ubiquitous-invention/plans
Randall Stillwell 336a5890a8 feat(audit): append-only audit_log, workspace archive cascade + restore, audit view
Soft-delete cascade was the missing half of archive: stamping
workspaces.archived_at alone left objects visible to anyone with a
direct id. The cascade runs in one transaction so the partial state
isn't reachable, and restore inverts it for any archived row in the
workspace — provenance-blind on purpose until we have a use case
that needs to distinguish per-workspace from per-object archives.

audit_log keeps the keyset index on (workspace_id, created_at) and
the actor_user_id FK with onDelete set null. recordAudit() refuses
to write a null actor without a metadata.system_actor label so the
audit view always has something to render. workspaces and invites
mutations call recordAudit on success; objects-router instrumentation
and the markdown importer's system-actor flow are filed as P2
follow-ups because each needs a thoughtful "what's audit-worthy?"
pass, not mechanical wiring.

Settings → Audit log lives at /<slug>/settings/audit, owner-gated,
keyset-paginated. ACTION_LABELS is small on purpose; new actions
fall back to their raw key so missing a label degrades gracefully.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-06-02 15:35:16 -05:00
..
Plan-agent-coordination plans: scaffold daily-driver-finish, saas-hardening, agent-coordination 2026-06-01 23:52:22 -05:00
Plan-daily-driver-finish docs(plan): note agent-side prep on collab-editor smoke-test task 2026-06-02 00:26:34 -05:00
Plan-multitenant-cursor-sync feat: ECHODO app shell, Coolify deploy, Authentik + Umami 2026-04-26 14:34:34 -05:00
Plan-multitenant-saas-hardening feat(audit): append-only audit_log, workspace archive cascade + restore, audit view 2026-06-02 15:35:16 -05:00
README.md feat: ECHODO app shell, Coolify deploy, Authentik + Umami 2026-04-26 14:34:34 -05:00

Plans directory

Human- and agent-oriented backlog. Structure:

plans/
  Plan-<plan-slug>/
    Plan-<plan-slug>.md
    Epic-<epic-slug>/
      Epic-<epic-slug>.md
      Task-<task-slug>.md
      Task-<other-task>.md
  • Slug: lowercase, hyphenated, stable across renames of display title when possible.
  • Templates: copy from docs/templates/.
  • Chunking: keep each Task small enough for one Cursor agent or subagent to own; use Epics for milestones that need several tasks.

See docs/Glossary.md and config/CursorSync.md.

Import to database: from the repo root, with DATABASE_URL and your workspace UUID:

pnpm --filter @tasks/database watch:markdown-backlog

Set MARKDOWN_BACKLOG_WORKSPACE_ID (and optionally MARKDOWN_BACKLOG_REPO_ROOT). This runs an initial sync and watches plans/ for changes.