Mockup: the person's card (D283) #224
Closed
opened 2026-10-15 12:16:54 +00:00 by kayg
·
23 comments
No Branch/Tag specified
main
j470b-server-mesh-rejoin
mesh-compat-382
j444b-d381-key-wins-flood
j461b-macos-utun-reader-thread
j475b-remove-host-motion
fix-reconnect-new-link
j481-d380
dev
j479-mesh-soak
fix/j476-host-facts
j475-motion-pill-split
j470-mac-node-join
root-upgrade-d376
j474-review-merge
latency-targets-120hz
nightly-suite-shards
gotatun-pin-j469
macos-utun-reader-thread
fix-flood-echo-stall
wip/j416
motion-fast-ease-out
mesh-addhost-j259
takeover-close-terminals-d368
kbd-instant-followups
fix-trust-key-double-click
nightly-suite-partial-report
appwin-icons-j207
rusqlite-slice1
swipe-content-first-d374
mesh-mtu-381
addhost-instant-open
glass-contrast-d365-mock
glass-contrast-d365
signout-followups-442
fix-startup-toast-red
research-gotatun-matrix-j317
themes-sync-j304
fix-load-flakes
fix-nix-zig-patch
fix-compute01-browser-baseline
ratchet-size-baseline-419
predict-auto-d130
revoke-coverage-d367
nightly-suite-queue-timeout
nightly-browser-suite
fix-rustsec-2026-0459
fonts-ioskeley-obel
log-retention-d375
fix-kbd-no-anim-427
fix-dev-red-specs-2
takeover-proof-305-j205
wip/j410-server-pump
ui-consistency-d372
fix-osc52-clipboard
libghostty-vt-1.0
forget-retired-host-d369
j404-merge-426
fix-setup-lock-race
fix-touch-select-426
revoke-access-report-ui
fix-predictive-echo-specs
fix-selinux-agent-exec
wip/j395-checkpoint2
wip/j395
j391-review-scratch
ui-consistency-j195-deferred-rebased
fix-rustc-paths-421
decisions-wording-341
fix-install-suite-red
fix-dev-rtt-specs
fix-pending-removal-align
fix-privileged-skip
fix-install-suite-404
review-j368
mesh-dns-j254
revoke-access-report-d356b
revoke-privilege-round5
fix-removal-confirm
review-j360
gotatun-rotation-367
deps-refresh-340
review-j354
review-J351
review-j350
addhost-takeover-d359
revoke-report-items-347
revoke-end-sessions-d362
review-j348
size-mesh-ssh-346
size-trim-337
revoke-access-diff-d356
j259-pre-rebase-b06c5a6
j305-ended-at-start-spec
addhost-sudo-consent
fix-layout-real-specs-411
fix-shell-open-411
fix-console-hosts-373
fix-shell-exit
fuzz-host-name-353
fix-host-details-410
macos-filter-j197
research-gotatun-tricks
revoke-p3-j216l
stale-state-pill
revoke-followups-j216k
revoke-progress-j216e
backup/macos01-20261106/lume/j197
backup/macos01-20261106/lume/appwin-icons-j207-stash0
backup/macos01-20261106/claude/stash-0
backup/macos01-20261106/claude/stash-1
backup/macos01-20261106/claude/J80-macos-s1
backup/macos01-20261106/claude/J80
backup/macos01-20261106/claude/J80-slice1-20261102
backup/macos01-20261106/claude/J16b-appwin-on-dev
backup/macos01-20261106/claude/appwin-launch-idle-146
backup/macos01-20261106/claude/J80-s1-run
wip/j259
trust-285-p3c
runtime-lock-j216f
mesh-ssh-p3-j175
tun-proof-p3b
trust-285-p3
terminal-polish-j271
tun-proof-p3
ssh-install-flakes-j216i
fuzz-fixes-j264
trust-285-a
trust-285-b
restart-oversized-fixture-j198
backup/macos01-20261106/lume/appwin-icons-j207
restart-bound-j216h
up-preflight-p3-j198
backup/macos01-20261106/lume/j251
up-preflight-j198
wip/up-preflight-j198-j245-p2
wip/up-preflight-j198-j245-p1
agent-fsync-offloop-j196
wip/up-preflight-j198-j245
settings-offscreen-j231
wip/up-preflight-j198-j226-inspection
wip/j103f
themes-j206
wip/up-preflight-j198-j226
flakes-j216c
backup/macos01-20261106/claude/j197
flakes-j216b
backup/macos01-20261106/claude/j197-red
wip/up-preflight-j198-review
flakes-j216
backup/macos01-20261106/claude/appwin-icons-j207
engineering-j208b
appwin-mock-j209
toast-stack-j165
engineering-j208
decisions-d351
decisions-d350
decisions-d349
appearance-presets-mock-j129
decisions-d348
docs-audit-spec
doc-coverage-baseline-raise
decisions-d347
decisions-d346b
decisions-d346
j88h-profile
ui-consistency-j195-deferred
ui-consistency-j195
engineering-practices-j194
preferred-login-ui-j166
signin-pools-263-j174
macos-node-265-s1
decisions-d345
decisions-d344
proxy-cgroup-j164
verify-quick-fuzz-329
proxy-start-io-j168
timing-flakes-j163
up-263-s1
mcp-events-j147
verify-quick-fuzz-j158
proxy-p3-j159
agent-resource-j157-detect
wip/j103d-final
remote-cancel-hang-j155
proxy-traefik-281-j62d
j149-verify-quick
proxy-traefik-281-j62b
j150-drop-unnamed
wip/j79d-red-r4
wip/j103d-d332
rootless-toast-j142
wip/j103d-head
wip/j103d
j125c-mcp
macos-build-j136
backup/macos01-20261106/claude/j136
wip/j79d-red-cli
wip/j79d-red-server
j121-link-liveness
j118c-tracer-failures
wip/j79c-head
release-desktop-j131
j124c-signed-macos
wip/j79c-red-p3
wip/j79c-red-p23
wip/j79c-red-p22
merge-j128-check
perf-deferred-j128
sidebar-toggle-260
j127-shortcut-changed-dot
j125-mcp
j118-tracer-failures
j126-account-summary
settings-sections-mock-j92
j120-pinch-lock
sidebar-292
backup/macos01-20261106/claude/j120
taste-2026-11-03
row-actions-242-215
backup/macos01-20261106/claude/stash-0-untracked
backup/macos01-20261106/claude/J80-265-s1-run
backup/macos01-20261106/claude/J80-macos-s1-20261102
j112-canvas-commands
ui-no-overshoot-scroll
fix-recovery-restart
backup/macos01-20261106/claude/stash-1-untracked
taste-2026-11-02
size-baseline-ratchet
machine-cards-structure-j108
j109-boot-copy-mockups
fix-dev-red
wip/up-263-s1
j95b-settings-rows
proxy-traefik-281
j95-option-rows
docs-human-j91
docs-keys-palette
fix-flood-1013-270-j38d
mesh-ssh-s1
mesh-ssh-s0
addhost-d291-tunnel
test-stability-load
mesh-relay-220
repro-296
shim-thp-off-24
mesh-pins-258-v2
mesh-dns
signin-d311-merged
docs-pages
ui-size-283
fix-ui-batch-specs
wip/j12b-edge-update
gate-on-arm
fix-rename-sync-293
trust-285-j60b
fix-focus-ring-clip
integ-ui-1101
edge-update-v2
signin-d311
taste-2026-11-01
layout-per-tab-250
ui-approved-splitopt-224
ui-approved-splitopt-224-on-dev
icon-text-centre-282
ui-approved-189-212-216
research-reverse-proxy
transfer-budget-320
review-mesh-pins-258-r2
sidebar-pill-259
review-mesh-relay-220
wip/j12-edge-update-v2
nix-package
status-crash-loop-237
fix-dev-test-failures
fix-fixture-socket-path
wip/mesh-relay-220-pre-dev-advance-rebase
fix-canvas-side-clip
research-head-to-head
frosted-real-256
review-mesh-pins-258
wip/mesh-relay-220-pre-final-rebase
review-layout-per-tab-250-r2
broad-suite-triage
nix-devshell
review-status-crash-loop-237-r3
wip/nix-devshell-pre-p3
taste-frosted-real
wip/code-serve-demo-2026-10-30
wip/code-serve-glass-2026-10-30
wip/code-serve-clusters-2026-10-30
wip/code-merge-release94-dev-2026-10-30
wip/rproxy-delta-scratch-2026-10-30
wip/stale-note-257-staged-2026-10-30
wip/d241-size-staged-2026-10-30
review-broad-suite-207
wip/mesh-pins-258-pre-split
wip/mesh-relay-220-pre-rebase
mesh-measure-220
plan-211-update
review-edge-autoupdate-r3
perf24-reconnect
review-stale-note-r2
release-prod-live
d241-shell-marker
review-mesh-pins-server-258
review-revocation-r3
review-setup-token-r2
review-sync-journal-r3
wip/review-mesh-pins-258-prune-review-1995fee46
frosted-scroll-256
sync-journal-r3
revocation-per-account-wip
review-tokio-asyncfd-0386
review-sync-p3s
wip/stash-8by64-stash0-2026-10-30
mesh-drag-r2
setup-token-data-wip
release-9-4
auth-busy-1013
mesh-view-overlap
sync-p3s
review-auth-busy-wake
review-readd-r8-wip
mesh-drag-bounds
audit-auth-93
app-windows-stream-start
review-authority-cap-r3
app-windows-r7-measure
readd-minimal-r6
readd-minimal-r5
app-windows-r7-soak
readd-minimal-r4
app-windows-r7
app-windows-r6
readd-minimal-r3
readd-minimal-r2
readd-minimal
merge-release8-dev
review-busy-page-liveness-r2
review-busy-page-liveness
mesh-view-trim
review-authority-read-retry-r2
review-remove-uninstall-r2
release-retry-reattach
release-retry
review-remove-uninstall
review-authority-read-retry
app-windows-ship
mesh-autoswitch-p2
mesh-ssh
mesh-relay
mesh-macos-node
screen-and-control
session-labels
review-real-logins-r5
review-real-logins-r4
review-real-logins-r3
shim-memory-r2
review-real-logins-r2
shim-memory
shadow-addhost-instant
shadow-real-logins
shadow-same-session-flood
shadow-prod-perf-fix
hosts-from-server
app-windows-real
app-windows-transport
release-prod-6w
mesh-policy-verify
quiet-close-toast
dev-merge-r4
review-mesh-agent-transport
review-app-windows-transport
settings-roundtrip
review-release-pipeline-r4
mesh-agent-transport
ended-strip-fix
review-audit-ca-update-d244
settings-rows
phone-width
signout-clear
fix-restart-tests
dev-merge-rp
signer-hardening
review-audit-ca-update
terminal-fidelity
review-audit-ca-update-wip
mesh-integrate
review-mesh-agent-transport-515d3712
review-mesh-dataplane-feec1988
mesh-dataplane
signout
research-canvas-node
wip/review-renderer-cost
wip/review-terminal-fidelity
padlock-glyph
review-release-pipeline-2e95b689
phone-polish
sidebar-polish
inbox-generic
review-mesh-dataplane-378d4055
prod-batch
ui-inbox
ui-ca-unlock
ui-machine-sections
review-mesh-dataplane-a5f744fb
tls-session-prod
session-bounds-prod
fix-dead-session
session-bounds
tls-session
palette-polish
shortcuts-d222
research-appmeta
phone-gutter
ui-centre-button
wip/ui-centre-button
wip/tls-session
review-addhost-breakit
ui-platform
renderer-cost
remote-agents
mesh-api
ssh-bootstrap
prod-hotfix2
prod-fixes
review-remote-agents
review-mesh-dataplane
session-life
research-browser
review-mesh-api
research-capture
review-mesh-api-round3
review-mesh-api-round1
gate-stability
review-gate-stability
review-relay-direct
review-mesh-api-findings
proto-sessions
font-picker
proto-addhost
proto-windows
mesh-core
latency-gate
research-bsd
research-discovery
keytray-mods
mock-core
ui-tweaks
fix-motion-sel
fix-motion
integrate2
fix-robust
t-web
t-server
vt-ghostty
fix-snap-echo
t-web-auth
review-vt2
t-agent
lane-protocol
lane-shim
lane-auth
s1-base
s1-contracts
s1-workspace
No results found.
No labels
launch-qa
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".
No due date set.
Dependencies
No dependencies set
Reference
kayg/infraternal#224
Loading…
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Mockup of D283 (the person's card), first round. Flag:
?mock=1&proto=clusters&account=1(works with&version=1).Scope: pressing the person's pill in the sidebar footer opens the card inside the sidebar (shared sidebar card: one open at a time, Escape, close button, the pill again). All D283 fields laid out for the owner to judge: name (edit in place), username, email (optional), picture, organisation and role (EE), "Logs in as", sign-in health, sign out of this device. One amber mark on the pill when something needs attention (Q6). Username change (Q3) as a first sketch of a careful flow. Palette entries "Mockup: account – ..." open each state at once.
Branch
mockup-account-card, based on mockup-version-pille1665a9e5. Test double only; nothing is real. Evidence is attached below as it is produced.Finished first round. Branch
mockup-account-card, based on mockup-version-pille1665a9e5, headfe11ca505(pushed).Commits:
585929ebbui: the footer's avatar helpers are exported for the person's card8a89a5152mockup(ui): the test double and the wording of the person's carde86512ec1ui: the window menu can be bounded by the screenfe11ca505mockup(ui): the person's card behind the person's pillFlag:
?mock=1&proto=clusters&account=1(also with&version=1).Gates (TS half of
scripts/verify iterate; the Rust half and the protocol compiler were not run, the checkout has no protocol node_modules and builds on the shared slots were starved):bun test(the gate's list): 270 pass, 1 fail. The failure, "an empty graph rests on its centre ... (#212 gap 4)", fails the same on the base commite1665a9e5.test/account-card.spec.ts: 39 passed (6 size/theme combinations x 4 matrix tests, plus 15 behaviour tests).bun run build+transfer-budget.ts: rc 0. JavaScript transfer, critical: identity=959522 gzip=297380/307200 (identical bytes to the base commit; production leaves the mockup out). Preview build: account module is on-demand (about 19 KB identity, 7 KB gzip, only with the flag).Screenshots (1440x900, 393x852, 375x667; ink and paper): below.

All 123 captures are attached to this issue (card-, pill-, username-1..5, logs-in-as-open, email-editing, email-set, name-editing, picture-menu; each at desktop, phone, small in ink and paper).
Round 2: commits, break-ui report, numbers
Commits on
mockup-account-card(all pushed; basefe11ca505):c77c5c952section headers breathe (token) /bb4e92894pill grows into card (shared) /73f23575dresizable sidebar (shared) /a94108152kv fixes /697390105the card round 2 (username to Settings, name-only pill, Company row, Logs-in-as A/B/C, data toggle) /61b31c8efbreak-ui fixes and specs /8250402450 bytes critical /fc7674826spec timing /c8315fbfbhint balance and group line height.break-ui, part 1: what broke (all fixed, kept as the regression fixture)
build-agent-eu-central-1a-ephemeral-0042.internal.example.comminmax(0,1fr)inaccount.css.cl-al-group; chips ellipsize with tooltipchecked 14 months agopackages/ui/styles.css.ui-kv-rowcolumnfit-content(55%), hint wraps and balances.ui-kv-cell { max-width: 100% }Aleksandra Wiśniewska-Kowalczyksidebar-resize.ts)0.12.104-rc.3version.css)scroll-fade.ts)fontshorthand).ui-kv-group""shownName(): the username, oncetoLocaleStringcheckUsername)widthon the sidebar; the property only on the togglePart 2: decisions for you
Part 3: what held up
The pill's heights (40 and 44 px, three equal) in every data set and width; the card inside the sidebar and above the footer at 248, 292, 424, 560, at 200% zoom and on 393, 375 and 320 px phones, ink and paper (64 cases in
footer-cards-break.spec.ts); email and company wrapping right-aligned; Escape and rings; the amber mark; the morph retargeting when a press arrives mid-flight; the username flow at a 32-character name; one key per card in every state.Numbers
fe11ca505: critical identity 959,522 and 959,522 (0 bytes; the two chunks that differ are the same length: embedded build commit and date). Gzip 297,375 against 297,368 and brotli 247,552 against 247,614 are build-hash noise. Deferred gzip 49,521 against 49,519 (limit 51,200). On demand, largest chunk 15,951 gzip (limit 20,480). The mockup's modules are left out of the production bundle.ui.css+322 B (85,177 to 85,499: the header token and three key/value fixes); the proposed pieces' styles (4.4 kB) are inproposed.css, loaded with the mockup only.tscclean; unit tests 88 in the mock and ui packages; the TS half ofscripts/verify iterate(checksums, protocol tsc, tracer tsc, 274 bun tests, production build, transfer budget): all pass except one test that fails the same way onfe11ca505("an empty graph rests on its centre", #212 gap 4). I did not run the Rust half or the protocol differential test. Specs: account-card (48 cases), footer-cards-break (64), sidebar-resize (8), settings-section-spacing (2), version-pill (50), inbox: all pass in the last runs (two timing races were fixed in the specs, seefc7674826).Not verified
Real iPhone and real GPU frame times; Safari and Firefox; RTL (not checked: the product has none); a real server. The 1,202-host account is a double, not a measured server.
Round 2 of the person's card: what changed, what broke, what holds
Branch
mockup-account-card, headc8315fbfb. Mockup only (?mock=1&proto=clusters&account=1&version=1;?data=worst|empty|one,?logins=a|b|c,?resize=0). Nothing deployed, nothing merged.Videos
Settings: section headers breathe (before / after)
Sidebar widths (floor 248, default 292, ceiling 560)
Logs in as, variants A / B / C (left to right), per data set
Sheets for desktop, 393x852 and 375x667, ink and paper: logins-variants-demo-desktop-ink.png, logins-variants-demo-desktop-paper.png, logins-variants-demo-phone-ink.png, logins-variants-demo-phone-paper.png, logins-variants-demo-small-ink.png, logins-variants-demo-small-paper.png, logins-variants-empty-desktop-ink.png, logins-variants-empty-desktop-paper.png, logins-variants-empty-phone-ink.png, logins-variants-empty-phone-paper.png, logins-variants-empty-small-ink.png, logins-variants-empty-small-paper.png, logins-variants-one-desktop-ink.png, logins-variants-one-desktop-paper.png, logins-variants-one-phone-ink.png, logins-variants-one-phone-paper.png, logins-variants-one-small-ink.png, logins-variants-one-small-paper.png, logins-variants-worst-desktop-ink.png, logins-variants-worst-desktop-paper.png, logins-variants-worst-phone-ink.png, logins-variants-worst-phone-paper.png, logins-variants-worst-small-ink.png, logins-variants-worst-small-paper.png
The data toggle at the real widths (Demo / Worst case / Empty / One, left to right)
sheet-account-ceiling-560-ink.png
sheet-account-ceiling-560-paper.png
sheet-account-default-292-ink.png
sheet-account-default-292-paper.png
sheet-account-floor-248-ink.png
sheet-account-floor-248-paper.png
sheet-version-ceiling-560-ink.png
sheet-version-ceiling-560-paper.png
sheet-version-default-292-ink.png
sheet-version-default-292-paper.png
sheet-version-floor-248-ink.png
sheet-version-floor-248-paper.png
Pill-to-card morph frames (0, 40, 80, 130, 200 ms)
morph-account-open-0ms-desktop-ink.png, morph-account-open-130ms-desktop-ink.png, morph-account-open-200ms-desktop-ink.png, morph-account-open-40ms-desktop-ink.png, morph-account-open-80ms-desktop-ink.png, morph-account-open-0ms-desktop-paper.png, morph-account-open-130ms-desktop-paper.png, morph-account-open-200ms-desktop-paper.png, morph-account-open-40ms-desktop-paper.png, morph-account-open-80ms-desktop-paper.png, morph-version-open-0ms-desktop-ink.png, morph-version-open-130ms-desktop-ink.png, morph-version-open-200ms-desktop-ink.png, morph-version-open-40ms-desktop-ink.png, morph-version-open-80ms-desktop-ink.png, morph-account-open-0ms-phone-ink.png, morph-account-open-130ms-phone-ink.png, morph-account-open-200ms-phone-ink.png, morph-account-open-40ms-phone-ink.png, morph-account-open-80ms-phone-ink.png
Every spec capture (3 sizes, ink and paper): cards, Settings, Account, the username flow
kayg referenced this issue2026-10-28 17:53:56 +00:00
Rebuilt on current dev for the owner's review. Branch
mockups-2026-10-31, head586cd2b13(base dev42ab33035, 2026-10-31). Test double only; nothing is real or saved. Not merged, not deployed. Old previews are gone; this replaces them.Preview (NetBird, bound to infraternal-dev-02-std; index of every mockup: http://10.69.69.117:47650/mockups.html):
How: Press the person's pill at the bottom of the sidebar. Palette (Ctrl+Shift+K): "Mockup: account" rows for each state.
Note: Rebased only. The data switch (Demo data / Worst case / Empty / One) is the mockup's own review scaffold; on a phone it overlaps the top pill (seen in the 393 px captures of the version panel).
Captures are Chromium on the production build of the mockup, taken by
apps/tracer/test/capture-mockups.ts; I have read them for wrong states, not judged them as final.Desktop 1440×900 @2x, ink
Desktop 1440×900 @2x, paper
Phone 393×852 @3x, ink
Phone 393×852 @3x, paper (first state only)
Update to the comment above: the branch head is now
57871651f(the preview at http://10.69.69.117:47650/mockups.html runs it). The captures above were taken one build earlier; the only difference is that the window terminals there hide their cursor until attached, a production change that was since removed from the branch. Gate output, what is left out, and the budget finding: #272.J57 start: branch
ui-approved-splitopt-224, base origin/devf4b61cd6c. Owner 2026-11-01: split buttons with Option approved (must work with Alt on Windows/Linux); account card mostly approved with changes (tag cards + gradient machine tints, concerns shown in the value field). First commit49fbf2312(the Option/Alt split buttons, product). Account card follows; it shares sidebar-card/kv-list with J56, so I rebase on its push.J57 progress (branch
ui-approved-splitopt-224, pushed; baseui-approved-189-212-216@995d28722, which is J56's work on the shared sidebar card and key/value list; origin/dev isf4b61cd6c).Done and pushed:
51d39758bOption (macOS) / Alt (Windows, Linux) on the split buttons, in the product (#280).f25ade825the shared pieces the card stands on (card morph, scroll fade, inline rename, value runs; entity palette tokens for tag cards).dcfa9692fthe card from the person's pill, concerns in the value, a card per tag in "Logs in as".6222dd1c5the mock double with the worst-case fixture (14 tags, 1,202 machines, 12 accounts) +account-card.spec.ts.425a3aa00TASTE: new row (concern stated in the value; no "checked N days ago") and row 71 reaffirmed for this card.Findings (evidence):
identitycarries onlydisplay_nameandusername; the server has no endpoint for passkey count, recovery-key state, devices, email, picture, or "logs in as" (grep ofcrates/infraternal-serverroutes, andsettings-body.on-demand.tssays "the product has no facts to show yet"). So the product card shows name, username and sign out only, and draws no row or control it cannot fill (identityModelincanvas/account/index.ts). The full card is reachable on the mock double (?mock=1&proto=clusters&account=1,&data=worst|empty|one). Needs a backend grill before the rows can be real.styles.cssconflicts.Choices for the owner (not decided by me): recovery key counts as stale after 90 days (
RECOVERY_STALE_DAYS); only variant A (chips) of "Logs in as" ships, B and C were scaffolding; the username-change flow and Settings, Account stay in the mockup (D283 Q3 needs a server design).Next: specs green, captures at 1440x900 DPR 2 and 393x852 DPR 3,
scripts/verify faston compute01. Logs:~/j57-pw2.logon infraternal-dev-02-std; evidence in~/.cache/codex-scratch/j57-evidence.J57 evidence: the person's card (branch
ui-approved-splitopt-224, production build of the mock double, Chromium; read for wrong states, not judged as final). 1440x900 DPR 2 and 393x852 DPR 3, ink and paper: healthy account, recovery key not verified since a date, one passkey, Logs in as (demo and worst case: 12 accounts, 1,202 machines, 14 tags), and videos of the card growing out of the pill and the pane opening.J57 evidence, refreshed on the final head (
fbc39ec60, rebased on J56'sui-approved-189-212-216; supersedes the images above). Fixed since the first captures: the long account chip no longer covers the key "Logs in as", the account chips are no longer repeated on redraw, counts keep a space ("root 41"), quiet text clears 4.5:1 on a tag's card. Worst case (12 accounts, 1,202 machines, 14 tags) and the stale recovery key, desktop 1440x900 DPR 2 and phone 393x852 DPR 3, ink and paper.J57 finished. Branch
ui-approved-splitopt-224, headfbc39ec60(stacked on J56'sui-approved-189-212-216, which is on devf4b61cd6c; J56's version pill is in the base, so I made the two cards one-at-a-time). Branchui-approved-splitopt-224-on-dev(7a64aaa3e) is the same work merged with currentorigin/dev(7bf03044f), the only conflict being two TASTE rows added at the same spot; it is what the gate below ran on.Commits (atomic): Option/Alt split buttons (#280); shared pieces for the card; the card from the pill, concerns in values, a card per tag; mock double + worst-case fixture + spec; TASTE rows (separate docs commit); contrast + Escape fix; key/value column fix; value-run redraw fix; count spacing; one card at a time with the version panel; spec waits.
Gate.
scripts/verify faston compute01 (x86_64) at7a64aaa3eran to its last row (TypeScript protocol tests: 39 pass, 0 fail); the log has no FAILED/panicked/error line. I did not capture its exit code. compute01 was unreachable for ~1 h in the middle (overloaded, not rebooted) and the first run was lost; the second queued ~75 min. Verbatim from that log:Against J56's head (critical gzip 305,444, identity 986,973) this branch adds +2,936 B gzip / +5,809 B identity to the critical path; that is the Option/Alt morph in
window-card(icon-morph, key handling). On J56's old 300 KiB cap it is over (308,385 > 307,200); under dev's new 320 KiB cap (327,680) it passes. The person's card adds nothing critical (own chunk and stylesheet, loaded on idle). No Rust changed, so no static-size delta.Browser specs (production build, Chromium, dev-02):
account-card.spec.ts(17) +window-option-new.spec.ts(14) + captures (17): 48 run, 47 passed first time and the one failure (a spec race on the product mount) re-ran green; the account spec also covers 4.5:1 text contrast measured on the real composited background in ink and paper, the worst-case fixture bounds, a 393x852 phone, the product path, and the version panel.Decisions for kayg:
?mock=1&proto=clusters&account=1,&data=worst|empty|one). Needs a backend grill.RECOVERY_STALE_DAYS).P4 backend plan, planning only. branch
plan/p4-account-backend, base/head devffebd0561. research steps: inspect mock rows, trace stored facts and routes, rank slices; budget 15 minutes. no code changed, gate not applicable. no builds orverify fastrun.the server already stores several facts the product model omits. the gap is partly exposure, not an entirely new account backend. source links below are pinned to the inspected dev head. sizes are rough engineer-days including focused tests/review, not measured commitments: S ≤1, M 2–3, L 4–7; access-policy work may exceed L.
auth/sessions.rsreturns both through/auth/session; identity columns existauth/webauthn.rsstores credentials, already counts them and supports adding a second; HTTP hasadd-startand shared registration finish. API keys separately haveapi-list/api-revokeinauth/devices.rsauth/recovery*.rs; audit stores start/cancel/complete onlyauth/sessions.rs: browser device label, expiry, freshness, unlock state, current logout.auth/devices.rs: approved CLI/API key list/revokefreshis passkey freshnessremote_inventory.rshas host facts;0015_remote_identity.sqlhas owner + execution UID. mesh API has paged nodes/tags/grants and scoped roles;rules.rsis network traffic policyaccount/words.tsalready derives wording and the chosen 90-day threshold/auth/logout,auth/sessions.rs; product already wiredevidence: mock model/rows, auth schema, auth HTTP, passkeys, devices/API keys, sessions, recovery, recovery audit, host inventory, mesh tags/roles/API, mesh rules.
proposed order, with a stopping point after each:
owner grill (recommended option first):
J126 start: branch
j126-account-summary, base7add126405a9205bb817a154af11fad2c438cd45(origin/dev). Slice 1 only, per owner answers of 2026-11-03.Plan, estimate 2 hours including shared VM gates (scope leash: stop and report if this exceeds 4 hours):
scripts/verify fastthrough build-slot on the emptier VM, report static sizes/deltas.Initial finding:
identityModelcurrently exposes only name/username, andRecovery.verifiedAt: nullexplicitly means never verified. The production read must preserve unavailable history separately rather than map it to null. Existing UI/wording and server auth paths are being inspected before implementation.J126 finding: there is a server second-passkey ceremony (
auth/webauthn.rs:add_start, registration finish), but no existing browseradd-startcaller. The Settings connection therefore reuses the browser login/PRF unwrap and registration primitives inauth.ts; it retains the DEK only for this operation, checks the expected account before enrollment, and clears it in finally. No new crypto or server ceremony is introduced.Summary contract proposed/implemented: POST
/auth/account-summary, empty body + same-origin unlocked live browser cookie; response only{user_id,session_incarnation,passkeys,recovery_set_up}. A single indexed query authenticates and scopes the count/presence, and does not select credentials, wraps or verifier values. Recovery presence requires existing verifier plus recovery wrap. The identity/lifetime fields fence shared-cookie account changes. Existing verification history remains unavailable, rather than null/never or an invented date.Progress: summary, card wiring and Settings entry point implemented; focused VM checks queued on dev-02 (compute01 all four slots occupied). Evidence/target:
/home/claude/.cache/codex-scratch/j126/evidence,/home/claude/worktrees/j126/target. Next: focused compiler/tests, browser production captures and full fast gate.J126 checkpoint pushed:
6afecf6e5onj126-account-summary. Implementation and focused tests are present; not yet qualified. The first VM run remains queued (dev-02: both configured slots busy; compute01: all four busy). No gate claim yet. Next: compiler/server tests, production browser tests/captures, final full fast gate and squash the WIP into the slice commit. Scope unchanged.Owner grill answers carried by J126 (2026-11-03): build slice 1 only, then decide. Later slices list signed-in browsers and CLI/API keys separately; recovery gets a check-only “I still have them” step; “Logs in as” covers only paths actually enforced; profile editing comes last. Existing accounts have unavailable recovery verification history, not evidence of never/recently verified. J126 implements none of those later slices.
J126 checkpoint pushed:
eb36a146cee9f02db026b800c623644b60945409onj126-account-summary(WIP commits will be squashed after qualification). Focused client/crypto/model/wording tests: 25 pass, 0 fail, 116 expectations;cargo fmt --allclean. No performance claims from functional test timings.The broader VM run is still queued, second on dev-02; both Linux VMs were full when checked. No final gate claim. Planned run: compiler + account-summary server tests + production account-card and summary browser specs, then full
scripts/verify faston the final head. Evidence:/home/claude/.cache/codex-scratch/j126/evidence; sole target:/home/claude/worktrees/j126/target. Scope unchanged, no blockers requiring an owner decision.J126 browser finding (regression reproduced before the repair): server tests 2/2, TypeScript and focused units 25/25 passed; existing account-card suite 17/17 passed. The new product summary checks exposed an actual phone navigation defect: pressing Passkeys opens Settings but leaves the sidebar/card over it, so Add a second cannot be reached. Playwright at 393×852 reports “sidebar … subtree intercepts pointer events”; raw evidence is
evidence/browser-phone-error.mdand the initialaccount-settings-393-ink.png(outside the checkout).Repair stays within wiring: close the summary card and sidebar through their existing controls when a row opens Settings. The regression now asserts that the sidebar closes and then physically clicks Add a second. Also corrected the test's ambiguous toast locator (two mounted toast containers) and wait for the existing card transition before taking screenshots. No style changes.
J126 source head is now
824f7f027d4838ab03496e7e664d3a1fb04145e5, pushed as one slice commit onj126-account-summary(WIP checkpoints squashed). The first production browser run passed all 17 existing card cases and the new unavailable/foreign-account case. The four new summary cases passed their no-first-paint-read, row text, history tooltip, count, card alignment and Settings alignment checks before exposing the navigation/test-locator findings recorded above.The repaired run is queued on dev-02, PID 734708, log
/home/claude/.cache/codex-scratch/j126/evidence/final-driver.log: TypeScript + five summary browser cases, then fullscripts/verify fastif green. Sole target remains/home/claude/worktrees/j126/target. Server summary tests: 2 pass, 0 fail. Client focused units: 25 pass, 0 fail. No final gate claim yet; original 2-hour estimate remains in force.J126 qualification update: final pushed head
1cd1b6917203102f8bdd8071349087747f3a4751onj126-account-summary(supersedes the prior checkpoint SHA). Source is clean locally and synchronized to dev-02. The repaired production browser run and full fast gate remain queued together through build-slot, PID 734708; both Linux VMs remain fully occupied. No final gate claim.Already passed: TypeScript, 25 focused client/crypto/model/wording tests, two real-router/SQLite summary tests, 17 existing account-card browser cases and the new unavailable/foreign-account browser case. Remaining: repaired five-case browser run with fresh screenshots, full fast gate, attach evidence and clean the sole target. Scope unchanged. Log
/home/claude/.cache/codex-scratch/j126/evidence/final-driver.log; target/home/claude/worktrees/j126/target. Original 2-hour estimate / 4-hour stop remains in force.J126 qualification host update: compute01 had a free slot, so per the brief I cancelled the dev-02 queue entry (PID 734708) and moved the exact final head
1cd1b6917203102f8bdd8071349087747f3a4751to/home/claude/worktrees/j126on compute01. The slot filled during checkout/cleanup; final browser + fast gate are now queued there as PID 2330006. Log/home/claude/.cache/codex-scratch/j126/evidence/final-driver.log.Infrastructure finding: removal of the old sole Rust target
/home/claude/worktrees/j126/targeton dev-02 is stuck in filesystem I/O:866456 ... Ds rm -rf /home/claude/worktrees/j126/targetfor over six minutes. SSH responds. The unnecessary size scan was stopped; removal remains active. No infrastructure repair attempted. I will collect the final gate and complete cleanup before handing back; no code or scope changes.J126c takeover (Sonnet). Previous job J126 (Codex) stopped at a provider 429. Nothing is restarted or redone.
State found:
j126-account-summary, head1cd1b6917203102f8bdd8071349087747f3a4751(one slice commit on base7add126405a9; origin/dev is now 29 commits ahead, none touch the same files). My worktree:~/Developer/Worktrees/infraternal-j126.final-driver.log:BROWSER_REPAIR_EXIT=0(5 summary browser cases pass) andVERIFY_EXIT=0for the fullscripts/verify fast. The log is for HEAD1cd1b6917, and the 8 screenshots exist (2 sizes x ink/paper x card/Settings)./home/claude/worktrees/j126/targeton compute01. The dev-02 one is already gone.Remaining plan (about 30 minutes, no gate re-run, because no code will change):
J126c finish. Branch
j126-account-summary, head1cd1b6917203102f8bdd8071349087747f3a4751(J126's single slice commit; I added no commits, no code changed after its qualification). Not merged, not deployed. Base7add126405a9; origin/dev has since moved 29 commits and none touch these 17 files.What the card shows (slice 1 only, all from stored state): passkey count (rows in
passkeysfor the session's account) and recovery set-up presence (recovery_hashnon-empty AND arecoverywrap exists). One authenticated read,POST /auth/account-summary, answering only{user_id,session_incarnation,passkeys,recovery_set_up}. It selects no credential, wrap or verifier value. It is fetched when the card or Account settings opens (no first-paint request, test asserts 0 requests before open). A failed read draws no rows and reopening retries; a reply for another account/session lifetime is dropped. Recovery verification history is not recorded anywhere, so the card says "Set up" with the tip "verification history unavailable" and Settings says "Set up; verification history unavailable": it is never shown as "never verified" and no date is invented. "Add a second" in Settings runs the existing add-start/registration-finish ceremony after a same-account passkey unlock; the key is zeroed in every outcome.Review by me (diff read in full): auth scoping is in the same SQL statement as the counts (token hash +
unlocked=1+ not expired); same-origin and empty-body are enforced (auser_idin the body is a 400);session_incarnationis a domain-separated hash, neither the bearer nor its lookup hash.Gate:
scripts/verify faston compute01 at1cd1b6917, exit 0 (log~/.cache/codex-scratch/j126/evidence/verify-fast.log, 11,979 lines, tail verbatim):Static sizes (verbatim):
x86_64 size: 22478288 bytes; baseline 22418256; delta +60032 bytesandaarch64 size: 20494552 bytes; baseline 20453280; delta +41272 bytes(report only, D243 amended 2026-11-01). The gate's baseline may lag dev, so I do not claim the whole delta is this slice. The server change is one handler and one query, but I did not measure the pure delta against the exact base.Browser (production build of the test double, Chromium, compute01, DPR 2):
account-summary.spec.ts5 passed (1440 and 393 in ink and paper, plus the unavailable/foreign-account case). It checks: 0 reads before open, row text, history tooltip, key left edges within 0.5 px, rows inside the card, label/button centre line in Settings within 0.5 px, the phone sidebar closing so "Add a second" is reachable, and the failure toast. Earlier: the 17 existing account-card cases pass.Screenshots attached below (1440x900 and 393x852, ink and paper; card, then Settings, Account). Read by me for wrong states, not judged as final. Two observations: (1) in
account-summary-393-paper.pngthe pill's hover tip "You have only one passkey" covers the sign-out row, because the test mouse is still over the pill after the click; it is a capture artifact, not a defect I could reproduce by touch, but it should be re-taken without hover if the owner wants clean evidence; (2) at 292 px "Only one, add a second" wraps to two lines, right-aligned.Not verified / limits: the successful second-passkey ceremony needs a real authenticator; it is covered by unit tests (
add-passkey.test.ts) and the failure path in the browser, not end to end. It also signs a new browser session in (the existing login path), and the previous session lasts until it expires. Real iPhone/Safari untested. No performance claim.Left for later slices (as the owner decided): browser sessions/CLI keys list, recovery check-only step, "Logs in as", profile editing. Cleanup: the previous job's 43 GB target on compute01 is deleted; nothing of mine is running.
Closed by the orchestrator during the 2026-11-09 night housekeeping (owner order: "close stale prs/issues"). The work has landed on dev, and the latest note here is a finish or merge note (J387 inventory on #436). Reopen if anything is still missing.