trails/openspec/specs
Ullrich Schäfer 47eb2615ec
Fix high-severity spec drift across 10 specs
- rate-limiting: correct BRouter limit to 300/hour (was 60); add Overpass
  rate-limit requirement (120/min per IP)
- security-hardening: BROUTER_AUTH_TOKEN lives in secrets.app.env, not infra.env
- account-management: email-change verification does not re-auth; existing
  session stays valid
- planner-journal-handoff: full rewrite — documents the actual JWT callback
  architecture (edit-in-planner → POST /api/sessions → callback endpoint),
  token claims, notes round-trip via GPX <metadata><desc>, session lifecycle
- route-drag-reshape: rewrite to describe permanent segment midpoint handles
  (not proximity hover ghost marker); click-to-insert + waypoint drag model
- route-splitting: rewrite to match midpoint handle model; notes geometric
  midpoint placement (not cursor-snapped)
- road-type-coloring: redirect to route-coloring (all requirements already
  covered there)
- osm-tile-overlays: mark profile-aware auto-enable as not yet implemented
  (profileOverlayDefaults exported but not wired)
- osm-poi-overlays: zoom threshold is 10 not 12; user override persistence
  marked as not yet implemented
- shared-packages: add all 7 missing packages (map-core, fit, api, db, jobs,
  sentry-config, correct map description); document map vs map-core boundary

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-24 11:07:03 +02:00
..
account-management Fix high-severity spec drift across 10 specs 2026-05-24 11:07:03 +02:00
activity-feed Archive demo-activity-bot, pg-boss-background-jobs, configurable-demo-persona 2026-05-03 21:17:39 +02:00
authentication-methods Archive unify-auth-completion + sync spec delta (task 5.1) 2026-05-08 03:02:51 +02:00
background-jobs Archive demo-activity-bot, pg-boss-background-jobs, configurable-demo-persona 2026-05-03 21:17:39 +02:00
brouter-integration Archive relocate-brouter-to-dedicated-host 2026-04-24 18:35:37 +02:00
connected-services Archive deepen-connected-services + sync spec deltas 2026-05-08 01:36:19 +02:00
crash-recovery Fix all OpenSpec validation failures (36/36 passing) 2026-04-06 22:17:52 +02:00
demo-activity-bot Archive demo-activity-bot, pg-boss-background-jobs, configurable-demo-persona 2026-05-03 21:17:39 +02:00
e2e-testing Fix e2e-testing spec: add missing Purpose section 2026-05-22 22:01:33 +02:00
elevation-map-interaction Fix all openspec validation errors (45/45 pass) 2026-04-12 22:41:51 +02:00
explore Include the demo persona on /explore so users can follow it 2026-04-26 11:43:24 +02:00
gpx-import Update specs: session-notes, route-coloring, gpx-import 2026-04-11 03:24:54 +02:00
gpx-save Archive atomic-gpx-save + sync gpx-save spec to main 2026-05-10 15:09:15 +02:00
infrastructure Archive demo-activity-bot, pg-boss-background-jobs, configurable-demo-persona 2026-05-03 21:17:39 +02:00
journal-auth Archive mobile-terms-gate + sync spec delta 2026-05-08 02:02:24 +02:00
journal-landing Spec drift catch-up: URLs, settings split, navbar shape 2026-04-26 21:19:02 +02:00
journal-route-detail Archive journal-poi-details change; sync journal-route-detail spec 2026-05-17 23:33:37 +02:00
komoot-import Wire INTEGRATION_SECRET into docker-compose and CI; archive komoot-import 2026-05-23 21:10:08 +02:00
legal-disclaimers Realign legal-disclaimers spec with post-review implementation 2026-04-19 07:33:27 +02:00
local-dev-environment Archive local-dev-stack change; sync delta spec to main 2026-05-17 23:12:24 +02:00
map-core Fix all openspec validation errors (45/45 pass) 2026-04-12 22:41:51 +02:00
map-display Fix all openspec validation errors (45/45 pass) 2026-04-12 22:41:51 +02:00
multi-day-routes Fix all openspec validation errors (45/45 pass) 2026-04-12 22:41:51 +02:00
no-go-areas Fix all OpenSpec validation failures (36/36 passing) 2026-04-06 22:17:52 +02:00
notifications Spec drift catch-up: FIT location, notification payload fields, shared-packages index 2026-05-10 16:02:13 +02:00
observability Spec drift catch-up: URLs, settings split, navbar shape 2026-04-26 21:19:02 +02:00
osm-poi-overlays Fix high-severity spec drift across 10 specs 2026-05-24 11:07:03 +02:00
osm-tile-overlays Fix high-severity spec drift across 10 specs 2026-05-24 11:07:03 +02:00
planner-journal-handoff Fix high-severity spec drift across 10 specs 2026-05-24 11:07:03 +02:00
planner-session Archive demo-activity-bot, pg-boss-background-jobs, configurable-demo-persona 2026-05-03 21:17:39 +02:00
profile-settings Spec drift catch-up: URLs, settings split, navbar shape 2026-04-26 21:19:02 +02:00
public-profiles Spec catchup: drift fixes, account-settings split, notifications archive 2026-04-26 02:02:43 +02:00
rate-limiting Fix high-severity spec drift across 10 specs 2026-05-24 11:07:03 +02:00
road-type-coloring Fix high-severity spec drift across 10 specs 2026-05-24 11:07:03 +02:00
route-coloring Update route-coloring spec with all 10 modes, create follow-up changes 2026-04-11 11:20:17 +02:00
route-drag-reshape Fix high-severity spec drift across 10 specs 2026-05-24 11:07:03 +02:00
route-management Wire INTEGRATION_SECRET into docker-compose and CI; archive komoot-import 2026-05-23 21:10:08 +02:00
route-preview Fix all OpenSpec validation failures (36/36 passing) 2026-04-06 22:17:52 +02:00
route-splitting Fix high-severity spec drift across 10 specs 2026-05-24 11:07:03 +02:00
secret-management Fix all OpenSpec validation failures (36/36 passing) 2026-04-06 22:17:52 +02:00
security-hardening Fix high-severity spec drift across 10 specs 2026-05-24 11:07:03 +02:00
session-notes Sync notes through GPX, Journal, and Planner roundtrip 2026-04-11 03:35:40 +02:00
shared-packages Fix high-severity spec drift across 10 specs 2026-05-24 11:07:03 +02:00
social-follows Add Followed/Public toggle to /feed for signed-in users 2026-04-26 09:03:38 +02:00
sse-broker Spec drift catch-up: URLs, settings split, navbar shape 2026-04-26 21:19:02 +02:00
staging-environment Fix staging-environment spec: add missing Purpose section 2026-05-17 20:43:00 +02:00
transactional-emails Fix all OpenSpec validation failures (36/36 passing) 2026-04-06 22:17:52 +02:00
wahoo-import Spec drift catch-up: FIT location, notification payload fields, shared-packages index 2026-05-10 16:02:13 +02:00
wahoo-route-push Archive deepen-connected-services + sync spec deltas 2026-05-08 01:36:19 +02:00
waypoint-notes Fix spec format and E2E test robustness 2026-05-18 00:10:34 +02:00