Issues

• Contacts from the shard's own CardDAV address book (attendees, photos, birthdays)

  enhancement
  FreeshardBase/calendar#375 · Filter by author BeSovereign opened on Oct 13, 2026

• Select a real OSS license (currently mislabeled FSL-1.1-ALv2)

  FreeshardBase/calendar#374 · Filter by author ClaydeCode opened on Oct 13, 2026

• ROADMAP: production readiness of the calendar app (tracking)

  architecture
  FreeshardBase/calendar#361 · Filter by author BeSovereign opened on Oct 12, 2026

• MEDIUM: the Radicale image is labelled FSL-1.1 but bundles GPL-3.0 Radicale; plugins import radicale directly

  documentationeffort: Spriority: P2
  FreeshardBase/calendar#360 · Filter by author BeSovereign opened on Oct 12, 2026

• MEDIUM: repo hygiene — secrets and scratch files tracked, main/master split, agent docs untracked and drifted

  documentationeffort: Spriority: P2process
  FreeshardBase/calendar#359 · Filter by author BeSovereign opened on Oct 12, 2026

• MEDIUM: ~88 test files assert on source text instead of behaviour

  bugeffort: Lpriority: P2process
  FreeshardBase/calendar#358 · Filter by author BeSovereign opened on Oct 12, 2026

• HIGH: CI runs neither Playwright nor the Python tests; lint misses nested files; mutation testing covers two files

  bugeffort: Mpriority: P1process
  FreeshardBase/calendar#357 · Filter by author BeSovereign opened on Oct 12, 2026
  2

• MEDIUM: frontend maintainability — 2,467-line app.js, nine copies of the HTML escaper, Tailwind classes without Tailwind

  effort: Menhancementpriority: P3ux
  FreeshardBase/calendar#356 · Filter by author BeSovereign opened on Oct 12, 2026

• MEDIUM: missing preferences and i18n — week start fixed to Monday, 24 h only, no default duration, hard-coded German

  effort: Menhancementpriority: P2ux
  FreeshardBase/calendar#355 · Filter by author BeSovereign opened on Oct 12, 2026

• MEDIUM: sharing UI is a flat list with 'read & write' as default — no member × calendar matrix

  effort: Menhancementpriority: P2ux
  FreeshardBase/calendar#354 · Filter by author BeSovereign opened on Oct 12, 2026

• MEDIUM: first-run and account linking — manual URL typing, Microsoft missing from onboarding, 'Later' is the primary action

  effort: Menhancementpriority: P2ux
  FreeshardBase/calendar#353 · Filter by author BeSovereign opened on Oct 12, 2026

• HIGH: device pairing contradicts zero-friction pairing — app passwords via alert()/prompt(), no server URL, no QR / profile

  effort: Menhancementintegrationpriority: P2ux
  FreeshardBase/calendar#352 · Filter by author BeSovereign opened on Oct 12, 2026

• HIGH: no real mobile layout — a single 768 px breakpoint, week/day views unusable on phones, no touch gestures

  effort: Lenhancementpriority: P2ux
  FreeshardBase/calendar#351 · Filter by author BeSovereign opened on Oct 12, 2026

• HIGH: no direct manipulation — events cannot be created by dragging, moved by drag, or resized; clicks snap to full hours

  effort: Lenhancementpriority: P1ux
  FreeshardBase/calendar#350 · Filter by author BeSovereign opened on Oct 12, 2026

• MEDIUM: search only filters the events already loaded for the visible range

  effort: Menhancementpriority: P2ux
  FreeshardBase/calendar#349 · Filter by author BeSovereign opened on Oct 12, 2026

• MEDIUM: no undo and no trash — every delete is immediate and permanent

  effort: Menhancementpriority: P2ux
  FreeshardBase/calendar#348 · Filter by author BeSovereign opened on Oct 12, 2026

• HIGH: invitations are never delivered — no outbound iTIP (email or CalDAV scheduling)

  effort: Lenhancementintegrationpriority: P2
  FreeshardBase/calendar#347 · Filter by author BeSovereign opened on Oct 12, 2026

• HIGH: recurring events cannot be edited "this and following" — only one occurrence or the whole series

  effort: Menhancementpriority: P2ux
  FreeshardBase/calendar#346 · Filter by author BeSovereign opened on Oct 12, 2026

• HIGH: booking pages offer slots that collide with existing events, and a booking creates no calendar event

  bugeffort: Mpriority: P1
  FreeshardBase/calendar#345 · Filter by author BeSovereign opened on Oct 12, 2026

• MEDIUM: lifecycle & observability — no graceful shutdown, unstructured logs, /health ignores Radicale

  effort: Menhancementpriority: P2
  FreeshardBase/calendar#344 · Filter by author BeSovereign opened on Oct 12, 2026

• HIGH: fail-fast sweep — ~40 swallowed errors in server, sync worker and frontend; schema migrations fail silently and the server starts anyway

  bugeffort: Mpriority: P1
  FreeshardBase/calendar#343 · Filter by author BeSovereign opened on Oct 12, 2026

• HIGH: webcal subscriptions — a parse error wipes the cached events, and recurring events show only their first occurrence

  bugeffort: Sintegrationpriority: P1
  FreeshardBase/calendar#342 · Filter by author BeSovereign opened on Oct 12, 2026
  1

• MEDIUM: public ICS share publishes private event details and attendee emails; a backend failure is served as an empty calendar

  bugeffort: Spriority: P2security
  FreeshardBase/calendar#341 · Filter by author BeSovereign opened on Oct 12, 2026
  1

• MEDIUM: session/OIDC hardening — no PKCE/nonce, no session regeneration, GET logout, no CSRF token, trusted X-Forwarded-Host

  bugdriver-blockedeffort: Mpriority: P2security
  FreeshardBase/calendar#340 · Filter by author BeSovereign opened on Oct 12, 2026
  1

• MEDIUM-HIGH: missing ownership checks — app-password delete, resources, booking-page calendar

  bugeffort: Spriority: P1security
  FreeshardBase/calendar#339 · Filter by author BeSovereign opened on Oct 12, 2026
  1