Block a user
[Security audit] Replace silent IMAP/SMTP exception handling with narrow logging
[Audit] Refactor files transfer and campaign-usage complexity hotspots
[Audit] Refactor campaign validation, persistence, and sending complexity hotspots
[Security audit] Replace production asserts with explicit campaign errors
[Audit] Refactor CalDAV and iCalendar parsing complexity hotspots
[Security audit] Harden CalDAV/WebCal remote fetch and XML parsing
[Audit] Refactor core installer, catalog, and runtime validation complexity hotspots
[Security audit] Document safe SQLAlchemy text usage in migration helpers
[Security audit] Replace silent core exception handling with narrow logging
[Security audit] Harden module installer subprocess command provenance
[Security audit] Centralize safe HTTP(S) fetch and URL validation in core
[Audit] Reduce high-value duplication found by jscpd
[Security audit] Harden meta release tooling URL fetches and dynamic imports
[Security audit] Split production and test scanner profiles to reduce false positives
[Debt] Reduce campaign route and recipient UI duplication after address integration
Codex State: done
Summary
- Factored repeated campaign version route response assembly into shared helpers for mutation, audit emission, response conversion, and existing error mapping. -…
[Debt] Reduce campaign route and recipient UI duplication after address integration
[Debt] Define shared platform API schema primitives across access, admin, policy, and tenancy
[Debt] Define shared platform API schema primitives across access, admin, policy, and tenancy
Codex State: done
Summary
- Added govoplan_core.privacy.schemas as the shared owner for retention API DTOs, retention field keys, lower-level-limit defaults, and normalization.
- Rewired…
[Debt] Consolidate duplicated calendar sync source finalization paths
[Debt] Consolidate duplicated calendar sync source finalization paths
Codex State: done
Summary
- Extracted shared sync success/error finalization helpers for status, error, next-sync scheduling, stats token updates, calendar marking, and flushing.
- Routed…