mosaic/stack
1
0
Fork 0
Code Issues 10 Pull Requests Actions Packages Projects Releases 2 Wiki Activity

chore: Start MS-SEC-001 (orchestrator API auth)
Some checks failed
ci/woodpecker/push/woodpecker Pipeline failed
Details

Browse Source
This commit is contained in:
Jason Woltje
2026-02-05 15:14:19 -06:00
parent 630f946718
commit c74b6b13d1
1 changed files with 47 additions and 47 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
docs/tasks.md
View File

@@ -1,8 +1,8 @@
# Tasks
| id | status | description | issue | repo | branch | depends_on | blocks | agent | started_at | completed_at | estimate | used |
| ----------- | ----------- | --------------------------------------------------------------------- | ----- | ------------ | ------------ | ----------- | ------------ | ---------- | ---------- | ------------ | -------- | ---- | --- | --- |
| MS-SEC-001 | not-started | SEC-ORCH-2: Add authentication to orchestrator API | #337 | orchestrator | fix/security | | MS-SEC-002 | | | | 15K | |
| ----------- | ----------- | --------------------------------------------------------------------- | ----- | ------------ | ------------ | ----------- | ----------- | -------- | -------------------- | ------------ | -------- | ---- |
| MS-SEC-001 | in-progress | SEC-ORCH-2: Add authentication to orchestrator API | #337 | orchestrator | fix/security | | MS-SEC-002 | worker-1 | 2026-02-05T15:15:00Z | | 15K | |
| MS-SEC-002 | not-started | SEC-WEB-2: Fix WikiLinkRenderer XSS (sanitize HTML before wiki-links) | #337 | web | fix/security | MS-SEC-001 | MS-SEC-003 | | | | 8K | |
| MS-SEC-003 | not-started | SEC-ORCH-1: Fix secret scanner error handling (return error state) | #337 | orchestrator | fix/security | MS-SEC-002 | MS-SEC-004 | | | | 8K | |
| MS-SEC-004 | not-started | SEC-API-2+3: Fix guards swallowing DB errors (propagate as 500s) | #337 | api | fix/security | MS-SEC-003 | MS-SEC-005 | | | | 10K | |
@@ -13,7 +13,7 @@
| MS-SEC-009 | not-started | SEC-ORCH-6: Add Zod validation for deserialized Redis data | #337 | orchestrator | fix/security | MS-SEC-008 | MS-SEC-010 | | | | 12K | |
| MS-SEC-010 | not-started | SEC-WEB-1: Sanitize OAuth callback error parameter | #337 | web | fix/security | MS-SEC-009 | MS-SEC-011 | | | | 5K | |
| MS-SEC-011 | not-started | CQ-API-6: Replace hardcoded OIDC values with env vars | #337 | api | fix/security | MS-SEC-010 | MS-SEC-012 | | | | 8K | |
| MS-SEC-012 | not-started | CQ-WEB-5: Fix boolean logic bug in ReactFlowEditor (?? to | | ) | #337 | web | fix/security | MS-SEC-011 | MS-SEC-013 | | | | 3K | |
| MS-SEC-012 | not-started | CQ-WEB-5: Fix boolean logic bug in ReactFlowEditor | #337 | web | fix/security | MS-SEC-011 | MS-SEC-013 | | | | 3K | |
| MS-SEC-013 | not-started | SEC-API-4: Add workspaceId query verification tests | #337 | api | fix/security | MS-SEC-012 | MS-SEC-V01 | | | | 20K | |
| MS-SEC-V01 | not-started | Phase 1 Verification: Run full quality gates | #337 | all | fix/security | MS-SEC-013 | MS-HIGH-001 | | | | 5K | |
| MS-HIGH-001 | not-started | SEC-API-5: Fix OpenAI embedding service dummy key handling | #338 | api | fix/high | MS-SEC-V01 | MS-HIGH-002 | | | | 8K | |