines) and workspace browser polish
• New untracked subsystems: permissions_handlers.go (RBAC sharing UI), tags.js/tag.gohtml (tagging), keyboard-nav.js, mobile.js, archive.js

Milestone Progress

• Milestone 1: Foundation
• Milestone 2: Sync Protocol
• Milestone 3: Authentication
• Milestone 4: Collaboration (comments UI wired; email integration in progress; digest/preferences pending)
• Milestone 5: Search & UI (server FTS5 done; design-system CSS, keyboard nav, mobile responsive shipped; /design route, Flexsearch, a11y audits pending)
• Milestone 6: Production (not started)

Current Focus: M4 Email Integration (Postmark adapter, templates, queue with retry)

Untracked Subsystems (not in original plan)

These shipped but are not milestone-tracked. Tracked via notes/untracked-subsystems.md:

• Permissions / RBAC sharing UI — permissions_handlers.go (431 lines), permissions.gohtml, permissions.js. Per-resource read/write/admin grants.
• Tagging — tags.js, tag.gohtml. Document tags.
• CodeMirror inline editor — editor.js (+620), codemirror.bundle.js, link autocomplete.
• macOS menu-bar app — 14 Swift files, live search popover, drag-drop target. Beyond web-first plan scope.
• API tokens — token_create.gohtml, auth.APIKey types.
• Password reset flow — password_reset.gohtml, auth.PasswordResetToken repository methods.

Notes for Human Review

• collaboration.Service defines its own EmailSender interface duplicating email.Sender. Consolidate when convenient.
• Service.notifyWatchersOfComment and NotifyDocumentChanged create in-app notifications only; never invoke s.email. Notification.EmailedAt field unused.
• email.SMTPSender uses unauthenticated SMTP (fine for local Mailpit, not Postmark).

---

This report updated 2026-06-24 by hand. Next refresh when M4 email work lands.