c0537ed535
Add Wave 10 section from automated CEO audit routine including TEC-1839 through TEC-1842 and updated summary table. Co-Authored-By: Paperclip <noreply@paperclip.ing>
28 KiB
28 KiB
GoodGo Platform AI — Project Tracker
Last Updated: 2026-04-11 Project: Goodgo Platform AI Status: MVP Complete — Phase 7 (Post-MVP Improvements) Wave 8 In Progress
Phase 0: Foundation (P0 — Critical)
| Issue | Title | Priority | Status | Commit |
|---|---|---|---|---|
| TEC-1415 | Monorepo Scaffolding (Turborepo + NestJS + Next.js) | Critical | done | e1e5fa6 |
| TEC-1416 | Docker Compose Dev Environment | Critical | done | e1e5fa6 |
| TEC-1417 | Prisma Schema + Initial Migration + Seed Scripts | Critical | done | ff358f6 |
| TEC-1418 | Shared Module (Domain Primitives + Infrastructure) | Critical | done | 1fb7bb3 |
| TEC-1419 | CI/CD Pipeline (GitHub Actions) | High | done | 19dd59e |
| TEC-1420 | ESLint + Prettier + Module Boundary Rules | High | done | 83d55de |
Phase 1: Core Auth & Listings (P1)
| Issue | Title | Priority | Status | Commit |
|---|---|---|---|---|
| TEC-1421 | Auth Module Backend (Register, Login, JWT, OAuth) | Critical | done | 391c040 |
| TEC-1422 | Auth Frontend (Login/Register + OAuth) | High | done | bfdd2f7 |
| TEC-1423 | Listings Module Backend (CRUD, Media, Moderation) | High | done | 8a33aae |
| TEC-1424 | Search Module Backend (Typesense + Geo) | High | done | 6741592 |
| TEC-1425 | Security Hardening (Rate Limiting, CORS, Helmet) | High | done | f3081d9 |
| TEC-1426 | Error Handling & Logging Strategy | High | done | c981bff |
| TEC-1427 | Listings Frontend (Create/Edit + Detail) | High | done | 207a201 |
| TEC-1428 | Search + Landing Page Frontend | High | done | 5e44456 |
Phase 2: Monetization & Operations (P2)
| Issue | Title | Priority | Status | Commit |
|---|---|---|---|---|
| TEC-1429 | Payments Module (VNPay + MoMo + ZaloPay) | Medium | done | ad77139 |
| TEC-1430 | Subscriptions Module (Plans, Quotas, Billing) | Medium | done | 9b581b7 |
| TEC-1431 | Notifications Module (Email, SMS, Zalo OA, FCM) | Medium | done | 0b29fac |
| TEC-1432 | Admin Module (Backend + Frontend) | Medium | done | 6123fc4 |
| TEC-1433 | E2E Testing Setup (Playwright) | Medium | done | 60a0b3c |
Phase 3: AI & Advanced (P3)
| Issue | Title | Priority | Status | Commit |
|---|---|---|---|---|
| — | Analytics Module (Market Reports, Price Index) | High | done | efa49e2 |
| — | AI/ML Services Container (Python FastAPI + XGBoost) | High | done | b392bc3 |
| — | MCP Server Integration (Property Search, Analytics, Valuation) | Medium | done | cb00b12 |
| — | Performance Monitoring (Prometheus + Grafana) | Low | done | d99dfba |
Phase 4: Production Hardening (P0/P1 — Security + Infrastructure)
| Issue | Title | Priority | Status | Assignee |
|---|---|---|---|---|
| TEC-1449 | Fix JWT hardcoded fallback secret | Critical | done | Security Engineer |
| TEC-1450 | Create production deployment pipeline — Dockerfiles + CI/CD | Critical | done | DevOps Engineer |
| TEC-1451 | Fix timing-unsafe HMAC in payment verification | High | done | Security Engineer |
| TEC-1452 | Fix MinIO hardcoded credentials and unsigned PUT | High | done | Senior Backend Eng |
| TEC-1453 | Add CSRF protection middleware | High | done | Security Engineer |
| TEC-1455 | Add missing DB index on Listing.sellerId | High | done | Database Architect |
| TEC-1456 | Add unit tests for Analytics, Search, Notifications | High | done | QA Engineer |
| TEC-1457 | Set up database backup strategy and log aggregation | High | done | SRE Engineer |
Phase 5: Quality & Polish (P2 — UX, Docs, Performance)
| Issue | Title | Priority | Status | Assignee |
|---|---|---|---|---|
| TEC-1458 | Implement Redis caching layer for hot queries | Medium | done | Senior Backend Eng |
| TEC-1459 | Add error boundaries, 404 page, loading states, SEO metadata | Medium | done | Senior Frontend Eng |
| TEC-1460 | Add OpenAPI/Swagger documentation for API | Medium | done | API Architect |
| TEC-1461 | Create README.md and deployment documentation | Medium | done | Technical Writer |
Phase 6: MVP Feature Completion & Audit Follow-up (P0-P2)
| Issue | Title | Priority | Status | Assignee |
|---|---|---|---|---|
| TEC-1592 | Commit 23 untracked files (analytics, encryption, i18n) | Critical | done | Senior Backend Engineer |
| TEC-1593 | Investigate and fix Architect agent error status | High | done | DevOps Engineer |
| TEC-1594 | Consolidate i18n routes — remove non-locale route duplication | High | done | Senior Frontend Engineer |
| TEC-1595 | Build Agent Portal — inquiry system, lead tracking, quality | High | done | Senior Backend Engineer |
| TEC-1596 | Integrate AI/ML services — AVM endpoint, AI moderation | High | done | Senior Backend Engineer |
| TEC-1597 | Complete payment flow — VNPay E2E + MoMo integration | High | done | Senior Backend Engineer |
| TEC-1598 | Add post-deploy smoke test pipeline stage | High | done | DevOps Engineer |
| TEC-1599 | Add test coverage for health, mcp, metrics modules | Medium | done | QA Engineer |
| TEC-1600 | Generate OpenAPI/Swagger documentation | Medium | done | Technical Writer |
| TEC-1601 | Run K6 baseline load tests and establish benchmarks | Medium | done | SRE Engineer |
| TEC-1602 | Security audit — pen testing on auth and payment flows | Medium | done | Security Engineer |
| TEC-1603 | Database index optimization review | Medium | done | Database Architect |
| TEC-1604 | Setup Sentry error tracking integration | Medium | done | Infrastructure Engineer |
| TEC-1639 | Add auth guards to MCP Transport Controller | Critical | done | Security Engineer |
| TEC-1640 | Improve async error handling in critical modules | High | done | Senior Backend Engineer |
| TEC-1641 | Add input size limits for file uploads | High | done | Senior Backend Engineer |
Phase 7: Post-MVP Improvements & Production Hardening (P0-P2)
Wave 1 — Critical Bug Fixes
| Issue | Title | Priority | Status | Assignee |
|---|---|---|---|---|
| TEC-1647 | Fix Reviews module routing — all /reviews/* routes return 404 | Critical | done | Senior Backend Engineer |
| TEC-1648 | Fix Health check endpoints — /health and /ready return 404 | Critical | done | Senior Backend Engineer |
| TEC-1649 | Verify and fix Login error handling — 500 → 401 | Critical | in_progress | Senior Backend Engineer |
| TEC-1650 | Fix Listing detail — non-existent ID returns 500 → 404 | High | todo | Senior Backend Engineer |
Wave 2 — Production Readiness
| Issue | Title | Priority | Status | Assignee |
|---|---|---|---|---|
| TEC-1651 | Setup Docker Compose CI environment for E2E tests | High | done | DevOps Engineer |
| TEC-1652 | Run and verify all 29 E2E tests with full environment | High | blocked | QA Engineer |
| TEC-1653 | Security headers audit — CSP, HSTS, X-Frame-Options | High | done | Security Engineer |
| TEC-1658 | Add PgBouncer connection pooling for production | High | done | Database Architect |
Wave 3 — User-Facing Quality
| Issue | Title | Priority | Status | Assignee |
|---|---|---|---|---|
| TEC-1654 | Mobile responsive optimization | High | done | Senior Frontend Engineer |
| TEC-1655 | SEO optimization — structured data, sitemap, meta tags | High | done | Senior Frontend Engineer |
| TEC-1656 | Add per-user rate limiting for authenticated API routes | High | done | Security Engineer |
| TEC-1657 | Add audit logging for admin actions | High | todo | Senior Backend Engineer |
Wave 4 — Engineering Excellence
| Issue | Title | Priority | Status | Assignee |
|---|---|---|---|---|
| TEC-1659 | Add graceful degradation for Typesense and Redis failures | Medium | done | Architect |
| TEC-1660 | Document all structured API error codes | Medium | done | Technical Writer |
| TEC-1661 | Setup RUM and Core Web Vitals tracking | Medium | done | SRE Engineer |
| TEC-1662 | Update QA_TRACKER.md — correct test counts and bug statuses | Medium | done | QA Engineer |
Wave 5 — CEO Audit: Security & Quality
| Issue | Title | Priority | Status | Assignee |
|---|---|---|---|---|
| TEC-1684 | Fix critical npm vulnerabilities (axios SSRF, Next.js CVEs) | Critical | done | Security Engineer |
| TEC-1685 | Fix lint error in resilient-search.repository.ts | High | done | QA Engineer |
| TEC-1686 | Increase test coverage for listings, auth, search to 50%+ | High | done | QA Engineer |
| TEC-1687 | Set up Dependabot for automated security updates | Medium | done | DevOps Engineer |
| TEC-1688 | Implement Saved Searches + Alerts (Sprint 3 gap) | High | done | Architect |
Wave 6 — CEO Audit: Code Hygiene, Frontend Quality, Features
Wave 6A — Critical (P0)
| Issue | Title | Priority | Status | Assignee |
|---|---|---|---|---|
| TEC-1692 | Commit 348 uncommitted files — protect work from data loss | Critical | todo | Senior Backend Engineer |
| TEC-1693 | Fix 729 ESLint errors — unblock CI pipeline | Critical | todo | Senior Backend Engineer |
| TEC-1694 | Create /pricing page — complete subscription funnel | Critical | todo | Senior Frontend Engineer |
Wave 6B — High Priority (P1)
| Issue | Title | Priority | Status | Assignee |
|---|---|---|---|---|
| TEC-1695 | Frontend accessibility audit + ARIA fixes | High | todo | Senior Frontend Engineer |
| TEC-1696 | Fix Reviews test + increase frontend test coverage to 40% | High | todo | QA Engineer |
| TEC-1697 | Mobile responsive polish — final pass on all 22 pages | High | todo | UX/UI Designer |
Wave 6C — Medium Priority (P2)
| Issue | Title | Priority | Status | Assignee |
|---|---|---|---|---|
| TEC-1698 | Frontend performance — next/image + Server Component audit | Medium | in_progress | Senior Frontend Engineer |
| TEC-1699 | Saved search email alerts — user retention feature | Medium | todo | Senior Backend Engineer |
Wave 7 — CEO Audit (2026-04-10)
Wave 7A — Critical (P0)
| Issue | Title | Priority | Status | Assignee |
|---|---|---|---|---|
| TEC-1703 | Fix HashedPassword.vo.spec.ts timeout — restore CI green | Critical | todo | QA Engineer |
Wave 7B — High Priority (P1)
| Issue | Title | Priority | Status | Assignee |
|---|---|---|---|---|
| TEC-1704 | Vietnamese price formatting — display 3.5 tỷ, 150 triệu/m² | High | todo | Senior Frontend Engineer |
| TEC-1705 | Consolidate 18 audit files from root into docs/audits/ | High | todo | Technical Writer |
Wave 7C — Medium Priority (P2)
| Issue | Title | Priority | Status | Assignee |
|---|---|---|---|---|
| TEC-1706 | Build property comparison page — frontend for MCP compare | Medium | todo | Senior Frontend Engineer |
| TEC-1707 | Create agent public profile page at /agents/[id] | Medium | todo | Senior Frontend Engineer |
| TEC-1708 | Add lightbox image gallery to property detail page | Medium | todo | Senior Frontend Engineer |
| TEC-1709 | Create Grafana dashboard for API latency monitoring | Medium | todo | SRE Engineer |
| TEC-1710 | Automate database backup restore verification | Medium | todo | Database Architect |
| TEC-1711 | Consolidate project documentation — update README + API docs | Medium | todo | Technical Writer |
Wave 8 — CEO Audit: Code Hygiene, Backend Hardening, Quality (2026-04-11)
Wave 8A — Critical (P0)
| Issue | Title | Priority | Status | Assignee |
|---|---|---|---|---|
| TEC-1733 | Fix 2 TypeScript errors in OAuth callback tests | Critical | todo | QA Engineer |
| TEC-1734 | Fix 9 remaining ESLint errors across web and e2e | Critical | todo | Senior Frontend Engineer |
| TEC-1735 | Commit all 56 uncommitted changes | Critical | todo | Senior Backend Engineer |
Wave 8B — High Priority (P1)
| Issue | Title | Priority | Status | Assignee |
|---|---|---|---|---|
| TEC-1736 | Add error handling to remaining backend CQRS handlers | High | todo | Senior Backend Engineer |
| TEC-1737 | Increase backend test coverage for admin, leads, inquiries, reviews | High | todo | QA Engineer |
| TEC-1738 | Add cascade delete to Prisma foreign keys | High | todo | Database Architect |
| TEC-1739 | Add per-endpoint API rate limiting with Redis sliding window | High | todo | Security Engineer |
Wave 8C — Medium/Low Priority (P2/P3)
| Issue | Title | Priority | Status | Assignee |
|---|---|---|---|---|
| TEC-1740 | DTO validation hardening — phone format, password strength | Medium | todo | Senior Backend Engineer |
| TEC-1741 | Create operational runbook for production incidents | Medium | todo | SRE Engineer |
| TEC-1742 | Frontend image optimization — next/image responsive sizes | Medium | todo | Senior Frontend Engineer |
| TEC-1743 | Create one-command bootstrap dev setup script | Low | todo | DevOps Engineer |
Wave 8 Status Updates
| Issue | Title | Priority | Status | Notes |
|---|---|---|---|---|
| TEC-1693 | Fix 729 ESLint errors | Critical | done | Fixed in 0593d40 |
| TEC-1734 | Fix 9 remaining ESLint errors | Critical | done | Fixed in 0593d40 |
| TEC-1738 | Add cascade delete to Prisma FKs | High | done | Fixed in 45e48c0 |
| TEC-1739 | Per-endpoint API rate limiting | High | done | Fixed in d824d16 |
| TEC-1741 | Operational runbook | Medium | done | Fixed in f27b13f |
| TEC-1743 | One-command bootstrap dev setup | Low | done | Fixed in b7f9664 |
Phase 7 — Wave 9: CEO Audit (2026-04-11)
Wave 9A — Critical / High Priority (P0/P1)
| Issue | Title | Priority | Status | Assignee |
|---|---|---|---|---|
| TEC-1774 | Fix 2 TypeScript compile errors blocking CI typecheck | Critical | todo | Senior Backend Engineer |
| TEC-1735 | Commit 105 uncommitted file changes | Critical | todo | Senior Backend Engineer |
| TEC-1775 | Add unit tests for MCP, Inquiries, and Leads modules | High | todo | QA Engineer |
| TEC-1736 | Add error handling to remaining backend CQRS handlers | High | todo | Senior Backend Engineer |
Wave 9B — Medium Priority (P2)
| Issue | Title | Priority | Status | Assignee |
|---|---|---|---|---|
| TEC-1776 | Refactor 3 oversized files exceeding 220 LOC | Medium | todo | Senior Backend Engineer |
| TEC-1777 | Implement agent quality score auto-calculation cron | Medium | todo | Senior Backend Engineer |
| TEC-1778 | Add staging environment auto-deploy pipeline | Medium | todo | DevOps Engineer |
| TEC-1740 | DTO validation hardening | Medium | todo | Senior Backend Engineer |
| TEC-1699 | Implement saved search email alerts | Medium | todo | Senior Backend Engineer |
| TEC-1708 | Add lightbox image gallery to property detail | Medium | blocked | Senior Frontend Engineer |
Summary
| Phase | Total | Done | In Progress | Blocked | Todo |
|---|---|---|---|---|---|
| Phase 0 | 6 | 6 | 0 | 0 | 0 |
| Phase 1 | 8 | 8 | 0 | 0 | 0 |
| Phase 2 | 5 | 5 | 0 | 0 | 0 |
| Phase 3 | 4 | 4 | 0 | 0 | 0 |
| Phase 4 | 8 | 8 | 0 | 0 | 0 |
| Phase 5 | 4 | 4 | 0 | 0 | 0 |
| Phase 6 | 16 | 16 | 0 | 0 | 0 |
| Phase 7W1-5 | 26 | 19 | 1 | 1 | 5 |
| Phase 7W6 | 8 | 1 | 3 | 0 | 4 |
| Phase 7W7 | 9 | 0 | 0 | 0 | 9 |
| Phase 7W8 | 11 | 6 | 0 | 0 | 5 |
| Phase 7W9 | 10 | 0 | 0 | 1 | 9 |
| Total | 115 | 77 | 4 | 2 | 32 |
Wave 10 — CEO Audit (2026-04-11) — Automated Routine
Wave 10A — Critical (P0)
| Issue | Title | Priority | Status | Assignee |
|---|---|---|---|---|
| TEC-1839 | Commit 105 uncommitted files + Fix 2 TS compile errors | Critical | todo | Senior Backend Engineer |
Wave 10B — High Priority (P1)
| Issue | Title | Priority | Status | Assignee |
|---|---|---|---|---|
| TEC-1840 | Add unit tests for Agents, Inquiries, Leads, Reviews modules | High | todo | QA Engineer |
| TEC-1841 | Fix login endpoint returning 500 instead of 401 | High | todo | Senior Backend Engineer |
| TEC-1736 | Add error handling to remaining CQRS handlers | High | in_progress | Senior Backend Engineer |
Wave 10C — Medium Priority (P2)
| Issue | Title | Priority | Status | Assignee |
|---|---|---|---|---|
| TEC-1842 | Refactor Agents/Inquiries/Leads/Reviews to full DDD | Medium | todo | Architect |
| TEC-1777 | Implement agent quality score auto-calculation cron | Medium | todo | Senior Backend Engineer |
| TEC-1778 | Add staging environment auto-deploy pipeline | Medium | todo | DevOps Engineer |
| TEC-1699 | Implement saved search email alerts | Medium | todo | Senior Backend Engineer |
Summary
| Phase | Total | Done | In Progress | Blocked | Todo |
|---|---|---|---|---|---|
| Phase 0 | 6 | 6 | 0 | 0 | 0 |
| Phase 1 | 8 | 8 | 0 | 0 | 0 |
| Phase 2 | 5 | 5 | 0 | 0 | 0 |
| Phase 3 | 4 | 4 | 0 | 0 | 0 |
| Phase 4 | 8 | 8 | 0 | 0 | 0 |
| Phase 5 | 4 | 4 | 0 | 0 | 0 |
| Phase 6 | 16 | 16 | 0 | 0 | 0 |
| Phase 7W1-5 | 26 | 19 | 1 | 1 | 5 |
| Phase 7W6 | 8 | 1 | 3 | 0 | 4 |
| Phase 7W7 | 9 | 0 | 0 | 0 | 9 |
| Phase 7W8 | 11 | 6 | 0 | 0 | 5 |
| Phase 7W9 | 10 | 0 | 0 | 1 | 9 |
| Phase 7W10 | 8 | 0 | 1 | 0 | 7 |
| Total | 123 | 77 | 5 | 2 | 39 |
Last updated by CEO audit — 2026-04-11 (Wave 10 added — TEC-1839 through TEC-1842, automated routine audit)