address review: sanitize tagc, fix customize doc, harden serve-board.ps1

- Sanitize tagc to [A-Za-z0-9_-] before class-attribute interpolation, so a custom
  class name cannot break out of the attribute and inject markup/handlers (template + sample).
- customize.md now points at .tagedit.<name> (the class the renderer actually applies).
- serve-board.ps1: fail when the port is already in use, capture and report the server PID
  (with a stop command), and verify the process did not exit before opening the URL.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Copilot-Session: 07e720ee-ca02-419e-9adb-300738b6fc76
This commit is contained in:
jennyf19
2026-07-27 15:24:29 -07:00
parent 62bfb28f65
commit 29375678cf
4 changed files with 16 additions and 5 deletions
@@ -3,8 +3,8 @@
## Theming
Colors live in the `:root` CSS block of `assets/board.template.html`
(`--ember`, `--good`, `--urgent`, backgrounds). The look is warm/dark by default. Tag colors:
`new` (green), `deadline` (red), `career` (purple) — add your own by copying a `.tag.<name>`
rule and passing that name as a task's `tagc`.
`new` (green), `deadline` (red), `career` (purple) — add your own by copying a `.tagedit.<name>`
rule and passing that name as a task's `tagc` (use a plain class name: letters, digits, `-`, `_`).
## v2 — file-backed state (closes the agent loop)
v1 stores progress in the browser (`localStorage`), which the agent can't read back. To let