LIVE — almajlis.om in production. Cloudflare zone 7c387f3ba373780002dbb9968fd44aa6 (active, paul/robin NS), DNS records: A almajlis.om→147.93.20.54 (proxied) + A *.almajlis.om→147.93.20.54 (wildcard, proxied) + CNAME www→apex (proxied). SSL: Flexible (CF→nginx HTTP). nginx vhost at /www/server/panel/vhost/nginx/almajlis.om.conf serving almajlis.om + www + *.almajlis.om → port 4100 (fencing-om PM2 app). Tenant 'almajlis' registered in data/tenants.json with plan:enterprise. DialogueME font family (8 WOFF2 weights) + logo SVGs (mark/horizontal/stacked) + brand.css from Claude Design deliverable now under public/. Verified: https://almajlis.om/api/tenant returns slug=almajlis, title 'AlMajlis — المجلس', brand assets 200, fencing.om unaffected (96/96 smoke green). Next: install CF Origin Cert + nginx 443 block to upgrade to Full(strict); then integrate Claude Design's brand-system.html as the actual marketing site (currently the AlMajlis tenant renders the same shell as default tenant); then Phase 8 (API keys + webhooks + Paymob billing + onboarding wizard)

SHIPPED — The Majlis product brand. Product identity doc at docs/brand/the-majlis-identity.md (positioning, voice, color tokens, typography, copy samples, messaging pillars). Logo SVGs at public/brand/ (mark, wordmark, AR-wordmark, reversed, favicon). DEFAULT_BRANDING updated to neutral Majlis shell (teal-green #1e6b55, brass gold accent, 'The Majlis' name, themajlis.om primary domain). OFC explicitly preserves fencing.om identity via data/tenants/ofc/branding.json (green #1e8439, 'Oman Fencing Committee', /logo.png, fencing.om). Sport-specific modules (athletes + selections) now defaultEnabled:false — OFC re-enables via data/tenants/ofc/features.json. src/pages/index.astro stopped hardcoding OFC title. Verified: fencing.om prod title + theme-color unchanged; default tenant lands on 'The Majlis — المجلس' shell. 96/96 smoke green. Domains to register: themajlis.om (10 OMR, available at GulfCyberTech), themajlis.com, themajlis.app

SHIPPED — per-tenant branding. Task 4.1 src/lib/branding.ts with Branding interface + DEFAULT_BRANDING (byte-for-byte match of current OFC hardcoded values) + readBranding/setBranding + brandingToCssVars + validators. Task 4.2 Base.astro swaps every hardcoded brand ref (title/meta author/RSS titles/og:site_name/JSON-LD/favicon/theme-color/siteUrl/fontColor etc) for branding-derived values; CSS vars injected via <style is:inline set:html={cssVars}> before global.css. Task 4.3 Branding editor section in SettingsTab (Identity/Logo&Favicon/Colors/Typography) + /api/board/branding/update POST endpoint with admin gate + hex/URL validation + atomic withFileLock writes. Commit 383a301. Runtime verified: <title> still 'Oman Fencing Committee — اللجنة العمانية للمبارزة' and theme-color=#1e8439 with NO branding.json written (defaults active). 96/96 smoke green. Task 4.4 (nginx+certbot custom-domain automation) deferred to Phase 4b — primaryDomain + emailFrom fields ship as data shape now

SHIPPED — role+permission matrix. Task 3.1+3.2 src/lib/roles.ts with hasPermission() + legacy fallback + createTenant seeds admin/coach/member (56de008). Task 3.4 permission editor UI (modules x actions checkbox grid) + /api/board/roles/{update,create,delete} endpoints with seeded-role protection + admin wildcard safety net (fde24db). 12/12 permission cases pass, 96/96 smoke green. Reviewer SHIP. Tasks 3.3 (wire hasPermission into every tab ~20 tabs) + 3.5 (user migration) deferred — OFC runs on legacy fallback with zero behavior change until Phase 3.3. Phase 2 polish shipped earlier (bc6629f): withFileLock on features.ts, AccountsTab superadmin guard, err flash on home, AR error translations

SHIPPED — module registry + per-tenant feature flags. Task 2.1+2.2 MODULE_REGISTRY (28 modules after settings added) + features.ts store (4797a2a + e460917). Task 2.3 board.astro swaps 27-entry hardcoded MODULE_GROUPS for enabledGroupsForRole(me.role), VALID_TABS now registry-derived, badges routed through moduleBadges.ts (7a8ff64). Task 2.4 /board?t=settings toggle grid + /api/board/features/toggle endpoint with self-lockout protection for settings+overview slugs (8473052). 96/96 smoke green. Follow-ups: wrap features.ts writes in withFileLock, AccountsTab role guard on line 239 doesn't include superadmin, err flash on board home, AR translation of err messages in SettingsTab

SHIPPED — multi-tenant unlock live. Task 1.1 tenant registry (67d8e85), 1.2 middleware+AsyncLocalStorage (658dac6), 1.3 33 stores refactored to tenantReadPath/tenantWritePath (70bf41f), 1.4 migration script + 5 files copied to data/tenants/ofc/ (c9c049f), 1.6 /admin/tenants superadmin page + scripts/set-superadmin.mjs (220c75c). Ali promoted to superadmin on prod. /api/tenant returns {slug:ofc} for fencing.om. 96/96 smoke green. Phase 1b follow-ups: tenant-scope content/ dir before onboarding tenant #2, tenant-scope public/uploads/board/, tenant-scope src/lib/referees.ts. Task 1.5 (retire legacy data/*.json) intentionally deferred for 7-day soak

SHIPPED — Phase 0 of productize-board-workspace master plan complete. Task 0.1 SurveysTab wired (eba1294), Task 0.2 ActionsTab+ActionDrawer on canonical commentStore (f9b7501), Task 0.3 ApprovalsTab+ApprovalDrawer (b0c45f9), Task 0.4 AccountsTab full CRUD invite/disable/enable/revoke + disabled-user session block (75a1f7a). Final code review SHIP verdict. Known follow-ups: ApprovalsList row openers not wired to drawers, overdueAll dead code in board.astro, CSRF hardening pass due. 96/96 smoke green

Phase 0 Task 0.1 — wire orphaned SurveysTab into /board MODULE_GROUPS Governance group (after Polls

/board home cmd-K palette now actually works — previously the kbd hint was decorative because ModuleHeader (which owned the keydown handler) only mounted on tab views. AppGrid now ships a self-contained palette (search input

smoke.sh 90->96 endpoints — covers iter 248 (/api/public/stats/birthyears)

/api/public/stats/weapons per-weapon aggregate — 3 rows (foil/epee/sabre) with athletes count

FIE age-category mini-chip on /athletes grid cards (top-right

FIE age-category chip on athlete detail page — inline next to the Born/Age line

FIE age-category filter pills on /athletes (All/U11/U13/U15/U17/U20/Senior); charcoal-theme to visually distinguish from the green discipline pills above; combines with discipline+category+club+search filters in client-side applyFilters; reset button re-initialises both. Verified pills + data-age='U20' on cards live

/athletes.csv gains birth_year + age_eoy + age_category columns + ?ageCategory filter (parity with iter 250 JSON). Filename suffix reflects filter (ofc-athletes-u20.csv). Verified 3 U20 rows returned with age 18/18/17 and correct category

MILESTONE 250 iters. ?ageCategory=U11|U13|U15|U17|U20|Senior filter on /api/public/athletes (case-insensitive exact match against the iter 249 ageCategory field; athletes without birthYear never match). Verified U20=3 (all 3 seeded)

enrich /api/public/athletes rows with birthYear + ageEoY + ageCategory (FIE end-of-year rule); extract to shared lib/ageCategory.ts (DRY with /api/public/stats/birthyears from iter 248). Athletes without birthYear get null values. Verified weapon=foil row → age 18

/api/public/stats/birthyears athlete age distribution — FIE categories (U11/U13/U15/U17/U20/Senior

smoke.sh 85->94 endpoints — adds /api/public/stats/clubs (iter 245)

/events/upcoming.ics future-only iCalendar feed (RFC 5545 VCALENDAR; filters date<todayUTC; sorts asc; X-WR-CALNAME 'Oman Fencing — Upcoming'); registered in feeds.json + /developers. First prod call 500'd (pm2 warm-up per feedback_pm2_restart_502_warmup); 200 on retry with empty VCALENDAR body since all seeded events are past-dated

/api/public/stats/clubs per-club athlete aggregates (total/active + foil/epee/sabre + male/female)

?weapon=foil|epee|sabre|mixed filter on /api/public/leaderboard + /leaderboard.csv (case-insensitive

/leaderboard.csv medal-leaderboard download — columns match /api/public/leaderboard JSON (rank

smoke.sh 79->85 endpoints covering iter 237 (/api/public/venues)

/api/public/leaderboard medal aggregate — uses lib/results.medalLeaderboard (weighted 3/2/1)

/api/public/gallery JSON endpoint — ordered by display order

/api/public/venues/{slug} single-venue detail + venueSlug()+findVenueBySlug() helpers in lib/venues.ts; list endpoint now includes slug field so consumers can link to detail; openapi + /developers updated. Verified oman-club=200

/venues.csv download (shares lib/venues.ts with /venues + /api/public/venues; 9 columns incl derived mapUrl) + smoke.sh extended to 79 endpoints covering iter 232 (/athletes/{slug}/results.csv+.json)

/api/public/venues JSON endpoint — extracted VENUES from venues.astro into src/lib/venues.ts (shared source of truth); exposes 8 training venues with clubEn/Ar

/api/public/coaches/{id} single-coach detail (parity with committee/{id} + clubs/{slug}); returns 404 when the id exists but is not a coach (role /coach|مدرب/). Verified tm_hisham_karshod=200

register iter-234 /api/public/coaches in 4 registry surfaces — /api/public index (endpoints.coaches)

/api/public/coaches JSON mirrors the existing coaches.csv — filters team by /coach|مدرب/i

surface iter-232 per-athlete Results CSV + JSON downloads as ghost-buttons next to Passport PDF on /athletes/{slug} (bilingual labels

/athletes/{slug}/results.csv + results.json per-athlete match-history endpoints (item #24 missing-features); slug→athleteId via readAthletes + resultsForAthlete + medalTally; unknown slug 404

global '/' keybind focuses first search input on any public page (GitHub/Notion style

smoke.sh extended with 12 filter permutations from iters 225-229 (weapon

/api/public/results ?athleteSlug (or athleteId) + ?medal + ?year + ?weapon + ?limit (1-500

refresh content/loop-log.txt from 197 to 227 — footer 'Built in public · N iterations shipped' + /changelog + /changelog.rss.xml + /changelog.atom.xml all bump in one ship

/api/public/news ?year= date-prefix + ?q= NFD-normalised substring match + ?limit=1-200 (default 50). Verified 22 total → 5 from 2025 → 1 matching 'bahrain' → 3 capped by limit

/api/public/events ?year=YYYY date-prefix match + ?tag= case-insensitive exact match; verified 8 total → 3 from 2025

/api/public/athletes ?weapon=foil|epee|sabre (NFD) + ?club=substring + ?active=0 filters; exposes discipline+gender on each row. Verified 13 total → 7 foil + 6 epee

richer ShareButton titles on athlete/event/news/club detail pages (athlete: name+category+discipline+club; event: title+date+tag; news: title+date; club: name+city — all suffixed 'Oman Fencing')

/api/public/search/suggest?types= mirrors iter-222 filter on the typeahead endpoint — verified q=al types=athlete returns 8 athletes vs 4 types mixed unfiltered

/api/public/search?types=a,b,c filter (comma-separated allowlist of athlete/event/news/club/committee; unknown vals dropped; empty keeps all) — verified q=jana types=athlete narrows from 5 mixed to 1 athlete

/.well-known/change-password 302 to /login for W3C password-manager discovery (Bitwarden

scripts/smoke.sh 61-endpoint smoke suite (discovery/feeds/registries/entities/aggregates/search/detail/pages

DRY spotlight picker into src/lib/spotlight.ts todaySpotlight(); /api/public/spotlight + SpotlightFeature both delegate — guaranteed same pick (API and homepage both return Salma Al Daghishi today); -35 net lines

SpotlightFeature on homepage surfaces iter-217 athlete-of-day (same FNV-1a hash ensures page pick matches API pick; renders between Stats and About with photo + discipline badge + category + club)

/api/public/spotlight athlete-of-the-day (FNV-1a(yyyy-mm-dd) mod active-roster

footer bottom bar surfaces /now (iter 206) + /developers (iter 170) alongside Privacy/Terms/CoC/Security

'Jump to' anchor pills on /committee (President + board-members grid anchor + CSV download

client-side filter on /clubs index (name+city search

client-side filter input above /committee board grid (NFD-normalised

/coaches.csv (head coach + certified coaches filtered by coach|مدرب role pattern

/sitemap-images.xml Google image sitemap (event photos + news covers + athlete photos grouped by page URL with image:title context

/committee member cards get id={member.id} + scroll-mt-24 so /committee#tm_president deep-links work; matches iter-201 /api/public/committee/{id} URL contract

/api/public/sitemap.json (100 static pages + 51 dynamic news/events/athletes/clubs URLs deduped+sorted

/now page gets JSON snapshot + .ics subscribe + News RSS pill row (mirrors iter-178 news index pattern

/api/public/now JSON sibling to /now page (eventsThisWeek + upcomingNext5 with inDays + recentNews 7d + recentResults 30d

/now 'what's on this week' snapshot page (4 sections: This Week events / Recent News 7d / Coming Up Next 5 + day count / Recent Results 30d; empty-state pills with deep links; sitemap daily-changefreq)

NewsFeature on homepage (3 latest news cards inserted after Events before Gallery

/developers refreshed with all endpoints shipped since iter 170 (+committee/{id}

/api/openapi.json refreshed to v1.1.0 (15→21 paths) covering committee/{id} disciplines changelog feeds.json search search/suggest shipped since iter 171

/api/public/search/suggest?q= typeahead endpoint (max 8 title-only results

/api/public/committee/[id] per-member JSON (President's record returns full safe-fields

/api/public/search?q=&limit=N cross-entity search (athletes+news+events+clubs+committee

aria-current='page' + green tint on active Nav item (top + mobile drawer); active when pathname === target OR startsWith target+/

'Built in public · N iterations shipped' centered footer line on every public page (reads max iter from content/loop-log.txt at module load

/changelog.atom.xml Atom 1.0 sibling to iter-188 RSS (100 entries

/api/public/feeds.json catalog (24 feeds across 8 MIME types: rss/atom/json/xml/calendar/csv/plain/opensearch) — entity tag + format + description + absoluteUrl per entry

/news.atom.xml Atom 1.0 sibling to RSS (per-entry xml:lang

reading-time badge on /news index cards (precomputed in frontmatter from readNewsArticle

born/age badge on athlete profile when birthYear present (3 athletes today: israa-al-siyabi

/clubs/<slug>/athletes.json sibling to iter-190 per-club CSV (same tolerant club-name match

/clubs/<slug>/athletes.csv per-club roster CSV (tolerant club-name match handles 'Quriyat'/'Quryat' transliteration variants

Base.astro gains <slot name='head'/> + /changelog adds <link rel=alternate rss> for iter-188 changelog.rss.xml so feed readers auto-detect it

/changelog.rss.xml RSS 2.0 of last 100 shipped iterations (parses content/loop-log.txt) + RSS+JSON CTA pills under /changelog intro (mirrors iter 178 news pattern)

refresh in-repo content/loop-log.txt (was 1 day stale

/api/public/disciplines reference endpoint (3 weapons foil/épée/sabre with EN+AR names

ShareButton on /clubs/[slug] completes detail-page set (news + events + athletes + clubs all have prev/next nav AND share button)

extract ShareButton.astro reusable component (data-attr + idempotent document-level handler binding via data-bound flag); /news/[slug] + /events/[slug] swap to component (-80 lines); /athletes/[slug] gains share button above prev/next nav

share button on /events/[slug] mirrors iter-182 news (navigator.share native + clipboard fallback + transient flash

share button on /news/[slug] (navigator.share native dialog on mobile/PWA

reading-time estimate badge in /news/[slug] meta strip ('X min read' EN @200wpm + 'قراءة X دقيقة' AR @180wpm; hidden when body empty; AR badge uses flex-ar helper for proper display:flex on lang=ar)

/clubs index gets CSV + JSON API + Leaderboard pill row (completes listing-page export pattern across news 178 athletes+events 179 clubs 180)

/athletes + /events index pages get JSON API export pill next to existing CSV/ICS pills (mirrors iter 178 news pattern)

/news index gets RSS + Email + JSON API CTA strip surfacing /news.rss.xml + /#newsletter + /api/public/news (3 pills below search row

'Add to calendar' button on /events/[slug] surfaces iter-176 per-event ICS endpoint (calendar-plus icon

/events/<id>.ics per-event iCalendar export (RFC 5545 line-folding+escape

prev/next nav on /clubs/[slug] (alphabetical EN sort) — completes detail-page nav set across news (172) events (173) athletes (174) clubs (175)

prev/next nav on /athletes/[slug] completes the trio (news iter 172 + events iter 173 + athletes iter 174); active roster sorted alphabetically by EN name

prev/next event navigation on /events/[slug] mirrors iter 172 news pattern (sorted by date newest-first

prev/next article navigation on /news/[slug] — grid 2-col older+newer cards

/api/openapi.json OpenAPI 3.1 descriptor (15 paths: entities+aggregates+ops

/developers public API + feeds documentation page (bilingual; Registry/Entities/Feeds/Discovery tables; 14 JSON endpoints + 7 CSV/RSS/ICS + 6 discovery files; curl example; cache+CORS notes); added to sitemap-pages.xml

/committee.csv (id

/api/public/news/[slug] (slug

/api/public/events/[id] individual event JSON (id

/api/public/athletes/[slug] individual athlete JSON (id

robots.txt rewritten: old blanket Disallow /api/ hid public JSON feeds from crawlers; now explicit Allow /api/public /api/health /.well-known/ and explicit Disallow /board /my /account /admin /api/admin /api/auth /api/board /api/my /api/ai /api/committee

/opensearch.xml OpenSearch 1.1 descriptor (EN + AR

/api/public/latest combined one-call feed (5 latest events + 5 latest news + 10 latest results) 300s cache

/api/public/upcoming (future events only

/api/public/committee (7 active members

sitemap-pages.xml now indexes all 19 /tools/* routes (door-check-qr first-aid floor-captain kit-check penalty-tracker risk-assessment session-plan share-card training-load training-log training-plan weekly-digest added to the existing 7); 20 total tool entries

/athletes/[slug] second missing import streakForAthlete (same file) — all 13 athlete profile pages now return 200 (slugs that don't exist return 302 to /athletes

/athletes/[slug] 500 — missing import pctLast30Days from lib/training

sitemap-pages.xml now covers 24 previously-missing public routes (/activity /changelog /announcements /league /contact /coach-corner /beginner-pathway /lessons /glossary /rules-summary /scoring /spectator-info /referee-signals /target-areas /mental-game /strength /stretches /nutrition /statistics /achievements /medals /scholarship /security /code-of-conduct) so crawlers finally discover them

/api/public/results endpoint (last 200 tournament results with athlete names

/api/public/stats breakdown zeros (discipline is 'Foil'/'Épée'/'Sabre' capitalized+accented; gender is 'Male'/'Female' capitalized; normalise to lowercase ASCII before matching) + sum athlete.medals.{gold,silver,bronze} to top-level medals block

/api/public/clubs (8 clubs) + /api/public/stats (counts + weapon/gender breakdown) CORS * 600s cache

/code-of-conduct bilingual 8-section page (who

/humans.txt + /api/health (uptime probe with intentionally minimal surface: no PID/mem/SHA)

RFC 9116 /.well-known/security.txt + bilingual /security responsible-disclosure page (scope

codex challenge mode found 4 real concurrency bugs (P1 role-requests lost-update race; P2 pending-changes same; P2 rate-limit bypass via cancelOwn splice; P2 athletes.json last-write-wins) + 2 bonus bugs (double-approval guard

11-case write-path CRUD suite added (claim+approve

11-case depth-audit spec added (mobile overflow

authenticated module sweep 31/31 green — every /board module + /my + /admin pages verified (HTTP 200 + expected text + no console errors + no failed requests) using production admin session · test harness committed at tests/e2e/module-sweep.spec.ts + scripts/module-sweep.sh

6 broken Tabler refs replaced (polls:chart-bar

admin Arabic labels were display:none because global.css never un-hid .ar-only — added display:revert rules matching Base.astro parity; every Arabic label across /board /my sidebar topbar role cards approvals app grid module header now renders · 20 unit + 7 E2E green

/my migrated onto Admin layout (user-heart icon

Odoo-style app launcher on /board home (no sidebar

BoardMemberCard on /my (4-up KPIs + next-meeting hero + open-actions list) + tab-bar edge fades + auto-scroll active into view · 20 unit + 7 E2E green

App Store polish across /board + /my: IdentityChip

MyFamilyCard for staff-who-are-parents + Playwright E2E 7/7 green

RefereeCard live (availability direct

SecretaryCard live (club-edit + announcement submit

ParentCard live (per-child AthleteCards

AthleteCard live (medical direct

claim+approve flow deployed (OTP dispatch

FINALE · Changelog — /changelog (public log of all 150 sprint iters

Activity timeline — /activity (unified news/events/results/media timeline

Homepage video embed — VideoFeature block after Gallery (click-to-load youtube-nocookie

Camp registration backend — /camps/register form + /api/camps/register POST (JSON store + coaching@ email

Share-card generator — /tools/share-card (1200x630 social card

Coach certification — /coaches/certification (5-level pathway Assistant→FIE Master + directory of 8 certified coaches)

Inter-club league — /league (weighted points: medal value × event level multiplier

Personal training plan — /tools/training-plan (4-week generator by weapon/level/days/goal; skill/strength/sparring/recovery)

Alumni & legends page — /athletes/alumni (6 curated pioneers + auto-merge with inactive athletes + add-your-name CTA)

Weekly digest preview — /tools/weekly-digest (email-ready template

Announcements page — /announcements with 6 seeded notices (policy/club/competition/safeguarding/governance)

Penalty tracker tool — /tools/penalty-tracker (cards by fencer

Training-load tool — /tools/training-load (sRPE

Door-check QR tool — /tools/door-check-qr (A4 printable badge

Coach corner blog — /coach-corner with 6 seeded posts (technique/mental/parents/career) + pitch CTA

Contact page — /contact with 6-department mailto routing (general/press/coaching/clubs/scholarship/safeguarding)

News archive TOC — /news/archive grouped by year+month with jump-to-year chips

404 polish — search form + Off-the-piste copy + sitemap link

Human sitemap — /sitemap (74 links across 12 themed sections)

Homepage coach CTA block — dark-gradient section between About and AthletesFeature

Rules summary infographic — /rules-summary (9 emoji cards: hit/priority/length/3 cards/safety/piste/salute + cross-links)

Beginner pathway — /beginner-pathway (6-step visit→signup→basics→base→first-comp→squad

Printable calendar — /calendar-print (A4 portrait

Scholarship programme — /scholarship (commitment/coverage/eligibility/application/confidentiality/funding + confidential email CTA)

Clubs CSV export — /clubs.csv (slug/name/city/active/gold/silver/bronze/score/url) + link on /club-leaderboard

Referee signals poster — /referee-signals (10 signals across 5 categories

Strength program — /strength (4 blocks: lower/specific/core/weapon-arm

Training log tool — /tools/training-log (weekly 7-day table: session/min/RPE/notes/mood + reflections

Target areas — /target-areas (inline SVG silhouettes for foil/épée/sabre with green-shaded valid zones + off-target notes)

Individual lessons — /lessons (4 tiers trial/foundation/performance/group + request form posting to /api/contact)

Spectator info — /spectator-info (7 sections: what to expect

Scoring explainer — /scoring (6 sections: electric box

Match-day kit checklist — /tools/kit-check (28 items

Fencing glossary — /glossary (20 EN+AR terms

Mental game — /mental-game (pre-bout routine

Injury-prevention stretches — /stretches (6 warm-up + 7 cool-down with reps/holds/focus + 5 red-flag signals)

Athlete nutrition — /nutrition (6 EN+AR sections: hydration/pre/match-day/recovery/Ramadan/supplements + medical disclaimer)

Floor captain checklist — /tools/floor-captain (22-point running order

Tournament registration — /register (auto-populated event dropdown

First-aid checklist — /tools/first-aid (23-point medical readiness: personnel/equipment/venue/paperwork

Achievements feed — /achievements (unified newest-first stream of milestones + medals grouped per event

Risk assessment template — /tools/risk-assessment (8 pre-filled hazards

Session plan tool — /tools/session-plan (6 phase blocks w/ minute totals

Public statistics dashboard — /statistics (8 headline cards + medal-by-type/weapon/year charts

Sitemap catch-up — 14 new URLs in sitemap-pages.xml (8 club details + 3 tools + 7 pages added across iters 65-103)

Event runsheet tool — /tools/runsheet (day-of-show timeline builder

Search filter pills — per-type result counts

Club detail pages — /clubs/[slug] dynamic routes

Events tag filter — dynamic pill row above card grid

Sponsor application — /partners/apply (5-tier pricing

MILESTONE Homepage medal ticker — bilingual animated marquee of 20 recent medals (emoji + athlete + event + year)

Homepage testimonial — rotating bilingual pull-quote (President/HeadCoach/Board)

Results medal chart — stacked horizontal bars per year (G/S/B) with counts + totals + legend

Newsletter archive — /newsletter-archive (empty-state w/ live sub count + what-to-expect + inline subscribe form)

Drills category filter — 6-pill client-side filter (Footwork/Point/Distance/Parry/Tactics/Conditioning) above card grid

Events CSV export — /events.csv (id/date/title/tag/photo/url) + CSV button on /events

Athletes CSV export — /athletes.csv (id/slug/name/weapon/category/club/photo/url cols) + link on /athletes filter bar

Results CSV export — /results.csv endpoint + Download CSV button on /results

Parents FAQ — /parents (10 EN+AR questions: age/safety/time/cost/academics/supervision/mixed/travel/quitting/talent + trial CTAs)

Athlete comparison — /tools/compare?a=&b= SSR

Club medal leaderboard — /club-leaderboard (weighted rank by level+medal

Bout slip generator — /tools/bout-slip (printable DE match slip

Results filters — year + medal + search across athlete/event/discipline

Venue directory — /venues (8 club venues

Homepage partners strip — OOC/MCSY/FIE/FCA tiles above footer

Sitemap index split — /sitemap.xml is now sitemapindex with 4 child sitemaps (pages/news/events/athletes)

Homepage next-event countdown — live days/hrs/min/sec to soonest upcoming event

Advanced athlete filters — /athletes category + club selectors + name search

News archive filters — /news year pill filters + EN/AR search

FAQ rich search — live client-side EN+AR filter

Weapon check tool — /tools/weapon-check (11-point FIE safety checklist per fencer

Poule sheet generator — /tools/poule-sheet (NxN printable grid

Bout timer — /tools/bout-timer (FIE 3x3min + priority

Tools hub — /tools (pool + bracket ready

DE bracket generator — /tools/bracket (cross-seed order

Pool assignment tool — /tools/pools (client-side snake/sequential/random seeding from paste roster

Join OFC funnel — /join (5-step onboarding with cross-links to clubs/fees/safeguarding/anti-doping/rankings)

Training times — /training (weekly grid across 9 club sessions with days/time/group)

Equipment guide — /equipment (3 weapons + 6-item FIE-standard safety kit + where-to-buy)

Fees & licences — /fees (6 tiers: athlete/club/coach/ref/event/hardship

Cookie notice — /cookies (detailed table of 4 cookies + purpose + lifetime + type)

National rankings — /rankings (auto-computed by weapon from results

Drill library — /drills (6 drills across footwork/point/distance/parry/tactics/conditioning + submit-drill CTA)

Camps & programmes — /camps (6 tiers: U12/U15/U20/Sen/Ref/Coach + registration CTA)

Referees & officials — /referees licensed list + 4-step pathway + clinic CTA

Coaches directory — /coaches pulls coach-role team members + certification CTA

Volunteer signup — /volunteer (6 role cards

Partners & sponsors — /partners (4 tiers w/ accent gradients: governing/international/regional/academic

Hall of Fame — /hall-of-fame (weighted medal score by level+medal

Accessibility statement — /accessibility (WCAG 2.1 AA commitment

Terms of use — /terms (10 EN+AR sections) + footer Privacy/Terms links in bottom bar

Privacy policy — /privacy (10 EN+AR sections: what

Safeguarding policy — /safeguarding (7 sections

Anti-doping page — /anti-doping (WADA Code

Press kit — /press (fact sheet

Public JSON API — /api/public + /events + /news + /athletes (CORS *

Events .ics calendar feed — /events.ics VEVENTs with RFC 5545 folding

News RSS feed — /news.rss.xml (40 items

Elections module — /elections mandate+countdown+eligibility+8-step timeline+secretariat CTA

AGM minutes archive — /agm (year-grouped completed meetings filtered by AGM/General Assembly keywords

Constitution & bylaws — public /bylaws page with 10 EN+AR articles

Newsletter sign-up — footer form posting to /api/newsletter/subscribe (honeypot

Toast notifications — window.toast(msg,kind) + auto-promote ?saved/?deleted/?error URL params into toast + scrub URL

Keyboard shortcuts — / search

Site-wide search — /search UI + /api/search across athletes/results/news/events/decisions/policies + / keyboard shortcut

Public /decisions log — ministry-transparency view of every board decision

Time-box timer + Chair private notes + Action sub-tasks + Role delegation + Member-at-risk + Growth log + Training attendance + Injury tracker + Coach private notes + Athlete goals

Public /org-chart page — hierarchical board tree from team.json with Organization JSON-LD for SEO

Board term tracker — termStartsAt/EndsAt/Notes on TeamMember + Overview alert card when terms expire within 90d

Action escalation 14d — 14+ days overdue fires WA+email to every admin + tags action as 'escalated'

Athlete passport PDF — GET /athletes/<slug>.passport — credit-card-sized ID card with photo

Hybrid Zoom/Teams/Meet link — videoUrl/videoProvider field + Join button on meeting page + WA reminder includes link

Quorum checker ribbon — green/amber/red status on scheduled meetings

Groups & sub-committees — /board?t=sub-committees + 4 seed committees + admin CRUD

Conflicts + Selections + Disciplinary + MoYC + Correspondence + Contracts + Letter generator + Insurance + Grants + Budget+Expenses · all merged + tabs wired

Decisions register + Agenda templates + Meeting RSVP + Read-receipts + AI board-chat + Discussions + Surveys + PWA + Governance hub + Motions

Digital Board Packet PDF — /admin/meetings/<id>.packet + buttons on both meeting views · plans/master.md + wave-a detail shipped

eSignatures (Boardable parity #2) — /admin/signature + /api/board/signature + draw canvas + stamp upload + signing event log

Polls & async voting (board-committee Boardable parity) — /board?t=polls + /api/board/poll + auto WA to eligible voters on create

100 missing features catalogued in docs/100-missing-features.md · 9 clusters × 8-12 features each · loop will work through these

Athlete Results & Medal Tracker — /admin/results + /medals + Result type + medalLeaderboard

OWASP baseline headers (HSTS/CSP/XFO/XCTO/Referrer/Permissions) via sequence middleware · commit 9092e55

22-minute cadence · iteration 0 = kickoff