diff options
| author | Christian Cleberg <[email protected]> | 2026-07-16 00:03:06 -0500 |
|---|---|---|
| committer | Christian Cleberg <[email protected]> | 2026-07-16 00:03:06 -0500 |
| commit | 76cb006b87d30928ec23a3c4bf95bd145aad8e9c (patch) | |
| tree | 0b475c706fca713abf633fb673ff0061c162e2db /SCOPE.md | |
| parent | 8ee93a6a6a0e771b687d1f48a59fb896ae0456e5 (diff) | |
| download | hutch-76cb006b87d30928ec23a3c4bf95bd145aad8e9c.tar.gz hutch-76cb006b87d30928ec23a3c4bf95bd145aad8e9c.tar.bz2 hutch-76cb006b87d30928ec23a3c4bf95bd145aad8e9c.zip | |
chore: bump to 3.8.0 and record Phase 3 API features
MARKETING_VERSION 3.7.0 -> 3.8.0, build 89 -> 90.
SCOPE.md gains the items that did not survive contact with the API: archiveMessage
and mailingListSubscribe are blocked, while webhooks, shareSecret, and build
groups are reachable but declined on judgement. The reasoning is recorded so
they do not get re-proposed as gaps.
ROADMAP.md notes that Phase 3 is several releases rather than one, with the
measured size of each.
Diffstat (limited to 'SCOPE.md')
| -rw-r--r-- | SCOPE.md | 21 |
1 files changed, 21 insertions, 0 deletions
@@ -7,3 +7,24 @@ - Explore / search (hub.sr.ht) (no public discovery API) - Pronouns on profile (not in GraphQL schema) - Revoke personal access tokens (`@internal` in schema, inaccessible) +- Archive a message to a list (`archiveMessage` is `@internal`, inaccessible) +- Subscribe to a mailing list (`mailingListSubscribe` exists, but `MailingList` + has no `subscription` field and sr.ht has no discovery API, so there is no way + to find a list you are not already subscribed to — see hub.sr.ht above) +- Submitting patches (a `git send-email` flow, not a GraphQL mutation; Hutch + reviews patchsets but cannot send them) + +## Declined rather than blocked + +These are reachable in the API. They are left out on judgement, not capability. + +- **Webhook management** (24 fields across five services). A webhook needs an + HTTPS endpoint you control to receive POSTs. Without the relay above, this + only serves someone already running their own endpoint, and that person is not + managing it from a phone. Reconsider if `hutch-notify` ever ships. +- **`shareSecret`.** Shares a build secret — an SSH key or PAT — with another + user. A mistap grants someone else a credential, and nothing in the app can + take it back. That belongs on the web behind a full-size confirmation. The + read-only `secrets` list would be fine on its own. +- **Build groups** (`createGroup`, `startGroup`). Multi-job pipelines are + authored in `.build.yml`, not composed on a phone. |