Joseph Spiker

spikerj commented on issue spikerj/spikersoft-issues#416

2026-07-06 03:03:33 +00:00

[Security] Remove anonymous access to Trails mutating endpoints (DELETE /{id}, DELETE /purge)

Resolved in spikersoft-backend PR #110 (merged to master). Removed the class-level [AllowAnonymous] on TrailsController; [Authorize] on the destructive DELETE /{id} + DELETE /purge,…

spikerj commented on issue spikerj/spikersoft-issues#411

2026-07-06 03:02:31 +00:00

[Reliability][Go-live] Eliminate availability bombs — Redis scans/flush, MongoClient-per-message, GPU ledger, poison requeue

Triage — "poison requeue" sub-item (reframed after code check)

Update: the MongoClient-per-message bomb is fixed in backend PR #111 (injects the singleton IMongoClient; `GamePersistence…

spikerj commented on issue spikerj/spikersoft-issues#409

2026-07-06 02:54:06 +00:00

[Security][Frontend][Go-live] Remove EPUB sanitizer bypass & harden client-side XSS sinks

Triage — the EPUB sanitizer bypass

The live XSS sink is projects/spikersoft/src/app/_components/epub-reader/epub-reader.component.ts:43:

readonly safeHtml = computed<SafeHtml>(() =>…

spikerj commented on issue spikerj/spikersoft-issues#410

2026-07-06 02:50:47 +00:00

[Reliability][Go-live] Fix silent data loss — count-only ValueComparer & missing publisher confirms

Triage — count-only ValueComparer inventory (part 1 of this ticket)

Confirmed and located. In SpikerSoft.Data/Contexts/SpikerDbContext.cs, **~12 List<T> value comparers use `c1.Count ==…

spikerj closed issue spikerj/spikersoft-issues#429

2026-07-06 02:37:56 +00:00

art_pipe observability #1 (.NET): propagate W3C traceparent into the worker + per-stage child span

spikerj closed issue spikerj/spikersoft-issues#427

2026-07-06 02:37:55 +00:00

Anonymous E2E walk fails on /cpu-dashboard: public route opens staff-gated DashboardHub

spikerj commented on issue spikerj/spikersoft-issues#429

2026-07-06 02:37:45 +00:00

art_pipe observability #1 (.NET): propagate W3C traceparent into the worker + per-stage child span

Resolved in spikersoft-backend PR #109 (merged to master). Added WorkerTraceContext.Inject, stamping the active W3C traceparent/tracestate onto the per-job worker spec in both executor…

spikerj commented on issue spikerj/spikersoft-issues#427

2026-07-06 02:37:42 +00:00

Anonymous E2E walk fails on /cpu-dashboard: public route opens staff-gated DashboardHub

Resolved in spikersoft-angular PR #140 (merged to master). Gated /cpu-dashboard with [AuthGuard, RoleGuard] + staff roles to match the staff-only DashboardHub, and flipped the route-manifest…

spikerj opened issue spikerj/spikersoft-issues#432

2026-07-06 02:32:49 +00:00

art_pipe: repo-vendoring model venvs miss cloned-repo requirements + need Python 3.10

spikerj commented on issue spikerj/spikersoft-issues#428

2026-07-06 02:26:53 +00:00

Epic: End-to-end trace + log correlation for the art_pipe native-microservice integration (Jaeger + Seq)

Workstreams filed:

#429 — .NET: propagate W3C traceparent into the worker + per-stage child span (start here; self-contained, backend-mergeable)
#430 — art_pipe: OpenTelemetry…

spikerj opened issue spikerj/spikersoft-issues#431

2026-07-06 02:26:16 +00:00

art_pipe observability #3 (Python): ship worker logs to Seq + stamp trace_id for log↔trace correlation

spikerj opened issue spikerj/spikersoft-issues#430

2026-07-06 02:26:09 +00:00

art_pipe observability #2 (Python): OpenTelemetry spans with parent-context extraction from the job spec

spikerj opened issue spikerj/spikersoft-issues#429

2026-07-06 02:25:54 +00:00

art_pipe observability #1 (.NET): propagate W3C traceparent into the worker + per-stage child span

spikerj opened issue spikerj/spikersoft-issues#428

2026-07-06 02:25:34 +00:00

Epic: End-to-end trace + log correlation for the art_pipe native-microservice integration (Jaeger + Seq)

spikerj opened issue spikerj/spikersoft-issues#427

2026-07-06 02:00:41 +00:00

Anonymous E2E walk fails on /cpu-dashboard: public route opens staff-gated DashboardHub

spikerj opened issue spikerj/spikersoft-issues#426

2026-07-05 23:25:44 +00:00

art_pipe local dev: migrate to a CUDA 13 driver so default torch builds work

spikerj opened issue spikerj/spikersoft-issues#425

2026-07-05 23:16:11 +00:00

ProArt Art Studio: full local pipeline on Windows dev machines

spikerj opened issue spikerj/spikersoft-issues#424

2026-07-05 22:59:13 +00:00

[i18n tooling] i18n:scan always exits 1 on a honeypot false-positive → tool can't surface new hardcoded strings

spikerj closed issue spikerj/spikersoft-issues#423

2026-07-05 22:38:07 +00:00

[uploads] FileProcessingService ctor does filesystem I/O → 500s blog-upload endpoints on unwritable path

spikerj commented on issue spikerj/spikersoft-issues#423

2026-07-05 22:37:58 +00:00

[uploads] FileProcessingService ctor does filesystem I/O → 500s blog-upload endpoints on unwritable path

Resolved in spikersoft-backend PR #105 (merged to master). Removed the redundant Directory.CreateDirectory from FileProcessingService's constructor (ProcessUploadedFileAsync already…