URGENTE 2h: email a alumnos huérfanos con link a /completar-asignacion

PLUTO-347 pluto Canceled urgent

fn_restorePaciente remedy path for soft-deleted-row document trap

PLUTO-766 pluto Canceled high ↳ PLUTO-437

support-actions.ts stamps persona id instead of realUserId in actor/archive/log fields

PLUTO-644 pluto Canceled high

Postgres-boundary WIP: tree calls 4 DB functions that do not exist live; migrations 089-094 unapplied

PLUTO-642 pluto Canceled high

Permission gate: resolve requireCap (manageUsers vs new supportTickets cap) + audit design-ping (schema+authz+email triple-trigger) BEFORE impl

PLUTO-176 pluto Canceled high ↳ PLUTO-172

Extend support-api to full ticket CRUD (status, private comments, notify-list) - EVO-52

PLUTO-564 pluto Canceled high

JTP+adjunto 'mixed' teacher roster collapses to empty: adjuntoComisionIds AND-intersected onto JTP pair-gate instead of OR-unioned. getStudentsForTeacher (src/db/queries.ts:2418-2419) + getStudentsForTeacherPage (queries.ts:2564). Any teacher who is JTP of one comision AND adjunto of a DIFFERENT comision gets 0 roster rows -> /acceso-denegado on /alumnos list + detail. Repro: Maria Boussebayle (users c231db69), JTP comision-001 (10 students) + adjunto comision-002; AND comisionId=ANY([002]) nukes her 10 JTP students. Fix: turn the adjunto filter into a DISJUNCTIVE branch (mirror getPracticas:371-372 OR-union; keep JTP pair-gate per PLUTO-77). Auth/identity verified clean (db); audit cause-confirmed.

PLUTO-455 pluto Canceled high

conform appEvents to fleet SSOT (categoryId FK, promoted cols, append-only+GUC, appEventRelays sidecar, retention guard, logger, views)

PLUTO-73 pluto Canceled

Solo-gate: scope verdict-hash to --only pathspec (shared-checkout collision fix)

PLUTO-475 pluto Canceled

Four DB functions set app.user_id but never app.archive_reason, so archiveReason falls through to the caller or NULL

PLUTO-705 pluto Canceled

Solo-lane gate: targeted content-sniff for inline page.tsx authz gates

PLUTO-473 pluto Canceled

Phase 3: backfill + NOT NULL tightening where safe (DDL)

PLUTO-593 pluto Canceled ↳ PLUTO-583

Phase 2: app-code population of actor columns

PLUTO-592 pluto Canceled ↳ PLUTO-583

Phase 1: additive nullable actor columns on sensitive tables (DDL)

PLUTO-591 pluto Canceled ↳ PLUTO-583

Audit-column naming convention SSOT (583 phase 0)

PLUTO-590 pluto Canceled ↳ PLUTO-583

Stop writing dot-stripped gmail form to users.email (commons Email-Norm violation, cosmetic)

PLUTO-61 pluto Canceled

Flatten vPracticasAuditEntries — per-row correlated subqueries at LIMIT 250 drive the /practicas 188-249 statement count

PLUTO-483 pluto Canceled

approveAccessRequest hardcodes alumno role/studentAssignment for docente_jtp and docente_adjunto too (same latent defect as PLUTO-566)

PLUTO-568 pluto Canceled

Ver como: add global user-picker launcher (discoverability fix)

PLUTO-547 pluto Canceled

Harden getInformesBundle fn-output↔consumer contract (durable fix beyond the 112 runtime guard). Root lesson: Pluto's fn emits UNTYPED jsonb (jsonb_build_object) that TS only CASTS — a key rename (porLookup vs porAnestesia) compiles clean and crashes at runtime. A bare 'as' cast gives FALSE confidence (compiles while runtime JSON lacks the key). Fix: zod-parse (or equivalent runtime validate) the RPC return at the queries.ts:3897 boundary so fn↔consumer key drift fails LOUDLY at the boundary with a clear error, not a deep .map crash. Contrast venus: its reshapes build typed objects in TS code, so key drop fails COMPILE — Pluto's SQL-built JSON can't be compile-checked that way, hence runtime validation.

PLUTO-117 pluto Canceled

Comunicar a Puia que /admin/inactividad existe (lista usuarios sin ingreso + inactivos ≥4d con contador)

PLUTO-353 pluto Canceled

audit-actions resolver-fanout fold (LATERAL JOIN consolidation)

PLUTO-379 pluto Canceled

Replace 'horrible red buttons' across pluto UI — audit destructive/red Button variants, replace with shadcn defaults or Pluto-tuned palette per Elazar UX feedback (5711)

PLUTO-375 pluto Canceled

personas getPersonaDetail UNION ALL fold (4→1 query)

PLUTO-380 pluto Canceled

feat(soporte): copy mars soporte into pluto

PLUTO-132 pluto Canceled

Proxy viewport tooling: chrome-devtools-mcp (CDP) for Pluto needs an auth path — Pluto is OAuth-only

PLUTO-47 pluto Canceled

__probe__

PLUTO-48 pluto Canceled

KPI & N-optimization initiative — Pluto participation

PLUTO-156 pluto Canceled

Google App Links verification has 404ed on /.well-known/assetlinks.json 1285 times across 91 consecutive days

PLUTO-758 pluto Canceled low

Phase 5: entity-history.tsx field-mapping update

PLUTO-595 pluto Canceled low ↳ PLUTO-583

Phase 4: naming outlier renames (studentDeletedAt, bare reason)

PLUTO-594 pluto Canceled low ↳ PLUTO-583

Pluto P3: canonicalizeEmail JS/DB parity edge — JS lastIndexOf('@') vs DB SPLIT_PART first-'@'; diverge only on malformed multi-@ input (dedup-parity, not dot-strip). Align the @-split semantics.

PLUTO-36 pluto Canceled low

Durable email outbox (mirror MARS-76): emailOutbox + enqueueEmailTx + pg_cron drainer

PLUTO-565 pluto Canceled low

__probe__

PLUTO-49 pluto Canceled low

CR 68: Cleanup src/lib/review-state.ts: eliminar labels y colores hardcodeados. El schema ya expone label/color/orden vía lookupOptions.params; vPr

PLUTO-294 pluto Canceled low

api-images blob orphan on profile/documento photo replace + user soft-delete (Pluto EVO-2 class). image-api.ts has NO deleteImage fn -> old blob orphans forever when /perfil replaces a photo or a user is deleted. coder-apiimages confirms api-images DELETE endpoint exists (->_trash 90d). Add best-effort deleteImage() cascade on photo-replace + user soft-delete. Confirm endpoint contract first. Low-impact data hygiene, found in P0 cross-app audit.

PLUTO-96 pluto Canceled low

placeholder

PLUTO-637 pluto Canceled someday

Evaluate scoped-hash gate vs sibling-clone for solo-pluto push isolation

PLUTO-489 pluto Canceled someday

__probe__

PLUTO-50 pluto Canceled someday