[rubenvdlinde]

What this does

Change engagement-announcements (rows e-announcements, e-maintenance, d-news-preview). Stacked on #787 (feat/launcher-tile-internal-address): this branch contains every PR below it (#743, #784 to #787). Land the stack in order, or land the top PR with a merge commit and the ones below close with it.

• Authors (administrators, plus the groups set on the new "Announcements" admin tab) write a news item or a notice with a title, text, category, target groups, a publish time and an end time. Drafts are visible to authors only.
• The server checks targeting on every read: a published item is visible to people in its target groups (everyone when none are set) inside its window. Anyone else gets 404 by id, so an id leaks nothing.
• News shows in a new "Announcements" widget, newest first, with a category filter, like and comment counts and a follow button per category. Likes and comments are stored by Nextcloud's comments service (object type launchpad_announcement); LaunchPad keeps no comment rows.
• A notice shows as a banner above the grid on every dashboard of the people it targets, until its end time. Its level shows as an icon and a word. A dismissible notice can be closed per person; a notice cannot be published without an end time ("A notice needs an end time").
• The editor saves a draft, then shows a preview with the same banner or card readers see, "People reached: N" and "Preview as" for one user. Publishing is a separate button after the preview.
• Followers of a category get one Nextcloud notification ("New announcement in Privacy: ...") when an item in it becomes visible to them: at once when published for now, otherwise from AnnouncementNotifyJob (every 5 minutes), never twice (notified_at).
• New tables launchpad_announcements and launchpad_ann_follows (migration Version002013Date20261005190000, info.xml 1.1.7-unstable.20261005200000). A deleted user's follows go with them. Demo installs get the three demo announcements from the design.
• Strings in all 37 locales. The spec is synced to openspec/specs/announcements/spec.md; the design records what the build changed (short table name, likes as comments with verb like, the reach line).

The rows move to building, not built: tasks 8 (axe check) and 12 (Playwright, written in tests/e2e/announcements.spec.ts) need the live instance. The change is archived after the live pass.

Tests (red first)

• tests/Unit/Service/AnnouncementServiceTest.php (12): targeting, drafts, the window, author rights, the notice end time, comment refusals, follower notified once, "Preview as". Red run without the service: 12 errors (lane5/red-announcement-service.log).
• tests/Unit/Controller/AnnouncementControllerTest.php (6) through the real service: 403 for a reader who posts, 404 by id for a non-member, 400 for a notice without an end time, the action per endpoint, settings admin-only.
• tests/Unit/BackgroundJob/AnnouncementNotifyJobTest.php, tests/Unit/Notification/AnnouncementNotifierTest.php, the listener's follow cleanup in UserDeletedListenerTest, the demo seeding through DemoDataService::install() (red before the wiring: 1 failure), the action baseline.
• tests/Unit/Database/AnnouncementsDatabaseTest.php: real database and Nextcloud's real comments manager (publish, like twice is one like, comment, unlike, follow once, follows removed by the real UserDeletedEvent). Skipped without a live Nextcloud; runs in CI.
• Vitest: AnnouncementsWidget.spec.js, NoticeRegion.spec.js, AnnouncementEditorModal.spec.js (13), with axios mocked so the URLs and bodies are checked against the routes. Red run without the components: 3 files failed.

Verified

• Local mirror of the required CI jobs on 375ab2e: npm lint, format, check:manifest, check:schema-l10n, l10n-parity and Vitest (976 of 976) 0 on 30bd319 (the later source change is the editor's select binding: eslint, prettier and its spec green); composer check:strict parts on 30bd319: phpcs, phpmd, psalm, phpstan 0, PHPUnit 1987 tests OK (17 skipped database tests that run in CI); AnnouncementControllerTest re-run on 375ab2e.
• Hydra gates at CI's version (hydra-gates@main, full scope, --require-full-coverage) on 375ab2e: 85 of 86 applicable gates pass; gate 23 fails with the one match development has (PermissionService, RoleFeaturePermissionService), inherited and waiting on a decision. The first run found two untagged computed setters (gate 16) and the comments list without a contract test (gate 25), both fixed.
• No local production build; CI's Frontend Build is the check. No local coverage driver: the pgsql cell's coverage guard is read in CI.

Live check

As admin, Admin settings, LaunchPad, "Announcements": add group "Redactie". As Karin (in Redactie), on a dashboard with the Announcements widget: "New announcement", kind "Notice above the dashboard", level Warning, title "Onderhoud zaaksysteem zaterdag 08:00 tot 12:00", target group "Burgerzaken", no end time, "Preview": banner and "People reached: N"; "Publish": "A notice needs an end time". Set an end time, Preview, Publish. As Pieter (in Burgerzaken): the banner shows above every dashboard, with no close button. As Sanne: no banner. Publish a news item in "Facilitair" for everyone; Pieter follows "Privacy", Karin publishes in "Privacy": Pieter gets one notification. Pieter likes and comments: the card shows 1 and 1.

[github-actions]

Quality Report — ConductionNL/launchpad @ de3491f

Check	PHP	Vue	Security	License	Tests
lint	✅
phpcs	✅
phpmd	✅
psalm	✅
phpstan	✅
phpmetrics	✅
eslint		✅
stylelint		✅
build		✅
check-manifest		✅
format		✅
check-schema-l10n		✅
composer			✅	✅ 104/104
npm			✅	✅ 636/636
app:check-code	⏭️
info.xml	✅
REUSE	❌
lockfile sync		✅
PHPUnit					❌
Newman					✅
Playwright					⏭️ deferred: E2E runs locally and on the promotion path only. This pull request targets development, so the suite is asked once per promotion into beta and main rather than once per push per open pull request. Run it locally with npx playwright test, or from the Actions tab on a branch with no open pull request into development.
Hydra gates					❌

---

Quality workflow — 2026-10-05 18:19 UTC

Download the full PDF report from the workflow artifacts.

[github-actions]

Quality Report — ConductionNL/launchpad @ 404d4fe

Check	PHP	Vue	Security	License	Tests
lint	✅
phpcs	✅
phpmd	✅
psalm	✅
phpstan	✅
phpmetrics	✅
eslint		✅
stylelint		✅
build		✅
check-manifest		✅
format		❌
check-schema-l10n		✅
composer			✅	✅ 107/107
npm			❌	✅ 636/636
app:check-code	⏭️
info.xml	✅
REUSE	❌
lockfile sync		✅
PHPUnit					❌
Newman					❌
Playwright					⏭️ deferred: E2E runs locally and on the promotion path only. This pull request targets development, so the suite is asked once per promotion into beta and main rather than once per push per open pull request. Run it locally with npx playwright test, or from the Actions tab on a branch with no open pull request into development.
Hydra gates					❌

---

Quality workflow — 2026-10-23 05:24 UTC

Download the full PDF report from the workflow artifacts.