Files
goodgo-platform/PROJECT_TRACKER.md
Ho Ngoc Hai 1fbe2f4e73 feat: add MFA/TOTP auth, PII encryption, agents/leads/inquiries modules, and comprehensive tests
- Add TOTP-based MFA with setup, verify, disable, backup codes, and challenge flow
- Add PII field encryption middleware with AES-256-GCM and deterministic search hashes
- Add agents, inquiries, and leads domain modules with entities, events, value objects
- Add web dashboard pages for inquiries and leads with detail dialogs
- Add 30+ component tests (valuation, charts, listings, search, providers, UI)
- Add Prisma migrations for encryption hash columns and MFA TOTP support
- Fix all ESLint errors (unused imports, duplicate imports, lint auto-fixes)
- Update dependencies and lock file
- Clean up obsolete exploration/QA docs, add audit documentation

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-04-11 23:43:20 +07:00

37 KiB

GoodGo Platform AI — Project Tracker

Last Updated: 2026-04-11 Project: Goodgo Platform AI Status: MVP Complete — Phase 7 (Post-MVP Improvements) Wave 11 In Progress


Phase 0: Foundation (P0 — Critical)

Issue Title Priority Status Commit
TEC-1415 Monorepo Scaffolding (Turborepo + NestJS + Next.js) Critical done e1e5fa6
TEC-1416 Docker Compose Dev Environment Critical done e1e5fa6
TEC-1417 Prisma Schema + Initial Migration + Seed Scripts Critical done ff358f6
TEC-1418 Shared Module (Domain Primitives + Infrastructure) Critical done 1fb7bb3
TEC-1419 CI/CD Pipeline (GitHub Actions) High done 19dd59e
TEC-1420 ESLint + Prettier + Module Boundary Rules High done 83d55de

Phase 1: Core Auth & Listings (P1)

Issue Title Priority Status Commit
TEC-1421 Auth Module Backend (Register, Login, JWT, OAuth) Critical done 391c040
TEC-1422 Auth Frontend (Login/Register + OAuth) High done bfdd2f7
TEC-1423 Listings Module Backend (CRUD, Media, Moderation) High done 8a33aae
TEC-1424 Search Module Backend (Typesense + Geo) High done 6741592
TEC-1425 Security Hardening (Rate Limiting, CORS, Helmet) High done f3081d9
TEC-1426 Error Handling & Logging Strategy High done c981bff
TEC-1427 Listings Frontend (Create/Edit + Detail) High done 207a201
TEC-1428 Search + Landing Page Frontend High done 5e44456

Phase 2: Monetization & Operations (P2)

Issue Title Priority Status Commit
TEC-1429 Payments Module (VNPay + MoMo + ZaloPay) Medium done ad77139
TEC-1430 Subscriptions Module (Plans, Quotas, Billing) Medium done 9b581b7
TEC-1431 Notifications Module (Email, SMS, Zalo OA, FCM) Medium done 0b29fac
TEC-1432 Admin Module (Backend + Frontend) Medium done 6123fc4
TEC-1433 E2E Testing Setup (Playwright) Medium done 60a0b3c

Phase 3: AI & Advanced (P3)

Issue Title Priority Status Commit
Analytics Module (Market Reports, Price Index) High done efa49e2
AI/ML Services Container (Python FastAPI + XGBoost) High done b392bc3
MCP Server Integration (Property Search, Analytics, Valuation) Medium done cb00b12
Performance Monitoring (Prometheus + Grafana) Low done d99dfba

Phase 4: Production Hardening (P0/P1 — Security + Infrastructure)

Issue Title Priority Status Assignee
TEC-1449 Fix JWT hardcoded fallback secret Critical done Security Engineer
TEC-1450 Create production deployment pipeline — Dockerfiles + CI/CD Critical done DevOps Engineer
TEC-1451 Fix timing-unsafe HMAC in payment verification High done Security Engineer
TEC-1452 Fix MinIO hardcoded credentials and unsigned PUT High done Senior Backend Eng
TEC-1453 Add CSRF protection middleware High done Security Engineer
TEC-1455 Add missing DB index on Listing.sellerId High done Database Architect
TEC-1456 Add unit tests for Analytics, Search, Notifications High done QA Engineer
TEC-1457 Set up database backup strategy and log aggregation High done SRE Engineer

Phase 5: Quality & Polish (P2 — UX, Docs, Performance)

Issue Title Priority Status Assignee
TEC-1458 Implement Redis caching layer for hot queries Medium done Senior Backend Eng
TEC-1459 Add error boundaries, 404 page, loading states, SEO metadata Medium done Senior Frontend Eng
TEC-1460 Add OpenAPI/Swagger documentation for API Medium done API Architect
TEC-1461 Create README.md and deployment documentation Medium done Technical Writer

Phase 6: MVP Feature Completion & Audit Follow-up (P0-P2)

Issue Title Priority Status Assignee
TEC-1592 Commit 23 untracked files (analytics, encryption, i18n) Critical done Senior Backend Engineer
TEC-1593 Investigate and fix Architect agent error status High done DevOps Engineer
TEC-1594 Consolidate i18n routes — remove non-locale route duplication High done Senior Frontend Engineer
TEC-1595 Build Agent Portal — inquiry system, lead tracking, quality High done Senior Backend Engineer
TEC-1596 Integrate AI/ML services — AVM endpoint, AI moderation High done Senior Backend Engineer
TEC-1597 Complete payment flow — VNPay E2E + MoMo integration High done Senior Backend Engineer
TEC-1598 Add post-deploy smoke test pipeline stage High done DevOps Engineer
TEC-1599 Add test coverage for health, mcp, metrics modules Medium done QA Engineer
TEC-1600 Generate OpenAPI/Swagger documentation Medium done Technical Writer
TEC-1601 Run K6 baseline load tests and establish benchmarks Medium done SRE Engineer
TEC-1602 Security audit — pen testing on auth and payment flows Medium done Security Engineer
TEC-1603 Database index optimization review Medium done Database Architect
TEC-1604 Setup Sentry error tracking integration Medium done Infrastructure Engineer
TEC-1639 Add auth guards to MCP Transport Controller Critical done Security Engineer
TEC-1640 Improve async error handling in critical modules High done Senior Backend Engineer
TEC-1641 Add input size limits for file uploads High done Senior Backend Engineer

Phase 7: Post-MVP Improvements & Production Hardening (P0-P2)

Wave 1 — Critical Bug Fixes

Issue Title Priority Status Assignee
TEC-1647 Fix Reviews module routing — all /reviews/* routes return 404 Critical done Senior Backend Engineer
TEC-1648 Fix Health check endpoints — /health and /ready return 404 Critical done Senior Backend Engineer
TEC-1649 Verify and fix Login error handling — 500 → 401 Critical in_progress Senior Backend Engineer
TEC-1650 Fix Listing detail — non-existent ID returns 500 → 404 High todo Senior Backend Engineer

Wave 2 — Production Readiness

Issue Title Priority Status Assignee
TEC-1651 Setup Docker Compose CI environment for E2E tests High done DevOps Engineer
TEC-1652 Run and verify all 29 E2E tests with full environment High blocked QA Engineer
TEC-1653 Security headers audit — CSP, HSTS, X-Frame-Options High done Security Engineer
TEC-1658 Add PgBouncer connection pooling for production High done Database Architect

Wave 3 — User-Facing Quality

Issue Title Priority Status Assignee
TEC-1654 Mobile responsive optimization High done Senior Frontend Engineer
TEC-1655 SEO optimization — structured data, sitemap, meta tags High done Senior Frontend Engineer
TEC-1656 Add per-user rate limiting for authenticated API routes High done Security Engineer
TEC-1657 Add audit logging for admin actions High todo Senior Backend Engineer

Wave 4 — Engineering Excellence

Issue Title Priority Status Assignee
TEC-1659 Add graceful degradation for Typesense and Redis failures Medium done Architect
TEC-1660 Document all structured API error codes Medium done Technical Writer
TEC-1661 Setup RUM and Core Web Vitals tracking Medium done SRE Engineer
TEC-1662 Update QA_TRACKER.md — correct test counts and bug statuses Medium done QA Engineer

Wave 5 — CEO Audit: Security & Quality

Issue Title Priority Status Assignee
TEC-1684 Fix critical npm vulnerabilities (axios SSRF, Next.js CVEs) Critical done Security Engineer
TEC-1685 Fix lint error in resilient-search.repository.ts High done QA Engineer
TEC-1686 Increase test coverage for listings, auth, search to 50%+ High done QA Engineer
TEC-1687 Set up Dependabot for automated security updates Medium done DevOps Engineer
TEC-1688 Implement Saved Searches + Alerts (Sprint 3 gap) High done Architect

Wave 6 — CEO Audit: Code Hygiene, Frontend Quality, Features

Wave 6A — Critical (P0)

Issue Title Priority Status Assignee
TEC-1692 Commit 348 uncommitted files — protect work from data loss Critical todo Senior Backend Engineer
TEC-1693 Fix 729 ESLint errors — unblock CI pipeline Critical todo Senior Backend Engineer
TEC-1694 Create /pricing page — complete subscription funnel Critical todo Senior Frontend Engineer

Wave 6B — High Priority (P1)

Issue Title Priority Status Assignee
TEC-1695 Frontend accessibility audit + ARIA fixes High todo Senior Frontend Engineer
TEC-1696 Fix Reviews test + increase frontend test coverage to 40% High todo QA Engineer
TEC-1697 Mobile responsive polish — final pass on all 22 pages High todo UX/UI Designer

Wave 6C — Medium Priority (P2)

Issue Title Priority Status Assignee
TEC-1698 Frontend performance — next/image + Server Component audit Medium in_progress Senior Frontend Engineer
TEC-1699 Saved search email alerts — user retention feature Medium todo Senior Backend Engineer

Wave 7 — CEO Audit (2026-04-10)

Wave 7A — Critical (P0)

Issue Title Priority Status Assignee
TEC-1703 Fix HashedPassword.vo.spec.ts timeout — restore CI green Critical todo QA Engineer

Wave 7B — High Priority (P1)

Issue Title Priority Status Assignee
TEC-1704 Vietnamese price formatting — display 3.5 tỷ, 150 triệu/m² High todo Senior Frontend Engineer
TEC-1705 Consolidate 18 audit files from root into docs/audits/ High todo Technical Writer

Wave 7C — Medium Priority (P2)

Issue Title Priority Status Assignee
TEC-1706 Build property comparison page — frontend for MCP compare Medium todo Senior Frontend Engineer
TEC-1707 Create agent public profile page at /agents/[id] Medium todo Senior Frontend Engineer
TEC-1708 Add lightbox image gallery to property detail page Medium todo Senior Frontend Engineer
TEC-1709 Create Grafana dashboard for API latency monitoring Medium todo SRE Engineer
TEC-1710 Automate database backup restore verification Medium todo Database Architect
TEC-1711 Consolidate project documentation — update README + API docs Medium todo Technical Writer

Wave 8 — CEO Audit: Code Hygiene, Backend Hardening, Quality (2026-04-11)

Wave 8A — Critical (P0)

Issue Title Priority Status Assignee
TEC-1733 Fix 2 TypeScript errors in OAuth callback tests Critical todo QA Engineer
TEC-1734 Fix 9 remaining ESLint errors across web and e2e Critical todo Senior Frontend Engineer
TEC-1735 Commit all 56 uncommitted changes Critical todo Senior Backend Engineer

Wave 8B — High Priority (P1)

Issue Title Priority Status Assignee
TEC-1736 Add error handling to remaining backend CQRS handlers High todo Senior Backend Engineer
TEC-1737 Increase backend test coverage for admin, leads, inquiries, reviews High todo QA Engineer
TEC-1738 Add cascade delete to Prisma foreign keys High todo Database Architect
TEC-1739 Add per-endpoint API rate limiting with Redis sliding window High todo Security Engineer

Wave 8C — Medium/Low Priority (P2/P3)

Issue Title Priority Status Assignee
TEC-1740 DTO validation hardening — phone format, password strength Medium todo Senior Backend Engineer
TEC-1741 Create operational runbook for production incidents Medium todo SRE Engineer
TEC-1742 Frontend image optimization — next/image responsive sizes Medium todo Senior Frontend Engineer
TEC-1743 Create one-command bootstrap dev setup script Low todo DevOps Engineer

Wave 8 Status Updates

Issue Title Priority Status Notes
TEC-1693 Fix 729 ESLint errors Critical done Fixed in 0593d40
TEC-1734 Fix 9 remaining ESLint errors Critical done Fixed in 0593d40
TEC-1738 Add cascade delete to Prisma FKs High done Fixed in 45e48c0
TEC-1739 Per-endpoint API rate limiting High done Fixed in d824d16
TEC-1741 Operational runbook Medium done Fixed in f27b13f
TEC-1743 One-command bootstrap dev setup Low done Fixed in b7f9664

Phase 7 — Wave 9: CEO Audit (2026-04-11)

Wave 9A — Critical / High Priority (P0/P1)

Issue Title Priority Status Assignee
TEC-1774 Fix 2 TypeScript compile errors blocking CI typecheck Critical done Senior Backend Engineer
TEC-1735 Commit 105 uncommitted file changes Critical done Senior Backend Engineer
TEC-1775 Add unit tests for MCP, Inquiries, and Leads modules High done QA Engineer
TEC-1736 Add error handling to remaining backend CQRS handlers High done Senior Backend Engineer

Wave 9B — Medium Priority (P2)

Issue Title Priority Status Assignee
TEC-1776 Refactor 3 oversized files exceeding 220 LOC Medium todo Senior Backend Engineer
TEC-1777 Implement agent quality score auto-calculation cron Medium todo Senior Backend Engineer
TEC-1778 Add staging environment auto-deploy pipeline Medium done DevOps Engineer
TEC-1740 DTO validation hardening Medium todo Senior Backend Engineer
TEC-1699 Implement saved search email alerts Medium done Senior Backend Engineer
TEC-1708 Add lightbox image gallery to property detail Medium done Senior Frontend Engineer

Summary

Phase Total Done In Progress Blocked Todo
Phase 0 6 6 0 0 0
Phase 1 8 8 0 0 0
Phase 2 5 5 0 0 0
Phase 3 4 4 0 0 0
Phase 4 8 8 0 0 0
Phase 5 4 4 0 0 0
Phase 6 16 16 0 0 0
Phase 7W1-5 26 19 1 1 5
Phase 7W6 8 1 3 0 4
Phase 7W7 9 0 0 0 9
Phase 7W8 11 6 0 0 5
Phase 7W9 10 0 0 1 9
Phase 7W10 12 8 1 0 3
Phase 7W11 9 0 2 1 6
Total 136 85 7 2 42

Wave 10 — CEO Audit (2026-04-11) — Automated Routine

Wave 10A — Critical (P0)

Issue Title Priority Status Assignee
TEC-1839 Commit 105 uncommitted files + Fix 2 TS compile errors Critical done Senior Backend Engineer

Wave 10B — High Priority (P1)

Issue Title Priority Status Assignee
TEC-1840 Add unit tests for Agents, Inquiries, Leads, Reviews modules High done QA Engineer
TEC-1841 Fix login endpoint returning 500 instead of 401 High done Senior Backend Engineer
TEC-1736 Add error handling to remaining CQRS handlers High done Senior Backend Engineer
TEC-1846 Build Inquiry & Lead Management UI for Agent Portal High done Senior Frontend Engineer
TEC-1848 Create production runbook, alerting rules & DR validation High done SRE Engineer
TEC-1849 Expand K6 load test coverage: search, admin, MCP endpoints High done SRE Engineer

Wave 10C — Medium Priority (P2)

Issue Title Priority Status Assignee
TEC-1842 Refactor Agents/Inquiries/Leads/Reviews to full DDD Medium in_progress Architect
TEC-1777 Implement agent quality score auto-calculation cron Medium todo Senior Backend Engineer
TEC-1778 Add staging environment auto-deploy pipeline Medium done DevOps Engineer
TEC-1699 Implement saved search email alerts Medium done Senior Backend Engineer
TEC-1708 Add lightbox image gallery to property detail page Medium done Senior Frontend Engineer

Wave 11 — CEO Audit (2026-04-11) — Automated Routine

Wave 11A — Critical (P0)

Issue Title Priority Status Assignee
TEC-1876 Fix 9 ESLint errors — consistent-type-imports + unused vars Critical todo Senior Backend Engineer
TEC-1877 Commit 59 uncommitted files (17 modified + 42 untracked) Critical todo Senior Backend Engineer

Wave 11B — High Priority (P1)

Issue Title Priority Status Assignee
TEC-1878 Investigate and unblock E2E test environment (TEC-1652) High todo DevOps Engineer
TEC-1547 E2E Integration Verification — Full MVP Happy Path High in_progress QA Engineer
TEC-1847 Add React component tests (RTL) for critical components Medium todo QA Engineer

Wave 11C — Medium Priority (P2) — Carryover

Issue Title Priority Status Assignee
TEC-1842 Refactor Agents/Inquiries/Leads/Reviews to full DDD Medium in_progress Architect
TEC-1777 Implement agent quality score auto-calculation cron Medium todo Senior Backend Engineer
TEC-1776 Refactor 3 oversized files exceeding 220 LOC Medium todo Senior Backend Engineer
TEC-1740 DTO validation hardening — phone, password, email Medium todo Senior Backend Engineer

Wave 11D — CEO Full Audit Subtasks (2026-04-11)

Parent task: TEC-1882 — GoodGo Platform AI CEO Audit

Wave 11D-Critical — Fix Build Pipeline (P0)

Issue Title Priority Status Assignee
TEC-1888 Fix 725 ESLint errors and TypeScript compilation errors in web Critical todo Senior Frontend Engineer
TEC-1889 Fix 27 failing rate limit guard unit tests in shared module Critical todo Senior Backend Engineer

Wave 12 — Module Completion (P1)

Issue Title Priority Status Assignee
TEC-1890 Complete 3 incomplete API modules (health, metrics, MCP) High todo Senior Backend Engineer
TEC-1891 Implement production MCP servers (search, analytics, valuation) High todo Senior Backend Engineer

Wave 13 — Quality & Security (P1-P2)

Issue Title Priority Status Assignee
TEC-1892 Expand web component unit tests to 50% coverage High todo Senior Frontend Engineer
TEC-1893 Implement field-level encryption for PII and payment data High todo Security Engineer
TEC-1894 Add TOTP-based MFA support for agent and admin accounts Medium todo Security Engineer

Summary

Phase Total Done In Progress Blocked Todo
Phase 0 6 6 0 0 0
Phase 1 8 8 0 0 0
Phase 2 5 5 0 0 0
Phase 3 4 4 0 0 0
Phase 4 8 8 0 0 0
Phase 5 4 4 0 0 0
Phase 6 16 16 0 0 0
Phase 7W1-5 26 19 1 1 5
Phase 7W6 8 1 3 0 4
Phase 7W7 9 0 0 0 9
Phase 7W8 11 6 0 0 5
Phase 7W9 10 0 0 1 9
Phase 7W10 12 8 1 0 3
Phase 7W11 16 0 2 1 13
Phase 7W12 2 0 0 0 2
Phase 7W13 3 0 0 0 3
Total 148 85 7 3 53

Wave 12 — CEO Audit (2026-04-11) — CI Pipeline Fix

Parent task: TEC-1895 — GoodGo Platform AI

Wave 12A — Fix CI Pipeline (P0)

Issue Title Priority Status Assignee
TEC-1898 Fix Prisma 7 migration: replace $use() middleware with $extends Critical todo Senior Backend Engineer
TEC-1899 Fix 31 failing unit tests (rate-limit guards + auth repo) Critical todo QA Engineer
TEC-1900 Fix 4 ESLint errors and commit 91 uncommitted files Critical todo Senior Backend Engineer

Wave 12B — Bug Fixes & Feature Completion (P1) — Carryover

Issue Title Priority Status Assignee
TEC-1649 Fix login endpoint returning 500 instead of 401 High in_progress Senior Backend Engineer
TEC-1657 Add audit logging for admin actions High todo Senior Backend Engineer
TEC-1878 Investigate and unblock E2E test environment High todo DevOps Engineer
TEC-1847 Add React component tests (RTL) for critical components Medium todo QA Engineer

Summary

Phase Total Done In Progress Blocked Todo
Phase 0 6 6 0 0 0
Phase 1 8 8 0 0 0
Phase 2 5 5 0 0 0
Phase 3 4 4 0 0 0
Phase 4 8 8 0 0 0
Phase 5 4 4 0 0 0
Phase 6 16 16 0 0 0
Phase 7W1-5 26 19 1 1 5
Phase 7W6 8 1 3 0 4
Phase 7W7 9 0 0 0 9
Phase 7W8 11 6 0 0 5
Phase 7W9 10 0 0 1 9
Phase 7W10 12 8 1 0 3
Phase 7W11 16 0 2 1 13
Phase 7W12 7 0 1 0 6
Phase 7W13 3 0 0 0 3
Total 153 85 8 3 57

Last updated by CEO audit — 2026-04-11 (Wave 12 added from TEC-1895 — TEC-1898 through TEC-1900)