Files
pad/web
xarmian fb7e39e85c fix(web): the collection page's identity fence must be able to recover (BUG-3084) (#1374)
Repair for #1372, found by codex on the next surface in the family.

`pageIdentityHeld()` compares against `identityEpochAtLoad`, and only
`loadCollection` re-stamps that value. The load runs from an effect keyed
on the ROUTE — `wsSlug` / `collSlug` / `showArchived` — and never because
the identity moved. `routes/+layout.svelte` deliberately does NOT reload
the tab on an anonymous -> signed-in transition, so the page stays mounted
with a stale epoch and every `pageIdentityHeld()` is false FOR EVER.

The consequence is silent and permanent: the SSE and sync subscription
callbacks on the collection page return at their first line, so the board
stops receiving live updates and stops healing renames, with nothing on
screen to say so. An anonymous viewer on a public collection who signs in
is enough to reach it.

The fix is that the stale-data condition the fence DETECTS has to be
RESOLVED, not refused indefinitely. The page subscribes to
`authStore.onIdentityChange` and re-runs its load, which re-stamps the
epoch and replaces the previous session's view with this one's — the state
the fence existed to stop being shown in the first place.

The order is the store's contract rather than luck: the epoch is bumped
BEFORE listeners run, and `notifyIdentityChange`'s own comment places the
obligation on a listener to load for the identity signed in NOW rather
than re-issue anything captured earlier. This listener reads the LIVE
route values and captures nothing.

The settings page (#1370) does NOT need this and was checked rather than
assumed: its load effect is keyed on `${sessionUserId}\n${wsSlug}`, so an
identity change re-runs it by itself.

Two further defects found in the same review, both fixed here because both
are in the code this change is about:

  - The listener CLEARS before it re-loads. `loadCollection` leaves the
    current collection, saved views, members and progress on screen for
    the whole round-trip, so re-loading alone would keep the previous
    user's private collection visible across a sign-out. The fences stop
    stale async COMMITS; they say nothing about state already rendered.
    `items` is not cleared here — it derives from `localIndex`, whose own
    identity listener drops the previous user's rows.

  - `leaveDiscard` replays `pendingNav` without an identity check, so a
    draft dialog answered after a sign-in navigates the new user to the
    previous user's destination. It uses `pageIdentityHeld()` rather than
    an entry capture, because the intent was formed when the previous user
    tried to leave and a capture taken at the dialog's answer is already
    the new epoch. The drafts are still discarded — they are the previous
    session's and clearing them is the safe direction — only the
    navigation is withheld.

    This is a commit point with NO AWAIT, which is a population neither
    the function-level enumeration nor the await-counting rules can reach.
    BUG-3084's body predicted this shape exists and said it would be found
    by reading; it was found by a reviewer instead, which is the same
    thing arriving later. It is asserted by name rather than enumerated,
    because "every synchronous function that replays captured intent" is
    not a set a grep can produce, and a rule that cannot enumerate its
    population should not pretend to.

Instruments, each shown able to go red for the case it is named for:

  - The source guard gains three assertions — the subscription exists, it
    re-runs the load (a listener that merely cleared state would leave the
    epoch stale, which is the defect wearing a different shape), and the
    clear precedes the load. Surfaces 3-7 copy this guard, so the property
    is asserted where it will be inherited.
  - The behavioural suite gains a recovery case that drives the real
    sequence — bump the epoch, THEN notify, which is the order the store
    uses — and asserts the page re-loads, that the previous collection is
    not still rendered while it does, and that an SSE event afterwards is
    acted on again. Its fake auth store now dispatches listeners, since
    what a listener does is the whole subject.

Against the page as it stands on main, exactly the two new tests fail and
the other 21 pass. Each of the three fixes was mutated individually: all
three detected (2, 1 and 3 failures respectively).

Gates: `npx vitest run` from web/ — 221 files / 3035 tests, 0 failures;
`npx svelte-check --threshold error` — 0 errors. Codex rounds 1-3: two
P1s, CLEAN, CLEAN.

Claude-Session: https://claude.ai/code/session_01PDYjP67KTAcqpFpo3ijAAA
2026-09-14 17:57:46 -04:00
..
2026-03-26 01:52:36 +00:00
2026-03-26 01:52:36 +00:00
2026-03-26 01:52:36 +00:00
2026-03-26 01:52:36 +00:00

Pad Web UI

SvelteKit 2 + Svelte 5 frontend for Pad, compiled to static files and embedded into the Go binary.

Development

npm install
npm run dev          # Dev server at localhost:5173 (proxies API to localhost:7777)
npm run build        # Production build to build/
npm run check        # Type checking with svelte-check

When developing, run the Go backend separately with make dev from the project root.

Building for Production

Do not build in isolation. Always use make build from the project root — this builds the web frontend, then compiles the Go binary with the build output embedded via //go:embed.

Stack

  • Svelte 5 with runes ($state, $derived, $effect)
  • SvelteKit 2 with adapter-static (SPA mode)
  • Tiptap block editor with markdown round-trip
  • svelte-dnd-action for drag-and-drop in board/list views
  • SSE for real-time updates
  • TypeScript throughout

Structure

src/
  routes/                    SvelteKit pages
    +layout.svelte           App shell (sidebar + main)
    +page.svelte             Landing/redirect
    [workspace]/
      +page.svelte           Dashboard (collections, phases, activity)
      +layout.svelte         SSE connection per workspace
      [collection]/
        +page.svelte         Collection view (board/list)
      [collection]/[item]/
        +page.svelte         Item detail + editor
      conventions/            Purpose-built conventions page
      playbooks/              Purpose-built playbooks page
      settings/               Workspace settings
  lib/
    api/client.ts            HTTP API client
    components/
      layout/                Sidebar, navigation
      editor/                Tiptap editor, raw markdown editor
      fields/                FieldEditor, relation picker
      items/                 ItemCard, ItemDetail
      collections/           BoardView, ListView
      common/                StatusBadge, badges, modals
      search/                CommandPalette
    stores/                  Svelte 5 reactive stores
      workspace.svelte.ts    Workspace state
      collections.svelte.ts  Collection + item state
      ui.svelte.ts           Sidebar, mobile state
    types/index.ts           TypeScript types and constants
  app.css                    Global styles and design tokens