docs: update for merged PRs #280–#319 (doc gap: #293)

[onel]

Doc-worthy changes from PRs #280–#319

Scanned all merged PRs since the last triage (2026-06-27). Most ship their own docs/progress/ entries. One doc gap found.

Doc gap

• feat(web-ui): Oatmeal Tailwind re-skin of Store + custom install, dock clearance fix #293 — Oatmeal Tailwind re-skin of Store + custom install (merged 2026-07-02)

  What changed (user-visible):

  • StoreView restructured: display Heading, leading-icon search input, pill category tabs, proper empty states (empty-catalog vs no-match with Clear filters).
  • Door 2 (custom install) moved from bottom banner to a "Custom app" text link beside search (admin-only).
  • CustomInstallView regrouped into cards (Compose / Details / Permissions), styled file-upload, bordered toggle list, icon buttons.
  • GPU toggle removed from custom install — GPU passthrough isn't supported yet (GPU OS image media stack + real host-agent /dev/dri detection (Intel iGPU) #125, open/blocked). gpu election stays false; YAML escape hatch still round-trips it.
  • SplitButton Install action is now the primary/accent button.
  • Dock clearance fix (AppShell / SettingsLayout): content wrapper changed from h-full to min-h-full flex flex-col with bottom clearance on the wrapper, so the floating dock no longer covers the last rows on long pages.

  What's stale: No docs/progress/ entry for this PR. The sibling Oatmeal PRs (feat(web-ui): adopt the Oatmeal olive design system (#260) #289 oatmeal-theme.md, feat(web-ui): apply Oatmeal element idioms — pill Button + display Heading (#261) #291 oatmeal-element-idioms.md, feat(web-ui): sweep remaining component <style> blocks + raw hex onto olive tokens (#262) #292 oatmeal-token-sweep.md) all have progress entries; feat(web-ui): Oatmeal Tailwind re-skin of Store + custom install, dock clearance fix #293 is the missing one.

  Proposed fix: Add docs/progress/oatmeal-store-reskin.md covering the Store/CustomInstall re-skin, the GPU-toggle removal, and the dock clearance fix. Update docs/progress/README.md index. Optionally touch docs/specs/WEB_UI.md if the Store layout or custom-install shape is described there.

Already documented (no action needed)

All other PRs in this batch include their own docs/progress/ entries and spec updates:

• lifecycle: reconcile converges env-restamp drift on running containers (#268) #280 — reconcile-pending-recreate ✅
• feat(web-ui): adopt the Oatmeal olive design system (#260) #289 — oatmeal-theme ✅
• feat(web-ui): apply Oatmeal element idioms — pill Button + display Heading (#261) #291 — oatmeal-element-idioms ✅
• feat(web-ui): sweep remaining component <style> blocks + raw hex onto olive tokens (#262) #292 — oatmeal-token-sweep ✅
• catalog: remote thin-client with last-good cache #294 — catalog remote thin-client ✅ (docs/architecture.md, docs/dev/authoring-apps-with-an-agent.md)
• catalog: segmented store UX in the box Vue UI (cloud #63) #295 — catalog-segmented-store-ui ✅
• Publish a machine-readable platform capabilities manifest #296 — os-capabilities-manifest ✅
• caddy: serialize the box's two ACME orders so the wildcard cert stops racing #298 — wildcard-cert-serialize-acme-orders ✅
• brain: run wildcard-TLS setup in the background so it can't stall startup #299 — brain: background wildcard-TLS ✅ (covered by caddy: obtain the wildcard cert via certificates.automate, not just a policy #301's progress entry)
• caddy,brain: apply wildcard-TLS config synchronously, obtain certs in the background #300 — caddy,brain: apply wildcard-TLS synchronously ✅ (covered by caddy: obtain the wildcard cert via certificates.automate, not just a policy #301's progress entry)
• caddy: obtain the wildcard cert via certificates.automate, not just a policy #301 — hosted-wildcard-cert-automate ✅
• hosted image: grow the root filesystem to fill the provider disk on boot #309 — hosted-grow-root-disk ✅
• Fix the hosted /setup boot-proof race; confirm wildcard-TLS is green #310 — hosted-setup-boot-proof-race ✅
• Hosted image: actually grow the root filesystem, not just the partition #315 — hosted-grow-root-fs ✅
• hosted image: boot on legacy-BIOS providers, not just UEFI (#277) #319 — hosted-cx-bios-boot ✅

Not doc-worthy (skipped)

• feat(web-ui): Oatmeal Tailwind re-skin of Store + custom install, dock clearance fix #293 is the only PR in the batch with a doc gap. The rest either carry their own docs or are internal/test-only changes already covered by sibling entries.

---

— Docs Agent

Reply /docs go to approve, or /docs <note> to change the plan.

[onel]

Update: PR #324 also has a doc gap

While scanning merged PRs since the last triage, I found one more:

• manifest: check flags unresolved/placeholder images: entries #324 — manifest check flags unresolved/placeholder images (merged 2026-07-11)

What changed (user-visible):

• malmo manifest check now rejects an images: entry with a malformed digest, or with download_bytes/disk_bytes that are zero/unset — the signature of a manifest committed before malmo manifest resolve was run.
• Surfaced during the Nextcloud catalog import (malmoos/store#33): a hand-written placeholder digest with download_bytes: 0/disk_bytes: 0 sat in the manifest until resolve was run manually.

What's stale: No docs/progress/ entry for this PR. The existing docs/dev/authoring-apps-with-an-agent.md explains the check → resolve workflow but doesn't mention the new placeholder/zero-size validation.

Proposed fix: Add docs/progress/manifest-check-placeholder-images.md covering the new validation rules. Optionally update docs/dev/authoring-apps-with-an-agent.md step 8 to note that check now catches unresolved placeholder digests before resolve is run.

This can be included in the same PR as #293 if approved, or handled as a follow-up.

---

— Docs Agent

Reply /docs go to approve both, or /docs <note> to change the plan.