appEvents writes all fail since 07:53Z: logger-core still INSERTs dropped column path

VENUS-458 venus Done urgent

P0: practica create/edit with antecedentes raises since venus88 (fn_antecedentes_confirm_catalog casts object elements to integer)

VENUS-446 venus Done urgent

crearPracticaFailed INSERT column/value mismatch

VENUS-244 venus Done urgent

Audit: session-trust paths vs isGenuineGoogleSession (auth-bypass check)

VENUS-304 venus Done urgent

applog-listen: a log-only row PERMANENTLY PINS the cursor (classify inside void enqueue) — venus dead 15 days, latent on all 4 rails

VENUS-324 venus Done urgent

applog-listen sends to an ARRAY-of-one and reaches the UNGUARDED hub resolver: scalar to + human-seat recipient validation + regression (EVO-86(e))

VENUS-323 venus Done urgent

SOP support-api: add ticket CRUD (close/status/notify) + private stakeholder comments

VENUS-252 venus Done urgent ↳ EVO-52

Evaluation delegated-authorship (display docente, record real actor) — needs product ruling

VENUS-482 venus Done high

schema SSOT export carries no RLS policy quals or metadata, so no revert can ever be proven against git

VENUS-472 venus Done high

Client-reported 2026-07-30 and never filed: the complications filter 'quedo vacio, no abre nada'

VENUS-448 venus Done high

codex -ca sessions never register; their telemetry is stored (unresolved) permanently at ingest

VENUS-410 venus Done high

└─ collect.py host gate: edge hosts write (unresolved) though GET /roster is now reachable

VENUS-414 venus Done

└─ collect.py: ambiguous-drop counter is discarded before the DB, and its stderr line floods per event

VENUS-415 venus Done

Venus DB backup: recurring restore-drill unit (VENUS-357 gate)

VENUS-428 venus Done high

VENUS-422 wiring: call context-persist-sensor.sh from the venus statusline + install context-persist-hook.sh

VENUS-432 venus Done high

abr:ss actuator redesign - passive occupancy-only persist

VENUS-422 venus Done high

applog rail: 404/probe path CLASSIFIER + 4-outcome taxonomy — must land BEFORE any suppression predicate on any rail (both per-app predicates withdrawn)

VENUS-327 venus Done high

appEvents prune sweeps (info/warn) failing every run: postgres missing UPDATE grant

VENUS-426 venus Done high

applog alert delivery: pages routed to the emitter script (scrp-applog-*) instead of a human inbox, all rails

VENUS-322 venus Done high

getFrictionDigest: column reference "createdAt" is ambiguous — real SQL error, invisible 14 days because category='security' is bot-filtered to log-only

VENUS-325 venus Done high

applog-listen category filters assume VENUS literals — both are INERT on pluto (security=0 rows, access=0 rows); four rails, one file, four vocabularies

VENUS-326 venus Done high

PostgREST empty-schema crash loop: apply the 3-statement fix, record before/after cycle count

VENUS-420 venus Done high

kpi-burn-alert all legs fail: telemetry_ro has no SELECT on v_usage_resolved

VENUS-413 venus Done high

kpi-burn-alert.sh is blind to every unregistered codex agent - must read v_usage_resolved

VENUS-411 venus Done high

venus-db-backup.sh: prune glob spans plaintext+encrypted lanes, sharing one KEEP budget

VENUS-358 venus Done high

venus-db-backup.sh: trash||rm precedence hard-deletes clinical dumps when trash exists and FAILS

VENUS-359 venus Done high

pg_net EXECUTE to PUBLIC: measure whether this ref grants net.http_post to every login role

VENUS-399 venus Done high

VENUS-372 follow-up: 4 defects from coder-terra-cc cross-project review of 7644158+95f6e24

VENUS-386 venus Done high

GoTrue-config verify-script via Supabase Management API (read-only, field-selected)

VENUS-303 venus Done high

Centralized log-analysis plane on venus (pull+analyze app events)

VENUS-5 venus Done high

Supabase open email/password signup — disable external_email_enabled

VENUS-302 venus Done high

route-dedup.ts: two open unowned defects (windowing collapse, unrecoverable summary)

VENUS-375 venus Done high

soporte-action agent CLI was DEAD: three route/client drifts on the headless support path

VENUS-373 venus Done high

└─ Smoke test: exercise scripts/soporte-action.ts against the live support-action contract

VENUS-374 venus Done low

fn_notify_applog_err collapses all 404s into one signature bucket

VENUS-243 venus Done high

SOL-VENUS-N human reference for access requests

VENUS-360 venus Done high

pm-triage-listen: rowless NOTIFY kinds (weeklyReport) silently dropped

VENUS-353 venus Done high

Venus DB backup lane: executor unknown, last local dump 2026-06-16 — identify owner or declare backup-gap incident; fix db/README.md §Backup

VENUS-348 venus Done high

VENUS-305 BLOCK fix-forward: incomplete identityBound writer coverage

VENUS-311 venus Done high

Audit: roleless-but-sessionful paths vs genuine-Google gate

VENUS-306 venus Done high

Rename práctica date label to "Fecha de la cirugía" + show load date "Cargada el"

VENUS-296 venus Done high

Hoist impersonation guards into try (silent-fail retrofit)

VENUS-251 venus Done high

Triage RSC render error on /practicas/nueva (digest, held for pause)

VENUS-258 venus Done high

Register evolutiva-errscan@venus systemd instance (currently not running)

VENUS-253 venus Done high

Runtime/toolchain upgrade — Next stable, React 19.2.7, Node 24.x, pnpm 10 + staged compat bumps

VENUS-245 venus Done high

brainstorm must never hang on an offline expected-replier: auto-skip + guaranteed close

VENUS-234 venus Done high

busy-nudge: de-gate from humanincdw + cover lane-context 1:1 asks

VENUS-225 venus Done high

humanincdw-gated suppression of worker status-pings to Elazar

VENUS-222 venus Done high

site-config.ts localhost-fallback prod bug

VENUS-220 venus Done high

Feedback/friction telemetry — centralized instrumented capture contract (root fix)

VENUS-213 venus Done high

MARS-416 venus default-grants revoke

VENUS-212 venus Done high

Admin usuarios RSC render error — GROUP BY vs view PK dependency

VENUS-200 venus Done high

Active-views refactor: DB views for deletedAt/isDemo filtering

VENUS-199 venus Done high

Futuro badge overcounted via participation join

VENUS-198 venus Done high

Fix recurring React #418 hydration mismatch on /practicas/[id] (ICU time-separator class)

VENUS-194 venus Done high

Security: getMatchCandidates server action missing requireAdmin() guard

VENUS-73 venus Done high

feat(monitoring): venus LEG-1 — instant critical-error email on uncaught 500 (instrumentation.ts onRequestError -> direct in-process SMTP, DB-independent, in-memory 1/route/10min throttle, never-throw + native sendOutboundEmail outbox fallback; recipient=env WORK email). Per frozen fleet error-alerting standard bs-mqn8ogqjpze/bs-mqn8vka8iky.

VENUS-26 venus Done high

feat(cursada): sede self-selection UNBUILT — students cannot pick rotation sede (mi-cursada only filters); go-live blocker per client 2026-06-09

VENUS-12 venus Done high

bug(auth): login-lockout — roster-import createUser left NULL GoTrue token columns → 500 on login

VENUS-21 venus Done high

Weekly progress digest email → HTML table (Gmail-legible)

VENUS-83 venus Done high

B4 per-student quantitative totals on filter (35 como operador, per-sede) — HIGH client pain

VENUS-54 venus Done high

B5 per-student stats page w/ charts (today global-only) — HIGH

VENUS-55 venus Done high

404-capture: demote vuln-scanner paths to bot-probe security branch (stop false-paging). GAP: KNOWN_TOP_SEGMENTS fallback keys on first segment only, so any scanner path UNDER a legit top segment (/admin/.git/config, /informes/.env, /practicas/wp-login.php, *.php) inherits own-route -> genuine-bad-route -> alert:true page. No scanner/dotfile denylist exists; X-Audit-Probe demotion only catches our own synthetic probes. FIX: add scanner-path guard BEFORE the classifyOrigin KNOWN_TOP_SEGMENTS fallback (not-found-capture.ts ~L98 pre-filter, or classifyOrigin before not-found-classify.ts:88), demote UNCONDITIONALLY to level=info/category=security + rate-limit like existing bot-probe branch (capture.ts:108-118). Patterns: (a) any path segment matching /^[.]/ EXCEPT .well-known; (b) .php suffix; (c) token denylist wp-admin/wp-login/xmlrpc/phpmyadmin/vendor/cgi-bin/actuator. Triggered by scanner hit /admin/.git/config 2026-06-29 03:38Z id b5625a54.

VENUS-80 venus Done high

Informes: NULL-safe práctica dedup — pacienteDni NULL collapses distinct prácticas, understates totals (ticket #3, Antonella 26→54)

VENUS-79 venus Done high

Complete sede visibility and delegated evaluator attribution in practice exports

VENUS-489 venus Done

Docente roster -> assignable evaluation dropdown

VENUS-481 venus Done

appEvents historical email residue: 1354 rows pre-redaction, purge needs ruling

VENUS-486 venus Done ↳ VENUS-485

appEvents detail still logs alumno/admin email under key 'email'

VENUS-456 venus Done

P3c comparative-stats /informes/stats (alumno ranking + cohort agg, titular-scoped)

VENUS-93 venus Done

Evaluation export: sede show/hide toggle

VENUS-480 venus Done

v_appEvents_404 groups by a half-dead key: no venus 404 writer populates appEvents.path (NULL on 100% of 969 rows)

VENUS-328 venus Done

venus .gitpush-pre.sh ignores ONLY_PATHS, so VENUS-471 is fixed in the producer and unfixed in its only consumer

VENUS-476 venus Done

pg-harness silently omits auth-based RLS policies on fresh up

VENUS-475 venus Done ↳ VENUS-401

RLS enablement: alumno write-path policies and caller-role proof

VENUS-474 venus Done ↳ VENUS-401

EVO-123: convert 3 UPDATE OF invariant guards to AFTER/no-column-list

VENUS-473 venus Done

logEventTx lets a telemetry write abort its caller's business transaction (4 callers)

VENUS-460 venus Done

VENUS-367 — telemetry delivery-health: failed friction writes are indistinguishable from zero friction

VENUS-367 venus Done

pre-push scan blocks every lane on another lane's untracked file

VENUS-471 venus Done

audit-venus-ca retro-review queue (reviewer outage since 2026-07-23)

VENUS-307 venus Done

applog digest re-pages every row the real-time rail already paged: applog-pull@ never sets APPLOG_RT_STATE_FILE, so the suppression reads a nonexistent path and returns empty SILENTLY

VENUS-464 venus Done

scanner-probe-drift.test.ts compares against pluto's WORKING TREE, so it goes red on an uncommitted sibling edit and blocks every venus push

VENUS-461 venus Done

scanner-probe drift test compares against pluto's uncommitted worktree, not origin

VENUS-459 venus Done

submitAccessRequestFailed logs the applicant's raw document number to appEvents

VENUS-455 venus Done

busy-nudge false-fires on working: sent without re=<ask tag>

VENUS-221 venus Done

venus has no never-write-personal-data-to-appEvents rule; terra does

VENUS-388 venus Done

Close/resolve-via-API endpoint for support tickets

VENUS-143 venus Done

Audit student-facing counts for operador-vs-participacion conflation

VENUS-362 venus Done

Classify 5 unclassified (category,action) pairs in appEventFrictionClass — false user-facing fallthrough

VENUS-276 venus Done

env wildcard under-matches /foo+bar.env paths (352-path differential)

VENUS-393 venus Done

Venus PTD cannot bind a SHA to a deployment: no githubCommitSha in either vercel inspect form

VENUS-330 venus Done

Down-tier recurring Failed-to-fetch rejection alert on /practicas/nueva

VENUS-257 venus Done

Telemetry-quality: advisory-only log rows mislabeled as error-shown, inflate friction digest

VENUS-275 venus Done

feat(ptd): authed-route PTD tooling — PTD render-GET can't exercise authed routes (302/login); authed pages + authed-only behavior (toast/error-shown producer, práctica gates) never runtime-verified. Fix: in-process self-check route (preferred) or least-priv stored session for manual authed pass. Sibling: MARS-118.

VENUS-14 venus Done

appEvents: 161 level=error rows on outcome actions never set status='failure' - producers write the level and leave the queried field NULL

VENUS-445 venus Done

pieza/region rule diverges client-vs-server - three ways - and every one is dormant until content-seed lands categorias

VENUS-404 venus Done

Evaluación docente de prácticas: aprobado/desaprobado + docente evaluador (retroactivo)

VENUS-436 venus Done

└─ PDF export of one alumno's prácticas from /practicas (incl. evaluación)

VENUS-437 venus Done

Catalogue additions requested by client 2026-07-30, never filed: parotidectomia superficial/completa (glandulas salivales) + retiro de osteosintesis (traumatologia)

VENUS-449 venus Done

VENUS-350(a): verify gpg passphrase blast radius, then retention, then a second secrets location before filtering vault.secrets from the pg_dump

VENUS-442 venus Done ↳ VENUS-350

bug(validation): D3-4/5 antecedentes parent-checked-no-children + complicaciones notas/ids mismatch — advisory-log-only to measure real-user frequency

VENUS-11 venus Done

Quote SOL-VENUS-N in requester-facing access-request emails

VENUS-361 venus Done

VENUS-364 — dedup 8 copies of the role-label map onto practica-roles.roleLabel()

VENUS-364 venus Done

PostgREST empty-exposed-schema sentinel floods postgres log (~2700 ERROR rows/day) — silence or document

VENUS-349 venus Done

not-found-capture.ts:84 drops /admin/controller on inverted no-route reasoning

VENUS-394 venus Done

Remove vestigial isDemoDomain branch in email-domains.ts (post VENUS-270)

VENUS-271 venus Done

Date filter: selectable axis fecha de cirugía vs fecha de carga

VENUS-438 venus Done

applog-pull zero-row path skips writeWatermark — permanent cold-start gap

VENUS-370 venus Done

applog seenKey collapses probe refusals and real lockouts into one recurring-benign counter

VENUS-434 venus Done

Heartbeat for the venus-crontick host leg: absence of a tick currently reports as nothing

VENUS-431 venus Done

Venus email drain: two 401s sandwiching a 200 ok:true, possible secret/endpoint flap

VENUS-433 venus Done

Inventory Venus and fleet Supabase backup paths and duplicates

VENUS-419 venus Done ↳ VENUS-357

Drop the three orphaned SECDEF net.http_post guards left behind by the EVO-86 cron migration

VENUS-430 venus Done

EVO-93: move this app's email-outbox drain off Supabase pg_cron onto a venus systemd timer

VENUS-396 venus Done

Freshness watch: alert when the email-drain heartbeat appEvents row is ABSENT past a derived threshold (consumer half of VENUS-398, blocks the VENUS-396 pg_cron unschedule)

VENUS-425 venus Done

The drain writes NO appEvents row on the empty path, so after cutover a timer that never fires is indistinguishable from one that fires and finds nothing

VENUS-398 venus Done

Scanner 404 Block W in SHARED_SCANNER_PROBE_PATTERNS

VENUS-418 venus Done

venus-db-backup.sh puts the DB password in pg_dump argv - world-readable in /proc/<pid>/cmdline for the life of every dump

VENUS-407 venus Done

venus-db-backup.sh prune glob crosses lanes — retention 84 total not 84 encrypted; effective 6 days not 7

VENUS-355 venus Done

venus-db-backup.sh: trash-fails fallback hard-deletes (rm -f) instead of degrading safely

VENUS-354 venus Done

venus-db-backup.sh asserts gdrive success from cp exit on an async rclone mount - the sibling state script already fixed this

VENUS-406 venus Done

context-monitor M-COVERAGE flaps on a live agent, and a failed roster read is reported as RECOVERY - UNKNOWN rendered as all-clear

VENUS-408 venus Done

crearPractica refusals name a CONDITION and no EXIT - 14/29 are the duplicate DNI+fecha+sede collision (original 'records NO reason' premise FALSIFIED)

VENUS-389 venus Done

Exports (CSV + catedra PDF) ignore /informes taxonomy filter params

VENUS-341 venus Done

approveAccessRequest failed 7 times for ONE admin, 5 of them the same day - the attach gate fails closed with no operator-facing reason

VENUS-391 venus Done

/practicas/nueva validates only at submit - 260 blocked submits, 23 of 29 active users, one user 37 in a single day

VENUS-390 venus Done

Postgres-offload campaign (5 items): push report/KPI dedup+join logic into DB views

VENUS-237 venus Done

└─ Consolidate getStudentKpis onto the existing scoring fact views (VENUS-237 item 2)

VENUS-402 venus Done

fn_isadmin/fn_istitular gate on JWT app_metadata.role — banned shape, dormant while RLS off

VENUS-346 venus Done

Harden append-only surfaces: revoke/guard UPDATE-DELETE-TRUNCATE on appEvents + practicasArchive + practicaParticipationsArchive

VENUS-347 venus Done

EVO-69: add createdAt to 15 static catalog tables + fix lookupOptions.createdAt NOT NULL

VENUS-285 venus Done

feat(infra): DB perf snapshot+diff collector (dbperfSnapshots)

VENUS-19 venus Done

Cleanup: Puia has 2 non-deleted titular userRoles rows (likely dupe)

VENUS-142 venus Done

Sweep SECURITY DEFINER functions for pg_temp shadowing (fleet finding)

VENUS-345 venus Done

trg_participations_operador_unique raises without ERRCODE, so the app must match its prose

VENUS-387 venus Done

SCANNER_PROBE_RE drift: de-dupe venus's two copies against pluto vector corpus

VENUS-392 venus Done

Lean Coder Loop numbering out of order after 1fb09df (1,2,3,4,5,7,6) - item 6 is ambiguous

VENUS-385 venus Done

Land the fleet-wide MSG-309 change: coder-commons + pm-commons, 4 sections, one commit

VENUS-384 venus Done

Amend venus closure-authority text to the widened item 6 (coder OR db closes, closure authority is not push authority)

VENUS-383 venus Done

venus Supabase MCP configs omit read_only=true - execute_sql on prod runs as a full-privilege role

VENUS-382 venus Done

Sync venus commons + PM-lane docs to MSG-309 PM-on-demand and closure-authority ruling (a)

VENUS-381 venus Done

VENUS-149 impersonation-guard: comment-stripper failing open on unbalanced regex-literal quote

VENUS-379 venus Done

Plan patient DNI + HC number storage — autocomplete-suggest, same-DNI-different-name mismatch warning, statistics

VENUS-71 venus Done

404 page — add LLM-copy block to not-found.tsx (cross-project 404 initiative)

VENUS-69 venus Done

Adopt fleet CR + client-questions surface in venus (EVO-83 leg)

VENUS-317 venus Done ↳ EVO-83

No-silent-failure contract: audit + retrofit + 2 live repros

VENUS-176 venus Done

chore(db): prune legacy viewport fingerprint rows — 132 pre-reshape client-env/viewport rows store exact-px+full-UA+userId, IMMUTABLE (wi302 appevents-immutable), no retention-prune job → persist indefinitely. Reshape (VENUS-13) stops new fingerprints only. Prune via db-venus SET LOCAL app.bypass_immutable. Irreversible deletion → Elazar go/no-go required. Pre-go-live test-user data (21 testers), low stakes.

VENUS-15 venus Done

feat(telemetry): device/viewport coarse-banded capture + most-used-viewport report for mobile UX, riding appEvents rail

VENUS-13 venus Done

Silent server-action transport failure on /practicas/nueva - 7 unhandled 'Failed to fetch' since June, 6 of 7 Android Chrome mobile, user saw no error

VENUS-377 venus Done

sendWelcomeEmail is dead code — a welcome email the product believes it sends and has never sent once

VENUS-335 venus Done

inviteTitular alreadyExisted branch asserts a successful welcome-email send regardless of emailSent

VENUS-334 venus Done

Support-ticket agent-operability: bearer create op (actorUserId fail-closed)

VENUS-371 venus Done

applog-pull P0: category vs categoryValue + missing tenant-gate on shared DBs

VENUS-369 venus Done

VENUS-365 — approveAccessRequestAttach threw on every non-alumno attach: alumnos has no id column

VENUS-365 venus Done

VENUS-366 — schema-contract guard: SQL column references are unchecked, 6 signatures have reached prod since May

VENUS-366 venus Done

VENUS-363 — solicitud padron badge: false no-match on staff requests, collapsed negatives, raw role codes

VENUS-363 venus Done

db/DR.md stale: restore steps assume plaintext .sql.gz from the dead pre-Jun-16 lane

VENUS-351 venus Done

feat(soporte): copy mars soporte into venus

VENUS-9 venus Done

Soporte ticket-system — per-app COPY of mars /administrar/soporte (14 files/2023 LOC); venus owns + customizes; improvements broadcast+reimplement per-app; impl queues behind venus 404/skew guard (Elazar owns timing)

VENUS-29 venus Done

└─ Soporte server actions + data layer — copy mars soporte/actions.ts(462)+administrar/soporte/actions.ts(319); user create/reply + admin assign/close/reply. BAKE OUT: (i) 3 self-HTTP email sites -> venus sendOutboundEmail direct (drop fetch+Bearer+getBaseUrl); (ii) 4 hardcoded recipients -> 1 OPERATOR_EMAIL env knob, default soporte-evolutiva-venus@

VENUS-31 venus Done

└─ Soporte gate+touchpoints+cron — requireAdmin/cap gate + pre-impl audit design-ping (schema+authz+email triple-trigger); touchpoints (admin nav card, perfil link, not-found-classify RESOURCE_ROUTES /soporte/[id], notification-types kind, weekly-kpi-templates); DIGEST cron = venus pg_cron->HTTP (NOT vercel.json cron — sub-daily silently fails venus build)

VENUS-33 venus Done

└─ Soporte UI — admin /admin/soporte (NOT /administrar) list+detail+form+close-shortcut; user /soporte FAB+view+reply; shadcn NY + venus primitives + brand; auto-capture appVersion from /api/health (venus delta vs /api/app-version)

VENUS-32 venus Done

└─ Soporte DB — supportTickets + supportTicketMessages (columns from mars/db/schema.md; archive-triggered per venus convention; lookupOptions grupos status/category/priority; FK users+lookupOptions only)

VENUS-30 venus Done

CLAUDE.md documents a RETIRED context-warn flag/email ladder — correct the docs (hook is alive, flag mechanism deleted 07-14)

VENUS-339 venus Done

applog-pull.ts:391 signature COALESCE omits route — one shared-script fix for all four rails

VENUS-332 venus Done

Client feedback: cirugias catalog adds + /informes complicaciones filter fix/split

VENUS-340 venus Done

Provision lorena.salomone@odontologia.uba.ar as docente + forced welcome-email resend

VENUS-333 venus Done

applog-listen burst dedup reads the WRONG CLOCK: processing wall-clock instead of event time, and never dedups event IDs

VENUS-319 venus Done

users.updatedAt-class trigger gap: 7 more tables with unmaintained updatedAt

VENUS-315 venus Done

b61ee08 retro-audit BLOCK: unhandled 22P02 on malformed ticket/status uuid input

VENUS-316 venus Done

3-bucket identityBound invariant check (post-VENUS-305)

VENUS-308 venus Done

users.updatedAt not DB-maintained — raw SQL writes leave it stale

VENUS-309 venus Done

Defense-in-depth: gate getEffectiveUser L3 email-match on genuine-Google (belt-and-braces)

VENUS-305 venus Done

SOP-VENUS-16: correction requests widened to any active participant

VENUS-300 venus Done

Support-ticket fleet-standard schema

VENUS-298 venus Done

EVO-75 admin pending-items digest (after EVO-79)

VENUS-294 venus Done

googleSub UNIQUE partial index after EVO-74 dedup

VENUS-297 venus Done

EVO-79 access-request dedup prevention (Class-A, design-first)

VENUS-293 venus Done

D1 — patient residence field (localidad/provincia) for §17 geographic-distribution report

VENUS-291 venus Done

D5 — free-text input for módulo Otros

VENUS-292 venus Done

EVO-70b (Tier 1): venus emailOutbox AFTER INSERT trigger -> pg_net wake marker (event-driven send)

VENUS-287 venus Done

EVO-71 (security P1): sweep public fns for supautils force-granted PUBLIC EXECUTE + object-class probe

VENUS-288 venus Done

EVO-70a (Tier 0): guard venus email drain cron — fire net.http_* only when work is due

VENUS-286 venus Done

Redesign práctica Operador control — drop tri-state radio, sentinel-in-combobox externo with required name

VENUS-284 venus Done

EVO-68: replace email-domain login gate with genuine-Google-identity gate

VENUS-281 venus Done ↳ EVO-68

EVO-67: add 'No especificado' opt-out value to sexo/sexoPaciente lookup group

VENUS-280 venus Done ↳ EVO-67

Port pluto's preventive friction-flash treatment to venus's live-friction required groups

VENUS-279 venus Done ↳ EVO-66

Adopt pluto P-A escape-first reorder: hoist región 'Ninguna' to position 1 in PiezaRegionPicker

VENUS-277 venus Done

EVO-62: Friction-fix campaign — mine + fix venus UX friction

VENUS-274 venus Done ↳ EVO-62

EVO-61: confirm/adopt SCANNER_PROBE_RE Block M+N fleet parity

VENUS-273 venus Done

Adopt pluto Block O SCANNER_PROBE_RE update (13 new probe alts)

VENUS-272 venus Done

Retire /puia + venus password-login test apparatus (Elazar: not needed, Ver como covers it)

VENUS-270 venus Done ↳ EVO-54

EVO-59: DB-editable domain allowlist (email-domains.ts pattern) — plan

VENUS-269 venus Done ↳ EVO-59

EVO-54: inventory isDemo/demo-* gates + demo seed rows in prod (Phase 1, no deletes)

VENUS-262 venus Done ↳ EVO-54

EVO-57: audit-trail schema plan (coverage-scoping + field-name normalization)

VENUS-268 venus Done ↳ EVO-57

Per-agent Postgres login roles (adopt Mars reference)

VENUS-266 venus Done ↳ EVO-56

EVO-55: audit-column coverage gap report (Phase 1, read-only)

VENUS-265 venus Done ↳ EVO-55

view-as/persona: mutations write for real under persona + appEvents.actorUserId=persona not real admin — decide intended semantics (read-only no-op? real-user telemetry?)

VENUS-111 venus Done

Migrate call-sites onto canonical view names + drop old names (vAppLog25/50/100→vAppEvents25/50/100, vErrorsLast25/vAppErrorsRecent-dedup→vAppErrorsRecent raw-tail, vFrictionEvents1w→vUserFrictionEvents)

VENUS-247 venus Done

Fix ambiguous createdAt column ref in getFrictionDigest query (held)

VENUS-259 venus Done

Triage clientUnhandledRejection Failed-to-fetch on /practicas/nueva

VENUS-254 venus Done

EVO-47 db-lane: expose level+category+normalizedRoute on venus rollup views + redefine signature

VENUS-82 venus Done

feat(monitoring): real-time error reporting + error-digest — venus leg. applog real-time alert path LIVE (synthetic test:force-audit fired end-to-end). error-digest cron 0 11 * * * wired; landed-proof PENDING the auto-fire (seed 40d06e52). Close on digest-email landing.

VENUS-23 venus Done

Panel Admin — restyle /admin landing (sidebar-first, card grid, emoji, +10 order numbering)

VENUS-248 venus Done

Add vOpenAccessRequests view

VENUS-246 venus Done

correction-actions.ts DOB guard missing age-at-procedure range

VENUS-240 venus Done

Bad-data sweep + revise-request comments sent (26 prácticas)

VENUS-241 venus Done

DOB age-at-procedure validation [1,130]

VENUS-239 venus Done

Reconcile comoAsistente split + práctica-count dedup semantics: dashboard vs /reportes

VENUS-236 venus Done

Drop practicas.diaId — derived-column drift bug

VENUS-238 venus Done

applog heartbeat INSERT fails NOT NULL on appEvents.categoryId

VENUS-235 venus Done

extend status-ping reroute verb-list (add live/deploy/fyi/etc) so informational pings to Elazar go god-view not inbox

VENUS-233 venus Done

silence-kick removal: stop fanning removal announce to aro roster

VENUS-232 venus Done

hub force-leave/kick verb (250k quarantine actuator) with check-in gate

VENUS-231 venus Done

hub command replies (1b): thread into invoking aro god-view, suppress from Elazar inbox

VENUS-230 venus Done

Feedback telemetry — granular per-message codes + indexed feedbackCode column (Scope B)

VENUS-216 venus Done

Add gitpush-pre lint: forbid non-async exports in module-level use-server files

VENUS-139 venus Done

Rebuild vFrictionEvents as tiered view family (supersedes VENUS-227 shape)

VENUS-229 venus Done

Rename vFriction7d -> vFrictionEvents per fleet convergence decision

VENUS-227 venus Done

guide: audit-loop ownership + PM-notify-on-4-triggers + drop FINISHED banner + 5min/10min rename

VENUS-226 venus Done

404 navigation error — no path captured (applog dfb8d0b5)

VENUS-219 venus Done

Venus appEvents conform to fleet standard: categoryId uuid FK->lookupOptions + seed appEventCategory group + backfill w/ renames (access->authz, app->system, client-env->client); add 4 promoted cols (httpStatus/durationMs/path/failureCode); canonical logError/logWarn/logInfo wrappers + pickKnown + isCritical sync-bypass; canonical v_appEvents_* views; error-tier retention job (180d, GUC-bypass); re-level 1435 perf/warn rows->info; legacy_events sink decision for ~1552 rows. BLOCKED on committed SSOT + Elazar priority call.

VENUS-4 venus Done

correcciones history: requester INNER-join drops corrections from deactivated students

VENUS-169 venus Done

init-db.sh: reduce to file-creation + PRAGMAs + seeds, delete duplicate schema (hub self-bootstraps)

VENUS-215 venus Done

/setpm never flushes pm_pending_queue — held messages strand on explicit PM set

VENUS-214 venus Done

Populate expects_reply — dead message field fleet-wide

VENUS-210 venus Done

Hub verbosity backstop — curb agent-to-agent chatter (Elazar 2a)

VENUS-209 venus Done

Orphan retired-aro state regrows between bounces (3 purged v2.34.7)

VENUS-208 venus Done

Suppress dormant announces entirely (Elazar 1a)

VENUS-207 venus Done

EVO-51 venus usage-telemetry route manifest

VENUS-205 venus Done

EVO-51 venus nav de-confusion

VENUS-204 venus Done

/practicas grain split — práctica lane + participaciones lane

VENUS-203 venus Done

4-task batch: filter count / notify-everyone / admin user detail / PRA-N key

VENUS-202 venus Done

Investigate/fix 26 active future-dated practicas

VENUS-196 venus Done

└─ Plan dd/MMM/yyyy month-pulldown date fields across Venus

VENUS-197 venus Done

Fold editarPracticaDobSexo into the VENUS-141 correction queue

VENUS-147 venus Done

appEvents feedback-category canonicalization + native-validation quality refinements (folds into VENUS-183 standardization pass)

VENUS-188 venus Done

Add filter to /admin/audit-log admin page, modeled on Mars /administrar/logs filter

VENUS-189 venus Done

Complete user-feedback logging coverage — close G1/G2/G3 (client-validation friction gaps)

VENUS-187 venus Done

Native HTML5 validation-hint capture (global invalid listener, mirror MARS-412)

VENUS-184 venus Done

Move 5 client error/friction callers off /api/internal/log-error to neutral ux-event path (adblock hardening)

VENUS-185 venus Done

Convert telemetry beacon(s) to server action (adblock-immune) — supersedes VENUS-185 endpoint-repoint

VENUS-186 venus Done

Historial panel — practicaParticipations

VENUS-182 venus Done

Historial change-history panel on edit-bearing routes (prácticas first)

VENUS-179 venus Done

Recent app-events views vAppLog25/50/100 for cheap latest-N pulls

VENUS-181 venus Done

SW-registration inline script blocked by CSP (missing nonce) — PWA offline/install/caching dead in prod

VENUS-180 venus Done

Soporte admin UX toward Mars shape: status filter + all-view + list/table

VENUS-178 venus Done

Sidebar version badge (bottom), mirror Mars app-version

VENUS-177 venus Done

Single-select subcascade radio can't be deselected (SOP-14)

VENUS-175 venus Done

logger unknownCategory warn — map practica category to 'user' in LEGACY_CATEGORY_MAP

VENUS-174 venus Done

editarPractica insert-fresh loses selfRegisteredAt + accumulates soft-del participation history

VENUS-173 venus Done

editarPractica/sumarme ON CONFLICT 500 — bare target vs partial unique index

VENUS-172 venus Done

Práctica fecha valid-range guard [2025-01-01 .. today AR-tz]

VENUS-171 venus Done

/admin/correcciones full history view (like /admin/soporte)

VENUS-167 venus Done

correction-apply UPDATE does not bump practicas.updatedAt

VENUS-170 venus Done

correction approvers widened to {administrador,bedelia,titular}

VENUS-168 venus Done

admin alumnos roster listed role-revoked users → Detalle 404

VENUS-165 venus Done

chore: inert-Class-S carve-out in solo audit-gate (narrow always-spawn)

VENUS-164 venus Done

bug: React #418 hydration on /admin/soporte (U+202F cross-engine ICU)

VENUS-159 venus Done

bug: React #418 hydration on /admin/soporte (U+202F cross-engine ICU)

VENUS-160 venus Done

bug(provisioning): approveAccessRequest doesn't copy document into alumno

VENUS-157 venus Done

feat(solicitudes): document-match trust-signal + fleet doc-naming

VENUS-154 venus Done

Ver como usuario — view-only admin impersonation on unified /admin/usuarios/[id]

VENUS-149 venus Done

B9 refactor: edit-práctica-anytime gated by bedel approval + full change-audit trail

VENUS-141 venus Done

error.tsx: stale-server-action hard-reload recovery

VENUS-146 venus Done

Accent-insensitive name search (unaccent + f_unaccent + trgm GIN)

VENUS-144 venus Done

Self-service edit window dead — editWindowOpenedAt never populated

VENUS-145 venus Done

Fix módulo-scoping: Exodoncias módulo renders dentoalveolar tratamientos

VENUS-140 venus Done

Fix 3 stale submitAccessRequest unit tests (auth-actions-submit.test.ts)

VENUS-132 venus Done

Retire standing auditsolo-venus-cc hub agent

VENUS-138 venus Done

Stand up venus-pm-triage-listen.service — per-app clone of PLUTO-191 ticket-notify daemon (venus first-mover for bs-mr4xk6nnuu2)

VENUS-137 venus Done

Server-side magic-byte sniff to hard-exclude non-jpeg image content (belt+suspenders CVE-2023-4863)

VENUS-135 venus Done

Sort-primitive sweep W2-W4: apply vendored sort head to remaining non-sortable venus tables (admin/alumnos, admin/docentes, clinical-stats leaderboard, admin/soporte, complicaciones, cirugias, sedes/periodos/modulos/lookups)

VENUS-136 venus Done

Adopt shared sortable-table core; apply to /informes + sweep non-sortable tables

VENUS-134 venus Done

Migrate uploadPracticaImage from Server Action to Route Handler POST /api/practica-image — decouples image upload transport from the global serverActions.bodySizeLimit (which VENUS-incident raised to 12mb). Keeps SA cap tight (1MB) for all other actions while allowing the 10MB image path. Not needed for correctness (bytes already route to api-images); transport-hardening follow-up.

VENUS-106 venus Done

Confirm canonical-email active-unique index vs persona rows (ownerUserId NOT NULL)

VENUS-133 venus Done

Solicitudes 2c: phone/email format re-validation on operator fill/edit

VENUS-120 venus Done

Solicitudes: friendly UX on approve-resurrect email-collision

VENUS-119 venus Done

fix(db): venus fn_appevents_immutable §5.1 bug — bypass path does unconditional RETURN OLD, silently no-ops any bypass-gated UPDATE (harmless today: both retention cron jobs DELETE-only; bites future bypass UPDATEs, e.g. category retags — solo's Stage-D retag needed the drop-dance to sidestep it). Fix = RETURN NEW on UPDATE / RETURN OLD only on DELETE, per the fleet-ratified SSOT amendment. Land when the SSOT doc fix lands (bin-whey-gated).

VENUS-121 venus Done

chore(seed): neutralize stale 'Cursada Demo' literal at seed-demo.ts:152 -> 'Demo Periodo' (removes latent re-break if the real 2026 periodo is ever deactivated) — source-hardening for VENUS-124

VENUS-130 venus Done

chore(repo): atomic removal of committed db/reference-data.sqlite binary (fleet decision bs-mr4mjr68vld, 4/4 unanimous) — git rm + gitignore + any role-doc refs + fix stale db/CLAUDE.md mirror desc; optional export-db text dump for offline vocab

VENUS-131 venus Done

chore(ui): '+Subir JPEG' -> 'Subir archivo' label (apiimage accepts all image types)

VENUS-127 venus Done

fix(ui): odontogram 'Pieza/s dentaria/s (FDI)' layout spills sideways — bad UX, contain it

VENUS-126 venus Done

fix(ui): widen app content max-width (currently ~800px, too narrow per Elazar) — use more workable width

VENUS-125 venus Done

feat(ui): /practicas filter role-count summary visual polish (1450 prácticas · 788 operador · 582 ayud 1ra · 22 ayud 2da · 57 observador · 1 ninguno) — make it visually nicer

VENUS-123 venus Done

feat(catalog): A1 — add 3 root antecedentes personales (Tratamiento psiquiátrico, Trastorno hepático, Trastorno neurológico) as booleanos raíz in antecedentesCatalog, same shape as approved A2-A5 lookup adds

VENUS-122 venus Done

fix(data): rename periodo label '2026 - cursada demo' -> '2026' (real cohort mislabeled with demo suffix)

VENUS-124 venus Done

chore(db): distinct-count filler comentarios (legacy required-field '.'/single-char entries) — read-only diagnostic, report before any cleanup

VENUS-129 venus Done

chore(data): soft-remove 'ninguno' from rolesEnPractica participantes pulldown (activo=false; 1 existing práctica retains value)

VENUS-128 venus Done

Solicitudes: adopt Pluto /admin/solicitudes card-list+detail skin; slug-rename /admin/access-requests -> /admin/solicitudes (+redirect); bidirectional feature diff (keep all venus extras, share notifyInstitutionalEmail + email-domain dead-end panel to Pluto; adopt Pluto copy-analysis-context + per-field needs-info checklist + tiered merge-candidate panel); shared restore-twin reactivate-vs-approve-fork fix (venus twin of PLUTO-448/MARS-181); add Venus v{ver} app-sidebar label

VENUS-118 venus Done

Patient registry implementation — pacientes table (dniNormalizado UNIQUE) + nullable pacienteId FK on practicas + DNI autocomplete/mismatch-warn per db/design/wi494-patient-registry.md

VENUS-74 venus Done

Narrow proxy.ts middleware matcher — exclude /api/* + static assets (Vercel Edge invocation cut)

VENUS-67 venus Done

Daily error-analysis admin view — aggregate appEvents errors + 404s + client-error budget for PM daily review

VENUS-72 venus Done

Match mars /admin/solicitudes/[id] workflow for access-request review/approval. Reference: https://evolutiva.pensanta.com/admin/solicitudes/[id]

VENUS-66 venus Done

└─ Mars-parity access-request triage states — needs_info, match-candidate selection, fraudFlags, notify-institutional-email

VENUS-68 venus Done

└─ Access-request triage — Mars-parity polish + styling cleanup

VENUS-70 venus Done low

Friction-instrumentation sweep: audit try/catch hygiene (no swallowed errors), logger() consistent use, toasts on all user feedback, and every toast/error/user-flow block written to applog so friction is mineable; coder fixes gaps in waves

VENUS-76 venus Done

EVO-47 leg 2: suppress non-actionable scanner/benign lines in venus applog-pull PM digest

VENUS-81 venus Done

Informes: filtro por alumno + total como operador (per-sede + todas las sedes)

VENUS-87 venus Done

On /practicas/nueva add read-only 'Edad actual' field to the right of Sexo, auto-calculated from the patient's fecha de nacimiento (live as DOB changes). Display-only, not persisted unless coder finds it should be

VENUS-63 venus Done

Edición de edad/sexo siempre disponible para el creador (fuera de ventana 48h / tope 3 ediciones)

VENUS-88 venus Done

proving-ground config hardening: apply mars 3-lane spec to solo+auditsolo .md + trim supabase features + verify Vercel/PTD access

VENUS-110 venus Done

Supernumerarios 19/29/39/49 en odontograma (venus-native) + UUID-guard en filtro Informes

VENUS-89 venus Done

antecedentes additions: trat. psiquiátrico, trastorno hepático, trastorno neurológico

VENUS-97 venus Done

/informes: add filtro por alumno

VENUS-100 venus Done

total-prácticas live counter on app open (like Pluto)

VENUS-95 venus Done

aggregate totals when filtering (alumno/sede filter → total count, not per-screen sums)

VENUS-98 venus Done

compare 2 selected alumnos (A-vs-B) in comparative stats

VENUS-99 venus Done

image upload at post-op reentry (biopsias) + attach images in ALL modules

VENUS-96 venus Done

PWA installability — manifest.ts + 192/512/maskable icons + iOS appleWebApp meta + minimal service worker (clone Pluto shape, theme #0e7490)

VENUS-77 venus Done

Búsqueda por DNI/nombre de paciente en lista del alumno (mi-cursada), scoped own-prácticas

VENUS-90 venus Done

convert auditsolo standing-session -> one-shot Agent-tool subagent: solo spawns post-commit w/ raw diff+SHA+catalog-as-prompt, ONE verdict, push-gate blocks Class-A push without verdict artifact for that SHA

VENUS-112 venus Done

port PLUTO-475 manifest-gate to solo gate: verdict artifact -> per-file .solo-verdicts/pending manifest (sha256(worktree content) path for auditor-reviewed files); gate derives committed-set per mode (--only: ONLY_PATHS pathspec ∩ changed Class-A-filtered; add-A: whole tree Class-A-filtered), refuse unless every committed Class-A file in manifest w/ matching hash. Closes --only false-refuse + add-A smuggle + post-review edits. BLOCKED on bin: gitpush.sh must export ONLY_PATHS env before .gitpush-pre.sh (fleet-general 1-line, bin-whey/venus offline, pluto queued via nw-whey-cc)

VENUS-113 venus Done

/informes 'Última carga' rendered 'Hace -145 días' for future-dated prácticas — freshnessLabel days<0 guard

VENUS-102 venus Done

chore(db): DROP dead junction tables practicaComplicaciones{IntraOp,PostOp} (0 rows, zero app refs, superseded by VENUS-107 jsonb complicaciones) — destructive DDL, needs Elazar go before apply

VENUS-114 venus Done

PWA mobile install-prompt: when app opened on a phone without it installed, offer add-to-home. Android: capture beforeinstallprompt -> dismissible custom install button/banner (Spanish). iOS Safari: manual 'Compartir -> Agregar a inicio' instructions banner (iOS cannot auto-prompt). Mobile-only, hidden when already installed (display-mode:standalone) or dismissed. Builds on VENUS-77 manifest/SW.

VENUS-78 venus Done

chore(gate): .solo-audit.sh self-exempts from its own content-hash — include it in the hash or pin its sha256 in .gitpush-pre.sh so the gate cannot be weakened in the same push that relies on it (coder-review F1, MED)

VENUS-115 venus Done

/informes: drill-down alumno respeta filtro taxonomia + pulldown alumnos escribible (combobox búsqueda)

VENUS-108 venus Done

SOP-2: divergent-email alumno (Emilia) blocked from crearPractica/editarPractica — validator keyed alumno on alumnos.email not userId

VENUS-57 venus Done

feat(telemetry): viewport/screen-telemetry schema v1 — venus leg. Shipped + codified into evolutiva-appevents-standard §12 (once-per-login viewport event: viewportBand/dprBucket/orientation/deviceType/osFamily/roles). commit a06b235.

VENUS-22 venus Done

Participantes list layout bug on /practicas/[id]: on wide monitors participant name+email and role label stretch to opposite container edges (justify-between, no grouping) → name not visually tied to its role on the same line. Constrain/group so name+role read together

VENUS-62 venus Done

/informes: pulldowns filtrar por tratamiento + complicaciones intra/post

VENUS-107 venus Done

vScoringByAlumno VENUS-79 COALESCE parity — base view was half-applied, understated práctica counts

VENUS-94 venus Done

Hide Archivar button on /practicas/[id] per Elazar (reversible — re-show if client asks). Keep archivePractica server action + gate intact; just suppress the UI render

VENUS-61 venus Done

Reportes/informes surface uplift to mars /informes quality: KPI bucket cards + DataTable + URL-param GET filters + cards-from-rows SSOT, re-axised on sede, strip aprobacion/JTP/periodo. Elazar: put some love into it

VENUS-60 venus Done

B1 monthly practicas counter on app open (Pluto-style)

VENUS-40 venus Done

A4 tratamientos exodoncia: +Explante (client-CONFIRMED 2026-06-23, DATA insert)

VENUS-38 venus Done

A3 tratamientos dentoalveolar: +Trat. alveolitis, +Trat. hemorragia bucal (DATA insert)

VENUS-37 venus Done

A2 complicaciones POST: +No concurre a controles (DATA insert)

VENUS-36 venus Done

A1 antecedentes: +Tratamiento psiquiátrico/Trastorno hepático/Trastorno neurológico (DATA insert)

VENUS-35 venus Done

B9 post-save edit window for forgotten field — verify 48h cover

VENUS-46 venus Done

A5 piezas supernumerarias 19/29/39/49 — verify tooth-chart representation first

VENUS-39 venus Done

B2 image upload on postop 2nd-entry (biopsia)

VENUS-41 venus Done

B8 patient nombre+apellido in sabana

VENUS-45 venus Done

Add dni column to admin alumnos-import template (headerMap in alumnos-import-actions.ts reads only nombre/apellido/email/cohort → new rows import NULL dni)

VENUS-58 venus Done

chore(db): emailOutbox terminal-row retention prune — sent/permanentlyFailed rows never deleted, accumulate unbounded (was factor in drain-outbox seq-scan slow-query). Add retention prune for sent/permanentlyFailed older than ~30d (evolutiva-commons retention hygiene; emailOutbox not audited → no setArchiveContext needed). Non-urgent: partial index on status IN ('pending','sending') already neutralizes perf impact; this caps table growth. Note: drain-outbox idle-gate + partial-index fix in flight separately.

VENUS-17 venus Done

B7 search by DNI/nombre in student-facing view

VENUS-44 venus Done

VENUS-28 — de-dup 404 capture IN-PROCESS (no DB); mechanism per diagnosis: React cache() if intra-request, in-memory TTL if warm-lambda

VENUS-28 venus Done

Push-gate deterministic invariant lints in .gitpush-pre.sh: gate-presence/sibling-consistency, soft-delete-filter (deletedAt IS NULL or opt-out marker), archive-context — the coarse-omission floor for solo-venus proving ground

VENUS-103 venus Done

alumno→staff comentario reply email — student thread reply notifies teacher; reply-scoped, carga-seed stays silent by construction (direct INSERT bypasses notify, per Pluto practica-actions.ts:358-365); reuse 15-min notifiedAt debounce + Reply-To rectificar-practica@; Q3 yes per Elazar 2026-06-05

VENUS-2 venus Done

scanner-probe SCANNER_PROBE_RE Block K+L adoption (20 alts from pluto 7194905)

VENUS-92 venus Done

date-500: impossible calendar dates (Jun-31) crash crear/editarPractica via ::date cast; ymdError round-trip guard at 5 sites

VENUS-91 venus Done

feat(monitoring): venus EVO-12 leg — server-side 404 capture, own-route 404 -> ERROR tier, bot-probe -> WARN/digest carve-out; emits via the dormant flag-gated 404 email path (NOT instrumentation.ts, which notFound() does not throw to). Per EVO-12 canonical spec (pm-llmmsgsrv coord).

VENUS-25 venus Done

Medicación actual: optional free-text field on práctica (name+dose), end-to-end

VENUS-85 venus Done

Rename /reportes -> /informes (cross-app naming parity with mars+pluto) + merge clinical-stats subpage into the unified page; redirect old /reportes /reportes/kpi /reportes/stats -> /informes

VENUS-65 venus Done

B3 image upload all modulos

VENUS-42 venus Done

Forced-comentario UX friction: thread Textarea was required, seeding placeholder '.' rows; made optional (95211c6/v0.68.19)

VENUS-84 venus Done

Curated invariant-catalog .md (MARS-372 shape): Venus authz/scope conventions + cross-surface invariants (server-action gates, setArchiveContext contract, soft-delete filter, gate-aptness map) — feeds auditsolo + fleet-wide adopt

VENUS-104 venus Done

feat(ux): práctica-form UX-friction sweep — all-errors-inline (Model-A), zero-operador+sede=Otros gates, toast/error telemetry PRODUCER, D3-4/5 advisory log-only

VENUS-10 venus Done

client-error serializer: window.onerror/onunhandledrejection logged '[object Object]' with NULL errorName/stack

VENUS-8 venus Done

practica-actions: unguarded pre-tx reads in sumarme/quitar/archivePractica/completarComplicaciones

VENUS-7 venus Done

Server-side 404 detection/logging (request instrumentation)

VENUS-6 venus Done

auth/callback: demote benign PKCE 'verifier not found in storage' exchangeError warn->info (stop false-paging)

VENUS-109 venus Done

Restore student end-of-carga Comentario (regression fcf1c7c 2026-05-17): seed as practicaComentarios thread row 1 inside crearPractica (authorRole=alumno)

VENUS-1 venus Done

fix(perf): drain-outbox slow-query — idle-gate + idx_emailOutbox_active partial index

VENUS-18 venus Done

venus99: advisor hygiene - duplicate authId index, evaluadoresExternos FK cover, applog_notify_error pin

VENUS-487 venus Done low ↳ VENUS-485

logCaughtError console.error: redact raw err.message/stack before Vercel log

VENUS-484 venus Done low

appEvents errorMessage/errorStack: coarse auth errors on applicant auth-admin paths

VENUS-483 venus Done low

appEvents.actor: write userId, not staff email

VENUS-452 venus Done low

appEvents toast text: strip embedded email addresses

VENUS-454 venus Done low

pacientes archive coverage + cross-práctica demographic propagation

VENUS-86 venus Done low

VENUS-155 Phase 3: sexo code hardening is a lookup-table question, not a CHECK

VENUS-469 venus Done low

userAgent ''-vs-NULL: trigger COALESCE + 2 callers leak empty string (diagnosability)

VENUS-344 venus Done low

chore(lookup): lookupOptions.campo is the authored value-code column (shipped)

VENUS-155 venus Done low

export-db.py round 2: columns from pg_catalog, column count in the completeness guard, generated-column default fixed

VENUS-468 venus Done low

appEvents: hash recipient email addresses in email telemetry

VENUS-453 venus Done low

export-db.py reads privilege-filtered information_schema and never renders indexes (PLUTO-772 port)

VENUS-457 venus Done low

appEvents.path dead column — drop or populate (never-populated query trap)

VENUS-343 venus Done low

Prune stale password-login-actions.ts entry from .gitpush-pre.sh email-canonical guard

VENUS-282 venus Done low

appEvents.status free-text drift (7739 rows, ~25% coverage of declared union)

VENUS-310 venus Done low

emailOutbox has held ZERO rows for 30 days - the drain path is an uncontrolled zero in production

VENUS-397 venus Done low

applog-listen: catchUp logs route-suppressed-held rows as 'missed event(s)'

VENUS-376 venus Done low

.gitpush-pre.sh WARN: migrations/applied/ change without schema.md change

VENUS-342 venus Done low

Tres pedidos del cliente del 2026-07-30 nunca se convirtieron en filas: parotidectomias, retiro de osteosintesis, y el filtro de complicaciones que queda vacio

VENUS-447 venus Done low

Verify-script: applied/ migrations vs live catalog diff

VENUS-301 venus Done low

Decide whether log_connections stays OFF on the venus Supabase project (carved out of VENUS-356)

VENUS-423 venus Done low

IdentityBindTier dbBackfill contract cleanup

VENUS-312 venus Done low

scrp-monitor-agent-idle.sh cannot classify: scan-context.py is absent from ~/.local/bin/monitor-context/ on venus

VENUS-421 venus Done low

Add self-join to errscan hub_register() (shared template, latent gap)

VENUS-255 venus Done low

applog dedup: auth-category message facet, pending enamel cardinality numbers

VENUS-435 venus Done low

Remove orphaned SECDEF guard functions still calling net.http_post

VENUS-429 venus Done low

Venus support ticket 18: fulfilled-but-unclosed for 34 days - verified, replied, closed

VENUS-417 venus Done low

collect.py ambiguity diagnostic cannot distinguish a real cwd collision from ordinary registration lag

VENUS-416 venus Done low

No checker asserts the live PG schema matches the tracked schema.sql - drift is silent in both directions

VENUS-412 venus Done low

Drop or document the two _venus155_*_sexo_backup tables (provably reconstructible)

VENUS-403 venus Done low

vOpenSupportTickets hardcoded-status drift risk

VENUS-242 venus Done low

SMTP_FROM fail-closed (fallback removal)

VENUS-352 venus Done low

pm-triage-listen.ts PMT_APP parameterization (cross-project fix)

VENUS-313 venus Done low

Friction rollup views (digest/top/by-user) + /admin/friction page (fleet bs-mrlqhi9hhir)

VENUS-250 venus Done low

SOP-N → SOP-venus-N display-prefix rollout (fleet decision bs-mrlpjo9mzjb)

VENUS-249 venus Done low

chore: harden remaining direct toLocale* client renders (cross-engine U+202F risk)

VENUS-161 venus Done low

EVO-51 telemetry activation push

VENUS-206 venus Done low

Remove Limpiar selección buttons (redundant with re-click toggle)

VENUS-201 venus Done low

chore: prune solo-venus-cc.md ship-log accretion (session-ledger → git/bwi)

VENUS-163 venus Done low

feat: Sección value on /admin/soporte/[id] is a new-tab link to full URL

VENUS-162 venus Done low

Solo-default P1: rebind Class-S→solo / Class-A→team router into venus pm-commons

VENUS-150 venus Done low

gitignore agents/*/memory/ — per-agent memory dirs are runtime state, not app code; they keep getting scoop-bundled into unrelated commits in the shared worktree (latest: db-venus memory .md into 09ea1f8). Untrack the already-committed file + add the gitignore rule.

VENUS-75 venus Done low

chore(db): index unindexed FKs on live query paths

VENUS-16 venus Done low

chore(email): firePersistentFailureAlert in email-outbox.ts hardcodes elazar.pimentel@gmail.com -> switch to env-driven WORK email (pensanta.com). Low-pri cleanup surfaced during LEG-1; do NOT propagate the gmail hardcode.

VENUS-24 venus Done low

D2 intra-complication edit window 48h ok? — ask Sebastian

VENUS-50 venus Done low

Stale vFriction7d comment in admin/health/page.tsx

VENUS-228 venus Done someday

venus classifier-parity follow-up: add referer-discriminator to tierForNotFound so genuine-bad-routes tier stricter (ayudarg already has it); venus currently OVER-escalates - phantoms classified error/alert=true. OPTIONAL low-pri polish, NOT a fix: two-sink EVO-21 already removes the phantom source so this only affects FUTURE real bad-route tiering. Defer per pm-venus scope decision (do not fold into EVO-21 push).

VENUS-34 venus Done someday ↳ EVO-21