From 15938bcfe09522a33a081f9846e0ff7fbe7873f7 Mon Sep 17 00:00:00 2001 From: Saravana Achu Mac Date: Tue, 5 May 2026 12:51:28 -0700 Subject: [PATCH] docs(roadmap): record mobile auth readiness --- docs/PRODUCTION_READINESS_HANDOFF_ROADMAP.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/PRODUCTION_READINESS_HANDOFF_ROADMAP.md b/docs/PRODUCTION_READINESS_HANDOFF_ROADMAP.md index 63c74b4..9e73d68 100644 --- a/docs/PRODUCTION_READINESS_HANDOFF_ROADMAP.md +++ b/docs/PRODUCTION_READINESS_HANDOFF_ROADMAP.md @@ -203,7 +203,7 @@ Acceptance criteria: Goal: mobile is a reliable companion app, not a scaffolded surface. -- [ ] **P7.1** Verify mobile auth against platform-service: login, register, token persistence, refresh/logout, auth-gated store hydration, and offline startup. Commit: +- [x] **P7.1** Verify mobile auth against platform-service: login, register, token persistence, refresh/logout, auth-gated store hydration, and offline startup. Commit: `3d02deb`; Verified: `zsh -lc 'source ~/.zshrc; export GITEA_NPM_TOKEN; pnpm --filter @notelett/mobile run typecheck'`; `zsh -lc 'source ~/.zshrc; export GITEA_NPM_TOKEN; pnpm --filter @notelett/mobile exec vitest run src/store/auth-store.test.ts src/lib/auth-helpers.test.ts --reporter=verbose'`; `zsh -lc 'source ~/.zshrc; export GITEA_NPM_TOKEN; pnpm --filter @notelett/mobile run test'`; `git diff --check`. Hardened mobile auth against the common-platform `@bytelyst/auth-client` contract by reading the shared token key, caching signed-in email for offline bootstrap, preserving valid local sessions during startup network failures, refreshing expired sessions before clearing tokens, clearing cached session state on failed login/register/refresh/logout, and covering login, register, token persistence, refresh/logout, auth-gated bootstrap, MFA-required login, and offline startup behavior. - [ ] **P7.2** Add or strengthen mobile tests for note list/detail/edit, capture, workspace selection, inbox approvals, intake, prompt result, settings, feedback, broadcast/survey, and offline queue. Commit: - [ ] **P7.3** Verify mobile blob upload, share intent intake, and prompt/intake flows use shared clients and handle offline/failure states. Commit: - [ ] **P7.4** Verify mobile feature flags, kill switch, diagnostics, telemetry, and app metadata are initialized and flushed at lifecycle boundaries. Commit: