6 Commits

Include renames

Author	SHA1	Message	Date
mathias	0b04e487ad	docs: update card-state model — 'Summarize now' verb, no-captions state, five-state table	2026-06-06 22:42:37 +02:00
mathias	e472015c76	docs: replace evasion framing with honest onboarding-prioritisation rationale ... 'Try now' and the newest-first batch implement onboarding prioritisation: foreground (user-clicked 'Try now') summarises a chosen video on demand; background batch summarises newest-first; both honour the shared rate gate. Remove any prior framing that described 'Try now' as making traffic 'look organic to YouTube' or as rate-limit evasion — that was not the rationale and contradicts ADR-014's explicit account-safety constraint. Correct statement: rate limiting is respected, not evaded. TAPIR_FETCH_RATE and TAPIR_FETCH_BACKOFF are honest rate controls; they govern how fast Tapir fetches captions, not how the requests appear to YouTube. Architecture: add two-path model table (foreground/background, both through globalFetchGate) and newest-first batch ordering doc (three-phase RunOnce, before/after example). ui-spec: add 'Try now' row with correct rationale; add pipeline stats bar row; update Summarized-only filter row to mention sort-to-top.	2026-06-06 21:29:28 +02:00
mathias	317b0d4834	docs(ui-spec): add Dex auth details, invite onboarding, summarized-only filter, unavailable channels	2026-06-06 11:29:14 +02:00
mathiasandClaude Opus 4.8	21e6ddd61e	docs(ui-spec): record as-built deviations and additions ... The Stage-0 ui-spec (ADR-011) predated multi-user and several UX features. Appended a "Deviations and additions (as-built)" table — without rewriting the spec — recording each feature shipped beyond it (multi-user+RLS, registration gate, per-user YouTube connect, account management, immediate web summarization, charmbracelet spinner, auto/manual mode, public landing page) with the why and the commit/ADR that covers each. Preserves the intent-vs-reality split. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-06-03 22:20:04 +02:00
mathiasandClaude Opus 4.8	e62df0027d	refactor(oidc): drop single-subject allowlist, authenticate-only (ADR-012) ... ADR-011's single-user authz (ID-token subject must equal AllowedSubject, else 403) is replaced by ADR-012's model: Dex authentication is the only gate — any Dex-authenticated subject may establish a session. Whether that subject has a tapir user, and routing to registration if not, is decided downstream in internal/web (next commit). Removals (noted): oidc.Config.AllowedSubject + its required-field check + the callback 403 branch; config.Config.AllowedSubject + TAPIR_ALLOWED_SUBJECT env wiring; the AllowedSubject arg in cmdServe. ui-spec.md updated to reflect the supersession. Sessions, cookie signing, login/callback/logout unchanged. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-06-03 15:56:13 +02:00
mathiasandClaude Opus 4.8	13663c220b	docs(ui): add Stage-0 Web UI spec + ADR-011 (Dex authn, action signal, tapir.d-ma.be GitOps) ... Reader + watch/skip/save (instruments the Stage-0 'acts on a summary' metric), HTMX+Templ over the existing store, Dex OIDC login with single-user allowlist authz (authn now, tenancy deferred), deployed at tapir.d-ma.be via Flux GitOps with ESO secrets and in-cluster postgres18. Build decomposed into 4 gated lanes. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-06-02 23:30:41 +02:00