Calendar preview card: one card (hover), 'Journal' label, Duplicate action; click selects, double-click edits in composer

kayg commented

2026-09-29 09:19:10 +00:00

Owner

Owner requests (2026-09-29, with a screenshot of the Calendar item preview card for a log entry)

"Just say 'Journal' instead of 'Log entry'." The card's eyebrow names the item's source. A log entry shows Journal, which matches the CalDAV calendar name "Journal" (crates/calternal-dav). Events show their calendar's name, and tasks show "Task" or their list. Update CONTEXT.md: Log entry stays the domain term, and UI copy for its source is "Journal". Check every other UI string that shows "Log entry" as a kind label to users (routes/calendar/[view]/[date]/+page.svelte:1205, ItemPreview.svelte:185-186, and the composer submit label Composer.svelte:789) and change user-facing copy to Journal consistently. Keep code identifiers unchanged.
"Hover preview card and click preview card still different?" There must be one preview card: one component, one layout, one set of actions, used for hover, keyboard and touch. Remove the second variant. Find both (ItemPreview.svelte and the page-level preview) and merge them into the shared one (reuse gate).
"We need a Duplicate action in that card." It works for Journal entries, Events and Tasks. It creates a copy right after the original (same day and time; for a Journal entry, the next line in the same Log section), selects the copy, and shows the undo toast. Reuse the existing duplicate logic from the dup-task work, and make it one shared action with a shortcut (Cmd+D) in the warm tooltip. Add Duplicate to the item's context menu too, and expose it through API, CLI, MCP and WebMCP per #395 parity.
Interaction model (owner): "the card should appear on hover only. Clicking should … select the card. Double-click should definitely edit the event by putting the text in the composer."
- Hover (fine pointer): the preview card appears after the standard hover delay and disappears when the pointer leaves both the item and the card. Moving into the card keeps it open, so its actions stay reachable.
- Single click: selects the item (the selection ring, the same selection model as multi-select) and does not open a card.
- Double-click: edits. The item's source text goes into the composer in edit mode (a Journal line like 08:30 - 09:30 title #tags, or an Event or Task in its composer grammar), with its NLP chips already recognised, and focus goes to the composer. Save replaces the original; Escape cancels.
- Keyboard: Enter edits (the same as double-click). Space or Cmd+I shows the preview card for the selected item, following the anchored-inspector rule.
- Touch (no hover): tap selects and shows the card anchored to the item, double-tap edits, and long-press opens the context menu.
- Reduced motion: the card appears without its spring.

Proof

Unit tests for the Journal label and for Duplicate on all three kinds (including undo).
Production-build e2e for hover shows, click selects with no card, double-click puts the text in the composer, and Enter and Cmd+I.
Screenshots of the card (Journal, Event, Task) at 390, 820 and 1440 px, light and dark, with the action row zoomed in to check icon and label alignment.
Gates per crate as in the preamble, plus bun run check and bun run test in apps/web, and the adversarial round for the Duplicate API.

## Owner requests (2026-09-29, with a screenshot of the Calendar item preview card for a log entry) 1. "Just say 'Journal' instead of 'Log entry'." The card's eyebrow names the item's source. A log entry shows **Journal**, which matches the CalDAV calendar name "Journal" (`crates/calternal-dav`). Events show their calendar's name, and tasks show "Task" or their list. Update CONTEXT.md: **Log entry** stays the domain term, and UI copy for its source is "Journal". Check every other UI string that shows "Log entry" as a kind label to users (`routes/calendar/[view]/[date]/+page.svelte:1205`, `ItemPreview.svelte:185-186`, and the composer submit label `Composer.svelte:789`) and change user-facing copy to Journal consistently. Keep code identifiers unchanged. 2. "Hover preview card and click preview card still different?" There must be **one** preview card: one component, one layout, one set of actions, used for hover, keyboard and touch. Remove the second variant. Find both (ItemPreview.svelte and the page-level preview) and merge them into the shared one (reuse gate). 3. "We need a **Duplicate** action in that card." It works for Journal entries, Events and Tasks. It creates a copy right after the original (same day and time; for a Journal entry, the next line in the same Log section), selects the copy, and shows the undo toast. Reuse the existing duplicate logic from the dup-task work, and make it one shared action with a shortcut (Cmd+D) in the warm tooltip. Add Duplicate to the item's context menu too, and expose it through API, CLI, MCP and WebMCP per #395 parity. 4. Interaction model (owner): "the card should appear on hover only. Clicking should … select the card. Double-click should definitely edit the event by putting the text in the composer." - **Hover** (fine pointer): the preview card appears after the standard hover delay and disappears when the pointer leaves both the item and the card. Moving into the card keeps it open, so its actions stay reachable. - **Single click:** selects the item (the selection ring, the same selection model as multi-select) and does not open a card. - **Double-click:** edits. The item's source text goes into the composer in edit mode (a Journal line like `08:30 - 09:30 title #tags`, or an Event or Task in its composer grammar), with its NLP chips already recognised, and focus goes to the composer. Save replaces the original; Escape cancels. - **Keyboard:** Enter edits (the same as double-click). Space or Cmd+I shows the preview card for the selected item, following the anchored-inspector rule. - **Touch** (no hover): tap selects and shows the card anchored to the item, double-tap edits, and long-press opens the context menu. - **Reduced motion:** the card appears without its spring. ## Proof - Unit tests for the Journal label and for Duplicate on all three kinds (including undo). - Production-build e2e for hover shows, click selects with no card, double-click puts the text in the composer, and Enter and Cmd+I. - Screenshots of the card (Journal, Event, Task) at 390, 820 and 1440 px, light and dark, with the action row zoomed in to check icon and label alignment. Gates per crate as in the preamble, plus `bun run check` and `bun run test` in `apps/web`, and the adversarial round for the Duplicate API.

week-hover-1300-dark.png

3.7 MiB

week-hover-1440-dark.png

4.4 MiB

week-hover-lift-frames.svg

37 KiB

week-hover-390-light.png

1.6 MiB

week-hover-1024-light.png

2.1 MiB

card-event-390-light.png

87 KiB

card-event-1440-dark-actions.png

52 KiB

card-event-1440-dark.png

89 KiB

card-event-1440-light-actions.png

48 KiB

card-event-1440-light.png

67 KiB

card-event-390-dark.png

107 KiB

card-event-390-light-actions.png

66 KiB

card-event-820-dark-actions.png

61 KiB

card-event-820-dark.png

105 KiB

card-event-820-light-actions.png

55 KiB

card-event-820-light.png

82 KiB

card-journal-1440-dark-actions.png

89 KiB

card-event-390-dark-actions.png

63 KiB

card-journal-1440-dark.png

192 KiB

card-journal-1440-light-actions.png

97 KiB

card-journal-1440-light.png

164 KiB

card-journal-390-dark-actions.png

94 KiB

card-journal-390-light-actions.png

95 KiB

card-journal-390-light.png

151 KiB

card-journal-820-light.png

163 KiB

card-task-1440-light-actions.png

87 KiB

card-task-1440-light.png

95 KiB

card-task-390-dark-actions.png

108 KiB

card-task-390-dark.png

152 KiB

card-task-390-light-actions.png

110 KiB

card-event-1440-dark-actions.png

56 KiB

card-event-1440-dark.png

90 KiB

card-event-1440-light-actions.png

50 KiB

card-event-1440-light.png

67 KiB

card-event-390-dark-actions.png

61 KiB

card-event-390-dark.png

107 KiB

card-event-390-light-actions.png

59 KiB

card-event-390-light.png

79 KiB

card-event-820-dark-actions.png

59 KiB

card-event-820-dark.png

99 KiB

card-event-820-light-actions.png

50 KiB

card-event-820-light.png

74 KiB

card-journal-1440-dark-actions.png

73 KiB

card-journal-1440-dark.png

185 KiB

card-journal-1440-light-actions.png

71 KiB

card-journal-1440-light.png

155 KiB

card-journal-390-dark-actions.png

79 KiB

card-journal-390-dark.png

187 KiB

card-journal-390-light-actions.png

70 KiB

card-journal-390-light.png

140 KiB

card-journal-820-dark-actions.png

86 KiB

card-journal-820-dark.png

196 KiB

card-journal-820-light-actions.png

85 KiB

card-journal-820-light.png

160 KiB

card-task-1440-dark-actions.png

77 KiB

card-task-1440-dark.png

124 KiB

card-task-1440-light-actions.png

80 KiB

card-task-1440-light.png

80 KiB

card-task-390-dark-actions.png

71 KiB

card-task-390-dark.png

129 KiB

card-task-390-light-actions.png

62 KiB

card-task-390-light.png

90 KiB

card-task-820-dark-actions.png

79 KiB

card-task-820-dark.png

116 KiB

card-task-820-light-actions.png

60 KiB

card-journal-390-dark.png

200 KiB

card-journal-820-dark-actions.png

102 KiB

card-journal-820-dark.png

196 KiB

card-journal-820-light-actions.png

109 KiB

card-task-1440-dark-actions.png

95 KiB

card-task-1440-dark.png

116 KiB

card-task-820-dark-actions.png

94 KiB

card-task-820-dark.png

139 KiB

card-task-820-light.png

100 KiB

card-task-820-light.png

79 KiB

card-task-390-light.png

112 KiB

card-task-820-light-actions.png

100 KiB

week-hover-390-dark.png

1.6 MiB

week-hover-820-light.png

2.6 MiB

week-hover-820-dark.png

2.6 MiB

week-hover-1024-dark.png

3.1 MiB

week-hover-1300-light.png

2.4 MiB

week-hover-1440-light.png

4.4 MiB

kayg commented

2026-09-29 09:20:10 +00:00

Author

Owner

Started work on job/preview-421, based on dev at 191b179baac3ef4f5bebfe07ce91c4b7a887ace2. I have read CLAUDE.md, docs/DESIGN.md, CONTEXT.md and issue #421. I am mapping the existing Calendar preview, duplicate action and API/client routes before editing.

Started work on `job/preview-421`, based on `dev` at `191b179baac3ef4f5bebfe07ce91c4b7a887ace2`. I have read `CLAUDE.md`, `docs/DESIGN.md`, `CONTEXT.md` and issue #421. I am mapping the existing Calendar preview, duplicate action and API/client routes before editing.

kayg commented

2026-09-29 09:21:22 +00:00

Author

Owner

Finding: the merged dup-task work (#357) provides the unified rich Task identity and day API, but the current dev tree has no Task duplication helper or duplicate endpoint (git grep -i duplicate origin/wip/dup-task finds no Task duplication implementation). I will build on the canonical Task API and keep duplication in one server action.

Finding: the merged `dup-task` work (#357) provides the unified rich Task identity and day API, but the current `dev` tree has no Task duplication helper or duplicate endpoint (`git grep -i duplicate origin/wip/dup-task` finds no Task duplication implementation). I will build on the canonical Task API and keep duplication in one server action.

kayg commented

2026-09-29 09:30:43 +00:00

Author

Owner

Finding: docs/DESIGN.md §34 still says click, tap or Enter opens a persistent preview. The newer #421 owner direction says fine-pointer click selects only, double-click/Enter edits, Space/Cmd+I previews, and touch tap selects with an anchored card. I will update the Calendar interaction text to match #421.

Finding: `docs/DESIGN.md` §34 still says click, tap or Enter opens a persistent preview. The newer #421 owner direction says fine-pointer click selects only, double-click/Enter edits, Space/Cmd+I previews, and touch tap selects with an anchored card. I will update the Calendar interaction text to match #421.

kayg commented

2026-09-29 11:06:24 +00:00

Author

Owner

Added (owner, 2026-09-29): the preview card's action row must also have Add attachment (paperclip; opens the same picker as the composer and appends to the entry) and Record voice note (mic; the same recorder as the composer, #373). Both have warm tooltips and shortcuts, and both are available through API, CLI, MCP and WebMCP where applicable. The owner asked for these before.

Added (owner, 2026-09-29): the preview card's action row must also have **Add attachment** (paperclip; opens the same picker as the composer and appends to the entry) and **Record voice note** (mic; the same recorder as the composer, #373). Both have warm tooltips and shortcuts, and both are available through API, CLI, MCP and WebMCP where applicable. The owner asked for these before.

kayg commented

2026-09-29 11:51:30 +00:00

Author

Owner

Finding: Calendar previews had both page-level delegated hover handling and a TimeGrid hover callback, so the same pointer movement could schedule two preview timers. I removed the TimeGrid callback and kept one page-level path for hover, keyboard and touch.

kayg commented

2026-09-29 11:57:00 +00:00

Author

Owner

Finding: when a hover preview opened and the pointer moved into it, the item's 220 ms close check saw the card hovered and returned. The page had no card-exit handler, so the transient card could remain after the pointer left both. I added delegated pointer-out handling for the card and included the item-to-card-to-page path in the production e2e.

kayg commented

2026-09-29 12:05:13 +00:00

Author

Owner

Finding: the source name still appeared as “Log entries” in Calendar search facets, the type filter, keyboard help, tag views and item descriptions. I changed those user-facing source labels to Journal while keeping the mode and route identifiers unchanged; the Journal and search label unit tests pass.

kayg commented

2026-09-29 12:11:49 +00:00

Author

Owner

Finding: activating Duplicate in the Agenda context menu cleared the parent menu state while FloatingSurface was completing its focus handoff. The child prop expression then read null and raised a TypeError. I guarded the transient menu props; the added regression test now passes with 7 Agenda tests and no unhandled errors.

kayg commented

2026-09-29 12:11:56 +00:00

Author

Owner

Finding: activating Duplicate in the Agenda context menu cleared the parent menu state while FloatingSurface was completing its focus handoff. The child prop expression menu.items then read null and raised a TypeError. I guarded the transient menu props; the added regression test now passes with 7 Agenda tests and no unhandled errors.

kayg commented

2026-09-29 12:13:10 +00:00

Author

Owner

Decision: I updated docs/DESIGN.md §34 to record the owner interaction: hover-only preview on fine pointers, click selects without opening a card, Enter and double-click edit in Composer, Space and Cmd+I show the selected preview, and touch uses tap, double-tap and long-press. The user-facing source name is Journal; Log entry remains the domain term in CONTEXT.md.

kayg commented

2026-09-29 12:31:23 +00:00

Author

Owner

Finding: GridColumn and MonthGrid had no item context menu or touch long-press path; Agenda rows had both. Added a shared Calendar item menu for duplicate, preview, edit, Open day and Copy link, with mouse, keyboard and touch entry points. The production e2e script now checks the grid context menu and mobile long-press.

kayg commented

2026-09-29 12:44:33 +00:00

Author

Owner

Finding: the source copy was already Journal in the visible UI, but several production e2e selectors still expected Log entry for the card, Composer submit action, repair action and Copy link label. Updated those selectors so production tests follow the Journal source name while technical references keep the Log entry domain term.

kayg commented

2026-09-29 12:56:46 +00:00

Author

Owner

Finding: moving Journal edit into the shared Composer removed the old long-text-to-note path. A multiline edit would otherwise save only line one. The Composer now disables Save changes while a linked-note body is present and exposes Turn into note; a unit test and the calendar production e2e cover it.

kayg commented

2026-09-29 13:00:58 +00:00

Author

Owner

Decision recorded in docs/DESIGN.md: duplicating an Event master keeps recurrence; duplicating one occurrence creates a one-off at that occurrence's date and time. Journal copies insert after the source in the same Log section. The issue was silent on recurrence semantics, so the implementation uses these rules for review.

kayg commented

2026-09-29 13:23:47 +00:00

Author

Owner

Interaction review found a click-versus-hover race: a pending 320 ms hover timer can show a preview after a fast single click if the pointer stays over the selected item. The e2e assertion used to move the pointer away before waiting, masking it; I changed the assertion to wait in place and will reproduce it before fixing the handler.

kayg commented

2026-09-29 13:31:05 +00:00

Author

Owner

Preview source labels now follow the requested rule: Journal for Journal entries, the Event's Calendar name for Events, and Task for Tasks. Added a unit assertion for the Event Calendar name; the targeted Vitest run passed.

kayg commented

2026-09-29 13:39:39 +00:00

Author

Owner

Review found CalendarPopover currently enables its full-screen phone sheet, which does not follow the issue's touch instruction to anchor the preview to the item. I added a production e2e assertion for the 390 px touch preview; I will use the shared anchored surface for this card if the current build reproduces the mismatch.

kayg commented

2026-09-29 13:46:12 +00:00

Author

Owner

Calendar Duplicate endpoint and iCalendar copy logic are committed as b54a5610.

Gate so far:

cargo clippy -p calternal-plugin-calendar --all-targets -- -D warnings
Finished `dev` profile target(s) in 43m 16s

The package test command is still building its test profile; its result is pending.

Calendar Duplicate endpoint and iCalendar copy logic are committed as b54a5610. Gate so far: ```text cargo clippy -p calternal-plugin-calendar --all-targets -- -D warnings Finished `dev` profile target(s) in 43m 16s ``` The package test command is still building its test profile; its result is pending.

kayg commented

2026-09-29 14:01:54 +00:00

Author

Owner

Occurrence duplicate review found a data-loss path: the helper constructs a fresh minimal VEVENT from time, summary, location and tags, so it drops provider description, URL, attachments and alarms. I added Calendar unit assertions for these source properties before changing the helper; the next Calendar test run will reproduce it.

kayg commented

2026-09-29 14:42:13 +00:00

Author

Owner

Composer edit mode is implemented in commit 7d5e4957. The focused test passed: 1 file, 26 tests. The web type check found two errors because the newly added duplicate route is not yet present in the generated API path types; I will regenerate the OpenAPI client from the server contract, then rerun the web gates.

Composer edit mode is implemented in commit 7d5e4957. The focused test passed: 1 file, 26 tests. The web type check found two errors because the newly added duplicate route is not yet present in the generated API path types; I will regenerate the OpenAPI client from the server contract, then rerun the web gates.

kayg commented

2026-09-29 14:57:20 +00:00

Author

Owner

The first server Clippy attempt stopped at calternal-server's RustEmbed derive because apps/web/build did not exist, and the generated frontend accessors then failed. I am building the production web app before rerunning the gate; this is a build prerequisite, not a Rust diagnostic.

kayg commented

2026-09-29 15:04:37 +00:00

Author

Owner

Event occurrence duplicate regression is fixed in fd5f5884. Before the fix, the new test failed because DESCRIPTION was dropped. The copy now keeps provider metadata and nested components such as VALARM, while replacing occurrence fields and omitting recurrence rules. cargo fmt --check passed. cargo test -p calternal-plugin-calendar passed (52 unit, 1 cache integration, 3 protocol tests); cargo clippy -p calternal-plugin-calendar --all-targets -- -D warnings passed.

Event occurrence duplicate regression is fixed in fd5f5884. Before the fix, the new test failed because DESCRIPTION was dropped. The copy now keeps provider metadata and nested components such as VALARM, while replacing occurrence fields and omitting recurrence rules. `cargo fmt --check` passed. `cargo test -p calternal-plugin-calendar` passed (52 unit, 1 cache integration, 3 protocol tests); `cargo clippy -p calternal-plugin-calendar --all-targets -- -D warnings` passed.

kayg commented

2026-09-29 15:58:55 +00:00

Author

Owner

The shared Duplicate MCP tool and docs are committed in 4ce2a08c. cargo clippy -p calternal-server --all-targets -- -D warnings passed. cargo test -p calternal-server ran 85 tests: the duplicate payload and scope tests passed, and 82 tests passed overall; one ignored live-app wrapper failed because its child hit the existing 5-second archive-worker timeout under current build-host load. Two tests were ignored. I am treating this as SLOW-only per the owner rule and have not changed the existing expectation.

The shared Duplicate MCP tool and docs are committed in 4ce2a08c. `cargo clippy -p calternal-server --all-targets -- -D warnings` passed. `cargo test -p calternal-server` ran 85 tests: the duplicate payload and scope tests passed, and 82 tests passed overall; one ignored live-app wrapper failed because its child hit the existing 5-second archive-worker timeout under current build-host load. Two tests were ignored. I am treating this as SLOW-only per the owner rule and have not changed the existing expectation.

kayg commented

2026-09-29 16:22:44 +00:00

Author

Owner

Checkpoint report — issue remains open

Work stopped at the owner’s approximately four-hour limit. No merge or deploy was made.

Branch: job/preview-421
HEAD: 4ce2a08cf3a67fcdccbd3169677745d703550160

Committed work

Journal source labels and the one shared Calendar preview card with shared actions and shortcut UI.
Journal and Task duplicate helpers, the Calendar Duplicate route, server MCP tool, and API adversarial probes.
Shared Composer edit mode and the Event occurrence-copy metadata fix.
Design/context documentation, including Journal as UI source copy and one-off copying for a selected recurring Event occurrence.

Remaining uncommitted work

Calendar selection/hover/touch integration, action and duplicate UI, WebMCP and CLI parity, associated tests and e2e coverage, plus adversarial probe edits remain in the worktree. The CLI files are crates/calternal-cli/src/main.rs and crates/calternal-cli/src/remote_commands.rs. Main UI changes are in apps/web/src/routes/calendar/[view]/[date]/+page.svelte, packages/ui/src/components/calendar/AgendaList.svelte, CalendarPopover.svelte, GridColumn.svelte, MonthGrid.svelte, and RepairList.svelte. New untracked files include apps/web/e2e/calendar-preview-421.mjs, apps/web/src/lib/calendar/duplicate.ts, and its test. git diff --check passed.

Gate output

cargo fmt --check: exited 0 with no output.

cargo test -p calternal-plugin-calendar:

test result: ok. 52 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.89s
test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 9.48s
test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.19s

cargo clippy -p calternal-plugin-calendar --all-targets -- -D warnings:
```
Finished `dev` profile target(s) in 53.35s
```
cargo clippy -p calternal-server --all-targets -- -D warnings:
```
Finished `dev` profile target(s) in 40.85s
```
cargo test -p calternal-server ended with:
```
test result: FAILED. 82 passed; 1 failed; 2 ignored; 0 measured; 0 filtered out; finished in 18.62s
```
The failure was the live-app wrapper: its child timed out waiting for the existing 5-second archive-worker condition. Duplicate MCP payload and scope tests passed. I left the existing timeout expectation unchanged and classified this as SLOW-only load.
cargo clippy -p calternal-cli --all-targets -- -D warnings:
```
Finished `dev` profile target(s) in 16m 05s
```
cargo test -p calternal-cli was interrupted at the time limit while compiling dependencies (exit 130); the CLI tests did not run.

Focused Composer tests:

Test Files  1 passed (1)
     Tests  26 passed (26)

bun run build succeeded:

✓ built in 1m 14s
Wrote site to "build"
✔ done

bun run check did not pass because the generated API path types do not include the new duplicate route:

Error: Argument of type '"/api/v1/calendar/items/duplicate"' is not assignable to parameter of type 'ApiPath'.
svelte-check found 2 errors and 0 warnings in 2 files

Work remaining

Generate contracts/openapi.json and packages/api-client/src/generated.ts, rerun web check/tests, finish CLI tests and commit, fix and verify the interaction behavior through the production e2e suite, capture and attach the requested screenshots, run one time-boxed Duplicate API adversarial round, merge dev once, then run the remaining final gates and clean build output. No screenshots were captured or attached in this checkpoint.

Decisions recorded

Log entry remains the domain term; Journal is the UI source label. A selected recurring Event occurrence duplicates as a one-off at that occurrence’s time. Both decisions are documented in the changed context/design docs.

## Checkpoint report — issue remains open Work stopped at the owner’s approximately four-hour limit. No merge or deploy was made. Branch: `job/preview-421` HEAD: `4ce2a08cf3a67fcdccbd3169677745d703550160` ### Committed work - Journal source labels and the one shared Calendar preview card with shared actions and shortcut UI. - Journal and Task duplicate helpers, the Calendar Duplicate route, server MCP tool, and API adversarial probes. - Shared Composer edit mode and the Event occurrence-copy metadata fix. - Design/context documentation, including Journal as UI source copy and one-off copying for a selected recurring Event occurrence. ### Remaining uncommitted work Calendar selection/hover/touch integration, action and duplicate UI, WebMCP and CLI parity, associated tests and e2e coverage, plus adversarial probe edits remain in the worktree. The CLI files are `crates/calternal-cli/src/main.rs` and `crates/calternal-cli/src/remote_commands.rs`. Main UI changes are in `apps/web/src/routes/calendar/[view]/[date]/+page.svelte`, `packages/ui/src/components/calendar/AgendaList.svelte`, `CalendarPopover.svelte`, `GridColumn.svelte`, `MonthGrid.svelte`, and `RepairList.svelte`. New untracked files include `apps/web/e2e/calendar-preview-421.mjs`, `apps/web/src/lib/calendar/duplicate.ts`, and its test. `git diff --check` passed. ### Gate output - `cargo fmt --check`: exited 0 with no output. - `cargo test -p calternal-plugin-calendar`: ``` test result: ok. 52 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.89s test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 9.48s test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.19s ``` - `cargo clippy -p calternal-plugin-calendar --all-targets -- -D warnings`: ``` Finished `dev` profile target(s) in 53.35s ``` - `cargo clippy -p calternal-server --all-targets -- -D warnings`: ``` Finished `dev` profile target(s) in 40.85s ``` - `cargo test -p calternal-server` ended with: ``` test result: FAILED. 82 passed; 1 failed; 2 ignored; 0 measured; 0 filtered out; finished in 18.62s ``` The failure was the live-app wrapper: its child timed out waiting for the existing 5-second archive-worker condition. Duplicate MCP payload and scope tests passed. I left the existing timeout expectation unchanged and classified this as SLOW-only load. - `cargo clippy -p calternal-cli --all-targets -- -D warnings`: ``` Finished `dev` profile target(s) in 16m 05s ``` - `cargo test -p calternal-cli` was interrupted at the time limit while compiling dependencies (exit 130); the CLI tests did not run. - Focused Composer tests: ``` Test Files 1 passed (1) Tests 26 passed (26) ``` - `bun run build` succeeded: ``` ✓ built in 1m 14s Wrote site to "build" ✔ done ``` - `bun run check` did not pass because the generated API path types do not include the new duplicate route: ``` Error: Argument of type '"/api/v1/calendar/items/duplicate"' is not assignable to parameter of type 'ApiPath'. svelte-check found 2 errors and 0 warnings in 2 files ``` ### Work remaining Generate `contracts/openapi.json` and `packages/api-client/src/generated.ts`, rerun web check/tests, finish CLI tests and commit, fix and verify the interaction behavior through the production e2e suite, capture and attach the requested screenshots, run one time-boxed Duplicate API adversarial round, merge `dev` once, then run the remaining final gates and clean build output. No screenshots were captured or attached in this checkpoint. ### Decisions recorded `Log entry` remains the domain term; `Journal` is the UI source label. A selected recurring Event occurrence duplicates as a one-off at that occurrence’s time. Both decisions are documented in the changed context/design docs.

kayg commented

2026-09-29 16:22:57 +00:00

Author

Owner

Correction to the committed-work list above: tests/adversarial/attack.py and tests/adversarial/mcp_probe.py are still uncommitted worktree changes, not committed probes. The Duplicate API and MCP implementation are committed; the adversarial additions were not run before the checkpoint.

Correction to the committed-work list above: `tests/adversarial/attack.py` and `tests/adversarial/mcp_probe.py` are still uncommitted worktree changes, not committed probes. The Duplicate API and MCP implementation are committed; the adversarial additions were not run before the checkpoint.

kayg commented

2026-09-29 16:25:16 +00:00

Author

Owner

Resuming round 2 on job/preview-421 at 4ce2a08cf3a67fcdccbd3169677745d703550160 (original job base: dev at 191b179baac3ef4f5bebfe07ce91c4b7a887ace2). I am reviewing and committing the remaining work in logical slices before merging origin/dev once, as requested.

Resuming round 2 on `job/preview-421` at `4ce2a08cf3a67fcdccbd3169677745d703550160` (original job base: `dev` at `191b179baac3ef4f5bebfe07ce91c4b7a887ace2`). I am reviewing and committing the remaining work in logical slices before merging `origin/dev` once, as requested.

kayg commented

2026-09-29 16:29:26 +00:00

Author

Owner

Finding: the current Notes API accepts attachments only when it creates a Journal entry, or creates a linked Note at /api/v1/notes/journal/entries/{block_id}/note; it has no route to append an existing file to an existing entry. The Composer already owns the file picker/tray and VoiceRecorder. I will add a bounded append route that validates Home-relative existing files, then reuse the Composer's picker/recorder and route that write through the server.

Finding: the current Notes API accepts attachments only when it creates a Journal entry, or creates a linked Note at `/api/v1/notes/journal/entries/{block_id}/note`; it has no route to append an existing file to an existing entry. The Composer already owns the file picker/tray and `VoiceRecorder`. I will add a bounded append route that validates Home-relative existing files, then reuse the Composer's picker/recorder and route that write through the server.

kayg commented

2026-09-29 16:43:08 +00:00

Author

Owner

Finding: the uncommitted updateEventIcalendar helper replaces DTSTART;TZID=Europe/Berlin with a UTC DTSTART and removes the original zone. Its new unit test currently expects that loss. DESIGN §30 C12 says Events keep their zone, so I am changing the regression test to require the original TZID and fixing the helper before the Calendar interaction commit.

Finding: the uncommitted `updateEventIcalendar` helper replaces `DTSTART;TZID=Europe/Berlin` with a UTC `DTSTART` and removes the original zone. Its new unit test currently expects that loss. DESIGN §30 C12 says Events keep their zone, so I am changing the regression test to require the original `TZID` and fixing the helper before the Calendar interaction commit.

kayg commented

2026-09-29 16:49:50 +00:00

Author

Owner

Finding resolved: Event Composer edits must keep the Event's source zone. The failing test showed DTSTART;TZID=Europe/Berlin rewritten as DTSTART:...Z; after the fix, data.test.ts passed with the TZID retained (Test Files 1 passed (1); Tests 9 passed (9)). The edit path now formats the Composer text in the Event zone and keeps each source DTSTART/DTEND zone marker when saving.

Finding resolved: Event Composer edits must keep the Event's source zone. The failing test showed `DTSTART;TZID=Europe/Berlin` rewritten as `DTSTART:...Z`; after the fix, `data.test.ts` passed with the `TZID` retained (`Test Files 1 passed (1); Tests 9 passed (9)`). The edit path now formats the Composer text in the Event zone and keeps each source DTSTART/DTEND zone marker when saving.

kayg commented

2026-09-29 17:07:42 +00:00

Author

Owner

After merging origin/dev, cargo test -p calternal-plugin-notes reported 123 passed and one failure in vtodo_wire_upgrade_rotates_sync_epoch_once: the epoch was unchanged. Evidence: Notes migrations 18 (the VTODO wire epoch rotation) and 19 (DAV area deletes) now both exist, while the test modeled the pre-change build by popping only the latest migration. I updated the fixture to exclude migration 18 by version and kept both epoch assertions unchanged; the focused test now passes.

After merging origin/dev, `cargo test -p calternal-plugin-notes` reported 123 passed and one failure in `vtodo_wire_upgrade_rotates_sync_epoch_once`: the epoch was unchanged. Evidence: Notes migrations 18 (the VTODO wire epoch rotation) and 19 (DAV area deletes) now both exist, while the test modeled the pre-change build by popping only the latest migration. I updated the fixture to exclude migration 18 by version and kept both epoch assertions unchanged; the focused test now passes.

kayg commented

2026-09-29 17:46:59 +00:00

Author

Owner

OpenAPI regeneration found that the Notes attachment schema was present but its operation was missing from the plugin paths list. The merged contract also lacked the already-registered Calendar Duplicate operation. I added the Notes operation to the path list; the next regeneration will verify both operation paths and generated client types.

OpenAPI regeneration found that the Notes attachment schema was present but its operation was missing from the plugin `paths` list. The merged contract also lacked the already-registered Calendar Duplicate operation. I added the Notes operation to the path list; the next regeneration will verify both operation paths and generated client types.

kayg commented

2026-09-29 17:54:03 +00:00

Author

Owner

The first full web test run reported 2 failures (834 passed): the chosen Cmd+Shift+R voice shortcut was reserved by Chrome/Safari, and the Calendar Event edit path created its own Intl.DateTimeFormat, which broke the shared formatter reuse gate. Changed the voice shortcut to Cmd+Shift+V and reused timeZoneDateTimeFormatter for Event wall time. The focused shortcut and date-formatting tests now pass (10/10); full web tests will be rerun after the remaining changes.

The first full web test run reported 2 failures (834 passed): the chosen `Cmd+Shift+R` voice shortcut was reserved by Chrome/Safari, and the Calendar Event edit path created its own `Intl.DateTimeFormat`, which broke the shared formatter reuse gate. Changed the voice shortcut to `Cmd+Shift+V` and reused `timeZoneDateTimeFormatter` for Event wall time. The focused shortcut and date-formatting tests now pass (10/10); full web tests will be rerun after the remaining changes.

kayg commented

2026-09-29 18:59:53 +00:00

Author

Owner

Production E2E finding: the new Journal fixture used #proof, but Log mode canonicalizes a bare tag to #area/proof (per CONTEXT.md). The Composer correctly showed the canonical token. I updated the fixture to use the stable explicit #area/proof spelling and kept the behavior unchanged.

Production E2E finding: the new Journal fixture used `#proof`, but Log mode canonicalizes a bare tag to `#area/proof` (per CONTEXT.md). The Composer correctly showed the canonical token. I updated the fixture to use the stable explicit `#area/proof` spelling and kept the behavior unchanged.

kayg commented

2026-09-29 19:43:52 +00:00

Author

Owner

Production E2E finding: Event Duplicate followed by Undo returned the Calendar count to its pre-action value in the mounted page, but a route reload then showed a second provider Event. The local CalDAV fixture accepted conditional PUTs but did not implement DELETE, so it could not model the provider's event Undo. I am adding conditional DELETE support to this test fixture; no server route behavior is being changed.

kayg commented

2026-09-29 19:51:01 +00:00

Author

Owner

Production E2E evidence: the full card screenshot matrix completed at all requested widths and themes, then the phone touch check timed out waiting for .cal-popover. At 390 px the production UI renders the anchored card as .surface.popover-sheet; the screenshot matrix already accounts for that. Updated the touch check to use the same selector for open and Escape-close assertions. This was a harness selector defect, not a product card failure.

Production E2E evidence: the full card screenshot matrix completed at all requested widths and themes, then the phone touch check timed out waiting for `.cal-popover`. At 390 px the production UI renders the anchored card as `.surface.popover-sheet`; the screenshot matrix already accounts for that. Updated the touch check to use the same selector for open and Escape-close assertions. This was a harness selector defect, not a product card failure.

kayg commented

2026-09-29 19:55:13 +00:00

Author

Owner

Production E2E diagnostic evidence for the phone tap timeout: the Journal block's bounding box was y=-18 px and its center was y=4.7 px. elementFromPoint returned the route container (no data-key), and the captured touch/click events all had no item target, so the tap could not open the card. waitFor() had accepted a block that was only partially visible. Added scrollIntoViewIfNeeded() before computing the touch coordinates; the product handler already opens the card when a touch selects an item.

Production E2E diagnostic evidence for the phone tap timeout: the Journal block's bounding box was y=-18 px and its center was y=4.7 px. `elementFromPoint` returned the route container (no `data-key`), and the captured touch/click events all had no item target, so the tap could not open the card. `waitFor()` had accepted a block that was only partially visible. Added `scrollIntoViewIfNeeded()` before computing the touch coordinates; the product handler already opens the card when a touch selects an item.

kayg commented

2026-09-29 19:57:20 +00:00

Author

Owner

The touch tap now reaches the Journal item and opens its preview. The next E2E assertion failed because it expected no .popover-content.sheet, although CalendarPopover.svelte deliberately sets phoneSheet={true} and PopoverSurface renders the phone version as a sheet. Updated the new test assertion to require .surface.popover-sheet .popover-content.sheet; this keeps the production behavior and aligns the test with its component contract.

The touch tap now reaches the Journal item and opens its preview. The next E2E assertion failed because it expected no `.popover-content.sheet`, although `CalendarPopover.svelte` deliberately sets `phoneSheet={true}` and `PopoverSurface` renders the phone version as a sheet. Updated the new test assertion to require `.surface.popover-sheet .popover-content.sheet`; this keeps the production behavior and aligns the test with its component contract.

kayg commented

2026-09-29 20:22:26 +00:00

Author

Owner

Finding: the production E2E completed hover, single-click selection, double-click and Enter edit, Cmd+I preview, Journal attachment upload, voice recording, Duplicate/Undo for Journal/Event/Task, and the 18 card plus 18 action-row screenshots at 390, 820 and 1440 px in light and dark. It then timed out waiting for Composer after two touch taps on the Journal item. The implementation only handled the browser dblclick event; the mobile Playwright tap sequence did not emit it. I am adding touch double-tap handling and will rerun the production E2E.

Finding: the production E2E completed hover, single-click selection, double-click and Enter edit, Cmd+I preview, Journal attachment upload, voice recording, Duplicate/Undo for Journal/Event/Task, and the 18 card plus 18 action-row screenshots at 390, 820 and 1440 px in light and dark. It then timed out waiting for Composer after two touch taps on the Journal item. The implementation only handled the browser `dblclick` event; the mobile Playwright tap sequence did not emit it. I am adding touch double-tap handling and will rerun the production E2E.

kayg commented

2026-09-29 20:35:32 +00:00

Author

Owner

Finding resolved: Calendar touch double-tap now uses the second touch on the same stable item to open the shared Composer. The phone preview stays an anchored popover, so it does not block the second tap. The production E2E passed the direct tap-then-tap edit path and the long-press menu. It also passed hover/click/keyboard edit, attachment upload, voice recording, and Duplicate/Undo for Journal, Event and Task. The complete screenshot matrix contains 36 3x PNGs: 18 card captures and 18 action-row crops for all three kinds at 390, 820 and 1440 px in light and dark.

kayg commented

2026-09-30 01:01:39 +00:00

Author

Owner

Starting round 2 on job/preview-421. HEAD: 673e7094b3a4f5b51a72f66f51276375f0c330db; branch base: 369ab6a2f9fc673e3564b94857fbecfeb04df404. I will merge origin/dev once, then finish the shared Calendar card actions, generated API client, gates, production e2e, and screenshot evidence requested in #421.

Starting round 2 on `job/preview-421`. HEAD: `673e7094b3a4f5b51a72f66f51276375f0c330db`; branch base: `369ab6a2f9fc673e3564b94857fbecfeb04df404`. I will merge `origin/dev` once, then finish the shared Calendar card actions, generated API client, gates, production e2e, and screenshot evidence requested in #421.

kayg commented

2026-09-30 01:14:23 +00:00

Author

Owner

Finding after merging origin/dev: the required OpenAPI generator build fails in calternal-plugin-notes at crates/plugins/notes/src/lib.rs:3624 with error[E0063]: missing field alarms in initializer of JournalEvent. I am checking the Notes model and its other constructors, then will add the correct value and a regression check before retrying generation.

Finding after merging `origin/dev`: the required OpenAPI generator build fails in `calternal-plugin-notes` at `crates/plugins/notes/src/lib.rs:3624` with `error[E0063]: missing field alarms in initializer of JournalEvent`. I am checking the Notes model and its other constructors, then will add the correct value and a regression check before retrying generation.

kayg commented

2026-09-30 01:29:56 +00:00

Author

Owner

Resolved: the Journal attachment handler now carries current.alarms into the JournalEvent used for its updated ETag. The attachment API regression fixture now includes a VALARM and checks that the reminder metadata remains in the Daily note after the append. Evidence: cargo test -p calternal-plugin-notes passed with test result: ok. 126 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 249.25s, its attachment integration test passed, and the Apple replay integration test passed (1 passed).

Resolved: the Journal attachment handler now carries `current.alarms` into the `JournalEvent` used for its updated ETag. The attachment API regression fixture now includes a VALARM and checks that the reminder metadata remains in the Daily note after the append. Evidence: `cargo test -p calternal-plugin-notes` passed with `test result: ok. 126 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 249.25s`, its attachment integration test passed, and the Apple replay integration test passed (`1 passed`).

kayg commented

2026-09-30 03:45:33 +00:00

Author

Owner

Resuming #421 on job/preview-421 from 673e7094b3a4f5b51a72f66f51276375f0c330db. The worktree had a resolved origin/dev merge in progress (target 55a2f90feb8a52d91f8bbc1347889b509af02260) and two unstaged #421 changes for retaining CalDAV alarm metadata when appending attachments. I am concluding that inherited merge, validating and committing the focused fix, then merging the current origin/dev once before the final gates.

Resuming #421 on `job/preview-421` from `673e7094b3a4f5b51a72f66f51276375f0c330db`. The worktree had a resolved `origin/dev` merge in progress (target `55a2f90feb8a52d91f8bbc1347889b509af02260`) and two unstaged #421 changes for retaining CalDAV alarm metadata when appending attachments. I am concluding that inherited merge, validating and committing the focused fix, then merging the current `origin/dev` once before the final gates.

kayg commented

2026-09-30 04:59:14 +00:00

Author

Owner

Finding while completing the #421 attachment path: the attachment response ETag must include the entry's stored CalDAV reminder alarms. The Notes handler now carries the existing alarm list into the returned JournalEvent; the regression test seeds a VALARM and asserts that the append response ETag equals the subsequent Journal GET ETag. Evidence: cargo test -p calternal-plugin-notes passed 129 unit tests plus the Apple replay test.

The merged origin/dev tree also had a duplicate data-key on each Journal, Task and Event row in MonthGrid, which made bun run check fail with duplicate attribute diagnostics. Removed those three duplicate attributes. The next check reported svelte-check found 0 errors and 0 warnings.

Finding while completing the #421 attachment path: the attachment response ETag must include the entry's stored CalDAV reminder alarms. The Notes handler now carries the existing alarm list into the returned `JournalEvent`; the regression test seeds a VALARM and asserts that the append response ETag equals the subsequent Journal GET ETag. Evidence: `cargo test -p calternal-plugin-notes` passed 129 unit tests plus the Apple replay test. The merged `origin/dev` tree also had a duplicate `data-key` on each Journal, Task and Event row in MonthGrid, which made `bun run check` fail with duplicate attribute diagnostics. Removed those three duplicate attributes. The next check reported `svelte-check found 0 errors and 0 warnings`.

kayg commented

2026-09-30 05:40:49 +00:00

Author

Owner

Gate finding after merging the fetched origin/dev: cargo test -p calternal-server finished with 86 passed, 2 ignored and 1 failed. The failure was wire::tests::live_apps_run_in_separate_processes; its nested full_app_setup_session_config_and_backup timed out waiting for a queued user archive to complete at the existing 5-second deadline (Elapsed(())). I did not change its expectation. The Calendar and Notes gates passed, and server clippy passed. The timeout is isolated to the heavy live-app test and appears load-sensitive; I am recording it for review rather than changing the unrelated route or test.

Gate finding after merging the fetched `origin/dev`: `cargo test -p calternal-server` finished with 86 passed, 2 ignored and 1 failed. The failure was `wire::tests::live_apps_run_in_separate_processes`; its nested `full_app_setup_session_config_and_backup` timed out waiting for a queued user archive to complete at the existing 5-second deadline (`Elapsed(())`). I did not change its expectation. The Calendar and Notes gates passed, and server clippy passed. The timeout is isolated to the heavy live-app test and appears load-sensitive; I am recording it for review rather than changing the unrelated route or test.

kayg commented

2026-09-30 05:54:12 +00:00

Author

Owner

Full bun run test completed with 890 passed and 1 failed across 138 files. The only failure was src/lib/menu-open-focus.svelte.test.ts > shared menu opening focus > keeps the focused first row visually inactive when the pointer opens the menu, which exceeded its 5,000 ms test timeout. The suite duration was 364.67 seconds; Vitest reported 818.25 seconds of aggregate module transform time. The test and its expectation were not changed. I am recording this as a load-sensitive timeout for review.

Full `bun run test` completed with 890 passed and 1 failed across 138 files. The only failure was `src/lib/menu-open-focus.svelte.test.ts > shared menu opening focus > keeps the focused first row visually inactive when the pointer opens the menu`, which exceeded its 5,000 ms test timeout. The suite duration was 364.67 seconds; Vitest reported 818.25 seconds of aggregate module transform time. The test and its expectation were not changed. I am recording this as a load-sensitive timeout for review.

kayg commented

2026-09-30 06:36:32 +00:00

Author

Owner

Production e2e finding: TimeGrid renders Event and Task row keys as event:<id> and task:<id>, while Calendar's delegated itemForKey lookup only resolves date-prefixed keys. The Journal preview and editor checks pass. Double-clicking the Event row does not open Composer; the same lookup also serves hover, keyboard, touch, and context-menu actions. I am fixing lookup by stable item ID and the rendered row's data-date so repeated Task occurrences keep their own Calendar day.

Production e2e finding: TimeGrid renders Event and Task row keys as `event:<id>` and `task:<id>`, while Calendar's delegated `itemForKey` lookup only resolves date-prefixed keys. The Journal preview and editor checks pass. Double-clicking the Event row does not open Composer; the same lookup also serves hover, keyboard, touch, and context-menu actions. I am fixing lookup by stable item ID and the rendered row's `data-date` so repeated Task occurrences keep their own Calendar day.

kayg commented

2026-09-30 07:16:00 +00:00

Author

Owner

Full web-suite run after the UI fix: bun run test ran 891 tests, with 868 passing and 23 failing in 19 files. Every failure is Test timed out in 5000ms; affected files include Calendar Agenda/TimeGrid and unrelated Settings, Composer, analytics and shared UI components. The run took 762.83s while many other worktrees were running Vitest on the shared host. I will not rerun the full suite; I will report this load-sensitive result.

Full web-suite run after the UI fix: `bun run test` ran 891 tests, with 868 passing and 23 failing in 19 files. Every failure is `Test timed out in 5000ms`; affected files include Calendar Agenda/TimeGrid and unrelated Settings, Composer, analytics and shared UI components. The run took 762.83s while many other worktrees were running Vitest on the shared host. I will not rerun the full suite; I will report this load-sensitive result.

kayg commented

2026-09-30 07:19:11 +00:00

Author

Owner

The first real-server adversarial attempt was stopped by the offline OpenAPI classification preflight before any server requests: POST /api/v1/calendar/items/duplicate (calendar_duplicate_item) had no stable-ID fixture mapping. I added an explicit Journal fixture mapping for the cross-User matrix's first-enum sample; the API probe separately exercises Journal, Event and Task. XUSER_CLASSIFY_ONLY=1 python3 tests/adversarial/xuser_matrix.py now reports Cross-User classification gate: 310 operations classified.

The first real-server adversarial attempt was stopped by the offline OpenAPI classification preflight before any server requests: `POST /api/v1/calendar/items/duplicate (calendar_duplicate_item)` had no stable-ID fixture mapping. I added an explicit Journal fixture mapping for the cross-User matrix's first-enum sample; the API probe separately exercises Journal, Event and Task. `XUSER_CLASSIFY_ONLY=1 python3 tests/adversarial/xuser_matrix.py` now reports `Cross-User classification gate: 310 operations classified`.

kayg commented

2026-09-30 07:48:17 +00:00

Author

Owner

The first Duplicate-focused real-server pass found a probe defect: raw malformed payloads omitted Content-Type: application/json, so the server correctly returned 415 before JSON parsing. I am fixing the probe to send the media type and preserve 400/413/422 validation assertions. The 20-request Journal storm returned 15 responses; five clients timed out at 120 seconds while the server was under shared-host load. The Task copy returned 201 in 7.1 seconds. The first probe did not compare all persisted copies against the baseline, so it did not establish whether the five delayed writes completed. The corrected pass will check this without weakening the 20-copy persistence requirement.

The first Duplicate-focused real-server pass found a probe defect: raw malformed payloads omitted `Content-Type: application/json`, so the server correctly returned 415 before JSON parsing. I am fixing the probe to send the media type and preserve 400/413/422 validation assertions. The 20-request Journal storm returned 15 responses; five clients timed out at 120 seconds while the server was under shared-host load. The Task copy returned 201 in 7.1 seconds. The first probe did not compare all persisted copies against the baseline, so it did not establish whether the five delayed writes completed. The corrected pass will check this without weakening the 20-copy persistence requirement.

kayg commented

2026-09-30 08:03:33 +00:00

Author

Owner

#421 complete

HEAD: d71f9c1a87ad37780832e06027a3d800a35e27fd on job/preview-421.

Built

One shared Calendar preview card now serves hover, keyboard, and touch. Single click selects; double-click and Enter edit in Composer; Space and Cmd+I open the card.
The card exposes Duplicate (Cmd+D), Add attachment, and Record voice note with warm tooltips. Attachment and voice capture use the Composer picker and recorder.
Duplicate supports Journal, Event, and Task through the server API, CLI, MCP, and WebMCP. Copies keep stable identities and kind-specific Undo behavior.
Fixed delegated Calendar actions for stable DOM keys that can recur on multiple days, removed duplicate MonthGrid row keys, and regenerated the OpenAPI contract and client.
Production e2e passed. Captured the 390/820/1440 px, light/dark card matrix and 3× action-row crops. The 36 requested images are linked below; PNGs remain uncommitted in artifacts/preview-421/.

Files (68 changed)

CONTEXT.md:

CONTEXT.md

apps/web/e2e:

apps/web/e2e/calendar-preview-421.mjs, apps/web/e2e/calendar.mjs, apps/web/e2e/composer.mjs, apps/web/e2e/deeplinks.mjs, apps/web/e2e/harness.mjs, apps/web/e2e/popover-screenshots.mjs, apps/web/e2e/popovers.mjs, apps/web/e2e/shell.mjs, apps/web/e2e/webmcp.mjs

apps/web/src:

apps/web/src/lib/analytics/aggregate.ts, apps/web/src/lib/calendar/ItemPreview.svelte.test.ts, apps/web/src/lib/calendar/agenda.svelte.test.ts, apps/web/src/lib/calendar/data.test.ts, apps/web/src/lib/calendar/data.ts, apps/web/src/lib/calendar/duplicate.test.ts, apps/web/src/lib/calendar/duplicate.ts, apps/web/src/lib/calendar/journal.ts, apps/web/src/lib/components/analytics/Dashboard.svelte, apps/web/src/lib/components/search-dialog.svelte, apps/web/src/lib/composer/Composer.svelte, apps/web/src/lib/composer/Composer.svelte.test.ts, apps/web/src/lib/composer/controller.svelte.ts, apps/web/src/lib/composer/errors.ts, apps/web/src/lib/composer/recorder.svelte.ts, apps/web/src/lib/notifications/InboxPanel.svelte, apps/web/src/lib/search/SearchField.svelte, apps/web/src/lib/search/kinds.ts, apps/web/src/lib/search/providers.ts, apps/web/src/lib/search/query.ts, apps/web/src/lib/search/search-units.test.ts, apps/web/src/lib/shortcuts/registry.test.ts, apps/web/src/lib/shortcuts/registry.ts, apps/web/src/lib/webmcp/tools.test.ts, apps/web/src/lib/webmcp/tools.ts, apps/web/src/routes/calendar/[view]/[date]/+page.svelte, apps/web/src/routes/d/[date]/+page.svelte, apps/web/src/routes/settings/account/AppPasswordsGroup.svelte, apps/web/src/routes/settings/calendars/CalendarsSection.svelte, apps/web/src/routes/settings/notifications/NotificationsSection.svelte, apps/web/src/routes/settings/photos/PhotosSection.svelte, apps/web/src/routes/tag/[tag]/+page.svelte, apps/web/src/routes/tags/+page.svelte

contracts/openapi.json:

contracts/openapi.json

crates/calternal-cli/src:

crates/calternal-cli/src/main.rs, crates/calternal-cli/src/remote_commands.rs

crates/calternal-notes-core/src:

crates/calternal-notes-core/src/dayfile.rs

crates/calternal-server/src:

crates/calternal-server/src/mcp.rs

crates/plugins/calendar:

crates/plugins/calendar/src/routes.rs

crates/plugins/notes:

crates/plugins/notes/src/lib.rs

docs/DESIGN.md:

docs/DESIGN.md

docs/mcp.md:

docs/mcp.md

packages/api-client/src:

packages/api-client/src/generated.ts

packages/ui/src:

packages/ui/src/components/calendar/AgendaList.svelte, packages/ui/src/components/calendar/CalendarPopover.svelte, packages/ui/src/components/calendar/GridColumn.svelte, packages/ui/src/components/calendar/ItemPreview.svelte, packages/ui/src/components/calendar/LogEntryEditor.svelte, packages/ui/src/components/calendar/MonthGrid.svelte, packages/ui/src/components/calendar/RepairList.svelte, packages/ui/src/components/calendar/TimeGrid.svelte, packages/ui/src/components/calendar/YearHeatmap.svelte, packages/ui/src/components/calendar/model.ts, packages/ui/src/time.ts

tests/adversarial:

tests/adversarial/attack.py, tests/adversarial/mcp_probe.py, tests/adversarial/run.sh, tests/adversarial/xuser_matrix.py

Gate output

bash packages/api-client/check-generated.sh passed. Output:

Compiling calternal-plugin-analytics v0.0.1 (/home/kayg/Developer/calternal-wt/preview-421/crates/plugins/analytics)
Compiling calternal-plugin-notifications v0.0.1 (/home/kayg/Developer/calternal-wt/preview-421/crates/plugins/notifications)
Finished `dev` profile [unoptimized + debuginfo] target(s) in 16m 31s
Running `/mnt/hdd/targets/jobs/preview-421/debug/calternal-server openapi`
$ bunx --package openapi-typescript@7.13.0 openapi-typescript ../../contracts/openapi.json -o src/generated.ts
✨ openapi-typescript 7.13.0
🚀 ../../contracts/openapi.json → src/generated.ts [826.6ms]

bun run check passed:

$ node scripts/check-type-tokens.mjs && svelte-kit sync && svelte-check --tsconfig ./tsconfig.json
Text sizes use shared role tokens.
Loading svelte-check in workspace: /home/kayg/Developer/calternal-wt/preview-421/apps/web
Getting Svelte diagnostics...
svelte-check found 0 errors and 0 warnings

cargo fmt --check: exited 0 with no output.
cargo clippy -p calternal-plugin-notes --all-targets -- -D warnings: passed. cargo test -p calternal-plugin-notes: 129 passed; Apple replay integration 1 passed; doc tests 0.
cargo clippy -p calternal-plugin-calendar --all-targets -- -D warnings: passed. cargo test -p calternal-plugin-calendar: 53 unit, 1 cache integration, and 3 protocol integration tests passed.
cargo test -p calternal-cli: passed, 28 unit and 15 output-contract tests. CLI clippy also passed.
cargo clippy -p calternal-server --all-targets -- -D warnings: passed. cargo test -p calternal-server ended with 86 passed; 1 failed; 2 ignored; the sole failure was wire::tests::live_apps_run_in_separate_processes, whose nested archive cleanup hit its existing 5-second timeout (Elapsed(())). I did not change its expectation.
Full bun run test output:
```
 Test Files  19 failed | 119 passed (138)
      Tests  23 failed | 868 passed (891)
   Duration  762.83s
error: script "test" exited with code 1
```
All 23 failures were five-second test timeouts in 19 files, including Calendar Agenda/TimeGrid and unrelated Settings, Composer, analytics, and shared components, under heavy shared-host load. This run was not repeated.

Production bun run build passed. CALTERNAL_SERVER_BIN=... bun e2e/calendar-preview-421.mjs ended with:

Calendar preview 421 passed; screenshots saved in /home/kayg/Developer/calternal-wt/preview-421/artifacts/preview-421

Focused real-server Duplicate adversarial round exited 0:

Cross-User classification gate: 310 operations classified
API probe target: backend 127.0.0.1:62961
Calendar duplicate concurrency: 20/20 distinct Journal copies persisted; 0 slow responses
!! Calendar duplicate Task source: SLOW 16.6s status 201
!! Calendar duplicate Task: SLOW 10.2s status 201
==== Calendar Duplicate findings 2

Hostile malformed, traversal, Unicode, control-character, oversized-ID, and oversized-body requests were rejected; the cross-User copy was denied. The two SLOW responses are load observations; there were no blocking findings.

cargo clean ran, and apps/web/build plus apps/web/.svelte-kit/output were removed.

Known gaps

The server live-app timeout and the 23 web-suite timeouts remain load-sensitive gate failures for review; no assertions were changed.
The final adversarial pass focused on Duplicate; the broad unrelated API/MCP campaign was not run to completion. Journal/Task copies were exercised by the focused pass, and all three kinds were exercised with Undo in production e2e.

Decisions outside DESIGN

DESIGN specifies stable item identities but not how a stable Task ID repeated across displayed dates maps back to the chosen occurrence. Delegated actions use the closest row data-date as the occurrence context; identity remains stable and date-free.
The shared recorder starts synchronously from the card button gesture before the lazy Composer surface mounts, so microphone permission remains tied to the user action. The native attachment picker also opens directly from that gesture.

Screenshots

Journal card and action crops

Event card and action crops

Task card and action crops

#421 complete **HEAD:** `d71f9c1a87ad37780832e06027a3d800a35e27fd` on `job/preview-421`. ## Built - One shared Calendar preview card now serves hover, keyboard, and touch. Single click selects; double-click and Enter edit in Composer; Space and Cmd+I open the card. - The card exposes Duplicate (Cmd+D), Add attachment, and Record voice note with warm tooltips. Attachment and voice capture use the Composer picker and recorder. - Duplicate supports Journal, Event, and Task through the server API, CLI, MCP, and WebMCP. Copies keep stable identities and kind-specific Undo behavior. - Fixed delegated Calendar actions for stable DOM keys that can recur on multiple days, removed duplicate MonthGrid row keys, and regenerated the OpenAPI contract and client. - Production e2e passed. Captured the 390/820/1440 px, light/dark card matrix and 3× action-row crops. The 36 requested images are linked below; PNGs remain uncommitted in `artifacts/preview-421/`. ## Files (68 changed) **CONTEXT.md:** `CONTEXT.md` **apps/web/e2e:** `apps/web/e2e/calendar-preview-421.mjs`, `apps/web/e2e/calendar.mjs`, `apps/web/e2e/composer.mjs`, `apps/web/e2e/deeplinks.mjs`, `apps/web/e2e/harness.mjs`, `apps/web/e2e/popover-screenshots.mjs`, `apps/web/e2e/popovers.mjs`, `apps/web/e2e/shell.mjs`, `apps/web/e2e/webmcp.mjs` **apps/web/src:** `apps/web/src/lib/analytics/aggregate.ts`, `apps/web/src/lib/calendar/ItemPreview.svelte.test.ts`, `apps/web/src/lib/calendar/agenda.svelte.test.ts`, `apps/web/src/lib/calendar/data.test.ts`, `apps/web/src/lib/calendar/data.ts`, `apps/web/src/lib/calendar/duplicate.test.ts`, `apps/web/src/lib/calendar/duplicate.ts`, `apps/web/src/lib/calendar/journal.ts`, `apps/web/src/lib/components/analytics/Dashboard.svelte`, `apps/web/src/lib/components/search-dialog.svelte`, `apps/web/src/lib/composer/Composer.svelte`, `apps/web/src/lib/composer/Composer.svelte.test.ts`, `apps/web/src/lib/composer/controller.svelte.ts`, `apps/web/src/lib/composer/errors.ts`, `apps/web/src/lib/composer/recorder.svelte.ts`, `apps/web/src/lib/notifications/InboxPanel.svelte`, `apps/web/src/lib/search/SearchField.svelte`, `apps/web/src/lib/search/kinds.ts`, `apps/web/src/lib/search/providers.ts`, `apps/web/src/lib/search/query.ts`, `apps/web/src/lib/search/search-units.test.ts`, `apps/web/src/lib/shortcuts/registry.test.ts`, `apps/web/src/lib/shortcuts/registry.ts`, `apps/web/src/lib/webmcp/tools.test.ts`, `apps/web/src/lib/webmcp/tools.ts`, `apps/web/src/routes/calendar/[view]/[date]/+page.svelte`, `apps/web/src/routes/d/[date]/+page.svelte`, `apps/web/src/routes/settings/account/AppPasswordsGroup.svelte`, `apps/web/src/routes/settings/calendars/CalendarsSection.svelte`, `apps/web/src/routes/settings/notifications/NotificationsSection.svelte`, `apps/web/src/routes/settings/photos/PhotosSection.svelte`, `apps/web/src/routes/tag/[tag]/+page.svelte`, `apps/web/src/routes/tags/+page.svelte` **contracts/openapi.json:** `contracts/openapi.json` **crates/calternal-cli/src:** `crates/calternal-cli/src/main.rs`, `crates/calternal-cli/src/remote_commands.rs` **crates/calternal-notes-core/src:** `crates/calternal-notes-core/src/dayfile.rs` **crates/calternal-server/src:** `crates/calternal-server/src/mcp.rs` **crates/plugins/calendar:** `crates/plugins/calendar/src/routes.rs` **crates/plugins/notes:** `crates/plugins/notes/src/lib.rs` **docs/DESIGN.md:** `docs/DESIGN.md` **docs/mcp.md:** `docs/mcp.md` **packages/api-client/src:** `packages/api-client/src/generated.ts` **packages/ui/src:** `packages/ui/src/components/calendar/AgendaList.svelte`, `packages/ui/src/components/calendar/CalendarPopover.svelte`, `packages/ui/src/components/calendar/GridColumn.svelte`, `packages/ui/src/components/calendar/ItemPreview.svelte`, `packages/ui/src/components/calendar/LogEntryEditor.svelte`, `packages/ui/src/components/calendar/MonthGrid.svelte`, `packages/ui/src/components/calendar/RepairList.svelte`, `packages/ui/src/components/calendar/TimeGrid.svelte`, `packages/ui/src/components/calendar/YearHeatmap.svelte`, `packages/ui/src/components/calendar/model.ts`, `packages/ui/src/time.ts` **tests/adversarial:** `tests/adversarial/attack.py`, `tests/adversarial/mcp_probe.py`, `tests/adversarial/run.sh`, `tests/adversarial/xuser_matrix.py` ## Gate output - `bash packages/api-client/check-generated.sh` passed. Output: ```text Compiling calternal-plugin-analytics v0.0.1 (/home/kayg/Developer/calternal-wt/preview-421/crates/plugins/analytics) Compiling calternal-plugin-notifications v0.0.1 (/home/kayg/Developer/calternal-wt/preview-421/crates/plugins/notifications) Finished `dev` profile [unoptimized + debuginfo] target(s) in 16m 31s Running `/mnt/hdd/targets/jobs/preview-421/debug/calternal-server openapi` $ bunx --package openapi-typescript@7.13.0 openapi-typescript ../../contracts/openapi.json -o src/generated.ts ✨ openapi-typescript 7.13.0 🚀 ../../contracts/openapi.json → src/generated.ts [826.6ms] ``` - `bun run check` passed: ```text $ node scripts/check-type-tokens.mjs && svelte-kit sync && svelte-check --tsconfig ./tsconfig.json Text sizes use shared role tokens. Loading svelte-check in workspace: /home/kayg/Developer/calternal-wt/preview-421/apps/web Getting Svelte diagnostics... svelte-check found 0 errors and 0 warnings ``` - `cargo fmt --check`: exited 0 with no output. - `cargo clippy -p calternal-plugin-notes --all-targets -- -D warnings`: passed. `cargo test -p calternal-plugin-notes`: 129 passed; Apple replay integration 1 passed; doc tests 0. - `cargo clippy -p calternal-plugin-calendar --all-targets -- -D warnings`: passed. `cargo test -p calternal-plugin-calendar`: 53 unit, 1 cache integration, and 3 protocol integration tests passed. - `cargo test -p calternal-cli`: passed, 28 unit and 15 output-contract tests. CLI clippy also passed. - `cargo clippy -p calternal-server --all-targets -- -D warnings`: passed. `cargo test -p calternal-server` ended with `86 passed; 1 failed; 2 ignored`; the sole failure was `wire::tests::live_apps_run_in_separate_processes`, whose nested archive cleanup hit its existing 5-second timeout (`Elapsed(())`). I did not change its expectation. - Full `bun run test` output: ```text Test Files 19 failed | 119 passed (138) Tests 23 failed | 868 passed (891) Duration 762.83s error: script "test" exited with code 1 ``` All 23 failures were five-second test timeouts in 19 files, including Calendar Agenda/TimeGrid and unrelated Settings, Composer, analytics, and shared components, under heavy shared-host load. This run was not repeated. - Production `bun run build` passed. `CALTERNAL_SERVER_BIN=... bun e2e/calendar-preview-421.mjs` ended with: ```text Calendar preview 421 passed; screenshots saved in /home/kayg/Developer/calternal-wt/preview-421/artifacts/preview-421 ``` - Focused real-server Duplicate adversarial round exited 0: ```text Cross-User classification gate: 310 operations classified API probe target: backend 127.0.0.1:62961 Calendar duplicate concurrency: 20/20 distinct Journal copies persisted; 0 slow responses !! Calendar duplicate Task source: SLOW 16.6s status 201 !! Calendar duplicate Task: SLOW 10.2s status 201 ==== Calendar Duplicate findings 2 ``` Hostile malformed, traversal, Unicode, control-character, oversized-ID, and oversized-body requests were rejected; the cross-User copy was denied. The two SLOW responses are load observations; there were no blocking findings. - `cargo clean` ran, and `apps/web/build` plus `apps/web/.svelte-kit/output` were removed. ## Known gaps - The server live-app timeout and the 23 web-suite timeouts remain load-sensitive gate failures for review; no assertions were changed. - The final adversarial pass focused on Duplicate; the broad unrelated API/MCP campaign was not run to completion. Journal/Task copies were exercised by the focused pass, and all three kinds were exercised with Undo in production e2e. ## Decisions outside DESIGN - DESIGN specifies stable item identities but not how a stable Task ID repeated across displayed dates maps back to the chosen occurrence. Delegated actions use the closest row `data-date` as the occurrence context; identity remains stable and date-free. - The shared recorder starts synchronously from the card button gesture before the lazy Composer surface mounts, so microphone permission remains tied to the user action. The native attachment picker also opens directly from that gesture. ## Screenshots ### Journal card and action crops - [390px light card](https://git.kayg.org/attachments/101d785c-f1cc-4318-9c7a-2fb4f141b94b) · [3× action-row crop](https://git.kayg.org/attachments/959188a5-1371-4f9d-ab5b-22a0aa0d879e) - [390px dark card](https://git.kayg.org/attachments/8db519c1-4b22-4053-bb00-b1bca4e76a62) · [3× action-row crop](https://git.kayg.org/attachments/2c423a2d-a8bb-4a04-911e-300954edeeae) - [820px light card](https://git.kayg.org/attachments/7acbaf33-94dc-4dc8-8858-0e2b45e18152) · [3× action-row crop](https://git.kayg.org/attachments/4815e20a-f70b-497c-9f8f-10b92b96ebdf) - [820px dark card](https://git.kayg.org/attachments/7c46ad5a-d4d1-4e31-bbae-41f5fc4c9112) · [3× action-row crop](https://git.kayg.org/attachments/02a8c758-54a9-4b0b-89d2-33b9362dfe64) - [1440px light card](https://git.kayg.org/attachments/d3ca2c76-47d6-4b4e-a977-1d2d6210bb3d) · [3× action-row crop](https://git.kayg.org/attachments/3f894e70-83a8-478b-b956-48905621129a) - [1440px dark card](https://git.kayg.org/attachments/89f0411d-384a-47eb-b9ee-b000a8d18211) · [3× action-row crop](https://git.kayg.org/attachments/d5d2b029-506b-44bc-943a-1a8cb281f547) ### Event card and action crops - [390px light card](https://git.kayg.org/attachments/82036c3f-4f35-40fb-b8c5-7b3433a204a7) · [3× action-row crop](https://git.kayg.org/attachments/d2c90237-eba2-4807-92aa-84a671a7087d) - [390px dark card](https://git.kayg.org/attachments/5c7176f0-686c-487b-b515-af6d2b76fa59) · [3× action-row crop](https://git.kayg.org/attachments/a511aa7a-441d-460b-bd60-8ecbaf464032) - [820px light card](https://git.kayg.org/attachments/128a7221-b8cd-4a00-b28c-3542e476fc4b) · [3× action-row crop](https://git.kayg.org/attachments/3c7e30ec-8beb-4762-9667-8932877ca98f) - [820px dark card](https://git.kayg.org/attachments/af4bab47-8c48-4166-af1c-fbaf30080577) · [3× action-row crop](https://git.kayg.org/attachments/08c07945-8bfd-485c-89b3-63e2fb65e826) - [1440px light card](https://git.kayg.org/attachments/3e6eef0d-113b-437d-b3e6-0ce02bd5fb42) · [3× action-row crop](https://git.kayg.org/attachments/8c8a68ee-89ab-4ef5-a0b5-472a7a084e02) - [1440px dark card](https://git.kayg.org/attachments/f6c08390-b57b-4f78-8e74-82b88917d6ec) · [3× action-row crop](https://git.kayg.org/attachments/16ec8fa2-6f2d-4d48-9b01-cf45fb049eed) ### Task card and action crops - [390px light card](https://git.kayg.org/attachments/e24aaacf-6bdd-4bec-9c96-29c9eb254e6f) · [3× action-row crop](https://git.kayg.org/attachments/87672f0a-c07a-45c2-9716-92ddee0a88f6) - [390px dark card](https://git.kayg.org/attachments/68fe6e53-de2e-4a80-9143-ca1b731211c0) · [3× action-row crop](https://git.kayg.org/attachments/569a13d2-4f19-49e1-af6b-15362745158d) - [820px light card](https://git.kayg.org/attachments/e9cbded5-69d2-4088-9bb4-e0e121f311c6) · [3× action-row crop](https://git.kayg.org/attachments/0f332dcb-028e-4ac3-a1d1-90c93c881a3a) - [820px dark card](https://git.kayg.org/attachments/d7ab19a3-c5f6-48d0-a824-17fab144969e) · [3× action-row crop](https://git.kayg.org/attachments/6c8d9e82-9ebe-4ee0-b09b-3153788ad970) - [1440px light card](https://git.kayg.org/attachments/d8cca612-d702-4775-bbf7-c0e2a529848b) · [3× action-row crop](https://git.kayg.org/attachments/8a6f5fbe-2d10-4a77-bd6b-983df177ba26) - [1440px dark card](https://git.kayg.org/attachments/a62067cc-13db-4b3c-9776-1c40d857cb02) · [3× action-row crop](https://git.kayg.org/attachments/2ff96768-f56a-4360-a55a-7ee5bdd8b717)

kayg commented

2026-09-30 13:12:06 +00:00

Author

Owner

Resuming review fixes on job/preview-421 at d71f9c1a87ad37780832e06027a3d800a35e27fd. The previous #421 report and requested scope are read. I am fixing Tag rendering in Calendar preview titles, then I will rerun the requested web suite and isolated timeouts, the live-app test, merge the current origin/dev, and recapture the requested production screenshots.

Resuming review fixes on `job/preview-421` at `d71f9c1a87ad37780832e06027a3d800a35e27fd`. The previous #421 report and requested scope are read. I am fixing Tag rendering in Calendar preview titles, then I will rerun the requested web suite and isolated timeouts, the live-app test, merge the current `origin/dev`, and recapture the requested production screenshots.

kayg commented

2026-09-30 13:30:55 +00:00

Author

Owner

Finding: ItemPreview.svelte rendered each Event, Journal and Task title as a plain string. Event summaries can carry literal #tag tokens even when the provider has no matching CATEGORIES value, so the existing metadata chips did not cover this case. Commit 715b2a20a splits title tokens with the core Tag grammar, renders them with shared TagPill, and filters matching metadata Tags to keep one chip. The focused preview test passed (8/8), and bun run check reported 0 errors and 0 warnings.

Decision: title token rendering mirrors calternal-notes-core::extract_tags for display only. The source title stays unchanged; the metadata row omits a Tag already shown in the title.

Finding: `ItemPreview.svelte` rendered each Event, Journal and Task title as a plain string. Event summaries can carry literal `#tag` tokens even when the provider has no matching CATEGORIES value, so the existing metadata chips did not cover this case. Commit `715b2a20a` splits title tokens with the core Tag grammar, renders them with shared `TagPill`, and filters matching metadata Tags to keep one chip. The focused preview test passed (8/8), and `bun run check` reported 0 errors and 0 warnings. Decision: title token rendering mirrors `calternal-notes-core::extract_tags` for display only. The source title stays unchanged; the metadata row omits a Tag already shown in the title.

kayg commented

2026-09-30 13:41:38 +00:00

Author

Owner

Finding after merging origin/dev: #473 expanded core Tag names to Unicode letters, numbers and combining marks with NFC normalization. The first #421 display matcher still used the earlier ASCII form, so it could leave a Unicode Tag raw or render it twice when the stored Tag was NFC. Updated the title renderer to match the merged grammar and normalize display tokens. Evidence: the new decomposed #é plus #作業 preview regression passes; focused preview tests pass (9/9), and bun run check reports 0 errors and 0 warnings.

Finding after merging `origin/dev`: #473 expanded core Tag names to Unicode letters, numbers and combining marks with NFC normalization. The first #421 display matcher still used the earlier ASCII form, so it could leave a Unicode Tag raw or render it twice when the stored Tag was NFC. Updated the title renderer to match the merged grammar and normalize display tokens. Evidence: the new decomposed `#é` plus `#作業` preview regression passes; focused preview tests pass (9/9), and `bun run check` reports 0 errors and 0 warnings.

kayg commented

2026-09-30 14:02:20 +00:00

Author

Owner

Owner (2026-09-30, screenshot on calternal.cloud, week view at a mid desktop width):

"the hover preview doesn't appear right next to the cursor at this width?" The card opened far to the right of the hovered block (a column away). Rule: the hover card opens anchored next to the pointer / hovered item at EVERY width (just below-right of the cursor, flipping to stay in the viewport, never more than a small gap from the item), the same placement logic as the Analytics tooltip (#504).
"hover and click actions — we discussed it yesterday to be different": yes, this issue's interaction model (hover shows the card; click selects with no card; double-click edits in the composer; Enter edits; Space/Cmd+I shows the card). It is built on job/preview-421 but NOT merged yet. The live site still shows the old behaviour and the old "Log entry" label (should be Journal), and has no Duplicate action.
"can we not raise/scale the item card a little more when hovered on that item?" The hovered calendar item gets a clear lift: a slightly larger scale and elevation with the #236/#291 spring (motion tokens, reduced-motion fallback), without shifting the layout of neighbours.
These three join the current preview-421 round before merge.

**Owner (2026-09-30, screenshot on calternal.cloud, week view at a mid desktop width):** 1. "the hover preview doesn't appear right next to the cursor at this width?" The card opened far to the right of the hovered block (a column away). Rule: the hover card opens anchored next to the pointer / hovered item at EVERY width (just below-right of the cursor, flipping to stay in the viewport, never more than a small gap from the item), the same placement logic as the Analytics tooltip (#504). 2. "hover and click actions — we discussed it yesterday to be different": yes, this issue's interaction model (hover shows the card; click selects with no card; double-click edits in the composer; Enter edits; Space/Cmd+I shows the card). It is built on job/preview-421 but NOT merged yet. The live site still shows the old behaviour and the old "Log entry" label (should be **Journal**), and has no Duplicate action. 3. "can we not raise/scale the item card a little more when hovered on that item?" The hovered calendar item gets a clear lift: a slightly larger scale and elevation with the #236/#291 spring (motion tokens, reduced-motion fallback), without shifting the layout of neighbours. These three join the current preview-421 round before merge.

kayg commented

2026-09-30 16:19:08 +00:00

Author

Owner

Adversarial finding: the API-focused real-server round exited nonzero during tag rename across sources (POST /api/v1/tags/rename). The request lost its connection; the server then refused all later probes, and the runner reported the server process as Aborted. Earlier probes included SLOW responses under host load. The runner removed its temporary server log on exit, so I am investigating with a focused reproduction before classifying or changing anything.

Adversarial finding: the API-focused real-server round exited nonzero during `tag rename across sources` (`POST /api/v1/tags/rename`). The request lost its connection; the server then refused all later probes, and the runner reported the server process as `Aborted`. Earlier probes included SLOW responses under host load. The runner removed its temporary server log on exit, so I am investigating with a focused reproduction before classifying or changing anything.

kayg commented

2026-09-30 16:55:25 +00:00

Author

Owner

Additional adversarial finding: the block reminder spam create 11 request timed out while preparing the 127-write limit probe. The server stayed live and the run continued; other requests in the round were marked SLOW during high shared-host load. I filed #533 as a follow-up to reproduce the reminder timeout on a quieter host. The test round was not repeated.

Additional adversarial finding: the `block reminder spam create 11` request timed out while preparing the 127-write limit probe. The server stayed live and the run continued; other requests in the round were marked SLOW during high shared-host load. I filed #533 as a follow-up to reproduce the reminder timeout on a quieter host. The test round was not repeated.

kayg commented

2026-09-30 17:00:11 +00:00

Author

Owner

preview-421 final report

Built

Calendar preview titles now render inline Tags as the shared compact TagPill chips for Journal, Event, and Task cards. A Tag shown in the title no longer appears a second time in the metadata row. The renderer leaves the source title unchanged, follows the shared Unicode Tag grammar, and normalizes tokens to NFC before matching metadata.

The origin/dev merge includes the current #436 glass and #482 header updates. I kept both the #421 selected-preview helper and the incoming #508 header matrix in apps/web/e2e/calendar.mjs. The OpenAPI generator check passed and produced no additional contract diff.

Files

packages/ui/src/tags.ts
packages/ui/src/components/calendar/ItemPreview.svelte
apps/web/src/lib/calendar/ItemPreview.svelte.test.ts
apps/web/e2e/calendar-preview-421.mjs
apps/web/e2e/calendar.mjs (merge conflict resolution)

Commits

Merge 7f0f6ecea — include current dev glass and header updates
715b2a20a — render preview title Tags as chips
04ed72ec9 — match Unicode Tags in preview titles
3a50ed3a4809232cb0ce8302dfc077dfa91579cb — document preview Tag assertions

Gate output

cargo fmt --check exited 0 with empty stdout and stderr.

cargo clippy -p calternal-server --all-targets -- -D warnings:

Finished `dev` profile [unoptimized + debuginfo] target(s) in 47m 04s

cargo test -p calternal-server:

Finished `test` profile [unoptimized + debuginfo] target(s) in 12m 02s
running 89 tests
test result: ok. 87 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 49.66s

cargo test -p calternal-tags:

test result: ok. 11 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 6.57s

cargo test -p calternal-server wire::tests::live_apps_run_in_separate_processes -- --exact:

test wire::tests::live_apps_run_in_separate_processes ... ok
test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 88 filtered out; finished in 20.69s

bun run check:

Text sizes and UI shape values use shared role tokens.
Loading svelte-check in workspace: /home/kayg/Developer/calternal-wt/preview-421/apps/web
Getting Svelte diagnostics...
svelte-check found 0 errors and 0 warnings

The required single full bun run test rerun passed:

Test Files  139 passed (139)
      Tests  917 passed (917)
   Start at  17:02:28
   Duration  171.06s (transform 65%, import 13%, environment 13%, tests 6%, setup 3%)

The focused preview test passed after the test comment update:

Test Files  1 passed (1)
      Tests  9 passed (9)
   Start at  18:43:04
   Duration  66.04s (transform 52%, environment 42%, tests 2%, import 2%, setup 1%)

Production build output ended with:

✓ built in 40.80s

The production E2E run passed and captured Journal, Event, and Task cards and action-row crops at 390px, 820px, and 1440px in both themes. The OpenAPI check output was:

Finished `dev` profile [unoptimized + debuginfo] target(s) in 42m 29s
Running `/mnt/hdd/targets/jobs/preview-421/debug/calternal-server openapi`
$ bunx --package openapi-typescript@7.13.0 openapi-typescript ../../contracts/openapi.json -o src/generated.ts
✨ openapi-typescript 7.13.0
🚀 ../../contracts/openapi.json → src/generated.ts [1.1s]

Cleanup output:

Removed 14231 files, 7.5GiB total
Removed apps/web/build
Removed apps/web/.svelte-kit/output

Adversarial findings and known gaps

The one API-focused adversarial round exited nonzero. The minimal live-server reproduction confirmed a separate crash in the merged Tag rename route. The server log said:

thread 'tokio-rt-worker' (1678875) has overflowed its stack
fatal runtime error: stack overflow, aborting

I filed this as #532. The existing probe already covers the endpoint. calternal-tags unit tests pass, but they do not cover this live-server crash. This remains a merge blocker in the merged API code and is outside the preview UI files listed above.

The same adversarial run timed out on block reminder spam create 11 while preparing 127 writes. The server stayed up, and other requests were marked SLOW under shared-host load. I filed #533 for an isolated follow-up; I did not repeat the adversarial round.

No dedicated bench profile or new performance numbers were added for this render-only correction. The existing Calendar preview open/close traces are in docs/perf/animation-review-2026-09-29.md.

Decisions not covered by DESIGN

Split and render title Tags at display time. Do not change source titles or stable item identities.
Use the shared TagPill component and remove matching title Tags from the second metadata row.
Mirror the core Unicode Tag grammar and NFC normalization so display tokens match stored Tag values.
Keep the unrelated server findings in separate issues instead of changing another crate as part of this preview UI fix.

Screenshots

The attached files are production screenshots. Each cell links to the card and its 3x action-row crop.

Journal

390px · light: card actions · dark: card actions
820px · light: card actions · dark: card actions
1440px · light: card actions · dark: card actions

Event

390px · light: card actions · dark: card actions
820px · light: card actions · dark: card actions
1440px · light: card actions · dark: card actions

Task

390px · light: card actions · dark: card actions
820px · light: card actions · dark: card actions
1440px · light: card actions · dark: card actions

## preview-421 final report ### Built Calendar preview titles now render inline Tags as the shared compact `TagPill` chips for Journal, Event, and Task cards. A Tag shown in the title no longer appears a second time in the metadata row. The renderer leaves the source title unchanged, follows the shared Unicode Tag grammar, and normalizes tokens to NFC before matching metadata. The `origin/dev` merge includes the current #436 glass and #482 header updates. I kept both the #421 selected-preview helper and the incoming #508 header matrix in `apps/web/e2e/calendar.mjs`. The OpenAPI generator check passed and produced no additional contract diff. ### Files - `packages/ui/src/tags.ts` - `packages/ui/src/components/calendar/ItemPreview.svelte` - `apps/web/src/lib/calendar/ItemPreview.svelte.test.ts` - `apps/web/e2e/calendar-preview-421.mjs` - `apps/web/e2e/calendar.mjs` (merge conflict resolution) ### Commits - Merge `7f0f6ecea` — include current dev glass and header updates - `715b2a20a` — render preview title Tags as chips - `04ed72ec9` — match Unicode Tags in preview titles - `3a50ed3a4809232cb0ce8302dfc077dfa91579cb` — document preview Tag assertions ### Gate output `cargo fmt --check` exited 0 with empty stdout and stderr. `cargo clippy -p calternal-server --all-targets -- -D warnings`: ```text Finished `dev` profile [unoptimized + debuginfo] target(s) in 47m 04s ``` `cargo test -p calternal-server`: ```text Finished `test` profile [unoptimized + debuginfo] target(s) in 12m 02s running 89 tests test result: ok. 87 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 49.66s ``` `cargo test -p calternal-tags`: ```text test result: ok. 11 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 6.57s ``` `cargo test -p calternal-server wire::tests::live_apps_run_in_separate_processes -- --exact`: ```text test wire::tests::live_apps_run_in_separate_processes ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 88 filtered out; finished in 20.69s ``` `bun run check`: ```text Text sizes and UI shape values use shared role tokens. Loading svelte-check in workspace: /home/kayg/Developer/calternal-wt/preview-421/apps/web Getting Svelte diagnostics... svelte-check found 0 errors and 0 warnings ``` The required single full `bun run test` rerun passed: ```text Test Files 139 passed (139) Tests 917 passed (917) Start at 17:02:28 Duration 171.06s (transform 65%, import 13%, environment 13%, tests 6%, setup 3%) ``` The focused preview test passed after the test comment update: ```text Test Files 1 passed (1) Tests 9 passed (9) Start at 18:43:04 Duration 66.04s (transform 52%, environment 42%, tests 2%, import 2%, setup 1%) ``` Production build output ended with: ```text ✓ built in 40.80s ``` The production E2E run passed and captured Journal, Event, and Task cards and action-row crops at 390px, 820px, and 1440px in both themes. The OpenAPI check output was: ```text Finished `dev` profile [unoptimized + debuginfo] target(s) in 42m 29s Running `/mnt/hdd/targets/jobs/preview-421/debug/calternal-server openapi` $ bunx --package openapi-typescript@7.13.0 openapi-typescript ../../contracts/openapi.json -o src/generated.ts ✨ openapi-typescript 7.13.0 🚀 ../../contracts/openapi.json → src/generated.ts [1.1s] ``` Cleanup output: ```text Removed 14231 files, 7.5GiB total Removed apps/web/build Removed apps/web/.svelte-kit/output ``` ### Adversarial findings and known gaps The one API-focused adversarial round exited nonzero. The minimal live-server reproduction confirmed a separate crash in the merged Tag rename route. The server log said: ```text thread 'tokio-rt-worker' (1678875) has overflowed its stack fatal runtime error: stack overflow, aborting ``` I filed this as [#532](https://git.kayg.org/kayg/calternal/issues/532). The existing probe already covers the endpoint. `calternal-tags` unit tests pass, but they do not cover this live-server crash. This remains a merge blocker in the merged API code and is outside the preview UI files listed above. The same adversarial run timed out on `block reminder spam create 11` while preparing 127 writes. The server stayed up, and other requests were marked SLOW under shared-host load. I filed [#533](https://git.kayg.org/kayg/calternal/issues/533) for an isolated follow-up; I did not repeat the adversarial round. No dedicated bench profile or new performance numbers were added for this render-only correction. The existing Calendar preview open/close traces are in `docs/perf/animation-review-2026-09-29.md`. ### Decisions not covered by DESIGN - Split and render title Tags at display time. Do not change source titles or stable item identities. - Use the shared `TagPill` component and remove matching title Tags from the second metadata row. - Mirror the core Unicode Tag grammar and NFC normalization so display tokens match stored Tag values. - Keep the unrelated server findings in separate issues instead of changing another crate as part of this preview UI fix. ### Screenshots The attached files are production screenshots. Each cell links to the card and its 3x action-row crop. ### Journal - 390px · light: [card](https://git.kayg.org/attachments/f1f7d512-fdcc-48d3-aec9-2c6863e6587d) [actions](https://git.kayg.org/attachments/5a6b8919-7556-4ba0-a7fc-cf4e76367b12) · dark: [card](https://git.kayg.org/attachments/bf2347f6-b542-4f54-ba96-fd5f0165f16b) [actions](https://git.kayg.org/attachments/d292df9c-4a48-4094-beab-8b489e916a16) - 820px · light: [card](https://git.kayg.org/attachments/fd55ae1b-de5c-4948-bf96-c16814e8fb3e) [actions](https://git.kayg.org/attachments/d7de4104-4d9a-4fbb-b146-70b87cb35226) · dark: [card](https://git.kayg.org/attachments/97e256a3-ff2b-4c7c-96b0-43ffa0760543) [actions](https://git.kayg.org/attachments/c9c5f2d7-63ff-4451-a966-57eee65a6d69) - 1440px · light: [card](https://git.kayg.org/attachments/649ee032-d743-4beb-8bed-d2bf5faa245f) [actions](https://git.kayg.org/attachments/83ba827d-b7e8-4d68-83d2-6d1e31903a07) · dark: [card](https://git.kayg.org/attachments/45b0aee8-01c0-438c-9f4d-b3d09be92262) [actions](https://git.kayg.org/attachments/10251a1e-5f87-42d3-ae44-527156f2df14) ### Event - 390px · light: [card](https://git.kayg.org/attachments/3d8cf55e-9b34-432e-9997-240ad3c6e845) [actions](https://git.kayg.org/attachments/46442a65-42eb-42bf-8cd6-438206510464) · dark: [card](https://git.kayg.org/attachments/9f4cebc0-e642-4a9f-81c7-090a6b7e8b9a) [actions](https://git.kayg.org/attachments/c67f9634-88a9-485c-8610-1085ab614d33) - 820px · light: [card](https://git.kayg.org/attachments/84c45f15-329a-4cb6-b800-9c2b324952c0) [actions](https://git.kayg.org/attachments/0ba0d66b-f84d-499e-bec7-d8471cf41467) · dark: [card](https://git.kayg.org/attachments/7bda3622-9f7f-4e7b-931c-6df5840d2c5a) [actions](https://git.kayg.org/attachments/87609202-88c6-4ff8-ab1b-3f099e533016) - 1440px · light: [card](https://git.kayg.org/attachments/11b92126-a7d9-4417-8c24-339d268be24a) [actions](https://git.kayg.org/attachments/d1401cee-a617-4ca0-9a98-16b22c3f5fe4) · dark: [card](https://git.kayg.org/attachments/008d86fd-9359-4f52-8c38-85cf6344b678) [actions](https://git.kayg.org/attachments/1ea55db5-f189-4fc2-b0ff-e5c3f8922bc7) ### Task - 390px · light: [card](https://git.kayg.org/attachments/492ed8c0-b9f1-4cfd-98b3-7621e78a158b) [actions](https://git.kayg.org/attachments/110c7d1d-e0bf-4f06-ad9b-f45debe869c0) · dark: [card](https://git.kayg.org/attachments/a9ce62db-5f00-4d02-8ebf-0250dbc43182) [actions](https://git.kayg.org/attachments/f97cfa97-acb4-41f2-b6a6-44c372b186a2) - 820px · light: [card](https://git.kayg.org/attachments/209ceb44-4331-48b5-88c3-3ebfc196b39c) [actions](https://git.kayg.org/attachments/279031a9-2bc6-4d98-b068-d0ca6911cefb) · dark: [card](https://git.kayg.org/attachments/78c8c29d-cc0d-4616-90c1-862d93073dcd) [actions](https://git.kayg.org/attachments/88e90c12-a92b-4173-b07c-c3922ea9db9f) - 1440px · light: [card](https://git.kayg.org/attachments/05f150c4-af40-453e-85ff-ddf12b8a1732) [actions](https://git.kayg.org/attachments/60a393bb-bf13-46f6-b742-b120bb41e4bf) · dark: [card](https://git.kayg.org/attachments/c1f4535b-993e-4670-aace-8deb504527b6) [actions](https://git.kayg.org/attachments/a02998f7-5f38-4f5b-be27-479a38d8bb2b)

kayg commented

2026-09-30 17:06:33 +00:00

Author

Owner

Correction to the previous report: the “no dedicated bench profile” statement is superseded. I added and ran bench/calendar-preview-tags-421.mjs in commit 26fbc2ece2a979eda8e360e65e3d466c9fc50d1b.

Local parser profile (100,000 calls per workload):

typical-title: 18 chars, 1 Tag; p50 0.000358 ms/call, p95 0.003214 ms/call; CPU 56.884 ms (67.1%); RSS 19,025,920 → 40,484,864 bytes
unicode-32-tag-burst: 400 chars, 32 Tags; p50 0.010793 ms/call, p95 0.018882 ms/call; CPU 1,121.267 ms (89.7%); RSS 41,848,832 → 44,732,416 bytes

This is a local function profile for the new splitInlineTags hot path. docs/perf/baseline.json has no matching parser profile. The closest existing Calendar preview baseline is the 2026-09-29 animation review (calendar-preview-open: rAF 133.3/116.8 ms and trace 320.6/349.8 ms); those whole-interaction metrics are not directly comparable to parser latency.

Updated HEAD: 26fbc2ece2a979eda8e360e65e3d466c9fc50d1b.

Correction to the previous report: the “no dedicated bench profile” statement is superseded. I added and ran `bench/calendar-preview-tags-421.mjs` in commit `26fbc2ece2a979eda8e360e65e3d466c9fc50d1b`. Local parser profile (100,000 calls per workload): ```text typical-title: 18 chars, 1 Tag; p50 0.000358 ms/call, p95 0.003214 ms/call; CPU 56.884 ms (67.1%); RSS 19,025,920 → 40,484,864 bytes unicode-32-tag-burst: 400 chars, 32 Tags; p50 0.010793 ms/call, p95 0.018882 ms/call; CPU 1,121.267 ms (89.7%); RSS 41,848,832 → 44,732,416 bytes ``` This is a local function profile for the new `splitInlineTags` hot path. `docs/perf/baseline.json` has no matching parser profile. The closest existing Calendar preview baseline is the 2026-09-29 animation review (`calendar-preview-open`: rAF 133.3/116.8 ms and trace 320.6/349.8 ms); those whole-interaction metrics are not directly comparable to parser latency. Updated HEAD: `26fbc2ece2a979eda8e360e65e3d466c9fc50d1b`.

kayg commented

2026-09-30 17:07:27 +00:00

Author

Owner

Final handoff for #421. HEAD is 26fbc2ece2a979eda8e360e65e3d466c9fc50d1b on job/preview-421.

Final gate output:

cargo fmt --check: exit 0; empty stdout/stderr
Finished `dev` profile [unoptimized + debuginfo] target(s) in 47m 04s
Finished `test` profile [unoptimized + debuginfo] target(s) in 12m 02s
test result: ok. 87 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 49.66s
Test Files  139 passed (139)
      Tests  917 passed (917)
svelte-check found 0 errors and 0 warnings
test wire::tests::live_apps_run_in_separate_processes ... ok
test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 88 filtered out; finished in 20.69s

The preview parser profile ran locally; its numbers and the closest non-comparable Calendar preview baseline are in the prior comment. Production card and 3x action crops for every width and theme are linked in the report above.

The API adversarial run found the live Tag rename stack overflow (#532) and a Block reminder timeout awaiting isolated reproduction (#533). The #421 UI fix and its gates are complete; #532 remains an independent merge blocker.

Final handoff for #421. HEAD is `26fbc2ece2a979eda8e360e65e3d466c9fc50d1b` on `job/preview-421`. Final gate output: ```text cargo fmt --check: exit 0; empty stdout/stderr Finished `dev` profile [unoptimized + debuginfo] target(s) in 47m 04s Finished `test` profile [unoptimized + debuginfo] target(s) in 12m 02s test result: ok. 87 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 49.66s Test Files 139 passed (139) Tests 917 passed (917) svelte-check found 0 errors and 0 warnings test wire::tests::live_apps_run_in_separate_processes ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 88 filtered out; finished in 20.69s ``` The preview parser profile ran locally; its numbers and the closest non-comparable Calendar preview baseline are in the prior comment. Production card and 3x action crops for every width and theme are linked in the report above. The API adversarial run found the live Tag rename stack overflow (#532) and a Block reminder timeout awaiting isolated reproduction (#533). The #421 UI fix and its gates are complete; #532 remains an independent merge blocker.

kayg commented

2026-09-30 17:10:43 +00:00

Author

Owner

Starting round 3 on job/preview-421, based at 26fbc2ece2a979eda8e360e65e3d466c9fc50d1b. I am reading the latest owner direction, then I will merge origin/dev before final gates.

Starting round 3 on `job/preview-421`, based at `26fbc2ece2a979eda8e360e65e3d466c9fc50d1b`. I am reading the latest owner direction, then I will merge `origin/dev` before final gates.

kayg commented

2026-09-30 17:47:21 +00:00

Author

Owner

Merge validation found that bun run check failed with 11 TypeScript errors: ItemPreview.svelte declared the Duplicate and Journal attachment callbacks but did not destructure them, and the Calendar page called primeKeyboard without the import present on origin/dev. I restored the callback destructuring and import from the two merge parents. I will rerun the web check after the placement and screenshot changes are complete.

Merge validation found that `bun run check` failed with 11 TypeScript errors: `ItemPreview.svelte` declared the Duplicate and Journal attachment callbacks but did not destructure them, and the Calendar page called `primeKeyboard` without the import present on `origin/dev`. I restored the callback destructuring and import from the two merge parents. I will rerun the web check after the placement and screenshot changes are complete.

kayg commented

2026-09-30 18:59:48 +00:00

Author

Owner

Finding: the production Week hover trace showed pointerout ... card=true followed by card-leave while the cursor remained at the Journal item. The shared 500 ms content cascade resized the card under the stationary cursor, so the browser retargeted the pointer and the transient preview closed. Added a hit test at the leave coordinates plus a delayed check of the hovered Calendar item. The production viewport/theme E2E is now exercising this case.

Finding: the production Week hover trace showed `pointerout ... card=true` followed by `card-leave` while the cursor remained at the Journal item. The shared 500 ms content cascade resized the card under the stationary cursor, so the browser retargeted the pointer and the transient preview closed. Added a hit test at the leave coordinates plus a delayed check of the hovered Calendar item. The production viewport/theme E2E is now exercising this case.

kayg commented

2026-09-30 19:50:40 +00:00

Author

Owner

Adversarial finding on the merged local API build: POST /api/v1/files/uploads accepted a Tus request that declared a 25 MiB .calternal/backgrounds upload with 201 (the probe expected 413). A second background upload accepted the four-byte body nope with 204 (the probe expected 400). These are non-SLOW input-policy findings from the one API-only round. The runner is still completing the remaining probes; I will file a follow-up if the end-to-end upload confirms that the unsupported payload can be installed.

Adversarial finding on the merged local API build: `POST /api/v1/files/uploads` accepted a Tus request that declared a 25 MiB `.calternal/backgrounds` upload with 201 (the probe expected 413). A second background upload accepted the four-byte body `nope` with 204 (the probe expected 400). These are non-SLOW input-policy findings from the one API-only round. The runner is still completing the remaining probes; I will file a follow-up if the end-to-end upload confirms that the unsupported payload can be installed.

kayg referenced this issue

2026-09-30 19:52:52 +00:00

Appearance uploads accept oversized and non-image Tus payloads #553

kayg referenced this issue

2026-09-30 19:53:04 +00:00

Server aborts during adversarial tag rename API probe #525

kayg commented

2026-09-30 20:01:10 +00:00

Author

Owner

Completed on job/preview-421.

Head: 560e61b0ba6de6d39b7a9dfaf0ee79a2ddb94b15

Commits:

20af7d642 Place Calendar hover cards near the pointer
764ca15e2 Keep Calendar hover previews stable and motion-safe
24c90d637 Route touch double taps through Calendar previews
560e61b0b Capture Calendar hover placement and profile

Built

Calendar hover cards open 8 px below-right of the latest pointer point. The shared placeNearPoint helper flips them above or left at viewport edges and clamps them inside the viewport. Analytics uses the same helper. A card shrinks only when neither side has room for its natural width; this is recorded in DESIGN §34.
A fine-pointer hover lifts the Calendar item with translateY(-1px) scale(1.045) and --shadow-soft, using the shared spring tokens. The lift does not change neighbouring layout. Keyboard focus and reduced motion suppress the lift.
A second touch edits through the open card if the card covers its Calendar anchor. Interactive card controls keep their normal tap action.
Production verification covers Journal, Event and Task labels, Duplicate, single-click selection, double-click and Enter editing, Space and Cmd+I previews, touch edit, and the phone/tablet/desktop screenshot matrices.

Production screenshots

The Week hover screenshots and lift frame strip are attached here:

Width	Light	Dark
390 px	PNG	PNG
820 px	PNG	PNG
1024 px	PNG	PNG
1300 px	PNG	PNG
1440 px	PNG	PNG

Lift frame strip: SVG.

Gates (verbatim success lines)

bun run check:

Text sizes and UI shape values use shared role tokens.
UI transitions and animation options use shared motion tokens or documented exceptions.
Loading svelte-check in workspace: /home/kayg/Developer/calternal-wt/preview-421/apps/web
Getting Svelte diagnostics...
svelte-check found 0 errors and 0 warnings

bun run test:

 Test Files  142 passed (142)
      Tests  935 passed (935)
   Start at  21:36:33
   Duration  219.95s (transform 62%, environment 13%, import 13%, tests 9%, setup 3%)

Production build:

✓ built in 1m 13s
  Wrote site to "build"
  ✔ done

Production interaction run:

Calendar preview 421: hover and single click passed
Calendar preview 421: double-click and Enter passed
Calendar preview 421: Cmd+I passed
Calendar preview 421: item menu passed
Calendar preview 421: Journal, Event and Task edit text passed
Calendar preview 421 passed; screenshots saved in /home/kayg/Developer/calternal-wt/preview-421/artifacts/preview-421

Cleanup:

Removed 7169 files, 4.5GiB total

No Rust source changed for this issue. The calternal-server binary was built and used for the local production E2E and adversarial run; per-crate Rust clippy/test gates were not needed.

Performance

Local hot-path profile; no comparable Calendar hover key exists in docs/perf/baseline.json.

Workload	Calls	p50 ms/call	p95 ms/call	CPU ms	RSS growth bytes
Week, 1440 px	100,000	0.000171	0.000629	49.387	24,121,344
Week, 390 px	100,000	0.000109	0.000425	31.646	1,110,016
Seven-day edge burst	250,000	0.000102	0.000334	55.260	2,228,224

Adversarial round and gaps

One API-only round ran against the real local server after the required origin/dev merge. The classification, document sandbox, auth setup and appearance concurrency probes passed. The round then found the accepted background-upload inputs tracked in #553: a 25 MiB declared Tus length returned 201 and a four-byte nope PATCH returned 204.

During tag reconciliation, tag rename across sources received no response, then later requests received connection refused; the runner reported the server as Aborted and exited with status 120. This matches the existing #525. The temporary server logs were removed by the runner, so the abort stack is unknown. I posted the reproduction evidence to #525 and #553. The SLOW-only probe results were reported as load and were not treated as blocking.

Decisions

The shared helper returns the room on the chosen side. The popover uses that room as a maximum width so it can keep the pointer gap at narrow edges; DESIGN §34 now records this rule.
A touch double-tap still edits when the open card covers the original item. Taps on buttons and links stay actions. This preserves the existing DESIGN §34 touch contract.

Files changed: apps/web/e2e/calendar-preview-421.mjs, apps/web/src/lib/components/analytics/BklitTooltipMaterial.test.ts, apps/web/src/lib/components/analytics/vendor/bklit/charts/tooltip/tooltip-box.tsx, apps/web/src/routes/calendar/[view]/[date]/+page.svelte, bench/calendar-hover-421.mjs, docs/DESIGN.md, packages/ui/src/components/PopoverSurface.svelte, packages/ui/src/components/calendar/CalendarPopover.svelte, packages/ui/src/components/calendar/GridColumn.svelte, packages/ui/src/components/calendar/ItemPreview.svelte, packages/ui/src/components/menu/FloatingSurface.svelte, packages/ui/src/floating.ts, and packages/ui/src/index.ts.

Completed on `job/preview-421`. Head: `560e61b0ba6de6d39b7a9dfaf0ee79a2ddb94b15` Commits: - `20af7d642` Place Calendar hover cards near the pointer - `764ca15e2` Keep Calendar hover previews stable and motion-safe - `24c90d637` Route touch double taps through Calendar previews - `560e61b0b` Capture Calendar hover placement and profile ## Built - Calendar hover cards open 8 px below-right of the latest pointer point. The shared `placeNearPoint` helper flips them above or left at viewport edges and clamps them inside the viewport. Analytics uses the same helper. A card shrinks only when neither side has room for its natural width; this is recorded in DESIGN §34. - A fine-pointer hover lifts the Calendar item with `translateY(-1px) scale(1.045)` and `--shadow-soft`, using the shared spring tokens. The lift does not change neighbouring layout. Keyboard focus and reduced motion suppress the lift. - A second touch edits through the open card if the card covers its Calendar anchor. Interactive card controls keep their normal tap action. - Production verification covers Journal, Event and Task labels, Duplicate, single-click selection, double-click and Enter editing, Space and Cmd+I previews, touch edit, and the phone/tablet/desktop screenshot matrices. ## Production screenshots The Week hover screenshots and lift frame strip are attached here: | Width | Light | Dark | |---:|---|---| | 390 px | [PNG](https://git.kayg.org/attachments/4636e6d6-d502-4a6f-8233-911c82566611) | [PNG](https://git.kayg.org/attachments/bd70a5b5-335b-4a2f-94de-5c833c39fdf8) | | 820 px | [PNG](https://git.kayg.org/attachments/dad9f4a1-5fd9-40f3-8cae-e78d9b2201e0) | [PNG](https://git.kayg.org/attachments/13dd8cb2-ae5e-417d-abcd-f0e2c0b980a9) | | 1024 px | [PNG](https://git.kayg.org/attachments/2548ce48-e2df-435d-bdba-7df668cc49a2) | [PNG](https://git.kayg.org/attachments/39ed855b-f087-40fa-9df8-15e484a72dc5) | | 1300 px | [PNG](https://git.kayg.org/attachments/351c3ebf-8e28-45d4-8772-6d1bf2d07481) | [PNG](https://git.kayg.org/attachments/6d45b139-bdf5-4eec-9c0b-b536ae08cd67) | | 1440 px | [PNG](https://git.kayg.org/attachments/ff2b38ea-583d-4657-9b2e-a823153a736e) | [PNG](https://git.kayg.org/attachments/0612c437-a1f7-4a66-8f38-3448f09bcbed) | Lift frame strip: [SVG](https://git.kayg.org/attachments/7cd1cc14-1811-4589-a2fb-48a1f9fdefc8). ## Gates (verbatim success lines) `bun run check`: ```text Text sizes and UI shape values use shared role tokens. UI transitions and animation options use shared motion tokens or documented exceptions. Loading svelte-check in workspace: /home/kayg/Developer/calternal-wt/preview-421/apps/web Getting Svelte diagnostics... svelte-check found 0 errors and 0 warnings ``` `bun run test`: ```text Test Files 142 passed (142) Tests 935 passed (935) Start at 21:36:33 Duration 219.95s (transform 62%, environment 13%, import 13%, tests 9%, setup 3%) ``` Production build: ```text ✓ built in 1m 13s Wrote site to "build" ✔ done ``` Production interaction run: ```text Calendar preview 421: hover and single click passed Calendar preview 421: double-click and Enter passed Calendar preview 421: Cmd+I passed Calendar preview 421: item menu passed Calendar preview 421: Journal, Event and Task edit text passed Calendar preview 421 passed; screenshots saved in /home/kayg/Developer/calternal-wt/preview-421/artifacts/preview-421 ``` Cleanup: ```text Removed 7169 files, 4.5GiB total ``` No Rust source changed for this issue. The `calternal-server` binary was built and used for the local production E2E and adversarial run; per-crate Rust clippy/test gates were not needed. ## Performance Local hot-path profile; no comparable Calendar hover key exists in `docs/perf/baseline.json`. | Workload | Calls | p50 ms/call | p95 ms/call | CPU ms | RSS growth bytes | |---|---:|---:|---:|---:|---:| | Week, 1440 px | 100,000 | 0.000171 | 0.000629 | 49.387 | 24,121,344 | | Week, 390 px | 100,000 | 0.000109 | 0.000425 | 31.646 | 1,110,016 | | Seven-day edge burst | 250,000 | 0.000102 | 0.000334 | 55.260 | 2,228,224 | ## Adversarial round and gaps One API-only round ran against the real local server after the required `origin/dev` merge. The classification, document sandbox, auth setup and appearance concurrency probes passed. The round then found the accepted background-upload inputs tracked in [#553](https://git.kayg.org/kayg/calternal/issues/553): a 25 MiB declared Tus length returned 201 and a four-byte `nope` PATCH returned 204. During tag reconciliation, `tag rename across sources` received no response, then later requests received connection refused; the runner reported the server as `Aborted` and exited with status 120. This matches the existing [#525](https://git.kayg.org/kayg/calternal/issues/525). The temporary server logs were removed by the runner, so the abort stack is unknown. I posted the reproduction evidence to #525 and #553. The SLOW-only probe results were reported as load and were not treated as blocking. ## Decisions - The shared helper returns the room on the chosen side. The popover uses that room as a maximum width so it can keep the pointer gap at narrow edges; DESIGN §34 now records this rule. - A touch double-tap still edits when the open card covers the original item. Taps on buttons and links stay actions. This preserves the existing DESIGN §34 touch contract. Files changed: `apps/web/e2e/calendar-preview-421.mjs`, `apps/web/src/lib/components/analytics/BklitTooltipMaterial.test.ts`, `apps/web/src/lib/components/analytics/vendor/bklit/charts/tooltip/tooltip-box.tsx`, `apps/web/src/routes/calendar/[view]/[date]/+page.svelte`, `bench/calendar-hover-421.mjs`, `docs/DESIGN.md`, `packages/ui/src/components/PopoverSurface.svelte`, `packages/ui/src/components/calendar/CalendarPopover.svelte`, `packages/ui/src/components/calendar/GridColumn.svelte`, `packages/ui/src/components/calendar/ItemPreview.svelte`, `packages/ui/src/components/menu/FloatingSurface.svelte`, `packages/ui/src/floating.ts`, and `packages/ui/src/index.ts`.

kayg referenced this issue

2026-09-30 23:52:10 +00:00

Log attachments: deleted file still shown, attachments not live, batch send not live, Log order, raw camera names #427

kayg referenced this issue from a commit

2026-09-30 23:52:47 +00:00

Merge Calendar preview placement and interaction (#421)

kayg referenced this issue

2026-09-30 23:55:49 +00:00

Log attachments: deleted file still shown, attachments not live, batch send not live, Log order, raw camera names #427

kayg referenced this issue

2026-09-30 23:58:35 +00:00

Log attachments: deleted file still shown, attachments not live, batch send not live, Log order, raw camera names #427