You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
Implement staging-only membership and free-event signup/cancellation - #708
Refs #707; does not close until hosted acceptance. Officer impact: A staging-only screen submits pending membership requests/withdrawal and paid-term cancellation intent, and manages free-event signup/cancel. Signup never activates dues or claims. Officer documentation: docs/officers/STAGING_COMMUNITY.md plus entrypoints/maps/cost guide and engineering roots. Deployment evidence: not yet hosted; production and real payments excluded. One isolated communityActions callable/entrypoint; native Auth/App Check, verified mutation account, explicit UID context binding, closed inputs, transactional capacity and saved command/revision fences. No payment/email/role/admin/schedule/dependency change; no legacy migration. Dedicated staging runtime created with exactly four Firestore transaction/get/create/update permissions (project scope, not collection scope); profile IAM unchanged. Fixed owner-only release/Hosting scripts require exact main and six green CI jobs, explicit identities, archive readback, bounded resources and staging-only public configuration. Profile release can inspect but never deploy the one new service. Local evidence: backend7640 pass/66 skipped, frontend1356 pass plus new event UI regression, Rules424 pass, real emulator 20-way final-seat and concurrent cancel plus membership retries/exact expiry, native SDK denials, release guard20 cases, successful diagnostic TypeScript/build and staging artifact verification. Lint snapshot adds four files but no new findings; existing113 errors/6 warnings unchanged. Backup-officer review: clear staging banner/actions/stops, no terminal or secret/data workaround; specialist still supplies/removes fixtures. Hosted browser/race/ownership/source/IAM/cleanup evidence remains required. Rollback is staging-only owner removal/revert of this service; no production operation.
Self-review completed under Dave’s explicit sole-maintainer review/merge override. Reviewed exact head f6c521c: native Auth/App Check, verified mutations and own-account binding, closed typed inputs, transaction read-before-write/capacity, revision and immutable retry receipts, expiry/evidence preservation, no browser writes/roster, bounded reads/rates/resources, redacted failures, fixed source bundle and staging-only owner/quota/runtime/build/Hosting path. Fixed non-string event identifiers and explicit staging quota routing. All six exact-head CI jobs and their steps pass in run38185624900; root safety suite158 passed locally before the quota test, then affected34 passed; no new lint finding/dependency. Production release manifest remains inactive. Officer impact: disposable staging actions only; no paid activation/refund. Officer documentation: STAGING_COMMUNITY.md and listed roots/maps. Deployment evidence: source/CI only at this point; staged native archive, UI and cleanup still required. No production/payment operation authorized.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Refs #707; does not close until hosted acceptance. Officer impact: A staging-only screen submits pending membership requests/withdrawal and paid-term cancellation intent, and manages free-event signup/cancel. Signup never activates dues or claims. Officer documentation: docs/officers/STAGING_COMMUNITY.md plus entrypoints/maps/cost guide and engineering roots. Deployment evidence: not yet hosted; production and real payments excluded. One isolated communityActions callable/entrypoint; native Auth/App Check, verified mutation account, explicit UID context binding, closed inputs, transactional capacity and saved command/revision fences. No payment/email/role/admin/schedule/dependency change; no legacy migration. Dedicated staging runtime created with exactly four Firestore transaction/get/create/update permissions (project scope, not collection scope); profile IAM unchanged. Fixed owner-only release/Hosting scripts require exact main and six green CI jobs, explicit identities, archive readback, bounded resources and staging-only public configuration. Profile release can inspect but never deploy the one new service. Local evidence: backend7640 pass/66 skipped, frontend1356 pass plus new event UI regression, Rules424 pass, real emulator 20-way final-seat and concurrent cancel plus membership retries/exact expiry, native SDK denials, release guard20 cases, successful diagnostic TypeScript/build and staging artifact verification. Lint snapshot adds four files but no new findings; existing113 errors/6 warnings unchanged. Backup-officer review: clear staging banner/actions/stops, no terminal or secret/data workaround; specialist still supplies/removes fixtures. Hosted browser/race/ownership/source/IAM/cleanup evidence remains required. Rollback is staging-only owner removal/revert of this service; no production operation.