Jason Woltje
52f47c2311
docs: Complete Phase 3 verification and update task tracking
...
ci/woodpecker/push/woodpecker Pipeline failed
ci/woodpecker/pr/woodpecker Pipeline failed
All remediation phases complete:
- Phase 1: 13 security-critical issues fixed (#337 )
- Phase 2: 18 high-priority issues fixed (#338 )
- Phase 3: 6 medium-priority issues fixed (#339 )
Quality gates passing: lint ✓ typecheck ✓ tests ✓
(API package has 39 pre-existing failures in fulltext-search module)
Deferred items (complex refactoring):
- MS-MED-006: CSP headers (requires Next.js config changes)
- MS-MED-008: Valkey single source of truth (architectural change)
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com >
2026-02-05 19:30:22 -06:00
Jason Woltje
c74b6b13d1
chore: Start MS-SEC-001 (orchestrator API auth)
ci/woodpecker/push/woodpecker Pipeline failed
2026-02-05 15:14:19 -06:00
Jason Woltje
630f946718
chore(orchestrator): Bootstrap tasks.md from review report
...
ci/woodpecker/push/woodpecker Pipeline failed
Parsed 124 findings into 44 tasks across 2 phases (critical + high).
Estimated total: ~400K tokens.
Issues created:
- #337 : Phase 1 Critical Security (14 tasks)
- #338 : Phase 2 High Priority (30 tasks)
- #339 : Phase 3 Medium (deferred)
- #340 : Phase 4 Low (deferred)
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com >
2026-02-05 15:13:48 -06:00
Jason Woltje
9dfbf8cf61
chore: Remove pre-created task files, add review reports
...
ci/woodpecker/push/woodpecker Pipeline failed
- Delete docs/tasks.md (let orchestrator bootstrap from scratch)
- Delete docs/claude/task-tracking.md (superseded by universal guide)
- Add codebase review reports for orchestrator to parse
Tests orchestrator's autonomous bootstrap capability.
2026-02-05 15:08:02 -06:00
Jason Woltje
b56bef0747
feat: Set up security remediation task tracking
...
ci/woodpecker/push/woodpecker Pipeline failed
- Update CLAUDE.md to point to universal orchestrator guide
- Add docs/tasks.md with 28 tasks across 4 phases:
- Phase 1: Critical Security (MS-SEC-001 to MS-SEC-010)
- Phase 2: High Security (MS-HIGH-001 to MS-HIGH-006)
- Phase 3: Code Quality (MS-CQ-001 to MS-CQ-007)
- Phase 4: Test Coverage (MS-TEST-001 to MS-TEST-005)
- Add project-specific task-tracking.md reference
Based on comprehensive codebase review (124 findings).
2026-02-05 14:58:52 -06:00
