Timeline

subs.go was dirty because gofmt rewrites a pair of apostrophes in a comment into a typographic closing quote; reworded to say empty plainly so formatting is now a fixed point. check-in: 81e89bc4d8 user: dmestas tags: ticket-list

Six report axes as native selects in one GET form; the URL is the report, so a listing is shareable and scriptable with no query language. Counts run through the same filter and every header link preserves it.

Chips mute a value nearly every listed row shares — "Fixed" on 34 of 34 closed rows distinguished nothing. check-in: 7cfce7761b user: dmestas tags: ticket-list

Replace the list op's closed bool with a three-way state (open/closed/all) and carry it through the web layer as ?state=, so filtering and the view/sort axes stay independent. Header gains real open/closed/all counts; rows get a state glyph, signal-only chips, author and comment count.

Also fixes a.btn outranking .btn-primary, which rendered every primary anchor button in the forge as a plain one. check-in: bd62e4820f user: dmestas tags: ticket-list

Per-repo category strings and per-account caps, editable in place with the expanded effective set shown beside each. CapsAdmin is an optional seam — a forge without it simply has no editor. closed check-in: b1e46974fc user: dmestas tags: fossil-caps

Each row driven twice — the letter alone must open its surface, and every OTHER letter together must not. Router resolves the repo from the request body for ops that carry it as a field (repos/update). check-in: 3df10d7f78 user: dmestas tags: fossil-caps

gateCap on every forum/wiki/ticket/technote/chat POST; caps plane separated from sessions (WithCaps) so enforcement doesn't imply a login page; an ungated forge stays ungated. Harness proves category caps reach surfaces and that removing a letter closes the same request. check-in: 54cc5168ca user: dmestas tags: fossil-caps

RFC 0004 §4 table encoded on all ~45 ops; RouterWithCaps refines each Auth floor with EffectiveCaps; web gates and TrustedAuthor read caps with role fallback. Harness proves o/3/a separation end to end. check-in: 31437ec328 user: dmestas tags: fossil-caps

RFC 0004 §3/§5. v never implies u; a excludes s x y; s is universal; blank nobody+anonymous = private. Migration runs on every open, idempotent, never clobbers explicit caps. check-in: be3686ccbe user: dmestas tags: fossil-caps

The header reply link relied on fragment scroll, which browsers skip when the fragment is unchanged — 'clicked reply, nothing happened'. check-in: 8294c8101a user: dmestas tags: trunk

forum.reply takes to= (a specific post); the composer aims via ?reply-to with a visible banner; the replied-to author joins the notification set even unsubscribed, deduped by TxnID. check-in: 152f575aab user: dmestas tags: trunk

data-score / f-pinned / hot-formula / f-hidden hooks exist for the tests; copy and glyphs are design surface, free to change. check-in: dfc78137a3 user: dmestas tags: trunk

One fnv hue is one person on every surface; mentions resolve only via the contributor fold — never a dead link. check-in: 86b8a6baee user: dmestas tags: trunk

repo.about renders default-branch docs — tabs on a branch would show the wrong README as this branch's. Aside sheds doc rows there instead. check-in: 088d49f204 user: dmestas tags: trunk

anchor-name on the .avatar class was a global in disguise; the popover anchored to the LAST avatar on /people and opened off-screen. Pinned: exactly one --avatar declaration, on the button selector. check-in: 0b17572152 user: dmestas tags: trunk

Removes the pick-up mode (it never rendered: data-attr-hidden is not a Datastar attribute), the per-column drop buttons and the per-card select+move form. Cards show a grip and a grab cursor; the column under a drag lights up; a native Move popover lists the other columns as plain forms, so it works by keyboard, touch and without script. /move answers Datastar with the fragment and a plain post with a redirect; both show 'Moved X from A to B · undo'. check-in: 110001e141 user: dmestas tags: trunk

Fleet view stays as the fallback for an admin with nothing granted. check-in: 8ce14aaaf3 user: dmestas tags: trunk

Full-bleed board with 22rem columns, so a card is the same width wherever it sits. Folding is the reader's choice carried in ?fold=A,B; a chevron on each header folds or opens it, and a folded column shows its real count. Before any choice, empty columns fold. check-in: d60c602cd2 user: dmestas tags: trunk

me.feed keyed on grants[''] but nothing ever wrote it; an admin with no explicit rows saw an empty dashboard. check-in: b7d4a089fb user: dmestas tags: trunk

Production renderer feeds the pane (plain fragment endpoint); a fenced poll grows structured inputs that rewrite the block. Raw markdown stays the source of truth; no-JS is still a plain textarea. check-in: 1b34fa7b8e user: dmestas tags: trunk

Seven status columns no longer scroll the page sideways. Empty columns fold to a GitHub-style strip (still a drop target; its name links to ?col=Status to open it). Open columns share the row with a 16rem floor and wrap past it; on a phone they stack and the strips become chips. check-in: b01e1d54d5 user: dmestas tags: trunk

Preview runs the production render pipeline (markup.preview op). Check-in refs carry their comment as hover title + visible excerpt. composer.js loads only on composer pages — the base stays one-script. check-in: 420206e59f user: dmestas tags: trunk

Flat timeline events fell into a wiki-else-ticket badge; full kind map now. check-in: 3ace765565 user: dmestas tags: trunk

Plain form path keeps its redirect. Write-role gate made trusting Write unreachable — a repo that opts into moderation reviews non-admin posts. check-in: bb65c455a3 user: dmestas tags: trunk

Fanout rides the write path only (a reindex can never re-notify); delivery/dedup stays in the notify companion via TxnID. closed check-in: 893885b3d5 user: dmestas tags: quarry-forum

Approval births the artifact (nothing to un-sync); synced-in posts get hide-with-reason. Hook (--forum-hook) is advisory, async, fails open to hold-for-human; automated actions logged publicly as 'hook'. check-in: 1b5f71c338 user: dmestas tags: quarry-forum

Menu buttons inherit the page font, which also fixes the theme button in the account menu. closed check-in: 395f704c28 user: dmestas tags: mirror-posture

The block syncs as markdown (fossil peers render it readably); option range and close date re-read from the body at cast time, never the form. check-in: e674e718a8 user: dmestas tags: quarry-forum

Category is OLTP policy on an untouched artifact (fossil peers see a plain thread); forum.announce enforces who-may-post via op auth level. check-in: 8aff98bb76 user: dmestas tags: quarry-forum

Ingest health and mirror posture join on one row; zero counts vanish and non-zero ones become chips. With any problem the healthy rows fold behind a disclosure. Summary strip with bulk actions; the page never scrolls sideways. 3,237px tall with horizontal scroll on a phone → one screen. check-in: 67e8dbee5f user: dmestas tags: mirror-posture

Extracted at fold (hex refs with a digit), resolved only at render — the page's own hash is the honesty gate. schemaVersion 3→4 (rebuild). check-in: debc1f4c9f user: dmestas tags: quarry-forum

Bounded to threads active in 30 days; formula printed on the page. Hand-computed order pinned in TestSortForumHot. check-in: cf172ec6c6 user: dmestas tags: quarry-forum

Score is always derived from vote rows (no counter); votes are forge-local 0001 §8 state, never synced. Umbrella plan: ticket aa351dec. check-in: 2fd88bc87a user: dmestas tags: quarry-forum

Edit/new pages for tickets, wiki, forum, technotes return 403 on a read-only mirror and their links point upstream. Detach goes through a confirmation with a fork acknowledgement; re-attach is one click with the drift warning. The header chip drops its words at phone width; explore shows mirror/fork badges. /fleet: host-only upstream, 1h/24h intervals, relative dates, kebab menu for the rare actions, and the header box filters both tables. /new loses its duplicate heading. check-in: ee78c5201b user: dmestas tags: mirror-posture

Every repo page carries the posture from repo.get. Mirrors show 'mirror of <host>' linked upstream, a failing upstream is said in words under the bar, and write affordances on a read-only mirror point at the upstream's pages. Explore marks mirrors and filters by kind. /fleet shows state and writes per row with pull / edit / allow writes / detach; the add form also edits. /new offers Start empty, Import and own, or Mirror. check-in: 9689ddd05e user: dmestas tags: mirror-posture

repo.get returns mirror{tracking,url,state,acceptWrites,...} and detachedFrom. mirror.detach replaces mirror.delete and keeps the upstream as provenance; mirror.writes opts a mirror into local writes. Pushes, tickets, wiki, forum and technotes on a tracking mirror are refused (403) naming the upstream. A URL change clears failures recorded against the old peer. check-in: d980bf4d71 user: dmestas tags: mirror-posture