fa0fc1cc15
The sidebar card badged 'Private chat - On' while the MLS tab said 'not created yet', and led with external apps. Rewrote CrewCoordinatorCard to show two explicit rows (Chat = NIP-17 always on; Private chat = MLS with real status) and make the in-app chat the primary CTA (?tab=mls); demoted Cordn web / Staircase under 'Open in another app'. Panel now gives join feedback + an admin invite hint. Adds CORDN_UX_AUDIT.md (findings, terminology model, deferred items).
3.9 KiB
3.9 KiB
Cordn / MLS / Staircase — UX audit (2026-10-12)
Scope: every surface where a skater meets the crew's encrypted chat — the crew page (Private chat tab + sidebar card), the Messages hub, Settings → Coordinator, and the CrewForm fields — plus the Staircase / Cordn-web hand-offs.
The goal was a coherent story: two chats exist (built-in NIP-17 "Chat" and the real-MLS "Private chat"), and the UI must never make them contradict each other.
Terminology model (the fix that anchors everything)
| Surface | Name | Protocol | Setup |
|---|---|---|---|
| Crew page tab (existing) | Chat | NIP-17 giftwrap | always on |
| Crew page tab (new) | Private chat | MLS via coordinator | created once by an admin |
| Sidebar card | Encrypted chat | covers both | — |
Rule: never call the sidebar card "Private chat" (collides with the MLS tab), and never badge the MLS chat "On" when it hasn't been created.
Findings
| # | Sev | Status | Finding |
|---|---|---|---|
| 1 | High | Fixed | The sidebar card badged "Private chat · On" (meaning the NIP-17 Chat tab) while the MLS tab said "not created yet" — a direct contradiction. The card now shows two explicit rows, Chat (always on) and Private chat (On / Set up / Join / Checking), reflecting the real MLS status. |
| 2 | High | Fixed | Name collision: card "Private Crew Chat" vs tab "Private chat". Card retitled "Encrypted chat"; row names are Chat / Private chat. |
| 3 | Med | Fixed | The card led with external apps ("Cordn (web)", "Copy for Staircase") even though the app now ships its own MLS chat. The in-app Private chat is now the primary CTA (one tap → ?tab=mls); external clients moved under a labelled "Open in another app" row. |
| 4 | Med | Fixed | Joining gave no feedback. The panel now says "Request sent…" after Ask-to-join and "No invite waiting yet…" after Check-for-invite. |
| 5 | Med | Fixed | An admin who created the chat wasn't told how members join. The panel now shows an invite hint while the group has one member. |
| 6 | Med | Fixed | Crews were invisible in the Messages hub. Added a Crews section (status badge + deep link to ?tab=mls). |
| 7 | Low | Fixed | The crew page's tabs weren't deep-linkable; now ?tab=events|chat|mls (explicit param wins over the auto-default). |
| 8 | Low | Open | cordnUi.* / new crewCoordinator.* copy exists only in en/es; other locales fall back to English. Acceptable for a new feature, worth translating once it has users. |
| 9 | Low | Open | Cordn (web) is broken against our coordinator (upstream issue, drafted). Kept as a secondary link only; prefer the in-app chat or Staircase. |
| 10 | Low | Open | CrewForm's "Cordn group" field is Staircase-era jargon; now that the app creates groups natively it mostly serves importing an external group. Consider moving it under an "Advanced" disclosure. |
| 11 | Info | By design | Interactive signer (Amber): no live updates — the panel shows a hint and the DM pages have a manual Refresh. This is the deliberate "never pop Amber in the background" posture. |
| 12 | Info | By design | The coordinator sees ciphertext + metadata only; the card and the Settings privacy note say so plainly. |
Still open / next
- Onboarding the first member: the flow works (create → ask → approve) but is three taps across two people. A shareable "join this crew's chat" link that pre-fills the join request would remove the guesswork.
- Unread for the Private chat : deferred (needs a background signed request).
- Persisted DM decrypt cache (from the Amber audit) so the first load per app start stops being a decrypt storm.
- Translate the new keys beyond en/es.
Verified
npm test + check-i18n green; ?tab=mls deep-link wired through the crew page.
Not click-tested in a real browser this session (no logged-in browser fixture).