Donate to Postulo/postulo

• https://buymeacoffee.com/tiagoagueda

---

See the documentation for more details on donation links.

Give SyncLink a collection, a slot, unbind and a lookup by UID (#326) #1079

Merged

tiagoagueda merged 1 commit from 326-synclink-slots into main 2026-10-29 18:25:40 +00:00

Conversation 0 Commits 1 Files changed 90 +1394 -16

tiagoagueda commented 2026-10-28 16:05:10 +00:00

Owner

• Copy link
• Copy Markdown

The DAV plugin's next improvements need a link to say three things it could
not: which collection a twin lives in, which of a record's several twins it
is, and that a person undid a pairing. A plugin cannot own tables (#228), so
they belong on SyncLink.

• collection is the address of the address book, calendar or task list
  holding the twin. A UID is unique only within its collection (RFC 6352
  §5.1, RFC 4791 §4.1), so a twin is keyed on both and remote_href is a
  cache.
• slot is free text a plugin chooses; blank is the only twin, which every
  existing row is. One link per (connection, record, slot) replaces one per
  (connection, record). for_record and bind take slot="", of_model
  returns every slot.
• (connection, collection, uid) is unique among paired links where both are
  set, so one remote item is paired with one record. bind raises
  AlreadyPaired, carrying the link that holds the item, instead of a bare
  IntegrityError. It is on the plugin surface.
• unbind keeps the row and sets unpaired_at, the maintainer's option (b):
  a plugin pairing by UID would otherwise pair the two again on its next run.
  An unpaired row does not count towards the rule above. bind pairs again,
  clearing unpaired_at and, unless passed, remote_gone.
• for_remote(connection, collection, uid) finds the paired link, else the
  one most recently unpaired.

The migration adds the three columns blank, so it keeps every link, including
two holding one UID on a re-added connection (postulo/postulo-dav#7), which
the new rule does not reach while their collection is blank. Pairings stay
out of the personal export. No admin registration: the admin is off unless
POSTULO_ADMIN_URL is set (#116) and holds nobody's records (#368).

Closes #326

Notes for review

• SyncLink gains three fields:
  • slot, so one record can have several twins: unique on (connection, record, slot);
  • collection, so one item belongs to one record: unique on (connection, collection, uid) for paired rows;
  • unpaired_at, plus a paired property.
• New calls:
  • for_remote;
  • bind(slot=…), which raises the new surface name AlreadyPaired instead of a database error;
  • unbind, which keeps the row and stamps unpaired_at, as the issue recommends.
• Migration: plugins 0013_synclink_slots. Every existing link is kept.
• Not built: the staff view (point 6). The admin is off unless POSTULO_ADMIN_URL is set (#116), and it holds nobody's records by rule (#368, test_admin_exposure).
• Follow-up: postulo-dav must check link.paired before #327 can unpair links, filed there.

🤖 Generated with Claude Code

The DAV plugin's next improvements need a link to say three things it could not: which collection a twin lives in, which of a record's several twins it is, and that a person undid a pairing. A plugin cannot own tables (#228), so they belong on SyncLink. - `collection` is the address of the address book, calendar or task list holding the twin. A UID is unique only within its collection (RFC 6352 §5.1, RFC 4791 §4.1), so a twin is keyed on both and `remote_href` is a cache. - `slot` is free text a plugin chooses; blank is the only twin, which every existing row is. One link per (connection, record, slot) replaces one per (connection, record). `for_record` and `bind` take `slot=""`, `of_model` returns every slot. - (connection, collection, uid) is unique among paired links where both are set, so one remote item is paired with one record. `bind` raises `AlreadyPaired`, carrying the link that holds the item, instead of a bare IntegrityError. It is on the plugin surface. - `unbind` keeps the row and sets `unpaired_at`, the maintainer's option (b): a plugin pairing by UID would otherwise pair the two again on its next run. An unpaired row does not count towards the rule above. `bind` pairs again, clearing `unpaired_at` and, unless passed, `remote_gone`. - `for_remote(connection, collection, uid)` finds the paired link, else the one most recently unpaired. The migration adds the three columns blank, so it keeps every link, including two holding one UID on a re-added connection (postulo/postulo-dav#7), which the new rule does not reach while their collection is blank. Pairings stay out of the personal export. No admin registration: the admin is off unless POSTULO_ADMIN_URL is set (#116) and holds nobody's records (#368). Closes #326 ## Notes for review - **`SyncLink` gains three fields:** - `slot`, so one record can have several twins: unique on (connection, record, slot); - `collection`, so one item belongs to one record: unique on (connection, collection, uid) for paired rows; - `unpaired_at`, plus a `paired` property. - **New calls:** - `for_remote`; - `bind(slot=…)`, which raises the new surface name `AlreadyPaired` instead of a database error; - `unbind`, which keeps the row and stamps `unpaired_at`, as the issue recommends. - **Migration:** `plugins 0013_synclink_slots`. Every existing link is kept. - **Not built:** the staff view (point 6). The admin is off unless `POSTULO_ADMIN_URL` is set (#116), and it holds nobody's records by rule (#368, `test_admin_exposure`). - **Follow-up:** postulo-dav must check `link.paired` before #327 can unpair links, filed there. 🤖 Generated with [Claude Code](https://claude.com/claude-code)

tiagoagueda added 1 commit 2026-10-28 16:05:11 +00:00

Give SyncLink a collection, a slot, unbind and a lookup by UID (#326) ... c7ee4ec421

The DAV plugin's next improvements need a link to say three things it could
not: which collection a twin lives in, which of a record's several twins it
is, and that a person undid a pairing. A plugin cannot own tables (#228), so
they belong on SyncLink.

- `collection` is the address of the address book, calendar or task list
  holding the twin. A UID is unique only within its collection (RFC 6352
  §5.1, RFC 4791 §4.1), so a twin is keyed on both and `remote_href` is a
  cache.
- `slot` is free text a plugin chooses; blank is the only twin, which every
  existing row is. One link per (connection, record, slot) replaces one per
  (connection, record). `for_record` and `bind` take `slot=""`, `of_model`
  returns every slot.
- (connection, collection, uid) is unique among paired links where both are
  set, so one remote item is paired with one record. `bind` raises
  `AlreadyPaired`, carrying the link that holds the item, instead of a bare
  IntegrityError. It is on the plugin surface.
- `unbind` keeps the row and sets `unpaired_at`, the maintainer's option (b):
  a plugin pairing by UID would otherwise pair the two again on its next run.
  An unpaired row does not count towards the rule above. `bind` pairs again,
  clearing `unpaired_at` and, unless passed, `remote_gone`.
- `for_remote(connection, collection, uid)` finds the paired link, else the
  one most recently unpaired.

The migration adds the three columns blank, so it keeps every link, including
two holding one UID on a re-added connection (postulo/postulo-dav#7), which
the new rule does not reach while their collection is blank. Pairings stay
out of the personal export. No admin registration: the admin is off unless
POSTULO_ADMIN_URL is set (#116) and holds nobody's records (#368).

Closes #326

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

tiagoagueda referenced this pull request 2026-10-29 10:03:39 +00:00

Cache what every CI job rebuilt, and fetch no map tiles in tests (#1033) #1083

tiagoagueda force-pushed 326-synclink-slots from c7ee4ec421 to c3355db385 2026-10-29 10:27:16 +00:00 Compare

tiagoagueda force-pushed 326-synclink-slots from c3355db385 to 4ea7edd5f9 2026-10-29 18:22:47 +00:00 Compare

tiagoagueda merged commit d72621a967 into main 2026-10-29 18:25:40 +00:00

tiagoagueda deleted branch 326-synclink-slots 2026-10-29 18:25:43 +00:00

tiagoagueda referenced this pull request from a commit 2026-10-29 18:25:43 +00:00

Give SyncLink a collection, a slot, unbind and a lookup by UID (#326) (#1079)

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels   

accessibility

Usable by everyone, including people with disabilities: one of the project's stated missions

  

authentication

Signing in, and proving who you are

  

breaking change

Changes behaviour or data in a way operators must act on

  

bug

Something does not do what it says it does

  

documentation

The wiki, the docs, or the words in the interface

  

enhancement

An improvement or a new capability

  

interface

The shape of the pages: what is where, and how it reads

  

internationalisation

Languages, regions, and the formats and symbols that go with them

  

observability

What an operator can see about a running instance: metrics, logs, health

  

performance

Uses fewer resources, or is more reliable, with no loss of features or accessibility

  

security

Keeping the code and the data secure: one of the project's stated missions

  

tier

1

Easy: small, self-contained, no prerequisites

  

tier

2

High-severity security: account access, personal data, the boundaries

  

tier

3

Foundations: prerequisite work that unblocks other issues

  

tier/4

Later: large features and long-horizon work

No labels

accessibility

authentication

breaking change

bug

documentation

enhancement

interface

internationalisation

observability

performance

security

tier

1

tier

2

tier

3

tier/4

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference

Postulo/postulo!1079

No description provided.