be sync - preparing for sfu integration, login hopefully fixed

2026-07-29 04:18:09 +03:00 · 2026-06-08 22:09:02 +02:00
parent 1ddb51312c
commit 1e08efb9a4
41 changed files with 1360 additions and 401 deletions
--- a/docs/OPEN_TASKS_GRAPH.md
+++ b/docs/OPEN_TASKS_GRAPH.md
@@ -1,8 +1,8 @@
 # Open tasks — dependency graph

-_Last synced: 2026-06-04. **2.1–2.3 postponed** (developer DNS path deferred). Renumbered per [20260608_ALPHA_PRIORITIES.md](20260608_ALPHA_PRIORITIES.md)._
+_Last synced: 2026-06-08 (post infra/browser/graphs/RSSH fixes). **DNS 2.x off graph** (postponed)._

-**Documentation index:** [README.md](README.md)
+**Documentation index:** [README.md](README.md) · **Service map:** [20260608_BE_SERVICES_and_infra.md](20260608_BE_SERVICES_and_infra.md)

 ---

@@ -10,7 +10,7 @@ _Last synced: 2026-06-04. **2.1–2.3 postponed** (developer DNS path deferred).

 <!-- toc -->
 - [Removed from graph (done)](#removed-from-graph-done)
- [Postponed (off graph)](#postponed-off-graph)
+- [Postponed / off graph (DNS + mail)](#postponed--off-graph-dns--mail)
 - [Priority tiers (open only)](#priority-tiers-open-only)
 - [Dependency graph](#dependency-graph)
 - [Task index (open)](#task-index-open)
@@ -23,26 +23,25 @@ _Last synced: 2026-06-04. **2.1–2.3 postponed** (developer DNS path deferred).

 | ID | Note |
 |----|------|
-| **0.1** | Stream dump — `StreamDumpWriter` + dev setting |
-| **3.x** | Register + verify + TOTP + migration `008` (BE + views) |
-| **4.x** | RSSH alpha — BE bastion, Android mode, JSch tunnel |
-| **4.wg** | WG lab — BE `wg0`, FE DNAT via `xen_firewall.sh`, prod API smoke OK |
-| **RBAC** (core) | Admin panel + lockout clear; **5.5 validate** still open |
+| **0.1** | Stream dump |
+| **3.x** | Auth register + verify + TOTP + migration `008` |
+| **4.x** | RSSH alpha — BE + Android + JSch |
+| **4.wg** | WG lab — BE `wg0`, FE + **router** DNAT persist |
+| **RBAC** (core) | Admin panel + lockout clear |
+| **Browser** | JS syntax validated; `validate_be_services.sh` |
+| **1.1 / 1.2** | Graphs drill-down, columns, full-width (`shell--graphs-full`) |
+| **5.3** | RSSH API validate — `test_rssh_api.sh` OK on BE |
+| **Infra doc** | `20260608_BE_SERVICES_and_infra.md` + PDF |

 ---

-## Postponed (off graph)
+## Postponed / off graph (DNS + mail)

 | ID | Owner | Note |
 |----|-------|------|
-| **2.1** | Developer | DNS MX/SPF — deferred |
-| **2.2** | Developer | Forward addresses — deferred |
-| **2.3** | Developer | Inbound verify — deferred |
-| **2.4** | Developer | Gmail filters — optional; with 2.x |
-| **2.5** | Agent | SMTP outbound — frozen until 2.1 resumes |
-| **5.4** (mail) | Agent | G2–G6 **email** legs — frozen until 2.5; UI/TOTP can be tested without mail |
-
-Checklist when resumed: [tmp/20260608_help_request.md](../tmp/20260608_help_request.md)
+| **2.1–2.4** | Developer | DNS / forwards — **postponed** |
+| **2.5** | Agent | SMTP — frozen |
+| **5.4** (mail) | Agent | Auth mail E2E — frozen |

 ---

@@ -50,12 +49,10 @@ Checklist when resumed: [tmp/20260608_help_request.md](../tmp/20260608_help_requ

 | Tier | IDs | Alpha blocker |
 |------|-----|---------------|
-| **WIP / QA** | Browser JS, reachability | **Yes** (blocks BE sign-off) |
-| **P1** | **1.1 / 1.2** graphs | No |
-| **P4** | **5.1–5.3, 5.5** validation + OTA/URLs | **Yes** (auth mail path **deferred**) |
+| **P4** | **5.1 OTA**, **5.2 URLs**, **5.5** RBAC UI soak | **Yes** |
 | **P5** | **6.1–6.6** app LAN | LAN alpha |
-| **P9** | **9.x** landing | No |
-| **Infra** | Router WG DNAT persist | No (lab only) |
+| **P9** | **9.x** landing (excl. globe FR) | No |
+| **Post-alpha** | **SFU** relay (`feature/sfu-relay`) | No |

 ---

@@ -63,58 +60,45 @@ Checklist when resumed: [tmp/20260608_help_request.md](../tmp/20260608_help_requ

 ```mermaid
 flowchart TB
-    subgraph WIP["WIP — QA / deploy"]
-        BR["Browser checks<br/>JS SyntaxError · views"]
-        REACH["Services reachability<br/>OTA/crash URLs"]
+    subgraph P4["P4 — backend alpha"]
+        OTA["5.1 OTA channel<br/>SVC-OTA · HTTP 400"]
+        URL["5.2 device URLs<br/>SVC-URL · legacy host"]
+        RBACV["5.5 RBAC UI soak<br/>API ✓"]
    end

-    subgraph P1["P1 graphs"]
-        G11["1.1 pending fixes"]
-        G12["1.2 pending FRs"]
-    end
-
-    subgraph P4["P4 backend alpha"]
-        B51["5.1 OTA channel<br/>50/50"]
-        B52["5.2 device URLs<br/>50/50"]
-        B53["5.3 RSSH validate"]
-        B55["5.5 RBAC validate"]
-    end
-
-    subgraph P5["P5 app LAN — dev"]
+    subgraph P5["P5 — app LAN · dev"]
        A61["6.1 Opus/Speex"]
        A62["6.2 LAN soak"]
        A63["6.3 lifecycle"]
        A64["6.4 rotation"]
        A65["6.5 audio lag"]
-        A66["6.6 stream analysis<br/>uses 0.1 dumps"]
+        A66["6.6 stream analysis"]
    end

-    subgraph P9["P9 landing"]
-        L9["9.x hub / globe"]
+    subgraph P9["P9 — landing"]
+        L9["9.x hub cards<br/>no globe FR"]
    end

-    subgraph INFRA["Infra — non-alpha"]
-        RDNAT["Router WG DNAT<br/>f0xx.org persist"]
+    subgraph POST["Post-alpha · hidden"]
+        SFU["SFU / Janus relay<br/>feature/sfu-relay"]
    end

-    FULL["FULL_ALPHA<br/>mail path deferred"]
+    FULL["FULL_ALPHA<br/>no DNS/mail"]

-    BR --> G11 & G12
-    BR --> B55
-    REACH --> B51 & B52
-
-    B53 --> FULL
-    B55 --> FULL
-    B51 --> FULL
-    B52 --> FULL
+    OTA --> FULL
+    URL --> FULL
+    RBACV --> FULL
    A62 --> FULL

    A63 <--> A64
    A65 --> A66
-    G11 -.-> L9
+
+    SFU -.-> FULL

    style FULL fill:#1e3a5f,color:#fff
-    style BR fill:#991b1b,color:#fff
+    style OTA fill:#991b1b,color:#fff
+    style URL fill:#b45309,color:#fff
+    style SFU fill:#e5e7eb,color:#374151
 ```

 ---
@@ -123,30 +107,23 @@ flowchart TB

 | ID | Owner | Depends on | Status |
 |----|-------|------------|--------|
-| **Browser** | Agent | BE deploy | WIP — `SyntaxError` on crashes/graphs/tickets |
-| **Reachability** | 50/50 | deploy | WIP — OTA path, crash URL host |
-| **1.1** | Agent | browser OK | Open |
-| **1.2** | Agent | 1.1 soft | Open |
-| **5.1** | 50/50 | reachability | Open |
-| **5.2** | 50/50 | reachability | Open |
-| **5.3** | Agent | 4.x ✓ | Validate E2E RSSH |
-| **5.5** | Agent | RBAC ✓, browser | Validate admin flows |
-| **6.1–6.6** | Developer (~99%) | 0.1 ✓ for 6.6 | Open |
-| **9.x** | Agent (low) | bandwidth | Open |
-| **Router DNAT** | Agent | — | Open — `router_wireguard_dnat.sh` |
+| **5.1** | 50/50 | nginx OTA path | **Open** — `SVC-OTA` ticket |
+| **5.2** | 50/50 | — | **Open** — `SVC-URL` / `settings.json` base |
+| **5.5** | Agent | RBAC API ✓ | Light UI soak (optional) |
+| **6.1–6.6** | Developer (~99%) | 0.1 ✓ | Open |
+| **9.x** | Agent (low) | — | Open (globe out of scope) |
+| **SFU** | Agent | owner spec | Hidden preview on `feature/sfu-relay` |

 ---

 ## Critical path

 ```text
-BLOCKER:  Browser JS fix + deploy ──► 1.x, 5.5 UI validation
+BLOCKER:  5.1 OTA nginx (/v0/ota/ on apps.f0xx.org) ──┐
+SHARED:   5.2 production URLs (apps not f0xx.org) ─────┼──► FULL_ALPHA
+OPTIONAL: 5.5 RBAC UI click-through ──────────────────┤
+DEV:      6.2 LAN soak ───────────────────────────────┘

-AGENT:    5.3 RSSH validate (4.x done) ──┐
-SHARED:   5.1 OTA, 5.2 URLs ─────────────┼──► FULL_ALPHA (LAN + RSSH + RBAC)
-DEV:      6.2 LAN soak ─────────────────┘
-
-Deferred (not on graph):  2.1 → 2.2 → 2.3 → 2.5 → 5.4 mail E2E
-
-Parallel: 6.1/6.3–6.6, 9.x, router WG DNAT, Android APK rebuild (WG route fix)
+Off graph:  2.x DNS/mail (postponed)
+Parallel:   6.1/6.3–6.6, 9.x (no globe), SFU post-alpha
 ```