pal-e-docs

Phase F9: Board Item Management

phase-pal-e-docs-board-item-management Phase

phase
Project
Goal: Enable authenticated users to create and delete board items from the browser, and secure the existing move proxy.
Owner: Dev agent
Repo: forgejo_admin/pal-e-app
Depends on: Phase F5 (auth) — COMPLETED

Scope

  • Auth check on existing PATCH (move) proxy — was completely unprotected
  • POST proxy: src/routes/api/boards/[slug]/items/+server.ts for creating items (authenticated)
  • DELETE proxy + handler on src/routes/api/boards/[slug]/items/[id]/+server.ts (authenticated)
  • "+" create button in column headers (authenticated only) with create modal
  • "x" delete button on cards with confirmation dialog (authenticated only)
  • createBoardItem() and deleteBoardItem() functions in api.ts
  • Optimistic UI updates for create and delete (same pattern as existing move)

Deliverables

  • PR #31 MERGED — feat: board item management (create, delete + auth on move)
  • Issue #28 closed
  • 4 files changed
  • QA found 2 blockers (inconsistent auth pattern in deleteBoardItem, forgejo_issue_url not whitelisted in POST proxy) — both fixed

QA Nits (Epilogue)

  • Create flow is not truly optimistic (waits for API response)
  • deleteSubmitting state effectively dead code
  • ITEM_TYPES hardcoded — could drift from backend
  • Hover-based delete button may have sticky hover on touch devices
  • plan-pal-e-docs — parent plan
  • phase-pal-e-docs-private-notes — F6, sibling phase
  • phase-pal-e-docs-note-editing — F8, sibling phase