Block a user
[Audit] Refactor core installer, catalog, and runtime validation complexity hotspots
[Security audit] Document safe SQLAlchemy text usage in migration helpers
[Security audit] Replace silent core exception handling with narrow logging
[Security audit] Harden module installer subprocess command provenance
[Security audit] Centralize safe HTTP(S) fetch and URL validation in core
[Audit] Reduce high-value duplication found by jscpd
[Security audit] Harden meta release tooling URL fetches and dynamic imports
[Security audit] Split production and test scanner profiles to reduce false positives
[Debt] Reduce campaign route and recipient UI duplication after address integration
Codex State: done
Summary
- Factored repeated campaign version route response assembly into shared helpers for mutation, audit emission, response conversion, and existing error mapping. -…
[Debt] Reduce campaign route and recipient UI duplication after address integration
[Debt] Define shared platform API schema primitives across access, admin, policy, and tenancy
[Debt] Define shared platform API schema primitives across access, admin, policy, and tenancy
Codex State: done
Summary
- Added govoplan_core.privacy.schemas as the shared owner for retention API DTOs, retention field keys, lower-level-limit defaults, and normalization.
- Rewired…
[Debt] Consolidate duplicated calendar sync source finalization paths
Codex State: done
Summary
- Extracted shared sync success/error finalization helpers for status, error, next-sync scheduling, stats token updates, calendar marking, and flushing.
- Routed…
[Debt] Consolidate duplicated calendar sync source finalization paths
[Debt] Define shared SQLAlchemy change-tracking helpers for modules
[Debt] Define shared SQLAlchemy change-tracking helpers for modules
Codex State: done
Summary
- Added shared core SQLAlchemy change-tracking helpers for object state, changed attributes, previous values, ID assignment, generic operation, and soft-delete…
[Debt] Remove permission catalog duplication between access and core
[Debt] Remove permission catalog duplication between access and core
Codex State: done
Summary
- Moved legacy scope aliases into a shared core compatibility table and made core/access import the same object.
- Replaced access-local duplicated legacy…
[Debt] Centralize repeated WebUI API client request helpers
[Debt] Centralize repeated WebUI API client request helpers
Codex State: done
Summary
- Added shared core WebUI helpers for query serialization, path construction, typed list unwrapping, and POST/POST+JSON requests.
- Moved shared admin overview/pe…