Edit or delete your own conversation comments #575

Closed
opened 2026-08-11 14:55:11 +00:00 by timmy · 0 comments
Owner

User problem

Mobile operators can read, reply, and attach screenshots inside issue, pull-request, and unread-update sheets, but cannot correct or retract a comment they just posted without leaving Stackchain for Gitea. This loses focused Today context and makes accidental or sensitive posts costly.

Evidence

  • frontend/dashboard.js renders comment author/time/body with no owned-comment actions.
  • src/gitea_proxy.py and src/main.py expose comment creation only.
  • Existing normalized comments already carry stable comment IDs and authors.
  • Gitea supports PATCH/DELETE on /repos/{owner}/{repo}/issues/comments/{id}.
  • No historical issue/PR/commit title covers editing or deleting posted comments; adjacent #189 edits issue title/body and #503 creates replies.

Acceptance criteria

  • Owned comments in issue, pull, and unread-update conversations expose mobile-sized Edit and Delete actions; other authors’ comments do not.
  • Edit is inline, preserves exact Markdown on failure/cancel, and rerenders the authoritative returned comment without closing the sheet or losing pagination/draft state.
  • Delete requires confirmation and removes only the deleted comment without advancing Today or changing unread state.
  • Server verifies enclosing thread access and comment ownership before upstream mutation; forged/cross-thread/other-author IDs cause no PATCH/DELETE.
  • Offline/failure states never claim success and preserve recoverable edit text.
  • Behavioral backend/frontend tests cover ownership, successful mutation, rejection, and all three conversation entry points; rendered mobile layout has no horizontal overflow and touch targets are at least 44px.
## User problem Mobile operators can read, reply, and attach screenshots inside issue, pull-request, and unread-update sheets, but cannot correct or retract a comment they just posted without leaving Stackchain for Gitea. This loses focused Today context and makes accidental or sensitive posts costly. ## Evidence - `frontend/dashboard.js` renders comment author/time/body with no owned-comment actions. - `src/gitea_proxy.py` and `src/main.py` expose comment creation only. - Existing normalized comments already carry stable comment IDs and authors. - Gitea supports PATCH/DELETE on `/repos/{owner}/{repo}/issues/comments/{id}`. - No historical issue/PR/commit title covers editing or deleting posted comments; adjacent #189 edits issue title/body and #503 creates replies. ## Acceptance criteria - Owned comments in issue, pull, and unread-update conversations expose mobile-sized Edit and Delete actions; other authors’ comments do not. - Edit is inline, preserves exact Markdown on failure/cancel, and rerenders the authoritative returned comment without closing the sheet or losing pagination/draft state. - Delete requires confirmation and removes only the deleted comment without advancing Today or changing unread state. - Server verifies enclosing thread access and comment ownership before upstream mutation; forged/cross-thread/other-author IDs cause no PATCH/DELETE. - Offline/failure states never claim success and preserve recoverable edit text. - Behavioral backend/frontend tests cover ownership, successful mutation, rejection, and all three conversation entry points; rendered mobile layout has no horizontal overflow and touch targets are at least 44px.
timmy self-assigned this 2026-08-11 14:55:11 +00:00
timmy closed this issue 2026-08-11 15:23:17 +00:00
Sign in to join this conversation.
No Milestone
No project
No Assignees
1 Participants
Notifications
Due Date
The due date is invalid or out of range. Please use the format 'yyyy-mm-dd'.

No due date set.

Dependencies

No dependencies set.

Reference: stackchain/stackchain-dashboard#575
No description provided.