Record U4 specs under docs/svc-deploy/ and task-card evidence (SELF go test store/server/app)
Why
Approved proposal r1 §7 U4; sibling of U1 account binding. Enables passwordless activate/recover keys and safe open of existing stores.
Evidence
SELF: cd modules/backend && go test ./internal/store/ ./internal/server/ ./internal/app/ -count=1 (exit 0) — see task card .task/feature-svc-deploy-u4-login-key.md
Why: establish the authorized task workspace and its initial baseline.
Evidence: preserved precheck receipt in .task/feature-svc-deploy-u4-login-key.md; R0=9a9665b458916179df6d94066dfb9aa657a13d60.
Impact: task metadata only; the feature workspace starts at 9a9665b458.
Refs: .task/feature-svc-deploy-u4-login-key.md
Why: wire Dev to the Backend feature that delivers OpenExisting and
one-time login keys for the approved deploy proposal.
Evidence: SELF Backend tests; gitlink 1ba7225.
Impact: Backend gitlink + docs; runtime via new binary.
Refs: .task/feature-svc-deploy-u4-login-key.md
Co-authored-by: Cursor <cursoragent@cursor.com>
Why: Backend #171 HEAD advanced with must_change e2e fix; keep Dev gitlink in sync and mark U4 specs started.
Evidence: Backend go test store/server/app green at 47463a9
Impact: Dev U4 branch tracks Backend PR #171 tip.
Refs: docs/svc-deploy/u4-one-time-login-key.md; Backend pulls/171
Co-authored-by: Cursor <cursoragent@cursor.com>
Why: include the current integration baseline before verification.
Evidence: fetched origin/main=ae465d24441ab349c961a55e9b04f8c4ccaf6de8.
Impact: integrate upstream changes without rewriting task history.
Refs: task-sync
Why: Completion gate requires evidence-tool receipts for go test on the pinned Backend.
Evidence: SELF receipt e4d1d56c… (store/server/app exit 0 at c2d0fdf)
Impact: Task card ready for PR review; merge still owner-only.
Refs: Backend pulls/171; docs/svc-deploy/u4-one-time-login-key.md
Co-authored-by: Cursor <cursoragent@cursor.com>
Why: PR URLs are the task主记录 after push; keep the card discoverable for review.
Evidence: Gitea API created pulls/428 and Backend pulls/171
Impact: Card header points at open PRs; no merge.
Refs: pulls/428; Backend pulls/171
Co-authored-by: Cursor <cursoragent@cursor.com>
Why: Backend #171 landed on main as 1d9e8f4; Dev #428 conflicted on the gitlink against newer main pins.
Evidence: Backend origin/main contains OpenExisting + login_keys (merge #171)
Impact: Dev U4 tracks Backend main tip; unblocks task-sync merge of origin/main.
Refs: Backend pulls/171; Dev pulls/428
Co-authored-by: Cursor <cursoragent@cursor.com>
Why: include the current integration baseline before verification.
Evidence: fetched origin/main=b431777c9fa9c74f096d7f14fce40d1beba53fe2.
Impact: integrate upstream changes without rewriting task history.
Refs: task-sync
Why: task-sync merged origin/main; Backend pin is main tip with #171; refresh SELF evidence for #428.
Evidence: go test store/server/app exit 0 at synced HEAD
Impact: PR #428 should become mergeable.
Refs: Dev pulls/428; Backend #171 (merged)
Co-authored-by: Cursor <cursoragent@cursor.com>
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Summary
47463a9, Backend PR #171): login_keys, restricted sessions, OpenExisting, CLI/HTTPdocs/svc-deploy/and task-card evidence (SELF go test store/server/app)Why
Approved proposal r1 §7 U4; sibling of U1 account binding. Enables passwordless activate/recover keys and safe open of existing stores.
Evidence
cd modules/backend && go test ./internal/store/ ./internal/server/ ./internal/app/ -count=1(exit 0) — see task card.task/feature-svc-deploy-u4-login-key.mdmake test+make build)Impact
Dev gitlink advances to Backend U4 tip. U1/U5 depend on
--open-existingand redeem HTTP. PG tests NOT_RUN without env.Refs
docs/svc-deploy/u4-one-time-login-key.mdfeature/svc-deploy-u1-account-bindingDo not merge — owner double-key.