2 Commits

Include renames

Author	SHA1	Message	Date
Kristian WindandClaude Opus 5	2a3367bfe0	fix(web): the label route was written outside the routes tree, and the PWA promised icons that do not exist ... Every label link in the sidebar was dead. The route file landed in web/web/src/routes/ because the shell that created it was already inside web/ — SvelteKit never saw it, so /etiket/<name> fell through to the app shell and rendered nothing. The manifest also listed icon-192.png and icon-512.png, and app.html an apple-touch-icon, none of which were ever generated. A manifest pointing at missing icons is worse than one listing only what exists, so the dead references are gone and the SVG — which Chrome and Firefox install from happily — is what remains. docs: hand over the project HANDOFF.md covers what cannot be read out of the code: why the name is not skuld, the decisions that look strange until you know the reason, what is tested against a real service and what is only tested against its specification, the gaps in the order I would take them, and the traps that cost the most time to find. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>	2026-08-17 08:47:29 +02:00
Kristian WindandClaude Opus 5	12a9597919	feat(web): SvelteKit PWA with the Nordic design system ... The interface for phase 1: sign-in and first-run setup, Today, Upcoming, project views, sharing, Cmd+K search and the keyboard shortcuts. Quick add highlights what the parser understood underneath the text as you type — a mirrored layer behind a transparent input, sliced by byte offset because the server counts bytes and JavaScript counts UTF-16 units, which disagree on exactly the Danish letters this app is full of. Every local action is optimistic and reconciled afterwards: ticking a task off strikes it through and animates it out before the request leaves, and rolls back with a message if the server disagrees. The Content-Security-Policy is computed at startup by hashing the inline scripts in the built index.html. Both of them change on every frontend build, so a hard-coded hash would go stale silently and show up only as a blank page in production. The alternative, 'unsafe-inline', would drop the one protection that makes an injected script in a task title inert. Today is derived from the store by date rather than from the ids that came back with the first request — filtering against a captured list meant a task added through quick add never appeared until a reload. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>	2026-08-17 00:03:20 +02:00