cairnquire/.project/notes/untracked-subsystems.md

Untracked Subsystems

Work that has shipped on main but is not covered by the original milestone plan. Tracked here so it is not lost.

Permissions / RBAC Sharing UI

• Files: apps/server/internal/httpserver/permissions_handlers.go (431 lines), templates/permissions.gohtml, static/permissions.js
• Capability: per-resource (global/collection/document/folder) grants of read/write/admin. Grants via auth.Repository.ReplaceResourcePermissions / EnsureResourcePermission.
• Plan gap: M3 mentions RBAC but no UI/sharing flow tasks. Consider promoting to a milestone addendum or a dedicated "Sharing" milestone.

Tagging

• Files: apps/server/internal/httpserver/static/tags.js (+81), templates/tag.gohtml
• Capability: document tags. Storage table not yet verified against migrations.
• Plan gap: not mentioned anywhere. Either fold into M5 (search filters) or new milestone.

CodeMirror Inline Editor + Link Autocomplete

• Files: static/editor.js (+620), static/codemirror.bundle.js, static/keyboard-nav.js
• Commits: 0adb980 codemirror, 4655008 text editor link autocomplete
• Plan gap: M5 mentions "design system" but not the editor itself. Editor UX belongs in M5 Week 10.

macOS Menu-Bar App

• Files: 14 Swift files (STATUS.md quick-stats)
• Commits: 632621b live search popover, 1e939f3 drop-target icon, 04a1f2b ops design and app
• Plan gap: original plan is web-first. The Swift app has no milestone. Decide: track separately or mark out-of-scope.

API Tokens

• Files: templates/token_create.gohtml, auth.APIKey / auth.CreatedAPIKey types, auth.Repository.CreateAPIKey / ValidateAPIKey / ListAPIKeys / RevokeAPIKey
• Plan gap: not in M3. Belongs as an M3 addendum (developer access).

Password Reset Flow

• Files: templates/password_reset.gohtml, auth.PasswordResetToken, auth.Repository.CreatePasswordResetToken / CompletePasswordReset / ExpirePasswordResetToken
• Plan gap: M3 task list does not mention password reset. Add as M3 addendum.

Ops / Deployment Scaffolding

• Files: entrypoint.sh, docker-compose.yml updates (c7dafae fix ports, 81ceba1 port env, 4666000 port fix)
• Commit: 04a1f2b ops design and app
• Plan gap: M6 operations. Early scaffolding only; full M6 work still pending.