summaryrefslogtreecommitdiff
path: root/SCOPE.txt
blob: 6a4f1802c31079fcc5e57e33c712e727050db40d (plain) (blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
# Out of Scope Features

- Universal links (requires Sourcehut to host an apple-app-site-association
  file)
- Push notifications for builds and tickets (requires a backend relay server)
  - ref: https://git.sr.ht/~ccleberg/hutch-notify
- Explore / search (hub.sr.ht) (no public discovery API)
- ~~Pronouns on profile (not in GraphQL schema)~~ — **stale**. sr.ht added
  pronouns (see the Q1 2026 "What's cooking"), and Hutch already queries them in
  `AppState` and shows them in `UserProfileView`. Left here struck through as
  evidence for the ingestion task in ROADMAP.txt: this entry spent months telling
  people not to build something that was already built.
- Revoke personal access tokens (`@internal` in schema, inaccessible)
- Archive a message to a list (`archiveMessage` is `@internal`, inaccessible)
- Ticket activity feed (todo.sr.ht's root `events` query is broken upstream and
  returns an empty list for every user). `event.participant_id` references
  `participant(id)`, but the resolver joins it against `participant.user_id`:

  ```sql
  FROM event ev
  JOIN participant p ON p.user_id = ev.participant_id   -- id space vs user id space
  WHERE p.user_id = <viewer>
  ```

  The rows exist — the writer inserts `participant.ID` for the submitter and for
  every subscriber — but that join cannot find them. `Ticket.events` is
  unaffected because it filters on `ev.ticket_id`, which is why ticket timelines
  work. Nothing a client can do fixes this; revisit only if sr.ht changes the
  resolver.
- Subscribe to a mailing list (`mailingListSubscribe` exists, but `MailingList`
  has no `subscription` field and sr.ht has no discovery API, so there is no way
  to find a list you are not already subscribed to — see hub.sr.ht above)
- Submitting patches (a `git send-email` flow, not a GraphQL mutation; Hutch
  reviews patchsets but cannot send them)

## Declined rather than blocked

These are reachable in the API. They are left out on judgement, not capability.

- **Webhook management** (24 fields across five services). A webhook needs an
  HTTPS endpoint you control to receive POSTs. Without the relay above, this
  only serves someone already running their own endpoint, and that person is not
  managing it from a phone. Reconsider if `hutch-notify` ever ships.
- **`shareSecret`.** Shares a build secret — an SSH key or PAT — with another
  user. A mistap grants someone else a credential, and nothing in the app can
  take it back. That belongs on the web behind a full-size confirmation. The
  read-only `secrets` list would be fine on its own.
- **Build groups** (`createGroup`, `startGroup`). Multi-job pipelines are
  authored in `.build.yml`, not composed on a phone.