Board-sweep cross-link (2026-07-22): this dreamstream 'No such image' rejection pattern is the same class now tracked with fresh evidence in #774 (deploys report success while swarm rolls back —…
Current state on origin/master (partial — leaving open):
- Non-root USER (S6471): 19 of 32 Dockerfiles now declare a
USERdirective; 13 still have none and their final images run as…
Verified fixed end-to-end on master (landed via #747):
- Backend endpoint exists —
DELETE /api/blog/posts/{postId}/media/{mediaId}→RemoveMediaFromPostCommand(BlogControllerline…
Verified fixed and on master — both halves:
- Angular (
blog-entry-component.ts):addMainComment/addMediaCommentnow read the real identity fromkeycloak.tokenParsed?.sub(line…
Board-sweep verification (2026-07-22): still open and still real — event-modal.component.ts carries 18 console.log calls on current master. Note for whoever picks this up: the event-modal is…
Board-sweep verification (2026-07-22): bug CONFIRMED still live, root-caused exactly. tools/workspace-plugin/src/generators/library/generator.ts reads rootPkg.dependencies['@angular/core'] and…
Board-sweep verification (2026-07-22): still live — marks-address.component.html line 30 still tracks @for by entry.addressId, which is exactly the reported duplicate-key collision for unsaved…
Board-sweep verification (2026-07-22): still live — no input/keyup/model binding found on either role-search box in keycloak-admin user-detail on current master; the search fields remain…
Verified fixed and merged. spikersoft-artpipe PR #25 ("fix(sdxl): concept stage fails offline — bake the Lightning LoRA + load base from local snapshot", merge 9984a25, fix commit…
Verified complete (ticket-hygiene sweep): backend PR #324 merged — image_description_service.py now guards the model/processor with locking against the idle-unload race (20 lock references on…
Verified complete on master. @angular/animations is fully removed:
- Not in
package.json(dependency dropped). - No real imports/DSL usages remain in
projectsorlibraries— the only…
Verified fixed and on master. BlogController create now anchors authorship to the caller's Keycloak identity server-side and ignores the client-supplied AuthorId (in-code comment: "it…
Sweep note: PR #357 scrubbed the live secrets from the example config, but the ticket's ROTATION + Bao-migration halves have no merged evidence — leaving open (rotation is the part that matters…