 Oleksandr Bezdieniezhnykh
|
f7dd6c98d8
|
[AZ-501] [AZ-502] Cycle 2 Step 14 security audit + inline fixes
ci/woodpecker/push/build-arm Pipeline failed
Security audit (5 phases) → reports under _docs/05_security/.
AZ-501 (F-SAST-1, HIGH): Externalize hardcoded Google Geocode key
from mission-planner/src/config.ts to VITE_GOOGLE_GEOCODE_KEY via
new GeocodeService.ts; fail-soft warn when unset; STC-SEC1D static
deny-list gate; +5 unit tests in tests/mission_planner_geocode.test.ts.
AZ-502 (F-DEP-1, HIGH): Force vite>=6.4.2 and postcss>=8.5.10 via
package.json overrides in both roots; clean reinstall clears all
bun audit advisories.
Test-spec sync (Step 12) + Update Docs (Step 13) deltas: AC-43, AC-44,
NFT-SEC-09b, FT-P-61, FT-N-17, ripple log, batch_12 report.
Pending user actions: revoke Google + OWM keys (AC-6 / AZ-499 AC-7).
229 PASS / 13 SKIP / 0 FAIL on static + fast suites.
Co-authored-by: Cursor <cursoragent@cursor.com>
|
2026-05-12 05:31:11 +03:00 |
|
|
Oleksandr Bezdieniezhnykh
|
510df68bcf
|
[AZ-447] autodev Steps 1-4 baseline: docs, tests, refactor specs
Captures the full output of autodev existing-code Phase A through
Step 4 (Code Testability Revision) for the Azaion UI workspace:
- Step 1 Document: _docs/02_document/ (FINAL_report, architecture,
glossary, components/, modules/, diagrams/, system-flows,
module-layout) plus _docs/00_problem/ + _docs/01_solution/ +
_docs/legacy/ + _docs/how_to_test + README.
- Step 2 Architecture Baseline: architecture_compliance_baseline.md.
- Step 3 Test Spec: _docs/02_document/tests/ (environment,
test-data, blackbox/performance/resilience/security/
resource-limit tests, traceability-matrix), enum_spec_snapshot,
expected_results/results_report.md (98 rows), plus the
run-tests.sh + run-performance-tests.sh runners.
- Step 4 Code Testability Revision: 01-testability-refactoring/
run dir (list-of-changes C01-C07, deferred_to_refactor,
analysis/research_findings + refactoring_roadmap) and the 7
child task specs AZ-448..AZ-454 under _docs/02_tasks/todo/
plus _dependencies_table.md.
- _docs/_autodev_state.md pins the cursor at Step 4 / refactor
Phase 4 entry so /autodev resumes cleanly.
Epic AZ-447 (UI testability gates) tracks the 7 child tasks that
will land in subsequent commits.
Co-authored-by: Cursor <cursoragent@cursor.com>
|
2026-05-11 00:38:49 +03:00 |
|