[Epic] Feature parity with interlinedlist.com — evaluation and tracking

[Adron]

Feature parity with interlinedlist.com — tracking epic

Scope: everything the web app at https://interlinedlist.com does that the iOS client
does not, excluding billing/subscription management (never ships on iOS — App Store
Guideline 3.1.1) and the web-only surfaces listed under Out of scope below.

Evaluated: 2026-09-06, against backend ~/Codez/interlinedlist (Next.js, 228 API route
files / 296 verb+path pairs) and iOS origin/main @ 625a19b (121 Swift sources: 60 views,
19 services, 26 models; 104+ distinct verb+path call sites).

---

1 · Method

Four passes, cross-checked, backend source as ground truth:

1. Endpoint diff — every app/api/**/route.ts (verb + path + auth helper:
   getCurrentUserOrSyncToken = Bearer-OK, getCurrentUser = session-only/mobile-blocked)
   diffed mechanically against every "/api/…" string in APIClient*.swift.
2. Surface diff — every web page (app/**/page.tsx) and feature component
   (components/{lists,documents,messages,messages-dm,organizations,settings,user,sharing, scheduled,notifications,follows,shared}) compared to the corresponding iOS view.
3. Dead-code sweep — every APIClient function with zero call sites outside the
   client itself. This is what the endpoint diff alone misses: an endpoint that is "consumed"
   by a function no screen ever calls is a missing feature, not a covered one. It found
   muteUser, trashDM, restoreDM, addOrganizationMember, joinOrganization,
   organizations, refreshMessageMetadata and more.
4. Payload-key check — iOS request bodies vs. the fields the backend route actually
   destructures. Found one silent data-loss bug (defaultVisibility → ignored).

Prior analysis lives in work-consolidation.md; this
epic supersedes it for open work and corrects it in three places (see §5).

---

2 · Where iOS already is at parity ✅

Auth (email/password + OAuth: GitHub, LinkedIn, Twitter/X, Mastodon, Bluesky) · registration,
email verification, password reset, change email, sessions, delete account · feed with
compose (multi-image, video, tags, trending-tag strip, live link previews, scheduling,
cross-posting, post-as-organization), digs, replies/threads, edit, delete, search · lists
(CRUD, nesting via parentId, schema editor, rows, GitHub-backed lists with open/closed
filter, watchers, list connections, share links + email invites, lists shared with me,
public lists on profiles) · documents (CRUD, folders, markdown editor + toolbar, offline
sync with conflict merge, collaborators, share links + invites, templates, public reader) ·
DMs (inbox/sent/deleted folders, threads, send, image attachments, unread badge) ·
notifications (list, mark read, mark all read, delete, per-event channel preferences) ·
profiles (follow/unfollow, follow requests, followers/following, block, report, CSV exports:
messages/lists/list-data-rows/follows) · organizations (create, edit, delete, members, role
changes, post as org) · sharing (unified sharing screen for lists + documents) · AI writing
assistance (composer assistant, message series, article series, powered templates, powered
document — shipped in #43) · deep links (profile, /message/:id, /documents/:id, share
tokens) · push notifications.

3 · Out of scope (do not build)

• Billing / subscription / Stripe — Guideline 3.1.1. Subscriber-only features are hidden
  for free users, never paywalled, never linked out, no price copy anywhere.
• AI key entry / provider picker — AI is a subscriber entitlement on the app's own
  server-side key. There are no per-user LLM keys. Gate on aiStatus().subscriber alone.
• Dashboard + front-wall widget layouts, engagement stats, weather/transit/markets widgets,
  admin console, blog + blog subscriptions, architecture-aggregates, /embed/*, /api-docs,
  marketing pages (/features, /pricing, /products, /about).
• Multi-account switching (/api/auth/{accounts,switch,remove-account}) — session-only on
  the backend; a Bearer client cannot use it.
• GET /api/users/lookup — unused by the web app too.
• Realtime: there is no SSE/WebSocket anywhere in the product. Polling is the pattern.

4 · Workstreams

Nine independent lanes, sized so several can run concurrently. The index below is filled in
with the issue numbers.

Lane	Theme	Primary files (ownership boundary)
W1	Ship work already written	feat/create-from-and-github-depth branch
W2	Moderation, privacy, account settings	SettingsView, EditProfileView, UserProfileView, FeedView menus, Models/User.swift
W3	Direct messages	MessagesInboxView, DMThreadView, Models/DirectMessage.swift
W4	Organizations	OrganizationsView, APIClient+OrganizationLinkedIn.swift
W5	Documents	DocumentsView, APIClient+Documents*.swift
W6	Lists	ListsView (ListDetailView), ListItemFormView
W7	Deep links & permalinks	InterlinedListApp.swift, ILWebURL.swift
W8	Papercuts	scattered — small, sequence them under one owner
W9	Cross-device settings sync	new APIClient+AppSettings.swift

5 · Corrections to work-consolidation.md

It says	Correction
P6 — "batch reply counts … perf win for the feed"	Wrong. POST /api/messages/:id/reply-counts refreshes cross-post reply counts from Bluesky/Mastodon/LinkedIn/X for one message on its detail view (lib/crosspost/reply-counts.ts, 10-min cache). It is a feature gap, not a perf item.
"Documents shared with me — the web lacks it too. Parity holds."	Wrong. The web ships it: app/documents/layout.tsx calls getSharedDocuments(user.id) and renders SharedDocumentsList ("Shared with me"). It is server-rendered, which is why the endpoint diff missed it. Real gap, blocked on backend ask A11.
"bare /lists/:id permalink — backend-limited (no owner in URL)"	Stale. GET /api/lists/:id is Bearer-ready and authorizes by role (owner/manager/collaborator/watcher), so no owner username is needed. The same stale claim is repeated in a comment in InterlinedListApp.swift.

6 · Working agreement (applies to every issue in this epic)

• Work in your own git worktree, with your own simulator UDID and your own
  -derivedDataPath. Two worktrees testing on one UDID kill each other's runner and can
  execute the other worktree's bundle (see the hazard note in CLAUDE.md).
• New endpoints go in APIClient+<Feature>.swift, never appended to the APIClient.swift
  class body. The HTTP seam in APIClientTransport.swift is deliberately internal so that
  per-feature extension files compile.
• Pick the encoder per endpoint. postCamel/putCamel/patchCamel for the many
  camelCase endpoints; post/put/patch for snake_case. Check the neighbouring method
  before adding one — and verify the key names the route actually destructures (see the
  defaultVisibility bug for what happens when they don't match).
• Register every new .swift file in project.pbxproj (xcodeproj gem) — no synced groups.
• SOLID/KISS house rules: no force-unwrap in production paths, no DispatchQueue.main.async
  (use @MainActor), #Preview in every view file, .accessibilityLabel on every
  non-obvious control, private internals, comments only where the why is non-obvious.
• A feature-endpoint 401 is not a logout — call authState.handleUnauthorized().
• Verification is mandatory: build + full unit suite green (pinned UDID,
  -parallel-testing-enabled NO, -skip-testing:InterlinedListTests/E2EReadOnlyTests)
  before a PR is marked ready.

7 · Index

W1 · Ship work already written

• W1: Land Thread C — "Create from…" (G16) and GitHub label/assignee pickers (G18) #45 — Land Thread C: "Create from…" (G16) + GitHub label/assignee pickers (G18) — S, highest value/hour

Tier 0 · Broken shipped behaviour

• Bug: "Default to public" never persists — iOS sends defaultVisibility, the API reads defaultPubliclyVisible #46 — Bug: "Default to public" never persists (defaultVisibility vs defaultPubliclyVisible) — XS
• W7: Open the web canonical permalinks in-app (/user/:u/status/:id, list and document permalinks) #61 — Web permalinks don't open in-app; /user/:u/status/:id opens the profile instead of the post — S–M (also W7)

W2 · Moderation, privacy, account settings

• Bug: "Default to public" never persists — iOS sends defaultVisibility, the API reads defaultPubliclyVisible #46 — the default-visibility bug (land first — it touches updateUserSettings)
• W2: Mute a user from the profile and post menus #47 — Mute a user from the profile and post menus — S
• W2: Private-account toggle in Settings (isPrivateAccount) #48 — Private-account toggle (isPrivateAccount) — S
• W2: View preferences — feed scope, page size, link previews, notification tray limit #49 — View preferences: feed scope, page size, link previews, tray limit — M

W3 · Direct messages

• W3: Trash and restore direct messages #50 — Trash and restore direct messages — S–M
• W3: Grouped DM inbox via GET /api/dm/conversations #51 — Grouped DM inbox via GET /api/dm/conversations — M

W4 · Organizations

• W4: Add members to an organization; browse and join public organizations #52 — Add members; browse and join public organizations — M
• W4: Organization LinkedIn management (G19) #53 — Organization LinkedIn management (G19) — M (verify the backend flag first)

W5 · Documents

• W5: "Shared with me" documents (needs a backend route — A11) #54 — "Shared with me" documents — M, blocked on A11 (Backend asks blocking iOS parity — A8, A9, A11, A12 (+ A10 docs) #66)
• W5: Rename a document folder #55 — Rename a document folder — XS
• W5: Live document presence — "N people viewing" (G11) #56 — Live document presence, "N people viewing" (G11) — M
• W5: Seed the default document templates (P8) #57 — Seed the default document templates (P8) — XS

W6 · Lists

• W6: List contributors (P7) #58 — List contributors (P7) — S
• W6: Schedule a message from a list row #59 — Schedule a message from a list row — S
• W6: Sort, filter and search rows inside a list #60 — Sort, filter and search rows inside a list — M

W7 · Deep links

• W7: Open the web canonical permalinks in-app (/user/:u/status/:id, list and document permalinks) #61 — Open the web canonical permalinks in-app — S–M

W8 · Papercuts

• W8: Cross-post reply counts on a message detail (P6, re-scoped) #62 — Cross-post reply counts on a message detail (P6, re-scoped) — S
• W8: Identity status for Bluesky, Mastodon and GitHub (P5) #63 — Identity status for Bluesky, Mastodon, GitHub (P5) — S
• W8: Sweep APIClient for endpoints no screen calls #64 — Sweep APIClient for endpoints no screen calls — S, run last

W9 · Infrastructure (not web parity)

• W9: Cross-device app-settings sync (G21) #65 — Cross-device app-settings sync (G21) — M

Backend

• Backend asks blocking iOS parity — A8, A9, A11, A12 (+ A10 docs) #66 — Backend asks: A8 (Bearer on profile-wall messages), A9 (Bearer on invite acceptance), A11 (documents shared-with-me route), A12 (docs), A10 (AI doc fix)

Suggested order

1. W1: Land Thread C — "Create from…" (G16) and GitHub label/assignee pickers (G18) #45 (land what's built) and Bug: "Default to public" never persists — iOS sends defaultVisibility, the API reads defaultPubliclyVisible #46 (data-loss bug) in parallel — both are small and both are
   already-broken-or-already-written.
2. Backend asks blocking iOS parity — A8, A9, A11, A12 (+ A10 docs) #66 filed against the backend immediately, because W5: "Shared with me" documents (needs a backend route — A11) #54 cannot start without A11 and
   W7: Open the web canonical permalinks in-app (/user/:u/status/:id, list and document permalinks) #61's dig-state fix wants A8.
3. Then the lanes in parallel: W2 (W2: Mute a user from the profile and post menus #47→W2: Private-account toggle in Settings (isPrivateAccount) #48→W2: View preferences — feed scope, page size, link previews, notification tray limit #49, one owner, shared files), W3, W4, W5, W6, W7.
4. W8: Sweep APIClient for endpoints no screen calls #64 last — the sweep is only meaningful once the wiring issues have landed.

[Adron]

Batch update — 2026-09-15

Worked the open issues in dependency order. 11 PRs open, one issue closed as blocked, one
confirmed still blocked, and 9 new issues filed from what the work turned up.

PRs by issue

Issue	PR	Base	Notes
#46	#75	main	Tier 0 data-loss bug + the required payload-key sweep
#48	#81	#75	stacked — both edit updateUserSettings
#49	#82	#81	stacked
#57	#83	main
#62	#84	main
#59	#85	main
#51	#86	main
#60	#87	main
#56	#88	main
#65	#89	#82	stacked — needs the view-preference fields on User
#64	#90	main	run last, as this epic specifies

Merge order for the stack: #75 → #81 → #82 → #89. The other seven are independent of each other
and of the stack.

Closed / still blocked

• W4: Organization LinkedIn management (G19) #53 closed as blocked. Its own precondition failed: production reports
  {"orgScopesEnabled":false}, so the org LinkedIn screen would ship with a connect action that
  cannot complete. Reopen when the flag flips.
• W5: "Shared with me" documents (needs a backend route — A11) #54 still blocked on A11. Re-verified: no shared-with-me route, no ?scope=shared handling,
  and getSharedDocuments still has exactly one server-side caller.
• Backend asks blocking iOS parity — A8, A9, A11, A12 (+ A10 docs) #66: A8 and A9 are done — both now use getCurrentUserOrSyncToken. A11, A12 and A10 remain.

New issues filed

Found by the payload-key sweep #46 required:

• Bug: editing a message does nothing — PATCH /api/messages/{id} is the reschedule route, not an edit route #76 — editing a message does nothing; PATCH /api/messages/{id} is the reschedule route and
  no route anywhere accepts a content edit. The web has no edit surface either.
• Bug: unlinking a connected account always fails — provider sent in the body, route reads the query string #77 — unlinking a connected account always 400s; iOS sends provider in the body, the route
  reads the query string.
• Backend: POST /api/user/change-email/request never verifies the password iOS sends #78 — change-email/request accepts a password and never verifies it.

Found while reviewing light/dark/system theme support:

• Bug: Theme "System" never persists — nil optional is omitted, so the route never clears the stored theme #79 — Theme "System" never persists (same nil-omission class as Bug: "Default to public" never persists — iOS sends defaultVisibility, the API reads defaultPubliclyVisible #46).
• Theme: apply the saved theme pre-auth and offline; adopt the Strata dark palette #80 — theme not applied pre-auth or offline; Strata dark palette essentially unused.

Split out of #64 rather than wiring untested paths inside a hygiene sweep:

• W8: Refresh link-preview metadata after publishing a message #91 — refresh link-preview metadata after publishing.
• W2: Surface OAuth token health in Connected accounts (verifyIdentity) #92 — surface real OAuth token health in Connected accounts.

Note on repo state

My local dev was 36 commits behind origin/main, which made #45/#47/#50/#52/#55/#58/#61/#63 look
unimplemented on a first pass. They are all correctly in main — no roll-up hazard this time. All
work above is cut from origin/main.

[Adron]

Final batch state — 2026-09-16

18 PRs open. Every issue from the working list is either PR'd and closed, or commented with the
specific decision blocking it.

PRs, by merge chain

A   #75 → #81 → #82 → #89
B   #93 → #99
C   #97 → #101
D   #94 → #103 → #106      (squash #103+#106 — #106 deletes a conversion #103 added)
E   #107 → #109
    #83 #84 #85 #86 #87 #88 #90    independent of everything

Issue	PR	Issue	PR
#46	#75	#79	#97
#48	#81	#80 (gaps 1–3)	#101
#49	#82	#91	#94
#51	#86	#92	#99
#56	#88	#96	#103
#57	#83	#104	#106
#59	#85	#105	#107
#60	#87	#108	#109
#62	#84	#64	#90
#65	#89	#77	#93

Awaiting a decision, not code

• Bug: editing a message does nothing — PATCH /api/messages/{id} is the reschedule route, not an edit route #76 — should message editing exist at all? Rescheduling works; content editing has never worked
  on either client. The cross-post question (re-push / remote-edit / go stale) probably decides the
  design, and there is no editedAt column.
• Backend: POST /api/user/change-email/request never verifies the password iOS sends #78 — verify the password or drop the field? Verifying may lock out OAuth-only accounts with no
  password hash.
• Backend asks blocking iOS parity — A8, A9, A11, A12 (+ A10 docs) #66 / W5: "Shared with me" documents (needs a backend route — A11) #54 — A11 is plumbing (getSharedDocuments already returns the shape), with one open
  question about pagination convention. Half of A10 appears already done.
• Theme: adopt the Strata dark palette across the app (dark mode is currently generic iOS) #98 — how branded should dark mode be? Three options laid out.
• Backend: /api/user/identities/verify reports success for unrecognised providers without verifying anything #100 — /identities/verify returns 200 "success" for unrecognised providers without checking.
• AccentColor is configured correctly but not honoured — system controls fall back to blue #102 — AccentColor is configured correctly but not honoured; .tint() is an unexplained
  workaround, and it does not cross into sheets.
• Hoist a shared query-value encoder — six call sites still use raw .urlQueryAllowed for user-typed values #95 — collapse three copies of the query-value encoder; wants feat(messages): group the DM inbox by conversation #86 and fix(identities): send unlink provider as a query param #93 merged first.

What the work turned up beyond the original list

Nine new issues, most from bugs that were green in CI:

• Bug: editing a message does nothing — PATCH /api/messages/{id} is the reschedule route, not an edit route #76, Bug: unlinking a connected account always fails — provider sent in the body, route reads the query string #77, Backend: POST /api/user/change-email/request never verifies the password iOS sends #78, Backend: /api/user/identities/verify reports success for unrecognised providers without verifying anything #100 — the request-body sweep and the verify route.
• Bug: refreshMessageMetadata decodes a response shape the route never sends — always returns [] #104 — refreshMessageMetadata decoded a shape the route never sends, returning [] forever.
  Its test passed because the fixture was invented to match the wrong assumption.
• Bug: FeedView cannot see in-place row updates — merges only unseen ids, keyed on count #105, Bug: deleting a feed post leaves it in the persisted cache — reappears after relaunch #108 — FeedView renders from a private working copy; in-place updates were invisible and
  deletes never reached the persisted cache.
• Bug: Theme "System" never persists — nil optional is omitted, so the route never clears the stored theme #79, Theme: apply the saved theme pre-auth and offline; adopt the Strata dark palette #80/Theme: adopt the Strata dark palette across the app (dark mode is currently generic iOS) #98, Hoist a shared query-value encoder — six call sites still use raw .urlQueryAllowed for user-typed values #95, W8: Fold the refreshed link metadata into the just-posted feed row #96, AccentColor is configured correctly but not honoured — system controls fall back to blue #102 — theme, encoding and polish.

The recurring shape is worth naming: four separate defects were invisible because the test asserted
a contract nobody had checked against the route. /ios-review now carries the payload-key check and
a zero-call-site sweep, but fixtures written from Swift types rather than route source remain the gap.

Caveat on all of it

main has none of this. Fourteen-plus issues are closed with their code entirely in open PRs, and
the stacks want merging in order. Known conflict surfaces: project.pbxproj and
APIClientProfileTests.swift (#75 and #97 both add tests near the same point).

Nothing in these PRs has been verified against a live account — every PR states its own unverified
criteria explicitly.