Archived from TODO.md on 2026-04-18. These items were completed during the v1.1 stabilisation and hardening cycle.
For the current documentation map (all .md guides), see README.md Β§ Documentation Hub and AUDIT.md.
- β
Set Tauri CSP (
src-tauri/tauri.conf.json) - β
Correct Tauri identifier β
com.storycraft.studio - β
Synchronize Tauri version β
1.1.1(aligned with package.json, fixed build path + window config) - β Restrict Tauri capabilities granularly
- β AbortController for all 14+ AI thunks in projectSlice
- β AbortController for hooks (ConsistencyChecker, Critic)
- β Activate retry() in geminiService (was defined, never called)
- β Auto-save state validation (null-check, 5MB warning)
- β generationHistory FIFO limit (50 entries)
- β Per-view error boundaries with recovery
- β
Remove TypeScript
anycasts (hooks.ts, store.ts) - β Redux logger opt-in via localStorage
- β Decrypt errors β explicit recovery flow + UI warning
- β Collaboration PSK-based room isolation
- β Unit tests for critical services (geminiService, dbService, projectSlice, writerSlice, settingsSlice, listenerMiddleware, collaborationService)
- β Coverage thresholds (50%) configured
- β CI: lint (Biome) + typecheck on hard-fail
- β manualChunks extended (leaflet, konva, recharts)
- β Performance budgets (Lighthouse CI)
- β Extend Storybook stories (Modal, Toast, Spinner, Drawer, ErrorBoundary)
The following follow-up tasks were completed after the initial v1.1 archive and are fully implemented:
- β
CI Codecov migration to
codecov/codecov-action@v5(deprecated npm uploader removed) - β
Storybook CI changed to hard-fail mode (
continue-on-errorremoved) - β
Lighthouse CI behavior tuned with
--assert.exitCode=0while keeping crash visibility - β
Added repository security disclosure policy in
.github/SECURITY.md - β PWA update flow switched to explicit user consent (no automatic update activation)
- β
Removed install-time
self.skipWaiting()from service worker install path - β
Added y-webrtc signaling failover endpoint (
wss://signaling.yjs.dev) - β
Extended CSP
connect-srcfor signaling fallback and self-hosted worker endpoints - β Added owner-facing README guidance for self-hosted signaling (Cloudflare Worker path)
- β
Replaced
settingsSlicestub tests with comprehensive reducer/action coverage - β
Added
applyInitialThemeroundtrip tests (persisted state + auto/system theme resolution)