trails-cool/trails
1
1
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
trails/openspec/changes/activity-privacy-controls/tasks.md
Ullrich Schäfer 5dd4968626 docs+openspec: prior-art research (Organic Maps, Endurain, wanderer) and 15 proposals 
Add docs/inspirations.md as the durable record of the 2026-07-05/06
prior-art research — per-project learnings with source paths, canonical
credit lines, and the changes each spawned — and extend the
acknowledgment lists in philosophy.md/architecture.md (Organic Maps,
Endurain, wanderer).

New OpenSpec changes (proposal/design/specs/tasks each):
- Organic Maps: elevation-profile-hardening, gpx-parser-robustness,
  hiking-time-estimate, poi-index, hiking-foot-profile
- Endurain: account-export, activity-duplicate-review,
  fit-parsing-hardening, activity-locations, self-hosting-guide,
  activity-privacy-controls
- wanderer: federation-hardening, link-share-tokens
- credits-page (user-visible acknowledgments)

Updated in-flight changes with wanderer prior-art sections:
route-federation, route-discovery.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-07-06 07:23:00 +02:00

1.8 KiB
Raw Blame History

1. Schema

  • 1.1 Add activities.privacy jsonb (typed ActivityPrivacy four-flag shape, default {}) and users.activity_privacy_defaults jsonb + migration

2. Mask helper

  • 2.1 Implement applyActivityPrivacyMask beside stats.ts: flag semantics per design (date-truncated start, label removal, geometry/positions stripping, pace/speed/moving-time removal); unit tests per flag and combined
  • 2.2 Stamp defaults in the shared activity-creation path (upload, provider imports, planner handoff); demo bot and fixtures default to {}

3. Enforcement

  • 3.1 Apply the mask in: activity detail loader, feed/list serializers, api.v1 activity routes, GPX download route, thumbnail endpoint, elevation-series payload
  • 3.2 Federation: build AP objects through the mask (federation-objects.server.ts + outbox); flag edits fire an AP Update; UI copy notes remote copies are best-effort
  • 3.3 Table-driven regression test: fully-flagged fixture requested as non-owner across every activity-serving endpoint → no hidden field present; owner requests → all present

4. UI

  • 4.1 Privacy defaults section in settings (four toggles, i18n en/de, copy explains each flag affects future activities)
  • 4.2 Per-activity toggles on the activity edit surface; "hidden from others" indicators on the owner's detail view
  • 4.3 Coordinate with activity-locations (label obeys hideLocation/hideMap) if that change has landed

5. Docs & verification

  • 5.1 Update the privacy manifest: per-signal controls exist; federation masking semantics; remote-copy caveat
  • 5.2 E2E: set defaults → import → verify masked view as second user; toggle per-activity flag → verify change
  • 5.3 Run pnpm typecheck && pnpm lint && pnpm test && pnpm test:e2e