2.2 KiB
2.2 KiB
Phase 13 deferred items
Out-of-scope findings logged by plan executors. Not fixed by the plan that found them.
From 13-01
- fonoteka.go
TestPhase09SecurityRoutesfails on the current framework.plugins/golem15/fonoteka/admin_phase09_security_test.go:52reports the cabana admin file and relation routes (/plytadmin/api/v1/{vendor}/{plugin}/{controller}/{id}/files/...,.../relations/{name}/records/{child}...,.../relations/{name}/pivot/{child}) as unexpected. They were added by Phase 12.2 commitse54fd25,afb05b6andfe9e8bain summercms.go; the Phase 9 assembled-route inventory in fonoteka.go was not updated. Unrelated to 13-01 (no route was added or removed by the surf overlap change;Routes()is unchanged). Fix: extend the test's expected admin route set, or confirm with the 12.2 owner. FORCE_COLOR=3in the agent shell failsmodules/bonfireTestColorPolicy and TestInjectedOutputCapture. They pass with the variable unset; the suite was run withenv -u FORCE_COLOR. Environment, not code.- gofmt drift in files 13-01 did not touch:
fonoteka.go/plugins/golem15/fonoteka/household_smoke_test.go,summercms.go/modules/tide/flow_test.go,summercms.go/modules/tide/headers_test.go.
From 13-02
- Path ids between 2^31 and 2^32 bind-fail into an opaque 500 on other routes.
pathID(fonoteka.go/plugins/golem15/fonoteka/controllers/api/collections_controller.go:264) parses up to uint32, but the id columns are Postgresinteger, so for exampleDELETE /household/invitations/3000000000fails to encode the argument and answers the opaque 500 where PHP answers its 404. 13-02 guards onlyMarkNotificationRead(id > math.MaxInt32is not found). Fix: havepathIDtreat values abovemath.MaxInt32as 0 (no row), or guard each caller. - A Phase 2 fixture of a still-pending route carries a masked provider key text.
parity/fixtures/routes/POST___fonoteka_api_v1_ai-credential_test_jwt.yaml:21holds OpenAI's error text withsk-parit******real(a fake, masked value). The route stays pending until Phase 14 (D-02), which re-records it. TestPhase09SecurityRoutesand thehousehold_smoke_test.gogofmt drift from 13-01's list are still open; 13-02 did not touch them.