From e19fd63d1f59f322180bb7e253c06cd772f25ca8 Mon Sep 17 00:00:00 2001 From: Scott Idem Date: Tue, 19 May 2026 19:41:10 -0400 Subject: [PATCH] docs: mark IDAA Novi P5 (frontend migration) complete (2026-05-19) Frontend now calls GET /v3/action/idaa/novi_member/{uuid} instead of making a direct browser-to-Novi call. 503 auto-retry also added same session to match the network-error retry behavior. Co-Authored-By: Claude Sonnet 4.6 --- documentation/TODO__Agents.md | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/documentation/TODO__Agents.md b/documentation/TODO__Agents.md index c186fe9..4b6c259 100644 --- a/documentation/TODO__Agents.md +++ b/documentation/TODO__Agents.md @@ -71,9 +71,10 @@ - Verify email normalization (space → +) - Verify display name format (5 cases) -- [ ] **[P5] Coordinate with Frontend Agent** once P1–P3 are done: - - Frontend replaces direct `fetch()` to Novi in `+layout.svelte:verify_novi_uuid()` - - Map response codes: 200 → verified, 404 → denied, 429 → `'rate_limited'`, 503 → `'api_error'` +- [x] **[P5] Coordinate with Frontend Agent** — **Complete (2026-05-19)** + - Frontend replaced direct `fetch()` to Novi in `+layout.svelte:verify_novi_uuid()` + - Response codes mapped: 200 → verified, 404 → denied, 429 → `'rate_limited'`, 503 → auto-retried (3s, once) then `'api_error'` + - 503 auto-retry added same session to match network-error retry path ## 🛡️ Security & Privacy Baseline (IDAA) - **Status:** **ENFORCED**.