Marathon tracking — full-feature product

[tomqwu]

Historical record; policy superseded 2026-09-13. This closed issue records past work, not current execution instructions or production acceptance. The owner requires no CI checks: all code review and validation run locally. Do not recreate the hosted workflows, CI merge gates or hosted reviewer described below. Current work and evidence are tracked in #252, #277-#286, and #191 for native release. Existing closure and historical results do not certify today's workflows or screenshots.

Original historical issue

Autonomous marathon to drive SignUpFlow to a full-feature product. Plan: prioritized P1→P4, continuous issue→PR→merge (CI green + Codex non-FAILURE), sandbox/mock secrets only, run for breadth. This issue is the live monitoring surface — ticked as each PR merges.

P0 — Stability prerequisite

• Fix flaky Flaky unit tier: order-dependent UNIQUE constraint failed: people.id in test_solver_stability.py #143 (Fix order-dependent flake in test_solver_stability (#143) #146) (test_solver_stability order-dependent UNIQUE people.id)

P1 — Web app feature-complete (existing backend)

• 1. Org/account settings (organizations GET/PUT) (P1.1 — web org settings page #148)
• 2. Account & security — change password + profile edit (P1.2 — account & security: profile edit + change password #150)
• 3. Teams admin CRUD + membership (P1.3 — web teams admin: CRUD + membership #152)
• 4. Constraints DSL editor (P1.4 — web constraints DSL editor #154)
• 5. Notifications inbox + unread badge + preferences (P1.5 — web notifications inbox + unread badge + email preferences #156)
• 6. Manual assignment editing (post-solve) (P1.6 — web manual assignment editing #158)
• 7. Solution unpublish + rollback UI (P1.7 — web solution unpublish + rollback #159)
• 8. Analytics drill-down (burnout / health / volunteer-stats) (P1.8 — web analytics drill-down #162)
• 9. Recurring-events UI (P1.9 — web recurring-events series UI #164)
• 10. Admin all-assignments + per-person view (P1.10 — web admin all-assignments + per-person view #166)
• 11. Swap-request review (admin approve/deny) (P1.11 — web swap-request review #168)
• 12. CSV people import (P1.12 — web CSV people import #170)
• 13. UX polish (empty/error states, a11y, responsive, dark-mode parity) (P1.13 — web UX polish pass #172)

P2 — Wire disabled backend features (sandbox/mock)

• 14. Billing (Stripe test mode) + web UI (P2.14 — wire billing router + web billing page #174)
• 15. Email (Mailtrap) — reset/invitation/assignment + templates (P2.15 — email (Mailtrap sandbox) status surface #176)
• 16. SMS (Twilio magic numbers) + budget panel + opt-in (P2.16 — wire SMS router (Twilio sandbox) + admin SMS status #178)
• 17. Notification generation (publish/change/reminder) (P2.17 — generate inbox notifications on publish #180)

P3 — Production launch readiness

• 18. Dockerfile + docker-compose (app + Postgres) (P3.18 — production Docker: package web/, migrate on boot #182)
• 19. Security hardening audit (P3.19 — security hardening: isolation headers + SECRET_KEY guard #184)
• 20. Observability (logging, error hook, /health, /ready) (P3.20 — observability: /ready probe + error-hook gate #186)
• 21. Ops/runbook + pricing page (P3.21 — ops runbook + public pricing page #188)
• 22. CI uplift (web + integration lanes) (P3.22 — CI uplift: run the web test suite in CI #190)

P4 — Mobile revival

• [~] 23. mobile-codegen — BLOCKED (no Java runtime here), filed P2: Regenerate the mobile API client and validate native release #191
• 24. Flutter CI lane (P4.24 — Flutter CI lane for the mobile app #193); parity blocked on codegen (P2: Regenerate the mobile API client and validate native release #191)
• 25. Unpark (README banners) (P4.25 — honest unpark: README banners reflect true status #195)

---

Status comments posted after every merge; rolled-up status each phase / ~5 features.

[tomqwu]

✅ P0 done — #146 merged (5113c0d), closes #143. Order-dependent people.id flake fixed; full unit tier green (326 passed). CI gate is now trustworthy. Starting P1.1 — Org/account settings.

[tomqwu]

✅ P1.1 done — #148 merged (e6164f4). Admin /a/settings (name/region/timezone), reuses the organizations API, e2e-verified. → Starting P1.2 — account & security (profile edit + new authenticated change-password endpoint).

[tomqwu]

✅ P1.2 done — #150 merged. New authenticated POST /auth/change-password (revokes old tokens) + editable profile & password forms on the volunteer profile and admin settings pages; web session re-minted so password change doesn't log you out. 764 tests green, e2e verified. → Starting P1.3 — Teams admin CRUD.

[tomqwu]

✅ P1.3 done — #152 merged. Admin /a/teams: team create/edit/delete + member add/remove, org-scoped, linked from People. 144 web/contract tests green, e2e verified. → Starting P1.4 — constraints DSL editor.

[tomqwu]

✅ P1.4 done — #154 merged. Admin /a/constraints: full CRUD over the constraint DSL (key/type/weight/predicate/params), linked from Solver. 149 tests green, e2e verified. → Starting P1.5 — notifications inbox + unread badge + preferences.

[tomqwu]

✅ P1.5 done — #156 merged. /v/inbox: notifications list + mark-read/all + email-preferences form; unread badge on schedule header. 154 tests green, e2e verified. → Starting P1.6 — manual assignment editing (post-solve).

[tomqwu]

✅ P1.6 done — #158 merged. Admin per-event assignee editor (add/remove with role), linked from each event row. 157 tests green, e2e verified. → Starting P1.7 — solution unpublish + rollback UI.

[tomqwu]

✅ P1.7 done — #159 merged. Solution Review now has Unpublish + Roll-back (audit-eligibility aware) alongside Publish. 162 tests green, e2e verified. → Starting P1.8 — analytics drill-down.

[tomqwu]

✅ P1.8 done — #162 merged. /a/analytics: participation + schedule-health + burnout-risk detail with day/threshold filters, linked from dashboard. 165 tests green, e2e verified. 8/13 P1 features complete. → Starting P1.9 — recurring-events UI.

[tomqwu]

✅ P1.9 done — #164 merged. /a/recurring: list/create/delete recurring series (Alpine conditional pattern + end-condition fields), linked from Events. 169 tests green, e2e verified. 9/13 P1 done. → Starting P1.10 — admin all-assignments + per-person view.

[tomqwu]

✅ P1.10 done — #166 merged. /a/assignments: org-wide assignment list + per-person filter (manual/solver badges). 172 tests green, e2e verified. 10/13 P1 done. → Starting P1.11 — swap-request review (admin approve/deny).

[tomqwu]

✅ P1.11 done — #168 merged. /a/swaps: approve (unassign, SSE fires) / deny (keep) for swap-requested assignments. 177 tests green, e2e verified. 11/13 P1 done. → Starting P1.12 — CSV people import.