Timeline

Six report axes as native selects in one GET form; the URL is the report, so a listing is shareable and scriptable with no query language. Counts run through the same filter and every header link preserves it.

Chips mute a value nearly every listed row shares — "Fixed" on 34 of 34 closed rows distinguished nothing. check-in: 7cfce7761b user: dmestas tags: ticket-list

Replace the list op's closed bool with a three-way state (open/closed/all) and carry it through the web layer as ?state=, so filtering and the view/sort axes stay independent. Header gains real open/closed/all counts; rows get a state glyph, signal-only chips, author and comment count.

Also fixes a.btn outranking .btn-primary, which rendered every primary anchor button in the forge as a plain one. check-in: bd62e4820f user: dmestas tags: ticket-list

Per-repo category strings and per-account caps, editable in place with the expanded effective set shown beside each. CapsAdmin is an optional seam — a forge without it simply has no editor. closed check-in: b1e46974fc user: dmestas tags: fossil-caps

Each row driven twice — the letter alone must open its surface, and every OTHER letter together must not. Router resolves the repo from the request body for ops that carry it as a field (repos/update). check-in: 3df10d7f78 user: dmestas tags: fossil-caps

gateCap on every forum/wiki/ticket/technote/chat POST; caps plane separated from sessions (WithCaps) so enforcement doesn't imply a login page; an ungated forge stays ungated. Harness proves category caps reach surfaces and that removing a letter closes the same request. check-in: 54cc5168ca user: dmestas tags: fossil-caps

RFC 0004 §4 table encoded on all ~45 ops; RouterWithCaps refines each Auth floor with EffectiveCaps; web gates and TrustedAuthor read caps with role fallback. Harness proves o/3/a separation end to end. check-in: 31437ec328 user: dmestas tags: fossil-caps

RFC 0004 §3/§5. v never implies u; a excludes s x y; s is universal; blank nobody+anonymous = private. Migration runs on every open, idempotent, never clobbers explicit caps. check-in: be3686ccbe user: dmestas tags: fossil-caps

The header reply link relied on fragment scroll, which browsers skip when the fragment is unchanged — 'clicked reply, nothing happened'. check-in: 8294c8101a user: dmestas tags: trunk

forum.reply takes to= (a specific post); the composer aims via ?reply-to with a visible banner; the replied-to author joins the notification set even unsubscribed, deduped by TxnID. check-in: 152f575aab user: dmestas tags: trunk

data-score / f-pinned / hot-formula / f-hidden hooks exist for the tests; copy and glyphs are design surface, free to change. check-in: dfc78137a3 user: dmestas tags: trunk

One fnv hue is one person on every surface; mentions resolve only via the contributor fold — never a dead link. check-in: 86b8a6baee user: dmestas tags: trunk

repo.about renders default-branch docs — tabs on a branch would show the wrong README as this branch's. Aside sheds doc rows there instead. check-in: 088d49f204 user: dmestas tags: trunk

anchor-name on the .avatar class was a global in disguise; the popover anchored to the LAST avatar on /people and opened off-screen. Pinned: exactly one --avatar declaration, on the button selector. check-in: 0b17572152 user: dmestas tags: trunk