Skip to content

TODO.md

Latest commit

 

History

History
55 lines (50 loc) · 3.47 KB

TODO.md

File metadata and controls

55 lines (50 loc) · 3.47 KB

Gitdeck fork — backlog

Personal-fork backlog for Noisyink/gitdeck. Running on the home server at :8766.

Done (2026-06-11 sweep)

  • Fixed the 4 pre-existing upstream tsc errors — npm run typecheck and the test suite now pass clean.
  • Hid the Notifications (Inbox) nav tab — it 403s without a notifications token; the view code and /inbox route remain, only the button is gone.
  • Summary caching — the last Claude summary per (repo, number, model) is cached server-side (summaries.json); re-opening a thread is free, and "Regenerate" (fresh) is the only path that re-bills.
  • Long-timeline handling — fetchThread flags truncated at 100 events and the thread shows "Showing the first 100 events. Open in GitHub." (Full append-pagination was judged disproportionate; the Open-in-GitHub button is the escape hatch for very long threads.)
  • Ownership toggle now persists (localStorage) so your owned/non-owned/both choice is the default across reloads.
  • Clear/rotate the Anthropic key from Preferences (Clear button + server clear path). GitHub-token rotation is still via the existing add-token flow.

Open

  • Inherited CI: debba's one dockerbuild.yml workflow had run 0 times on the fork (not failing). Disabled it via the Actions API (disabled_manually) with the repo token — no workflow scope needed. The file stays in the tree (deleting it would need a workflow-scoped token); disabled is sufficient.
  • Broaden thread timeline coverage — added more event types (committed, cross-referenced, milestoned, ready_for_review, etc.) and inline PR review comments (new review-comment kind, file path shown), sorted chronologically.
  • Rewrite review done via the Lead→Architect→Reviewer pipeline — see REWRITE-REVIEW.md: per-area keep/refactor/rewrite/delete verdicts, slop taxonomy, an 8-slice rewrite order, fork-patch preservation map, and test-gap gates. Reviewer's 3 fix-now items (Anthropic error proxy + timeout, ReplyBox confirm snapshot) are fixed; the during-rewrite items (F-03/04/06-10) are folded into the slice plan.
  • Hand rewrite COMPLETE (all 8 slices per REWRITE-REVIEW.md): deleted tokenStore + OpenAI digest; collapsed the two-forge provider seam to GitHub-only; deduped + split server.ts 1306→172-line router + handlers/; split App.tsx 1046→963 + sections/. Test coverage 15→154 (provider fork methods, all routes, notifications). All gated tsc+test green, live + verified.
  • Inbox restored as a non-default tab (repos stays the landing page) — it works now that the deployed token has repo scope (Notifications API returns data). Reverted the earlier slice-3/4 cut on user request ("liked it, just not primary").

New server / migration (cross-ref ../migration/TODO.md, blocked on K8 Plus hardware)

  • Fold gitdeck into the services-guest stack behind Caddy (+ likely Authentik) instead of exposing raw :8766.
  • Move both secrets — the write-capable GitHub token and the Anthropic key — out of .env / settings.json into the SOPS/OpenBao pattern.

Security posture note

A no-login LAN app holding a write-capable GitHub token + an Anthropic key that performs public writes. Fine on the trusted LAN; gate behind Caddy/Authentik before any wider exposure.