Joseph Spiker spikerj
  • Joined on 2025-11-03
spikerj opened issue spikerj/spikersoft-issues#624 2026-07-17 00:50:38 +00:00
[Infra][CI] lesson-video-processor never deploys: swarm service name 67 chars exceeds 63-char limit (stack+service name doubled)
spikerj opened issue spikerj/spikersoft-issues#625 2026-07-17 00:50:38 +00:00
[Infra][CI] every deploy job's /mnt/infrastructure git pull fails under sudo (no credentials) — #584 stale-checkout guard is decorative
spikerj opened issue spikerj/spikersoft-issues#623 2026-07-17 00:50:13 +00:00
[CI][Backend] Unit Tests red since Batch S (dcproj NU1105 via Directory.Build.props pins) + ArtPipe per-model images broken since CPM (Dockerfile.model missing Packages.props)
spikerj closed issue spikerj/spikersoft-issues#618 2026-07-17 00:28:58 +00:00
[Security][Backend][Books] Private books are listable and downloadable by any authenticated user — /api/book/all and /api/book/{id}/file have no visibility/ownership check
spikerj commented on issue spikerj/spikersoft-issues#618 2026-07-17 00:28:54 +00:00
[Security][Backend][Books] Private books are listable and downloadable by any authenticated user — /api/book/all and /api/book/{id}/file have no visibility/ownership check

Resolved across two vectors, all PRs now merged to master. Closing.

Vector 1 — authenticated API (the reported hole): book read-authorization is centralized in `SpikerSoft.Business/Domain/B…

spikerj commented on issue spikerj/spikersoft-issues#622 2026-07-16 23:51:28 +00:00
Blueprint diagram: connection wires broken on Angular 22 — rete-angular-plugin injects removed ComponentFactoryResolver (flaky e2e tools-walk failure)

Resolved in spikersoft-angular PR #214 (merged to master, merge commit fcd0c169). Patched rete-angular-plugin@2.7.1 via pnpm patch to stop injecting the removed-in-Angular-22 `ComponentFactoryR…

spikerj closed issue spikerj/spikersoft-issues#622 2026-07-16 23:51:28 +00:00
Blueprint diagram: connection wires broken on Angular 22 — rete-angular-plugin injects removed ComponentFactoryResolver (flaky e2e tools-walk failure)
spikerj opened issue spikerj/spikersoft-issues#622 2026-07-16 23:23:16 +00:00
Blueprint diagram: connection wires broken on Angular 22 — rete-angular-plugin injects removed ComponentFactoryResolver (flaky e2e tools-walk failure)
spikerj commented on issue spikerj/spikersoft-issues#618 2026-07-16 23:16:47 +00:00
[Security][Backend][Books] Private books are listable and downloadable by any authenticated user — /api/book/all and /api/book/{id}/file have no visibility/ownership check

Update on part 1 (authenticated API). After the audit against the intended parent-approval model (see epic #621 for what's actually built vs. aspirational), the authenticated-API vector is…

spikerj opened issue spikerj/spikersoft-issues#621 2026-07-16 23:00:27 +00:00
Epic: build the full parent-approval book model (upload approval chain, ApprovedBy audit, parent family/staff-uploads view, auto-Public-on-approval)
spikerj commented on issue spikerj/spikersoft-issues#618 2026-07-16 22:30:26 +00:00
[Security][Backend][Books] Private books are listable and downloadable by any authenticated user — /api/book/all and /api/book/{id}/file have no visibility/ownership check

Part 1 of 2 in progress — backend PR spikersoft-backend#331 (feat/book-read-authz, open, not yet merged).

This ticket has…

spikerj opened issue spikerj/spikersoft-issues#620 2026-07-16 21:57:55 +00:00
EPUB sidebar chapter nav is off by one (loads the page before the chapter)
spikerj opened issue spikerj/spikersoft-issues#619 2026-07-16 19:41:01 +00:00
[New Feature] Space game: procedural shader-based asteroid scan cutscene (replaces pre-rendered video)
spikerj opened issue spikerj/spikersoft-issues#618 2026-07-16 18:32:04 +00:00
[Security][Backend][Books] Private books are listable and downloadable by any authenticated user — /api/book/all and /api/book/{id}/file have no visibility/ownership check
spikerj opened issue spikerj/spikersoft-issues#617 2026-07-16 18:28:41 +00:00
[Bug][Prod][Reader] Every bookmark operation 500s — UserBookmark.UserId is ObjectId but requests are keyed by Keycloak username
spikerj opened issue spikerj/spikersoft-issues#616 2026-07-16 16:43:27 +00:00
Activity-coverage page: content hidden under fixed menu bar; user scope requires raw KeycloakUserId
spikerj opened issue spikerj/spikersoft-issues#615 2026-07-16 08:05:35 +00:00
[Bug][CI][Infra] #584 not fixed — deploy job's git pull runs unprivileged on a root-owned /mnt/infrastructure, so every infra deploy silently ships a stale stack
spikerj closed issue spikerj/spikersoft-issues#612 2026-07-16 07:28:44 +00:00
[Bug][Prod][Uploads] Large book/video uploads quarantined as "Virus detected" — ClamAV 25 MiB scan cap < the app's 100 MB upload limit
spikerj commented on issue spikerj/spikersoft-issues#614 2026-07-16 07:12:56 +00:00
[Bug][Prod][GPU] image-description fails every page — idle-unload races in-flight inference, batch_decode on a None processor

Correction on severity: it is intermittent, not total. When pages flow steadily the model stays loaded and descriptions succeed (~1-2 min each). The failure drops only the **first request…

spikerj opened issue spikerj/spikersoft-issues#614 2026-07-16 07:09:06 +00:00
[Bug][Prod][GPU] image-description fails every page — idle-unload races in-flight inference, batch_decode on a None processor