From 234f57e0098f6560cba84f13ba58acce8dc4deb6 Mon Sep 17 00:00:00 2001
From: thePR0M3TH3AN <53631862+PR0M3TH3AN@users.noreply.github.com>
Date: Sun, 21 Jun 2026 18:09:50 -0400
Subject: [PATCH] docs(todo): mark encrypted settings sync (#15) complete

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
---
 todo/TODO_2026-06-20_pre-launch.md | 19 +++++++++++--------
 1 file changed, 11 insertions(+), 8 deletions(-)

diff --git a/todo/TODO_2026-06-20_pre-launch.md b/todo/TODO_2026-06-20_pre-launch.md
index 1bcf6814..ae55b88c 100644
--- a/todo/TODO_2026-06-20_pre-launch.md
+++ b/todo/TODO_2026-06-20_pre-launch.md
@@ -190,8 +190,9 @@ across logins/devices via an encrypted Nostr note, unlocked by the logged-in
 signer — so users don't re-enter them on every device. **Opt-in only; off by
 default.**
 
-Status (2026-06-21): shared core + Storage end-to-end SHIPPED to unstable. NWC
-wallet sync and the offer-to-pull-on-login UX remain (next session).
+Status (2026-06-21): COMPLETE — shipped to unstable. Core + Storage + NWC wallet
+sync + offer-to-pull-on-login all live. Follow-ups only: cross-device merge
+(restore currently REPLACES) and upgrading the login confirm() to a styled modal.
 
 Design / approach:
 - [x] Shared **core** `js/nostr/encryptedSync.js` (DI, unit-tested): NIP-78 app
@@ -202,9 +203,10 @@ Design / approach:
       (its `meta` is plaintext — bucket/endpoint names — so transporting the bare
       envelope would leak those). `storageService.exportAccountRecord` /
       `importAccountRecord`; `storageSyncService` (d-tag `bitvid:storage-connections`).
-- [ ] **NWC URI** is a bearer SPENDING secret stored via `nwcSettingsService` —
-      encrypt to self before publishing under d-tag `bitvid:nwc`; gate behind an
-      explicit "any device with your key can spend from this wallet" confirm.
+- [x] **NWC URI** is a bearer SPENDING secret stored via `nwcSettingsService` —
+      encrypted to self under d-tag `bitvid:nwc`; gated behind an explicit
+      window.confirm spend warning. `walletSyncService` + Wallet pane UI.
+      Disconnecting the wallet while synced also wipes the note.
 - [x] **Relay/replaceable lessons applied**: publish to the WRITE relays
       (`getDeletePublishRelays`), created_at forced strictly-newer, read takes the
       **newest event per d-tag** (reads routed through the subscription manager,
@@ -212,9 +214,10 @@ Design / approach:
 - [x] **Storage UX**: opt-in "Sync these settings to my Nostr account (encrypted)"
       toggle + "Restore" button + public-relay/key-compromise warning in the
       Storage pane (shown only when unlocked). Re-pushes on save when enabled.
-- [ ] **Wallet UX**: same toggle/restore in the Wallet pane (+ spend warning).
-- [ ] **Offer-to-pull on login**: on login, if a synced note exists, show a
-      one-time "Restore?" prompt (reuse `storageSyncService.pull` / the NWC pull).
+- [x] **Wallet UX**: toggle/restore in the Wallet pane + spend warning + confirm.
+- [x] **Offer-to-pull on login**: one-time per-pubkey prompt
+      (`settingsRestorePrompt` + `encryptedSync.exists` list-only peek), wired in
+      `app.maybeOfferSettingsRestore` (deferred, non-blocking). Reuses the pulls.
 - [x] **Clear/disable**: `clear()` publishes a cleared marker so the wipe
       propagates (empty-replaceable-publish lesson); `disable()` calls it.