enamel_031's NOT NULL no-default on shared supportTickets broke requestTerraAccess for 9 minutes: zero eligible callers, nobody hit it

TERRA-40 terra Done urgent

CARGAR: 4 dominios EN SERVICIO ausentes de prod (PMH988 NO entra, va en MOVILBA-24)

MOVILBA-18 movilba Done urgent ↳ MOVILBA-13

crearPracticaFailed INSERT column/value mismatch

VENUS-244 venus Done urgent

Audit: session-trust paths vs isGenuineGoogleSession (auth-bypass check)

VENUS-304 venus Done urgent

SEC: portal server actions ungated - unauthenticated read of client queue

ENAMEL-18 enamel Done urgent

URGENT: fix quoted search_path in mig 099/102 -- 33 functions broken, prod outage since 13:03 UTC

PLUTO-673 pluto Done urgent

applog-listen: a log-only row PERMANENTLY PINS the cursor (classify inside void enqueue) — venus dead 15 days, latent on all 4 rails

VENUS-324 venus Done urgent

applog-listen sends to an ARRAY-of-one and reaches the UNGUARDED hub resolver: scalar to + human-seat recipient validation + regression (EVO-86(e))

VENUS-323 venus Done urgent

SOP support-api: add ticket CRUD (close/status/notify) + private stakeholder comments

VENUS-252 venus Done urgent ↳ EVO-52

chat-duo Elazar Pending pane refreshes mid-type → loses user input. Bug: pane re-render clobbers focused input field. Owner: llmmsg-srv-cc-w (chat-duo).

MARS-290 mars Done urgent

Práctica date off-by-one: stored/displayed -1 day from entered

MARS-286 mars Done urgent

CRITICAL: cannot log in (client report via pluto)

AYUD-76 ayudarg Done urgent

P0: validate ids, status, and priority in wi and wi-web

BSQ-2 basquet Done urgent

docentes/[id] still RSC-crashing post-v1.82.1 (digest 3811385828, eventId 5401bdaf)

MARS-263 mars Done urgent

SMTP fully broken: SMTP_HOST env var has literal \n suffix -> EDNS getaddrinfo fail, ALL outbound email fails (notify/review/migration). Fix: defensive .trim() on SMTP_* env reads in mailer config + correct Vercel env vars.

MARS-319 mars Done urgent

BUG: número de documento input invisible on /practicas/nueva (CSS regression from v1.54 form-field width fix)

MARS-223 mars Done urgent

P0: wrap wi and wi-web writes in transactions

BSQ-1 basquet Done urgent

Live 500 on /informes — fn_getInformesBundle returns porAnestesia (and likely sibling array keys) undefined for sparse/zero-row scope; client .map crashes. PLUTO-97 regression. Fix fn to COALESCE every array key to [] + client null-guard. PTD must GET /informes for the failing scope, not log-tail.

PLUTO-112 pluto Done urgent

MSG-76: /setpm error feedback — DM sender when command fails (wrong arg count, unknown agent, not authorized)

MSG-76 llmmsg-srv Done urgent

Backfill KEY-N refs (projectKey+projectNumber) for all non-deleted items — BWI-21 prerequisite

BWI-22 basquetwi Done urgent

Access regression: students who previously logged in are now blocked (agujero negro / blocked-user landing) - PROD, real users

PLUTO-69 pluto Done urgent

SECURITY: rotate pm_triage_reader DB password (committed literal in git history, PLUTO-191 GRANT migration)

PLUTO-194 pluto Done urgent

URGENTE 4h: comisión + JTP REQUIRED en /solicitar-acceso (rama estudiante) — submit bloqueado si faltan

PLUTO-349 pluto Done urgent

PROD-DOWN: práctica create fails — studentAssignmentsArchive trigger fn still INSERTs dropped isDemo column (MARS-78 class, slipped table)

MARS-88 mars Done urgent

URGENT: app logger dead since 2026-05-28 — restore logging (logs table) so we have troubleshooting data

AYUD-1 ayudarg Done urgent

Grading authz audit: práctica-grade permission scope vs Puia rule (comisión-wide adjunto/jtp/ayudante + titular-all)

PLUTO-141 pluto Done urgent

fn_getInformesBundle: include 0-practica JTPs (Opt A) across jtpStats + comparativaJtp + jtpBenchmark

PLUTO-144 pluto Done urgent

URGENTE 2h: post-login redirect a form de auto-asignación para alumnos sin comisión/JTP — auto-aprueba selección

PLUTO-346 pluto Done urgent

URGENTE 4h: /solicitar-acceso para estudiantes incluye pulldown comisión + JTP + datos esenciales

PLUTO-348 pluto Done urgent

route-dedup.ts: two open unowned defects (windowing collapse, unrecoverable summary)

VENUS-375 venus Done high

The citation gate checks tag SHAPE, never tag REALITY: a well-formed invented token passes exactly as a genuine one does, and reads to a human as a real citation

TERRA-69 terra Done high

Reason codes assert the data is wrong and terra has no correct-or-retire path for a cirugia: TERRA-55 risks showing staff a fault they cannot act on

TERRA-56 terra Done high

portalPen: staff triage surface (read, answer, assign, resolve tickets)

ENAMEL-20 enamel Done high

soporte-action agent CLI was DEAD: three route/client drifts on the headless support path

VENUS-373 venus Done high

└─ Smoke test: exercise scripts/soporte-action.ts against the live support-action contract

VENUS-374 venus Done low

Raise with applog-listen.ts owner: refuse startup when co-tenanted DB has APPLOG_APPKEY unset

TERRA-25 terra Done high

Client cannot confirm a cirugia: isConfirmedByClient has 3 readers and no writer, and it blocks every guard on the empty population

TERRA-52 terra Done high

Raise coder/coder02/db/db02 auto-compact window to 400k (CLAUDE_CODE_AUTO_COMPACT_WINDOW in each agent's own .claude/settings.json)

MARS-644 mars Done high

Actuator tiers must be per-agent-window: scale absolute gates (HARD_NUDGE_K/HARD_COMPACT_K, quarantine) by each agent's own CLAUDE_CODE_AUTO_COMPACT_WINDOW instead of assuming one fleet window

OPS-128 agent-ops Done high

Terra hard-delete guard coverage: archive ledger, 4 clinical detail tables, counter

TERRA-10 terra Done high

terraPacienteImplantologia: patient-clinical table with deletedAt and apparently no archive trigger on any mutation

TERRA-31 terra Done high

Detail-table UPDATEs bypass both archive triggers: clinical content overwritable with zero trace

TERRA-28 terra Done high

Unprotected .vercel.app project alias serves the full production build, and is the PKCE-mismatch mechanism

TERRA-20 terra Done high

AUDIT dropbox-orphan-sweep.sh (registry row 116): what it deletes, how it fails

OPS-127 agent-ops Done high

MOVILBA-34 parte 2: llevar expediente_baja a PROD (DDL + vista) y backfillear 2440 filas cerradas desde RUTAP

MOVILBA-36 movilba Done high

REACTIVAR 11: 1 dominio soft-deleted en prod y vigente en RUTAP (PMH988)

MOVILBA-24 movilba Done high ↳ MOVILBA-13

BUG: normalizar_dominio borra minusculas en vez de normalizarlas

MOVILBA-27 movilba Done high ↳ MOVILBA-13

CORREGIR 7: 2 celdas ################ visibles en el export de Eugenia

MOVILBA-20 movilba Done high ↳ MOVILBA-13

HARD DELETE: 20 entidades de prueba + linea 945 id 176

MOVILBA-32 movilba Done high ↳ MOVILBA-13

ENTIDADES: diff bidireccional prod <-> sqlite

MOVILBA-14 movilba Done high ↳ MOVILBA-13

CORREGIR 9: diff a nivel de campo de los 2260 dominios que matchean

MOVILBA-22 movilba Done high ↳ MOVILBA-13

Hub must not return a success that asserts more than it verified (ok:true vs delivered)

MSG-285 llmmsg-srv Done high

Access-request form: /solicitar-acceso is a dead end, accessIssueReports never written

ENAMEL-21 enamel Done high

Decide hosting for the new websites-tools git repo

WEBSITES-2 websites-tools Done high

Grant service account GA4 Administrator on all three accounts

WEBSITES-10 websites-tools Done high

cc-context-monitor last_turn() v2.14 residual stale-read: agent force-compacted 'for no reason' every other session. Verified 2026-06-09 nw-whey-cc reported 184k while live /context=63.6k (3x phantom). last_turn (~line 312) reads transcript's last usage block = summarizer's pre-compact cache_read until next real turn; compact_boundary reverse-walk skip has a hole (boundary outside TAIL_BYTES, or pre-compact reading sampled in the gap before boundary written). Fix: gate actuator on LIVE window occupancy, not stale transcript estimate. NOT a cap problem - do NOT bump nw ROLE_CAP (Elazar explicit). Recurring user-facing churn.

OPS-11 agent-ops Done high

CronCreate /compact unreliable in never-idle loop: past-dated one-shots persist as zombies (363-day timer), monitor DM injection prevents REPL idle — path-B prose /compact is inert

MSG-89 llmmsg-srv Done high

tick.py execute() is sequential: one slow agent blinds the whole roster and delays post-nudge escalation (2.5min measured)

OPS-106 agent-ops Done high

to:[] multi-DM array path never inherits re= parent origin_aro

MSG-279 llmmsg-srv Done high

Post-compact state is structurally unmeasurable: 0k filter hides landed compacts, so compact_unverified fires on successes

OPS-112 agent-ops Done high

No regression guard on the idle classifier: a ghost-vs-typed inversion caused a silent fleet-wide coverage outage

OPS-123 agent-ops Done high

Stuck-busy agents leave coverage silently: unsubmitted prompt text pins idle=false, 14h measured uncovered, no alert

OPS-116 agent-ops Done high

abr:ss attribution false-negative: fast responders fail the text_in_pane visibility test

OPS-121 agent-ops Done high

nudge_pending_since consumed on decide, not on confirmed exec: an aborted escalation can shut all four triggers

OPS-108 agent-ops Done high

Copia staging->dev de vehiculos: dev arranca de cero con datos reales

MOVILBA-1 movilba Done high

└─ Anuncio en aro:mba-l + modo mantenimiento en dev

MOVILBA-4 movilba Done

└─ Verificacion post-carga

MOVILBA-7 movilba Done

└─ Secuencias (trampa 23505 de archive)

MOVILBA-6 movilba Done

└─ Carga transaccional

MOVILBA-5 movilba Done

└─ Ensayo de rollback

MOVILBA-8 movilba Done

└─ Backup dev-before + checksums

MOVILBA-3 movilba Done

└─ Preflight: probar que los esquemas son identicos

MOVILBA-2 movilba Done

P0: fn_insertSupportTicket ambiguous id column broke all support-ticket creation

PLUTO-677 pluto Done high

Email drain: kill ~288/day cron no-ops (Tier 0 EXISTS-guard) + DB-native trigger-wake (Tier 1)

EVO-70 evolutiva Done high

└─ EVO-70 Tier 1: emailOutbox AFTER INSERT FOR EACH STATEMENT trigger → pg_net wake marker to drain route

MARS-520 mars Done

└─ EVO-70 Tier 1: trigger-wake for emailOutbox (pg_net)

PLUTO-613 pluto Done

└─ EVO-70 Tier 0: guard drain-email-outbox cron with EXISTS check

PLUTO-612 pluto Done

└─ EVO-70 Tier 0: conditionalize drain-email-outbox pg_cron — EXISTS-guard so empty ticks fire zero HTTP/Vercel

MARS-519 mars Done

isUuid rejects legacy deterministic seed UUIDs (non-RFC version/variant nibbles), false-404s comisión/other routes

PLUTO-578 pluto Done high

fn_notify_applog_err collapses all 404s into one signature bucket

VENUS-243 venus Done high

Rectificaciones fix: (A) DB sweep 10 stuck-rectificar comA practas to noRevisado, (B) exempt rectificar from review dedup so re-rectificar works, (C) Reenviada-tras-rectificar badge on noRevisado rows, (D) teacher notification email on student resubmit

MARS-316 mars Done high

Solicitudes de acceso: role (student vs teacher) not visually clear — Estudiante tag present but teacher-like fields (Cátedra postgrado, JTP/Ayudante) rendered alongside, confusing reviewer

MARS-315 mars Done high

Ayuda y Soporte: in-app support-ticket flow — global FAB + Dialog + supportTickets table + internal-email notify Elazar on creation + Vercel cron hourly digest DM to PM + watchdog open-count poll (per Elazar -36580 + pm-mars-cc design -36593)

MARS-312 mars Done high

SOL-VENUS-N human reference for access requests

VENUS-360 venus Done high

Enumerate legitimate DB principals for Mars (fleet DB-hardening step 2)

MARS-620 mars Done high

Enable log_connections (or equivalent) on Mars Supabase DB

MARS-619 mars Done high

pm-triage-listen: rowless NOTIFY kinds (weeklyReport) silently dropped

VENUS-353 venus Done high

Fix /administrar/usuarios throwing past 500 active users - add server-side pagination

MARS-615 mars Done high

SOP-MARS-39: período endDate silently blocked ALL práctica filing for 2026-1C-Grado cohort since 2026-08-01 (4-day undetected outage)

MARS-607 mars Done high

Materia-dimension migration 099/100: setActivePeriodo cross-materia blackout + createPeriodo missing materiaOptionId

MARS-606 mars Done high

SMTP host/port/secure validating resolver — replace the || default on the email-send path

MARS-601 mars Done high

Terra outbound mail: access-request notification (NOT migration terra_13 — that is TERRA-10's deliverable)

TERRA-13 terra Done high

hub_send.py marker path was __file__-relative: correct only because the unit names the symlink, and it reported landed registrations as failures

OPS-114 agent-ops Done high

Idle prefetch used the 50% growth floor and compacted agents with 35pt of headroom (coder-pluto-cc at 51.2%)

OPS-113 agent-ops Done high

Foto de perfil obligatoria para alumnos + foto del alumno en la UI de corrección

MARS-600 mars Done high

Idle-path compact runaway: NULL growth baseline made every above-floor agent perpetually eligible (pm-terra-cc 8x in a morning)

OPS-111 agent-ops Done high

deletedAt on the four terra clinical detail tables (ruled 2026-07-31, not delivered by terra_13)

TERRA-15 terra Done high

Portal: accept 'venus' as a portal appKey scope tag + grant Puia client under venus

ENAMEL-17 enamel Done high

Repoint 5 remaining APP_URL fallback sites to resolveSiteOrigin()

MARS-599 mars Done high

Venus DB backup lane: executor unknown, last local dump 2026-06-16 — identify owner or declare backup-gap incident; fix db/README.md §Backup

VENUS-348 venus Done high

6 userRoles call sites bypass soft-delete check -- role grant/revive + last-admin-guard defeat on deleted users

PLUTO-640 pluto Done high

Data API OFF is an unowned config that terra's pg_temp LATENT rating silently depends on

TERRA-11 terra Done high

Split shared app.bypass_immutable GUC per-guard (enamel half)

ENAMEL-13 enamel Done high

userRoles last-admin trigger missing ENABLE ALWAYS (replica-mode bypass, same class as mig 101)

PLUTO-671 pluto Done high

getStudentsWithoutAssignment missing ur.deletedAt IS NULL -- 6 of 7 rows on the live student-assignment picker are reclassified docentes/admins, not students

PLUTO-667 pluto Done high

Land PLUTO-641 orphaned app-side refactor (admin fn_* calls)

PLUTO-665 pluto Done high

Terra leg of EVO-83: CR + client-questions surface

TERRA-1 terra Done high ↳ EVO-83

EVO-86: pluto applog rail — real error pages self-addressed to scrp-applog-pluto, never reached pm-pluto-cc

PLUTO-652 pluto Done high

auth/callback 42P08: raw bind-placeholder in accessRequestMatchExpr blocks real logins

PLUTO-647 pluto Done high

support-actions.ts stamps persona id instead of realUserId in actor/archive/log fields

PLUTO-645 pluto Done high

Land or discard dangling postgres-boundary WIP (migrations 089-094)

PLUTO-641 pluto Done high

VENUS-305 BLOCK fix-forward: incomplete identityBound writer coverage

VENUS-311 venus Done high

getAcademicDropdownData anonymous-callable, same roster-PII leak class as PLUTO-635

PLUTO-638 pluto Done high

Audit: roleless-but-sessionful paths vs genuine-Google gate

VENUS-306 venus Done high

Supabase open email/password signup — disable external_email_enabled

VENUS-302 venus Done high

/solicitar-acceso GET not genuine-Google gated (asymmetric with SUBMIT)

MARS-573 mars Done high

Disable Supabase Email provider (external_email_enabled:false) + committed authconfig.json + diff-on-push assertion

PLUTO-630 pluto Done high

Disable GoTrue email/password provider (external_email_enabled)

MARS-570 mars Done high

Remove dangling Vercel preview-alias from GoTrue uri_allow_list (evolutiva-m-pensanta-com.vercel.app)

MARS-569 mars Done high

image-proxy profile-image gate not widened for /usuarios peer directory — students get broken avatars

MARS-558 mars Done high

review:locked-by-student strands práctica ungradeable on abandoned student edit (no lock TTL/override)

MARS-547 mars Done high

Retire fn_lifecycleInactivity date-auto-disable path + clear inactivity flags (live-incident remediation)

PLUTO-627 pluto Done high

└─ Remove inactivity-lifecycle source refs (auth/callback reset + poll-security-alerts user email routing) — PLUTO-627 code tail

PLUTO-628 pluto Done high

└─ Drop 3 orphaned inactivity lifecycle columns from users

PLUTO-629 pluto Done

auth/callback rejects dangling supabaseAuthId as takeover instead of rebinding — 79 legacy users latent-locked-out

MARS-548 mars Done high

Eradicate demo-data concept residue to zero (bs-mrteu5nvtt6)

PLUTO-624 pluto Done high

EVO-79 mars leg: access-request dedup PREVENTION — attach Google identity to existing pre-created account on confident match, not a 2nd user

MARS-532 mars Done high

Access-request dedup PREVENTION: attach Google identity to pre-created account on confident match

PLUTO-617 pluto Done high ↳ EVO-79

auth/callback email-auto-link-at-login policy (per Elazar login-link re-decision)

PLUTO-621 pluto Done high ↳ EVO-79

Rename práctica date label to "Fecha de la cirugía" + show load date "Cargada el"

VENUS-296 venus Done high

Fleet-wide Gmail dot/plus normalization: block duplicate accounts at the DATA LAYER (Mars+Pluto+Venus)

EVO-45 evolutiva Done high

EVO-71 pluto leg: supautils PUBLIC-EXECUTE sweep + object-class probe + fn-migration REVOKE policy

PLUTO-614 pluto Done high ↳ EVO-71

EVO-71 mars: sweep live public fns for residual PUBLIC/anon/authenticated EXECUTE (supautils force-grant bypasses ALTER DEFAULT PRIVILEGES) + object-class probe

MARS-522 mars Done high ↳ EVO-71

EVO-68 Mars leg: replace email-DOMAIN login gate with genuine-Google-identity gate in auth/callback

MARS-518 mars Done high

sexo: add 'No especificado' opt-out fleet-wide (keep required)

EVO-67 evolutiva Done high

└─ EVO-67: add 'No especificado' opt-out value to sexo/sexoPaciente lookup group

VENUS-280 venus Done

Restore reportedPracticeDate required + drop today-default (reverse MARS-509 over-relaxation) + add to EVO-66 flash set

MARS-515 mars Done high

Fix /perfil upload double-submit (button not disabled during await)

PLUTO-599 pluto Done high

Fix ERR_DLOPEN_FAILED sharp crash on POST /perfil

PLUTO-596 pluto Done high

Create bedel account (magali.ayelen020@gmail.com) with /estadisticas access

MARS-441 mars Done high

SOP-27 follow-up: JTP-scoping/duplication/attribution/metrics bugs across /alumnos /practicas /informes /comisiones

MARS-471 mars Done high

└─ JTP-of-whom rebuild from práctica picks (Q2 systemic reconcile) + own-students-first visibility (Q1) — Elazar-ruled

MARS-474 mars Done high

└─ Informes differing-cells nondeterminism: same comision/URL renders different aprobacion/latencia/alumno-count across viewers minutes apart

MARS-473 mars Done

Slow-query regression: json_agg lookup-label query mean 5.9s

MARS-484 mars Done high

getStudentsForTeacher/getStudentsForTeacherPage: fact aggregates computed before roster scope

PLUTO-576 pluto Done high

Fleet lint matchBrace bug: no-silent-failure guard undercounts broken sites (destructured params / Promise generic returns)

EVO-53 evolutiva Done high

Adopt fleet no-silent-failure lint (scripts/lint-no-silent-failure.mjs) — net-new for Pluto, not a re-vendor

PLUTO-570 pluto Done high

Hoist impersonation guards into try (silent-fail retrofit)

VENUS-251 venus Done high

Sharp native module (libvips) fails to load on Vercel linux-x64 at /perfil — ERR_DLOPEN_FAILED, breaks image optimization/serving

PLUTO-569 pluto Done high

fn_notify_applog_err 404 signature collapse — fleet-wide alert-dedup bug

MARS-439 mars Done high

Harden cron_auth_header(): REVOKE EXECUTE FROM PUBLIC + lock search_path

MARS-380 mars Done high

Approving docente_ayudante_primera access requests never inserts jtpAyudantes row

PLUTO-566 pluto Done high

bwi inter-site: Postgres + UTCP migration

BWI-23 basquetwi Done high

└─ DB: port schema SQLite-17 -> Postgres 17 (CHECK/FK kept, payloadJson -> jsonb, event-row invariant preserved)

BWI-24 basquetwi Done high

└─ DB: port live data SQLite -> Postgres + cutover (preserve ids/timestamps/events, quiesce writes, verify counts, flip source of truth)

BWI-30 basquetwi Done high

└─ Coder: thin HTTP service over Postgres enforcing bwi invariants (event rows, parentId cycle check, payload/updatedAt)

BWI-27 basquetwi Done high

└─ Ops: daemonize wi-http-server on whey (systemd unit, autostart on boot, BWI_HTTP_KEY/env mgmt, bind 127.0.0.1)

BWI-31 basquetwi Done high

└─ Coder: UTCP manual at /utcp describing the HTTP service (manual_version, tools, call templates)

BWI-28 basquetwi Done

└─ Ops: make Postgres persistent on whey (unmask postgresql wrapper + enable on boot)

BWI-26 basquetwi Done

└─ Coder: migrate wi CLI + wi-web DB driver sqlite3 -> libpq/psql after schema lands

BWI-29 basquetwi Done

Triage RSC render error on /practicas/nueva (digest, held for pause)

VENUS-258 venus Done high

SOP support-api: add ticket CRUD (close/status/notify) + private stakeholder comments

PLUTO-563 pluto Done high ↳ EVO-52

Register evolutiva-errscan@venus systemd instance (currently not running)

VENUS-253 venus Done high

SOP-MARS-27: resolve support ticket — student JTP-pick secret

MARS-469 mars Done high

Runtime/toolchain + dependency upgrade baseline (fleet-wide reference)

MARS-449 mars Done high

Fix /administrar dup-title+stale-sidebar bug; extend header/breadcrumb pattern fleet-wide across admin section

MARS-450 mars Done high

Runtime/toolchain upgrade — Next stable, React 19.2.7, Node 24.x, pnpm 10 + staged compat bumps

VENUS-245 venus Done high

Support ticket: /mi-cursada issue (registered user)

PLUTO-543 pluto Done high

Harden Postgres against trigger-bypassing hard-deletes on practicas + add deletion-integrity detection

MARS-435 mars Done high

Create vOpenSupportTickets view (fleet-wide open-ticket view standard)

PLUTO-542 pluto Done high

Recover content of 2 untraced hard-deleted prácticas (f223ef93, cc487cbb) from pre-deletion backups

MARS-436 mars Done high

Drop hub cold-start announce fan-out (nothing consumes it, wakes every eng-aro member on each bounce)

MSG-268 llmmsg-srv Done high

Hub: brainstorm can leave an aro frozen for hours — add auto-close/expiry so a stale session can't block new work

MSG-260 llmmsg-srv Done high

brainstorm must never hang on an offline expected-replier: auto-skip + guaranteed close

VENUS-234 venus Done high

Exempt rail/alert-sender identities from aros-prune

MSG-267 llmmsg-srv Done high

Mars alert rail blind: applog-mars pruned from aro:mars, error pages silently dropped

MARS-431 mars Done high

vFrictionEvents LIMIT 1000 truncates human admin logs dashboard - add all-time uncapped view

MARS-427 mars Done high

busy-nudge: de-gate from humanincdw + cover lane-context 1:1 asks

VENUS-225 venus Done high

humanincdw-gated suppression of worker status-pings to Elazar

VENUS-222 venus Done high

site-config.ts localhost-fallback prod bug

VENUS-220 venus Done high

Feedback/friction telemetry — centralized instrumented capture contract (root fix)

VENUS-213 venus Done high

Friction-telemetry unification: one feedback chokepoint, canonical category=toast+mechanism, server-action transport, complete logs friction view

MARS-419 mars Done high

MARS-416 venus default-grants revoke

VENUS-212 venus Done high

Security: revoke default anon/authenticated SELECT grants across Mars public schema (83 relations incl appEvents family)

MARS-416 mars Done high

Solo-agent initiative: unified fleet protocol + named driving maintainer

EVO-50 evolutiva Done high

db-size-monitor.service failing exit-127 daily (orphaned script)

OPS-104 agent-ops Done high

Fix rkhunter duplicate timers on venus + drop cadence weekly->monthly

OPS-98 agent-ops Done high ↳ OPS-97

Admin usuarios RSC render error — GROUP BY vs view PK dependency

VENUS-200 venus Done high

Active-views refactor: DB views for deletedAt/isDemo filtering

VENUS-199 venus Done high

Futuro badge overcounted via participation join

VENUS-198 venus Done high

Fix recurring React #418 hydration mismatch on /practicas/[id] (ICU time-separator class)

VENUS-194 venus Done high

No-silent-failure contract: audit + enforce try/catch→appEvents+friendly toast, required-field validation toasts, swallowed-catch elimination, error→live-PM DM

PLUTO-529 pluto Done high

No-silent-failure contract (Mars lane): audit census + author shared mutation-wrapper/form-hook/lint-guard + codify contract in commons

MARS-408 mars Done high

Pluto IDOR: createNotification + markComentarioNotificationsRead unauthenticated, client-forgeable userId

PLUTO-530 pluto Done high

Operador may create práctica with 'Sin asistente' (null asistente); null-safe all KPIs/queries/reports/filters

PLUTO-528 pluto Done high

Comisiones grid UX: row-click opens existing detail page + relocate rename + hide delete unless empty (A+B)

PLUTO-525 pluto Done high

No-roles real-time aro:pluto alert channel (part 3 of 518)

PLUTO-519 pluto Done high

Assign active docente_jtp role to elazar+jtp test persona

PLUTO-521 pluto Done high

No-roles login denial: instrument silent page.tsx path + raise ARO alert

PLUTO-518 pluto Done high

Scaffold bare Next.js app + push first commit to empty GitHub repo

ENAMEL-5 enamel Done high

/informes '#51 Realizada por docente' card is a dead metric — always 0/0% (queries dificultadPercibida for a label that can't exist)

PLUTO-513 pluto Done high

/informes 'En esta página' TOC card: rename to 'Secciones en esta página' + fix title/description run-together wrapping bug

PLUTO-512 pluto Done high

Entity cross-linking sweep: make named practica/comision/teacher/student references clickable, discoverable links

PLUTO-493 pluto Done high

Runtime ReferenceError: SupportActionResult is not defined at /practicas (system/serverError)

PLUTO-491 pluto Done high

Tidy sort core for portability + mark canonical SSOT (fleet sortable-table primitive)

PLUTO-484 pluto Done high

Harden /api/log-error (auth+rate-limit+body-cap)

MARS-393 mars Done high

Codex audit — P0 security/forensics: resume-link fail-closed + appEvents storage-key strip (7 sites) + userRoles role-change changelog

MARS-38 mars Done high

Harden INNER JOINs to lookupOptions that drop a live row if a status/programa lookup is ever deleted (soporte + alumnos)

MARS-166 mars Done high

/informes fn_getInformesBundle 25s exec + pg-pool connection exhaustion (469 perf regression)

PLUTO-471 pluto Done high

Mars DB scaling: migrate serverless runtime from direct-5432 to Supavisor transaction pooler (6543); reserve direct-5432 for weekly-kpi cron + migrations/seed; cut runtime pg.Pool max 16->~3; audit+cap per-request concurrent-query fan-outs (mirror Pluto mapWithConcurrency); pre-flight named-prepared-statement check (txn mode drops them). 3-PM consensus bs-mql6kqmrm6j, Venus=reference (already on pooler). One-env-var + cron carve-out, reversible.

MARS-145 mars Done high

Stage solo-ayudarg agent: config diet + auditsolo one-shot + Class-A push-gate + sibling clone + knowledge-file

AYUD-112 ayudarg Done high

Server-error email from instrumentation.ts onRequestError never delivers (8x SMTP ETIMEDOUT since 2026-06-10; SMTP healthy, instrumentation-hook teardown timing)

PLUTO-161 pluto Done high

CR 33: 10 items de Diagnóstico clínico radiográfico (obligatorios): 1) Enfermedad periodontal avanzada; 2) Fractura dentaria vertical/horizontal; 3

PLUTO-259 pluto Done high

getSolicitudAnalysisContext: identity-match false negative — claimed 'no users row' for solicitud aa4ff295 despite pre-existing user veronica1994rios@gmail.com

PLUTO-385 pluto Done high

Post-/compact re-register unreliable for some cc agents (intermittent) - bootstrap silent-exit on hub blip + shim path + .agent-name fallback

MSG-223 llmmsg-srv Done high

llmmsg-srv team restructure: PM + support agent + on-demand coders; rename llmmsg-srv-cc->hub-llmmsg-srv-cc, retire llmmsg-srv-ca (spec+plan in docs/superpowers/)

MSG-130 llmmsg-srv Done high

Unify JTP and Ayudante: identical roles app-wide (caps + UI)

MARS-281 mars Done high

Admin: assign roles UI missing

AYUD-80 ayudarg Done high

share global ~/.claude rules to venus via /gdrive/temp/

MARS-280 mars Done high

eq (Elazar Questions) — decoupled-from-bwi pending-Qs tracker; 3-PM consensus + Elazar approval pm-mars-cc-18608/18632; venus stub in flight

MARS-289 mars Done high

Admin UI notification for new /sumate solicitudes (currently only email to Belén)

AYUD-79 ayudarg Done high

Students may edit submitted prácticas until docente clicks Aprobar/Desaprobar

MARS-282 mars Done high

Email migration notice: 31 non-standard-email users

MARS-275 mars Done high

Add 'Rectificar' approval state: docente-only, comment required, email + in-app notification to student

MARS-283 mars Done high

Solicitar información button: add operator message field + ensure send to user works

MARS-284 mars Done high

Provision access: María Miyauchi Harumi + Daiana Pilla (Comisión F)

MARS-285 mars Done high

agent-local context-warn statusLine hook (clone pluto reference at 100k/150k/200k/300k)

MARS-276 mars Done high

Backup pluto DB + delete practicas test data — testing phase ended, client wants test data wiped. Order: (1) pg_dump backup to /gdrive/backup/, (2) delete practicas test rows + dependent FKs, (3) report counts.

PLUTO-388 pluto Done high

evolutiva-commons: 'do not defer' rule (do now or open WI; never silent defer)

MARS-273 mars Done high

drop dangling icloud auth row eb5854c8 (Luana)

MARS-272 mars Done high

ship per-app /api/internal/send-email + drop deferred lockdown commons rules

MARS-271 mars Done high

count users with non-gmail/non-pensanta/non-institutional login emails + email all

MARS-270 mars Done high

mergeUsers: set loser.surrogateOfUserId=keeper at soft-delete (audit BLOCK)

MARS-269 mars Done high

Luana Lazarte: update existing user email+authId to gmail, close pending accessRequest

MARS-266 mars Done high

merge users Felicitas Cava: A=81694c6a (old, dangling auth) → B=0872484c (active Google OAuth)

MARS-265 mars Done high

Lock sqlite mirror scope to lookupOptions; drop PII; gitpush-pre mtime lint

MARS-264 mars Done high

Investigate Supabase MCP permission errors when creating views — db-mars-cc fell back to psql (db-mars-cc-20437). Likely missing GRANT for MCP role. Affects all 3 projects.

MARS-291 mars Done high

Force-clear stale Supabase auth cookies on next visit (one-shot reset)

AYUD-83 ayudarg Done high

Hide email+password login UI (Google-only), keep code path intact for easy revert

AYUD-82 ayudarg Done high

fix /administrar/docentes/[id] RSC crash (digest 1647002915, eventId c3cd6e9c)

MARS-261 mars Done high

P1: Vercel git integration silent — 22h+ backlog, no auto-deploy since b18312b (2026-05-15-0258)

PLUTO-411 pluto Done high

Soft-land all RSC errors; trace digest 4277881123

MARS-260 mars Done high

/notificaciones page has dead/old paths leading to 404 — audit links, fix or remove the page

MARS-258 mars Done high

Welcome email on user creation: createAlumnoWithUser (and other create-user surfaces) sends Spanish welcome email via existing nodemailer mailer.ts; fire-and-forget, graceful no-op if SMTP not configured

MARS-257 mars Done high

P0 BUG: /practicas/<uuid> 500 crash on detail view — broken for all approvers. researcher report agents/researcher-pluto/reports/ux-audit-2026-05-16.md item 1.

PLUTO-416 pluto Done high

Bedel can create alumno from /administrar/alumnos: full form on-page (pulldowns), no popup, no two-step user-then-role

MARS-256 mars Done high

Lane B: /administrar/usuarios/[id]/editar — unified user-edit page mirroring crear-form (kind picker + identity + roles + comisión + JTP + ayudante + periodo); replaces modal-in-grid + read-only detail pages

MARS-253 mars Done high

Update /sumate success copy: 'Gracias por tu interés en sumarte. Te contactaremos pronto en relación a tu solicitud. ¡Hasta pronto!' (remove old 'Datos enviados' header + old text)

AYUD-73 ayudarg Done high

Lane A: /practicas pagination + filters + drop HARD_LIMIT — wire existing filter-bar/pagination/search-input components, URL-synced searchParams, default pageSize=50, server-pushed filters

MARS-249 mars Done high

Calles: Capital streets missing in picker (e.g. Av. Rivadavia not found)

AYUD-77 ayudarg Done high

Missing 'Yo me ocupo' button somewhere — client report

AYUD-78 ayudarg Done high

Add app version badge to /sumate page

AYUD-71 ayudarg Done high

Remove real .env.local and .env.production from disk (secrets-at-rest); replace with .env.local.sample placeholder per commons

AYUD-69 ayudarg Done high

UX nav: mover Admin al pulldown; Panel pill siempre visible en barra superior

AYUD-86 ayudarg Done high

Support ticket #1: Maria Azul Etcheverry cannot submit practica at /practicas/nueva - reports 'filled all required data + radiographs but it will not let me send it' (2026-05-20 17:47 -03). Investigate, reproduce, fix+push if code bug, else explain cause + what is missing.

MARS-324 mars Done high

Sumate: send Gmail SMTP from soporte-ayudarg@pensanta.com to belengalvan@catedraldelafe.org (replaces Resend path)

AYUD-68 ayudarg Done high

practica-form client-side required-field validation: on submit, if required fields empty, block submit, scroll to first missing field + show clear toast (no server round-trip)

MARS-326 mars Done high

Sidebar link directo a /admin/inactividad (Puia lo necesita visible, no enterrado en /admin dashboard)

PLUTO-355 pluto Done high

Support ticket #2: Jose Santiago Gonzalez has alumno profile but reports he is a docente - role misconfigured

MARS-327 mars Done high

Support ticket #3: Juana Frega gets an error when submitting a practica at /practicas/nueva

MARS-328 mars Done high

supportTickets close-and-notify: closing a ticket in /administrar/soporte emails the user the resolution text

MARS-329 mars Done high

ABM de prestaciones por entidad

AYUD-31 ayudarg Done high

global ~/.claude/CLAUDE.md HOT/COLD split to cut per-turn token load fleet-wide

EVO-44 evolutiva Done high

Chip UX fix: contrast/selected/unselected/category tints on needTag chips

AYUD-66 ayudarg Done high

Speed Insights removal — drop @vercel/speed-insights import from src/app/layout.tsx + uninstall package (Pluto-driven 11K/10K event overage)

PLUTO-363 pluto Done high ↳ EVO-36

gitpush.sh / post-push hook: verify Vercel deploy success before declaring done (3 commits silently failed type-check on prod)

AYUD-65 ayudarg Done high

KPI row collapses to column on mobile — should stay side-by-side (Total/Sin calificar/Aprobadas/Desaprobadas)

MARS-225 mars Done high

Cross-review WI 281+282+325 (recursos filters)

AYUD-63 ayudarg Done high

Backfill organizations.communeId — only 3/43 active orgs have it populated

AYUD-62 ayudarg Done high

RecursosView: replace hardcoded NEED_FILTERS with data-derived categories (same root cause as WI 280)

AYUD-61 ayudarg Done high

Cross-review WI 280 (mapa filtra por necesidad fix)

AYUD-60 ayudarg Done high

UI/UX cohesion audit — pre-client meeting deep-dive: per-role flows, surrogate-account removal, cross-surface comisión+jtp+ayudante consistency, IA consolidation

MARS-246 mars Done high

└─ Twin-route in-place UI unification (deferred from WI#213)

MARS-255 mars Done

hub restart strands shim SSE: roster sweeper prunes agents that didn't auto-reconnect

MSG-119 llmmsg-srv Done high

lezama: add systemd restart guard for hub + fix autossh SIGTERM regression

MSG-114 llmmsg-srv Done high

PM seat lost on compact: pruneStale strips recorded-PM ARO membership

MSG-219 llmmsg-srv Done high

lezama watchdog: email notify-elazar.sh when zombie-fix fails

MSG-115 llmmsg-srv Done high

channel-rule audit+install scripts (fleet rollout)

MSG-169 llmmsg-srv Done high ↳ MSG-149

venus: whey-side watchdog for zombie detection (parallel to lezama watchdog)

MSG-116 llmmsg-srv Done high

tunnel down fallback alert: SSH + notify-elazar.sh when llmmsg unreachable

MSG-117 llmmsg-srv Done high

Security: getMatchCandidates server action missing requireAdmin() guard

VENUS-73 venus Done high

whey gdrive-bisync broken (aborting every ~30s, 'cannot find prior Path1/Path2 listings') since ~2026-05-16: evolutiva/venus/odaia backups local-only in /gdrive, not reaching Google Drive; needs rclone --resync recovery (path2/local-wins) on Elazar GO

OPS-77 agent-ops Done high

/administrar/usuarios/crear: dedicated form replacing modal/inline 'Agregar usuario' — kind picker (teacher/student/other) with contextual selects

MARS-243 mars Done high

bwi Tier 1 enhancements: add guard, mine banner, rot, status notify, evolutiva doc

OPS-38 agent-ops Done high

Cross-review WI 284+285 (logo responsive + ocupado→tomada rename)

AYUD-55 ayudarg Done high

lezama hub tunnel stale-bind restart thrash (llmmsg-lezama-tunnel.service, counter 3124)

MSG-193 llmmsg-srv Done high

.llmmsg-aros -> .aro consolidation: one per-agent ARO file (move aros[] into .aro, delete .llmmsg-aros, repoint resolve-aros.sh + bootstrap)

MSG-220 llmmsg-srv Done high

└─ ccs.sh: stop writing now-dead .llmmsg-aros + fix stale 'canonical' source comment (#631 phase-4; must precede phase-3 delete or files regenerate on launch)

MSG-224 llmmsg-srv Done

P-2: email-domain allowlist gate + deactivate 8 non-allowlist users (db-pluto-cc-30353/30429)

PLUTO-426 pluto Done high

P1: add wi doctor integrity checks

BSQ-3 basquet Done high

Eliminar datos (GDPR): opción de borrado por protección de datos

AYUD-30 ayudarg Done high

Asistente picker en /practicas/nueva no permite seleccionar — cliente reporta no poder cargar ayudantes/asistentes

PLUTO-222 pluto Done high

gdrive bisync down since ~May 16 (whey<->venus) — venus agents loading 2-week-stale evolutiva shared .md rules (missing WI#450 + A+B + any ratified change since May 16); fleet correctness/drift risk. Fix = repair rclone bisync (maintainer territory), then re-measure per-agent preload vs true current files.

EVO-43 evolutiva Done high

Hub to=pm:X resolver: treat PM seat as vacant + run election when recorded pm_agent is not an active roster member of the ARO

MSG-131 llmmsg-srv Done high

cc-context-monitor: forced auto-/compact via bootstrap hook (over-budget agents ignore nudges)

MSG-195 llmmsg-srv Done high

Hub prune-on-write deletes roster row -> cursor reset to 0 -> full-history message redelivery on reconnect

MSG-197 llmmsg-srv Done high

Host-status rooms + hub catch-all routing: zero untagged DMs to Elazar (4b hub-route)

MSG-222 llmmsg-srv Done high

chat-duo: remove Directory window/panel from sidebar (Elazar 2026-05-22-23:07)

MSG-134 llmmsg-srv Done high

Shim auto-register on startup from .agent-name; relaunch system-prompt covers -c continue (not just /clear/compact) - prevents post-relaunch poll-loop silence

MSG-135 llmmsg-srv Done high

P-3: assign 'bedelia' rol to lorena.salomone (asesora pedagógica per client; needs full-view + change comisión cap). per Elazar -31043

PLUTO-432 pluto Done high

aro_leave-on-idle rule: llmmsg-protocol.md ARO-Membership canonical + per-agent CLAUDE.md one-liner (self-leave non-essential AROs when last task done, stay registered, rejoin on assignment)

MSG-212 llmmsg-srv Done high ↳ MSG-210

Perfil: mostrar/aclarar tipo de permiso del usuario

AYUD-28 ayudarg Done high

Cross-review WI 283 (new /necesidades/nueva create flow)

AYUD-56 ayudarg Done high

Columna 'bien' en /datos renombrar a 'necesidad'

AYUD-27 ayudarg Done high

Approval flow crea alumnos huérfanos: approveAccessRequest no inserta studentAssignments — orphan estudiantes no pueden cargar prácticas porque getClassmates retorna vacío. Fix: requerir comisionId+jtpId al aprobar (mismo patrón que /admin/usuarios manual create) e insertar studentAssignment en la misma tx. Backfill: 10 alumnos sin asignación en periodo actual.

PLUTO-345 pluto Done high

Comb entire app for raw UUID/ID shown in UI instead of label; fix all (reported on /informes JTP/Ayudante column)

MARS-335 mars Done high

evolutiva-backup down for mars+pluto: Supabase removed legacy db.<ref>.supabase.co direct hostnames (NXDOMAIN) - DSNs need pooler connection strings

OPS-67 agent-ops Done high

Reemplazar 'acción' por el nombre real de la acción en UI

AYUD-26 ayudarg Done high

Status 'ocupado': qué significa? aclarar o renombrar

AYUD-25 ayudarg Done high

Practicas list+detail page-ready views (P1 perf)

PLUTO-362 pluto Done high

Date Handling commons + fix periodos-grid.tsx + periodos/[id]/page.tsx TZ anti-pattern

MARS-287 mars Done high

viewAllPracticas cap re-ship: bedel role gets cross-comision /practicas read-only

MARS-288 mars Done high

Phase 2: hub aro_join validation + PM-election fallback + aro_list role surface

MSG-175 llmmsg-srv Done high ↳ MSG-174

Logo deforme, no responsive

AYUD-24 ayudarg Done high

No permite cargar necesidades

AYUD-23 ayudarg Done high

Recursero: filtro por necesidad no anda

AYUD-22 ayudarg Done high

Recursero: filtro por comuna no anda

AYUD-21 ayudarg Done high

Mapa no filtra por necesidad

AYUD-20 ayudarg Done high

Olvidé clave

AYUD-46 ayudarg Done high

Sumate no anda

AYUD-17 ayudarg Done high

nw-agent launcher template: haiku + --effort low + autoCompact + loop self-monitor rule

OPS-37 agent-ops Done high

TRANSPORT.md SSOT: per-host transport, fallback, watchdogs, runbook

MSG-150 llmmsg-srv Done high ↳ MSG-149

llmmsg-doctor CLI: one command, transport+latency+last-good+units

MSG-151 llmmsg-srv Done high ↳ MSG-149

host_probes table + bootstrap-probe (every session start posts transport snapshot)

MSG-152 llmmsg-srv Done high ↳ MSG-149

Pin hub registrations for cc-context-monitor-{whey,venus,lezama}

OPS-44 agent-ops Done high

Bug: Pendiente hace anchored to wrong date on practicas

MARS-220 mars Done high

UX /necesidades/(id): Estado+Prioridad en misma línea; botón Yo me ocupo debajo de Estado

AYUD-84 ayudarg Done high

UX /necesidades/(id): mostrar 'Tomada por [nombre]' junto al botón Liberar cuando estado=En Curso

AYUD-89 ayudarg Done high

memory-budget Layer 1: gdrive-canonical 'Memory Budget' directive + footprint-check threshold (thread 3); incl. maintainer-agents.md memory-lint ownership section (thread 4)

OPS-48 agent-ops Done high

v2.7 over-cap remediation: parked over-cap agent still in its AROs gets woken into a full-context read-turn by every ARO fan-out (~30-60s) — park does NOT stop the burn. Fix: over-cap sequence becomes ss -> DM handoff to PM -> aro_leave ALL AROs -> idle. Edits: v2.6 over-cap DM text in cc-context-monitor.sh (bin-whey-cc) + wind-down line in global directive (nw-whey-cc). Fresh bin-whey-cc takes alongside thread 2

OPS-50 agent-ops Done high

memory-lint §12/§9 vs global CLAUDE.md: per-agent identity + dates in memory/ — Elazar decision

OPS-52 agent-ops Done high

Trim auto-loaded context for mars/evolutiva sessions: evolutiva-commons.md (5.3k) + mars-commons.md (3.6k) + mars/CLAUDE.md (2.1k) + mars MEMORY.md (3.8k) = ~14.8k. Target <=8k total per-session auto-load. Editorial trim, Evolutiva PM executes. Detection side is WI 444 (memory-lint token alarm, 8k line). Surfaced by Elazar 2026-05-21 from a researcher-mars-cc /memory dump (~17k total).

EVO-42 evolutiva Done high

send-keys /compact watchdog in cc-context-monitor.sh: fire tmux send-keys -l /compact + C-m on cost-cap cross; pane=session_name==agent; skip mid-gitdeploy

MSG-211 llmmsg-srv Done high ↳ MSG-210

Lezama agent auto-bootstrap: cold-start agent online + AROs joined + hub-reachable with zero prompt-paste

MSG-159 llmmsg-srv Done high ↳ MSG-149

memlint-runner CLI (sh.git): scan/trim CLAUDE.md+MEMORY.md with token counts, banned-phrase rules

MSG-161 llmmsg-srv Done high ↳ MSG-160

Cátedra branding sweep: APP_CATEDRA_NAME env + email subject prefix [Endodoncia FOUBA]

MARS-277 mars Done high

claude-md-trim.sh + trim-cwd-claude-md skill: LLM-driven compression wrapper (git-checkpoint before rewrite)

MSG-162 llmmsg-srv Done high ↳ MSG-160

chat-duo: render origin_aro-tagged messages in their ARO room, stop spawning a room per DM

OPS-56 agent-ops Done high ↳ OPS-54

Repoint chat-duo Elazar Pending panel to v2 eq source

MSG-123 llmmsg-srv Done high

Phase 3: launcher .aro v2 parser (ccs.sh/ccs-tmux.sh/bootstrap)

MSG-176 llmmsg-srv Done high ↳ MSG-174

Audit quick HIGH wins — solicitudes N+1 (vAccessRequestsForReview LATERAL, 500q/load to 1) + analyzeModeOn=false (stop imageUploadAnalysisEvents +600/day growth) + practicas/[id] serial-await to Promise.all (mirror mi-cursada sibling).

MARS-41 mars Done high

KPI report generator (phase-1 read-only PG script)

BWI-4 basquetwi Done high

No dual-write: cutover = flip reporter (netreport.sh) to pg + drop sqlite writes after parity. Per Elazar 2026-06-06.

ONEDB-2 one-db Done high ↳ ONEDB-1

└─ GATE#1 step iv: drop sqlite writes in 6 collectors after readers repointed+proven — pg-primary, JSONL-spool = resilience cache (Elazar: NO sqlite write-ahead). cc-context-monitor keeps LOCAL rolling cache for its own over-cap loop + pg mirror

ONEDB-11 one-db Done high

Ship wi-web browsable UI on bwi.pensanta.com:8765 (HTTP-mode -> wi-http -> PG, systemd Restart=always)

BWI-3 basquetwi Done high

agentteamlaunch.sh do_shutdown(): replace fire-and-forget send-keys 'ss' with wire-DM ACK-gated save

MSG-6 llmmsg-srv Done high

Ayudante grading-responsibility = NONE (Elazar policy B): ayudantes must NOT count toward sin-calificar NOR receive grading nags. getJtpStats pending/sin-calificar axis -> JTP (assignedTeacherUserId) ONLY (drop ayudante CROSS JOIN from that axis); weekly-kpi grading nags -> JTP only; drill auto-follows getJtpStats. Acceptance: Belén Montoya bcd98024 (pure ayudante) shows 0% sin calificar; no ayudante gets a grading nag. Fixes both Belén-100% + Florencia-nag complaints.

MARS-23 mars Done high

└─ Clean mislabeled appEvents: remove form-validation toast logger (toast/error-shown, level=error noise) + recategorize sa-teachers-cascade category admin→system

MARS-27 mars Done high

└─ Re-add ayudante notify at práctica creation as INFORMATIONAL (new type practicaAyudanteAsignada, in-app only, no email); JTP keeps grading practicaToReview+email. Elazar follow-up to MARS-23/25 — notify whoever was PICKED as JTP/ayudante, nobody else; no grading semantics for ayudante.

MARS-26 mars Done high

└─ Notifier de-nag (MARS-23 follow-up): notifyPracticaCreated (practicas/nueva/actions.ts:960-968) sends in-app 'Nueva práctica para revisar' (type practicaToReview) to BOTH JTP and ayudante via graderIds=dedup([jtpId,ayudanteId]). Drop ayudanteRecipientId -> notify JTP only. This is Florencia's original nag path (in-app); email already JTP-only. Correct under policy B (ayudante not a grader).

MARS-25 mars Done high

└─ weekly-kpi digest: stop nagging ayudantes for ungraded practicas (JTP-only pending per MARS-23 Elazar ruling) — REQUIRED before Monday 06-08 cron

MARS-24 mars Done high

└─ Block JTP unassign-to-null in /alumnos dropdown: remove the empty '-' option for the JTP (assignedTeacherUserId) column so a student's JTP can only be reassigned to another teacher, never cleared to none. KEEP '-' for the ayudante column (ayudante is optional). Add server-side guard in reassignTeacher rejecting null when field=assignedTeacherUserId.

MARS-29 mars Done

└─ /practicas: add visible teacher filter scoped to JTP-role only — show prácticas where the selected teacher is the JTP (assignedTeacherUserId, live), exclude prácticas where they're the ayudante. Surface the MARS-23 JTP-only ?jtp= drill as a first-class filter control.

MARS-28 mars Done

JTP/Ayudante live-vs-snapshot: reporting/drill/notifications must read CURRENT assignment not creation snapshot; null same-person backfill (ayudante=jtp); add both-roles guard

MARS-21 mars Done high

Post-VENUSINF systemd-client bearer sweep: applog-pull/listen + errscan inject LLMMSG_HUB_BEARER (hubPost hardcoded bearerless, applog-pull.ts:121) + per-instance bearer env across hosts - restores fleet alerting (applog-pull@pluto unauthorized live)

MSG-42 llmmsg-srv Done high

EVO-12 regression: captureServer404 in not-found boundary fires on EVERY page view (false page_not_found rows fleet-wide)

EVO-19 evolutiva Done high

└─ mars EVO-19 leg: two-sink fix; by-route 20x/login=1 floor likely higher under UA-tag; ship on body=(a) confirm

EVO-23 evolutiva Done high

└─ venus EVO-19 leg: two-sink fix (pull capture out of not-found boundary); corrected probe shows 200 GET /login wrote action=404/level=error/alert=true row firing real alert+email; demonstrated pollution -> ship

EVO-21 evolutiva Done high

└─ venus classifier-parity follow-up: add referer-discriminator to tierForNotFound so genuine-bad-routes tier stricter (ayudarg already has it); venus currently OVER-escalates - phantoms classified error/alert=true. OPTIONAL low-pri polish, NOT a fix: two-sink EVO-21 already removes the phantom source so this only affects FUTURE real bad-route tiering. Defer per pm-venus scope decision (do not fold into EVO-21 push).

VENUS-34 venus Done someday

└─ ayudarg EVO-19 leg: pull captureServer404 out of not-found boundary; two-sink (catch-all + [id] throw-site capture); verify valid routes stop writing page_not_found

EVO-20 evolutiva Done high

Post-/compact idle-agent wake: shim re-emit + cursor-on-drain (fix A+B)

MSG-4 llmmsg-srv Done high

Bug: PM kind=brainstorm in active ARO opens sibling session instead of being rejected

MSG-71 llmmsg-srv Done high

soporte/actions.ts: (1) close+notify race can double-email a user — make close conditional UPDATE…RETURNING, email only the transitioned row; (2) support update returns ok when zero ticket rows updated — treat empty RETURNING as not-found. Codex audit, Elazar-greenlit 2026-06-30. Investigate-then-fix; audit cross-review (notify/email path).

MARS-365 mars Done high

Option A: drop domain gate at login callback + allow non-allowlisted domains on access-request/approval path (Elazar decision 2026-07-02)

PLUTO-465 pluto Done high

hub: enforce ARO membership on lane-tag (1a) + fan-out (2a)

MSG-258 llmmsg-srv Done high

Rectificar-reminder mailer: bearer-gated /api/internal/rectificar-reminder, per-student email listing their rectificar prácticas as /mi-cursada/[id] links, sample/live-gated (confirm-token + cohort===39), live routes through emailOutbox (454-self-heal). Elazar directive 2026-06-30.

MARS-366 mars Done high

Soporte parity P2: server actions postSupportReply(staff) + closeAndNotify — reuse P0/PLUTO-203 shared email leg (sendAdminEmail, verified soporte-evolutiva-pluto@ From, idempotency, rate-limit); KEEP manageSupport-EXCLUSIVE gate (no fullAccess/manageUsers/adminConsole escape). Audit design-ping on email+gate before impl.

PLUTO-218 pluto Done high

Floating 'Ayudar' button overlaps/covers the pagination 'next' button on /practicas. Reposition (move up / adjust offset or z-order) so it no longer obscures the paginator controls. Elazar 2026-06-30. Reversible UI.

MARS-364 mars Done high

404-capture path exhausts Postgres connection pool during scanner floods (EMAXCONN)

MARS-346 mars Done high

Informes jefe-filter narrowing: KPIs/practicas count + roster must narrow to selected JTP (fn_getInformesBundle filterJtpIds param + page wiring) — Elazar video feedback 2026-07-02

PLUTO-467 pluto Done high

'Pendiente hace' column sorts as string not numeric (e.g. 10 days ordered before 2). Sort by the underlying numeric/duration value, not the formatted label. Likely /practicas. Elazar 2026-06-30. Reversible.

MARS-363 mars Done high

CR 7: Renombrar a Complicaciones Intraoperatorias

PLUTO-233 pluto Done high

/informes JTP-Ayudante aggregate contradicts drilldown: shows 0% graded/pending for a teacher who is up-to-date (Florencia Neput, uuid bcd98024); wrong grading nags sent. Suspect getJtpStats SA-gated graded axis (MARS-5/inert-oracle root cause)

MARS-12 mars Done high

Hub command /audit_cli: Elazar-only, sends channel-discipline self-audit prompt to last-messaged agent in the ARO

MSG-229 llmmsg-srv Done high

Weekly progress digest email → HTML table (Gmail-legible)

VENUS-83 venus Done high

Hub bug: status sender-map hijacks targeted scrp-* DMs. scrp-memsweep-venus matches STATUS_EMITTER_RE (hub.mjs:1815) so a deliberate kind=dm to a specific agent (nw-venus-cc) gets origin_aro stamped aro:hosts-status (1878) + recipients overwritten to the room's 3 nw members (hybrid block 1964-1967). Fix: skip the smap stamp+hybrid overwrite when the send is a deliberate DM to a single explicitly-addressed registered agent (else-branch recipients=[to] at 1937-1940). Keep smap routing for to=all/aro:hosts-status/Elazar-catchall paths (fire-and-forget telemetry). Verify: memsweep DM to nw-venus-cc delivers to ONLY nw-venus-cc; a hostmon-style to=all status still lanes to hosts-status. Bounce coordinated via me (pm).

MSG-254 llmmsg-srv Done high

EFFAUDIT: 2026-07-02 fleet efficiency audit (Elazar brainstorm bs-mr334l5yybu) - dead tunnels/ZT/whey-pointers/keep-alives purge + hub/CDW micro-optimizations

MSG-232 llmmsg-srv Done high

└─ whey+lezama: retire lezama-tun L3 tunnel both sides (whey initiator + lezama /etc/systemd/system/lezama-tun.service; coordinate with nw-lezama-cc) per Elazar decision

MSG-246 llmmsg-srv Done high

└─ whey: delete dead reverse-tunnel units llmmsg-lezama-tunnel.service + llmmsg-venus-hub-localfwd.service (disabled/inactive, superseded by direct HTTPS) + orphaned llmmsg-lezama-zombie-sweep.sh if unreferenced

MSG-233 llmmsg-srv Done high

└─ DECISION(Elazar): retire whey<->lezama L3 tunnel (lezama-tun.service) + whey-vpn-keepalive? Elazar stated nothing whey<->lezama is needed; keepalive also heals GCABA VPN

MSG-244 llmmsg-srv Done high

└─ lezama: tear down dead llmmsg-hub-tunnel.service (ssh -L 9703 to venus; direct HTTPS is live path)

MSG-243 llmmsg-srv Done high

└─ whey: remove dead lezama-watchdog trio (llmmsg-lezama-watchdog svc+timer, supervisor svc+timer, alert svc) + backing scripts lezama-watchdog.sh/lezama-zombie-fix.sh - PM authorizes (llmmsg lane), execution delegated

MSG-234 llmmsg-srv Done high

└─ sh.git: ZT dead-code sweep - llmmsg-doctor.sh zerotier-cli + 172.27.* branch, whey/lezama daemon-probe ZT branches, ccs.sh ZT-fallback hint + stale autossh-watchdog comment

MSG-236 llmmsg-srv Done

└─ whey: retire stale llmmsg-srv.service unit (hub moved to venus) + purge dangling llmmsg-zombie-ca-detector.timer

MSG-235 llmmsg-srv Done

└─ hub.mjs: fix HOST_GUESS map (pm/coder-llmmsgsrv + coder-chatduo now on venus) + drop legacy whey aro_config seed tiers

MSG-238 llmmsg-srv Done

└─ venus: purge zerotier-one package (unit disabled but package installed; ZT retired fleet-wide)

MSG-242 llmmsg-srv Done

└─ venus: retire claude-backup.timer (redundant vs venus-state-backup-daily)

MSG-240 llmmsg-srv Done

└─ CDW: consolidate 4x60s client intervals into one 60s /api/bootstrap tick + strip dead bearerless-whey-hub fallback in server.mjs (coder-llmmsgsrv-cc adds hub-side snapshot endpoint if needed)

MSG-237 llmmsg-srv Done

└─ whey: retire llmmsg-whey-daemon-probe wholesale - service+timer+/etc registry (nw-whey) + remove llmmsg-whey-daemon-probe.sh from sh.git (bin-whey); entire watch-set is dead, timer already inactive - PM approved

MSG-245 llmmsg-srv Done

└─ whey: constrain whey-vpn-keepalive.timer to business hours (Mon-Fri daytime) per Elazar - convenience reconnect only

MSG-247 llmmsg-srv Done

└─ venus: stretch llmmsg-reconcile.timer 10min->30min (safety-net only) - approved by PM

MSG-241 llmmsg-srv Done low

└─ docs: mark zt_* status-probe fields deprecated (keep columns for history)

MSG-239 llmmsg-srv Done low

wi/wi-web: harden against SQLite-direct fallback post-cutover (stub recreation)

BWI-34 basquetwi Done high

404-capture: demote vuln-scanner paths to bot-probe security branch (stop false-paging). GAP: KNOWN_TOP_SEGMENTS fallback keys on first segment only, so any scanner path UNDER a legit top segment (/admin/.git/config, /informes/.env, /practicas/wp-login.php, *.php) inherits own-route -> genuine-bad-route -> alert:true page. No scanner/dotfile denylist exists; X-Audit-Probe demotion only catches our own synthetic probes. FIX: add scanner-path guard BEFORE the classifyOrigin KNOWN_TOP_SEGMENTS fallback (not-found-capture.ts ~L98 pre-filter, or classifyOrigin before not-found-classify.ts:88), demote UNCONDITIONALLY to level=info/category=security + rate-limit like existing bot-probe branch (capture.ts:108-118). Patterns: (a) any path segment matching /^[.]/ EXCEPT .well-known; (b) .php suffix; (c) token denylist wp-admin/wp-login/xmlrpc/phpmyadmin/vendor/cgi-bin/actuator. Triggered by scanner hit /admin/.git/config 2026-06-29 03:38Z id b5625a54.

VENUS-80 venus Done high

/practicas pagination defects (visible at ?state=rectificar): (1) pagination is off/incorrect; (2) the 'show N records' page-size selector is missing. Investigate the list pagination + page-size control, fix both. Elazar 2026-06-30. Reversible UI.

MARS-362 mars Done high

Auto-send welcome email on app-driven access grant/reactivation/login-email-change (no agent intervention)

PLUTO-203 pluto Done high

ccs.sh: persisted LLMMSG_AGENT in shared per-cwd .llmmsg-env overrides .agent-name — cross-agent launch from same cwd poisons resident agent identity

MSG-84 llmmsg-srv Done high

applog-listen hub-eviction recovery: auto re-registration (periodic 5min + 400-triggered immediate). Hub restart evicts listener from roster, re-enqueue loops on 400 until manual bounce. Fix once, redeploy venus/mars/pluto. Proof: hub restart then error delivers real-time w/o manual restart

MSG-82 llmmsg-srv Done high

Whey host-plane DM-leg gaps: clamav EnvironmentFile+ORIGIN_ARO, context-monitor ORIGIN_ARO+script rename, db-size-monitor ORIGIN_ARO

MSG-81 llmmsg-srv Done high

B5 per-student stats page w/ charts (today global-only) — HIGH

VENUS-55 venus Done high

B4 per-student quantitative totals on filter (35 como operador, per-sede) — HIGH client pain

VENUS-54 venus Done high

bwi writer migration whey→venus (PG + wi-http authoritative on venus; whey → backup-only)

BWI-11 basquetwi Done high

└─ CUTOVER: whey write-freeze + graft whey's 9 post-fork uniques into venus (venus=authoritative)

BWI-15 basquetwi Done high

└─ venus PG: create db=basquetwi + role basquetwi + grants (greenfield)

BWI-12 basquetwi Done

└─ repoint ZT/loopback clients: BWI_HTTP_BASE (wi CLI, wi-web) + /utcp base whey→venus

BWI-16 basquetwi Done

└─ validate end-to-end: smoke read+write per key + all consumers reachable post-cutover

BWI-18 basquetwi Done

└─ venus: deploy wi-http.service (code + /etc/bwi-http.env → venus-local PG + reissued keys)

BWI-13 basquetwi Done

└─ reverse replication venus→whey backup + quiesce whey writer (backup-only)

BWI-17 basquetwi Done

CR 64: Client issues 2026-04-20 (Gabriela Sánchez + M.M. Boussebayle): root cause común = primaryRoleId SSOT desalineado con userRoles. (A) Gabriel

PLUTO-290 pluto Done high

/informes Anomalías detectadas: clickable Práctica ## + student name

PLUTO-474 pluto Done high

Hub SIGTERM shutdown stalls to SIGKILL with long-poll feature (regression from MSG-251). drainLongpolls() resolves held polls but server.close() callback only fires once ALL sockets end incl idle keep-alives, so 08:43 bounce hit systemd stop-sigterm timeout -> 4 procs force-killed (07:05 pre-251 bounce was SIGTERM->Stopped same second). Fix ready uncommitted: 1s fallback timer -> server.closeAllConnections() (Node 18.2+, ok on v24) forces shutdown ~1s regardless of open conns. Verify: next bounce journalctl shows clean SIGTERM->Stopped, no 'stop-sigterm timed out. Killing.'

MSG-255 llmmsg-srv Done high

CR 59: userRoles sin archive + sin trigger. Crear userRolesArchive (misma forma que archives CR57: archiveSeq/archiveOp/archivedAt/archivedBy/archi

PLUTO-285 pluto Done high

CR 58: practicas archive trigger es permisivo (archivedBy nullable via NULLIF). Hardenear fn_archivePracticaChange a RAISE EXCEPTION cuando app.use

PLUTO-284 pluto Done high

CR 57: Historial de Cambios real en /administrar/* (docentes, alumnos, comisiones, periodos) + /admin/usuarios/[id]. Crear archive tables con trigg

PLUTO-283 pluto Done high

BUILD spawn-agent.sh + reaper (EVO-26 productionization; Elazar greenlit 2026-06-22). One-command on-demand worker spawn (task launch-arg'd) + PTD-gated external teardown. KEY CONSTRAINTS: tmux->ccs DIRECT via tmux-ccs.sh, NO extra terminal layer (Elazar caveat; extra PID=orphan bug); full -cc agent name (bare double-registers); external teardown only (agents can't self-/exit); /unregister SINGULAR {agent:x} per call (array form returns missing_agent), clean both -cc + bare rows; TTL hang-reaper must hub-deregister; reuse per-app agent dirs; shared-tree flock for mars/pluto. Script in ~/Documents/terminal/sh/ (shared, notify bin-whey per sh.git); PMs EXECUTE, bin OWNS+versions. Inputs from venus pilot EVO-33.

EVO-34 evolutiva Done high ↳ EVO-26

CR 50: Heredia (A-Viernes y F-Sábado jtp): mail correcto es gonzalo.heredia@odontologia.uba.ar

PLUTO-276 pluto Done high

CR 49: Boussebayle (D-Lunes jtp / E-Martes adjunto) no puede ingresar: cambiar mail a maria.boussebayle@odontologia.uba.ar

PLUTO-275 pluto Done high

CR 45: Adjunto Pablo Giovacchini (viernes) no figura en DB

PLUTO-271 pluto Done high

CR 44: Renombrar anestesia: Troncular → Infiltrativa Troncular, Infiltrativa → Infiltrativa Terminal

PLUTO-270 pluto Done high

EVO-26 VENUS PILOT TEST (Elazar greenlit 2026-06-22): prove spawn-on-demand end-to-end on venus. PM spawns db+coder+audit via tmux-ccs.sh direct+launch-arg; db pulls 5 most-recent user logins; coder trivial edit (comment/line-move); audit verifies; commit via gitpush.sh; EXTERNAL teardown of all 3 (agents cannot self-/exit — reaper send-keys/kill-session + hub-deregister). Runs in aro:venus. Falsifiable proof: 5 logins + diff + audit verdict + commit sha + 3 confirmed deregistrations.

EVO-33 evolutiva Done high ↳ EVO-26

CR 43: Agregar tipos de anestesia: Intrapulpar e Intraligamentosa

PLUTO-269 pluto Done high

CR 41: Los ayudantes asignados a un JTP no pueden ver sus alumnos. Los ayudantes no figuran en el sistema, solo figuran los JTP. Los ayudantes debe

PLUTO-267 pluto Done high

EVO-12 not-found capture two-sink fix: pull captureServer404 out of not-found.tsx boundary; catch-all [...notFoundPath] + instrument 15 notFound() throw sites; preserve PLUTO-171 skew telemetry; subsumes PLUTO-179

PLUTO-180 pluto Done high

JTP+adjunto 'mixed' teacher roster collapses to empty: adjuntoComisionIds AND-intersected onto JTP pair-gate instead of OR-unioned. getStudentsForTeacher (src/db/queries.ts:2418-2419) + getStudentsForTeacherPage (queries.ts:2564). Any teacher who is JTP of one comision AND adjunto of a DIFFERENT comision gets 0 roster rows -> /acceso-denegado on /alumnos list + detail. Repro: Maria Boussebayle (users c231db69), JTP comision-001 (10 students) + adjunto comision-002; AND comisionId=ANY([002]) nukes her 10 JTP students. Fix: turn the adjunto filter into a DISJUNCTIVE branch (mirror getPracticas:371-372 OR-union; keep JTP pair-gate per PLUTO-77). Auth/identity verified clean (db); audit cause-confirmed. (Renumbered from the cancelled PLUTO-455 which collided with the scanner commit family.)

PLUTO-456 pluto Done high

CR46: no se puede cargar personas en parques u hospitales

AYUD-96 ayudarg Done high

MARS-352 hotfix: view-as 22P02 crash — loadSessionUserById used COALESCE(supabaseAuthId, '') on a UUID column → invalid-uuid-syntax 500 on every Ver como render. Fixed with ::text cast (auth.ts:161). SHA 234bf66 v2.23.1, audit+coder cross-PASS. Sole COALESCE(uuid,'') site confirmed.

MARS-357 mars Done high

CR 21: importante: primero debe figurar cronológicamente en la carga Diagnóstico clínico radiográfico (te debo pasar los 5 items más clásicos) desp

PLUTO-247 pluto Done high

CR 20: tipo de anestesia que sea OBLIGATORIO

PLUTO-246 pluto Done high

CR 14: Varias piezas en un mismo acto operatorio VER CR3

PLUTO-240 pluto Done high

CR 12: sacar kpi de cantidad de HC porque tiene que ser obligatorio

PLUTO-238 pluto Done high

CR 11: ayudante no hace carga

PLUTO-237 pluto Done high

CR 10: Campos obligatorios en antecedentes

PLUTO-236 pluto Done high

CR 9: Agregar antecedentes personales faltantes

PLUTO-235 pluto Done high

CR 8: Campos obligatorios en complicaciones

PLUTO-234 pluto Done high

Add teacher Agustina Diamante (ayudante) — email agusdiamante@gmail.com, DNI 40382867, tel 1164371660; JTP Gonzalo Heredia, Comisión VIERNES (Elazar 2026-06-22). Verify comision+JTP+email/DNI dedup BEFORE write; user admin_manual + docente_ayudante_primera role + jtpAyudantes link

PLUTO-200 pluto Done high

CR 6: Agregar técnica quirúrgica

PLUTO-232 pluto Done high

CR 5: Agregar diagnóstico clínico radiográfico

PLUTO-231 pluto Done high

CR 3: Varias piezas en un mismo acto operatorio

PLUTO-229 pluto Done high

CR 2: Relacionar día, comisión y adjuntos a cargo

PLUTO-228 pluto Done high

Lezama telemetry repoint: DSN still targets dead whey-tunnel 172.30.0.1; decide venus-PG repoint vs retire. Step 1 (nw-lezama): test TCP 91.99.136.171:5432 from lezama (GCABA egress 80/443-only suspected). Open->repoint DSN + nw-venus pg_hba grant for lezama egress (IP rotates - needs range or hostssl). Blocked->Elazar governance call (retire lezama telemetry writes vs spool-sync) per Lezama-RESTRICTED policy. Interim: JSONL spool = no data loss; nw-lezama stops sys-check.timer if erroring hard. Also: whey pg_hba:136 dead 172.30.0.2/32 telemetry_rw line - nw-whey pulls it whichever branch wins.

ONEDB-15 one-db Done high

fn_getInformesBundle primary rosterScope CTE has the IDENTICAL adjunto AND-intersection (migration 036 ~line 65) -> mixed JTP+adjunto teacher /informes aggregates (jtpStats/comisionStats/KPIs) break the same way as PLUTO-456. The fn's RANKING sub-scopes are already OR-correct; only the primary rosterScope CTE needs the adjunto branch turned into an OR-union mirroring the ranking-scope. db-lane migration (CREATE OR REPLACE fn). Sibling of PLUTO-456 (coder fixed the TS query side: getStudentsForTeacher/Page + getTeacherKpis). authz-scope predicate -> audit pre-apply review before psql. Surfaced by coder-pluto-cc.

PLUTO-457 pluto Done high

Práctica JTP should reflect corrected assignment, not stale frozen snapshot (systemic: live-join vs propagate-on-edit)

PLUTO-211 pluto Done high

Data fix: revert erroneous Puia-as-JTP (7 studentAssignments + 1 práctica snapshot) + soft-delete Puia comisionJtps pairs (all 6)

PLUTO-210 pluto Done high

applog-listen rail robustness: IPv4 force + catch-up + heartbeat

EVO-5 evolutiva Done high

Add ARO-context tag on DM sends so multi-ARO senders route correctly

MSG-111 llmmsg-srv Done high

deletedBy+deleteReason on all soft-deleted tables + forced-motivo delete dialogs (shared softDelete helper)

PLUTO-215 pluto Done high

CR-practicaComentarios: comments on prácticas

MARS-212 mars Done high

MCP shim identity-resolution hardening (surfaced by ayudarg pm split: session sent as pmmain-ayudarg-cc despite LLMMSG_AGENT=pm-ayudarg-cc). Two defects in llmmsg-srv-mcp.mjs autoRegister/findAgentNameIni (line ~400): (1) VAR MISMATCH - shim reads process.env.LLMMSG_AGENT_NAME, but ccs.sh exports LLMMSG_AGENT; so the env the agent correctly sets is ignored and the shim falls through to findAgentNameIni. Fix: read LLMMSG_AGENT (align with ccs.sh) as the primary source, same as the MCP register tool honors. (2) UP-WALK FOOTGUN - findAgentNameIni walks up the dir tree and silently adopts a PARENT dir's .agent-name that names a DIFFERENT agent (ayudarg-com-ar/.agent-name cc=pmmain-ayudarg-cc) when the agent's own local .agent-name is absent/quarantined. Fix: stop the walk at the agent-folder boundary, or refuse a parent .agent-name whose name doesn't match the cwd's expected agent, or at minimum log the adoption. Net: env-honored identity must win over an ancestor file. Verify: a session with LLMMSG_AGENT set + no local .agent-name registers+sends under LLMMSG_AGENT, never an ancestor name.

MSG-256 llmmsg-srv Done high

UX /admin/usuarios: page looks bad — visual cleanup (Elazar report 2026-06-12). CR32 restyled buttons but page reads as broken/ugly. proxy visual capture first, then coder fix. Mobile-first.

AYUD-13 ayudarg Done high

Vercel edge-request cost: kill <Link> prefetch fan-out into force-dynamic routes (Mars was 42.6% of 1M Pro cap)

MARS-104 mars Done high

SECURITY: isActive=false students NOT blocked — auth/callback + render path lack isActive gate; disabled+roled user with live session loads app

PLUTO-149 pluto Done high

wi mutators: echo resolved ref+title and warn/refuse on cross-project target

BWI-19 basquetwi Done high

feat(monitoring): venus LEG-1 — instant critical-error email on uncaught 500 (instrumentation.ts onRequestError -> direct in-process SMTP, DB-independent, in-memory 1/route/10min throttle, never-throw + native sendOutboundEmail outbox fallback; recipient=env WORK email). Per frozen fleet error-alerting standard bs-mqn8ogqjpze/bs-mqn8vka8iky.

VENUS-26 venus Done high

Trim ccs.sh --append-system-prompt to ~60 tokens: keep agent name + ARO joins + no-reregister/read_unread rule; cut wrapper path/version, hub-URL/MCP-key stack line, BWI citations

TOKENDIE-10 token-diet Done high

Deactivated students: segregate via VIEWS (visible to owning JTP + admin for reactivation, excluded from active roster) - Puia case

PLUTO-206 pluto Done high

LEG-1 harden onRequestError instant error-email: try/catch never-throw + in-memory 1/route/10min throttle; catch=log+bounded in-memory retry NOT enqueue (DB-down safe); recipient=work email env-driven not gmail

PLUTO-166 pluto Done high

Rescope whey plugins: move 5 user-scope plugins (superpowers, frontend-design, feature-dev, code-simplifier, claude-md-management) to project-scope where used

TOKENDIE-8 token-diet Done high

Hub auto-kick silent agents from ARO

MSG-99 llmmsg-srv Done high

Hub /ignore command: prefix-pattern message suppression

MSG-98 llmmsg-srv Done high

Hub: block_agent_names authoritative across poll path (MSG-16 re-insert now honors block)

MSG-257 llmmsg-srv Done high

Informes filter by jefe-de-TP returns wrong/doubled student set (cross-jefe contamination) - was working before, regression

PLUTO-70 pluto Done high

EPIC: cdw+hub seam optimization (Elazar 2026-07-02 via coder-chatduo-cc, 4-agent: coder-chatduo, coder-llmmsgsrv, pm-llmmsgsrv, nw-venus) - collapse cdw->hub loopback chatter + delivery latency, from MSG-237 audit

MSG-248 llmmsg-srv Done high

└─ cdw adopt /aro/snapshot: getAroSnapshot switches to new endpoint, per-ARO fan-out deleted (blocked on hub endpoint live)

MSG-250 llmmsg-srv Done high

└─ cdw adopt hub long-poll /unread (replace 2s interval; blocked on hub half)

MSG-252 llmmsg-srv Done high

└─ hub GET /aro/snapshot: one response with members+roles+pm+sort_order+emoji for ALL AROs (replaces /aro/list + per-ARO fan-out = 23 loopback calls/10s in cdw); decide with #3 whether active_sessions folds into same payload

MSG-249 llmmsg-srv Done high

└─ hub /unread long-poll (?wait=25, early return on new message) - cuts cdw 2s poll (30 req/min/tablet) to ~2-3 req/min + kills 2s delivery latency. Loopback-only per nw-venus-cc (tablet leg already SSE, no Caddy change); if MCP-shim/https-edge variant ever ships, nw-venus-cc verifies Caddyfile first

MSG-251 llmmsg-srv Done high

└─ fold active_sessions into cdw /api/bootstrap (needs hub all-AROs active_sessions variant or /aro/snapshot field - decide with snapshot WI)

MSG-253 llmmsg-srv Done

EVO-12 Pluto leg: server-side 404 capture + error-tier on own-route (closes Elazar wrong-URL silent test)

PLUTO-165 pluto Done high

Fleet applog-listen repoint: LEG-2 = project-aro post (not 1:1 DM)

EVO-13 evolutiva Done high

└─ mars: applog posts to aro:mars + Elazar receives (LEG-2 verify)

EVO-15 evolutiva Done high

└─ ayudarg: applog posts to aro:ayudarg + Elazar receives (LEG-2 verify); re-fire canonical test row b3de98a6 post-rollout

EVO-17 evolutiva Done high

└─ venus: applog posts to aro:venus + Elazar receives (LEG-2 verify)

EVO-14 evolutiva Done high

└─ pluto: applog posts to aro:pluto + Elazar receives (LEG-2 verify)

EVO-16 evolutiva Done high

Move playwright out of lezama global ~/.claude.json into per-agent config for browser-work agents only

TOKENDIE-9 token-diet Done high

Rescope venus plugins: uninstall 11 user-scope plugins, reinstall project-scope only where used

TOKENDIE-7 token-diet Done high

Disable bare global-id handles on all wi mutators — require KEY-N project ref

BWI-21 basquetwi Done high

Weekly hub-DM relay for the ux-pain-digest: a recurring agent-side step (CronCreate or proxy poll) reads the fresh appEvents action=ux-pain-digest row (detail.textReport, detail.relay) and DMs the report to PM + Elazar on the llmmsg hub, then flips detail.relay.delivered=true. Needed because the Vercel cron can't reach the tunnelled hub. Wire BEFORE first digest fires Mon 2026-06-15 13:00 UTC. Satisfies Elazar's 'dm you, me, email' bar (email+appEvents already done by MARS-83).

MARS-84 mars Done high

Gate llmmsg-bootstrap-session.sh register/join/probe + injected reminders to SessionStart only (kill per-prompt firing)

TOKENDIE-2 token-diet Done high

MSG-75: kind=raise_hand / kind=lower_hand hub primitives for brainstorm multi-turn

MSG-75 llmmsg-srv Done high

Two-layer concurrent-push guard — EVO-26 descend, decision bs-mqoxiw8ptby (2026-06-22), Pluto HIGHEST urgency. Adopt mars's proven guard. LAYER 1 (content): drop pluto/.gitpush-strict so gitpush refuses 'git add -A'; every push MUST pass --only <paths>. LAYER 2 (sequence): wrap every spawned-worker push in 'flock -w 600 ~/.cache/evolutiva/pluto-push.lock gitpush.sh --only <paths> msg' — serializes the non-atomic bump-stage-commit-rebase-push pipeline (stops dup version-bumps + rebase-onto-half-state; git index.lock does NOT cover these). WHY Pluto highest: widest push lane (coder+coderhelp+db all bump the SAME package.json) + LIVE clinical app so a sequence collision = botched deploy. PER-ROLE --only LANES: coder=feature paths; db=its 4 ratified exception paths (db/migrations/applied/*, db/schema.md, db/reference-data.sqlite, package.json). gitpush v4.0 auto-includes the bumped package.json alongside --only, so versioning still works. CUTOVER GOTCHA: the moment pluto/.gitpush-strict lands, EVERY push without --only ABORTS (fail-safe) so the marker + ALL push call-sites (coder/coderhelp/db) must cut over in ONE coordinated step. gitpush.sh stays bin-owned/UNCHANGED (guard = repo-marker + per-repo lockfile, zero fleet blast radius). flock must be BAKED INTO the spawn/push path so an ephemeral worker CANNOT omit it — coordinate wiring with nw/bin (own spawn scripts; pluto spawn = tmux-ccs.sh per EVO-26). Execute in aro:pluto. mars = reference impl (bwi#298 + .gitpush-strict). mem:evolutiva-fleet-aro-topology mem:pluto-ondemand-worker-model mem:shared-tree-push-hazard

PLUTO-192 pluto Done high

Brainstorm + fan-out-disabled ARO: turns not counted + kind=decision doesn't close session when fan-out is off (messages go as DMs, hub never sees them as ARO brainstorm messages). Fix: brainstorm turn/close should work regardless of fan-out state

MSG-95 llmmsg-srv Done high

404 classifier mis-routes bot-probe paths (.env harvest) as [warn] operator DMs - should be security-log-only per Elazar 2026-06-20 rule

PLUTO-182 pluto Done high

MSG-74: hub nudge PM to skip unresponsive brainstorm agents after timeout

MSG-74 llmmsg-srv Done high

Strip CronCreate self-arm instruction from cc-context-monitor injected reminder (year-drift cron source); keep send-keys actuator only

TOKENDIE-5 token-diet Done high

Remove memlint SessionStart hook fleet-wide; rework or retire memlint-cron (does not catch 10-15k stale memory content)

TOKENDIE-4 token-diet Done high

Surface visible JTP filter on /alumnos (backend ?jtp= already wired; add the selector like /informes)

PLUTO-204 pluto Done high

Informes: NULL-safe práctica dedup — pacienteDni NULL collapses distinct prácticas, understates totals (ticket #3, Antonella 26→54)

VENUS-79 venus Done high

MSG-73: settled brainstorm mode (kind=settled, mode=settled, bs_settled_by)

MSG-70 llmmsg-srv Done high

Soporte parity P1: DDL — supportTicketMessages table + vSupportTicketMessages view + archive trigger; add to supportTickets: ticketNumber(sequential), assignedAgent, urlPath, urlSearchParams, userAgent, resolvedAt, resolutionNote; backfill ticketNumber (NOT-NULL/default vs archive-fn to_jsonb expand-only trap). Audit pre-apply review gates APPLY.

PLUTO-217 pluto Done high

MSG-71: bare-DM gate for Elazar (reject_bare_dm flag)

MSG-68 llmmsg-srv Done high

MSG-67: brainstorm protocol fixes — enforce opener/PM-only close + skip post-close coaching

MSG-67 llmmsg-srv Done high

bug(auth): login-lockout — roster-import createUser left NULL GoTrue token columns → 500 on login

VENUS-21 venus Done high

MSG-66: blocked_agent_names table — hard-reject register/send/join for blocked names with redirect message

MSG-66 llmmsg-srv Done high

/practicas Resumen de Comisiones + per-comision cards: same KPI treatment as PLUTO-142

PLUTO-143 pluto Done high

/informes 'Practicas por JTP' KPI refinement + fix Comparativa por Adjunto

PLUTO-142 pluto Done high

MSG-65: allow kind=brainstorm fan-out in non-whitelisted AROs

MSG-65 llmmsg-srv Done high

cc-context-monitor: send ss+Enter, wait 60s, then send /compact (not back-to-back)

OPS-20 agent-ops Done high

MSG-64: /setpm admin form — /setpm <aro> <agent> lets elazar set any ARO member as PM

MSG-64 llmmsg-srv Done high

MSG-63: brainstorm pass/abstain after stuck-watchdog exhausts nudges

MSG-63 llmmsg-srv Done high

ccs.sh: write LLMMSG_AGENT=$LABEL to .llmmsg-env on launch so UserPromptSubmit hook always registers with suffix-correct identity (fleet-wide phantom-seat fix)

MSG-56 llmmsg-srv Done high

hub MSG-59: stuck watchdog must skip only offline/dormant agents — exclude registered+online agents from auto-skip (compaction != absent)

MSG-62 llmmsg-srv Done high

hub: brainstorm busy-nudge exclusion + threshold bumps — exclude kind=brainstorm from BUSY_NUDGE; BUSY_NUDGE_HUMAN_S 5→300, BUSY_NUDGE_AGENT_S 30→600, REPLY_NUDGE_AGE_S 180→900

MSG-61 llmmsg-srv Done high

hub: close-quorum soft warn — kind=decision with pending expected turns warns PM (force:true to override), does not hard-block

MSG-60 llmmsg-srv Done high

hub /send + MCP shim: multi-destination send (to as string|array, N rows one call, recipients[] in response)

MSG-58 llmmsg-srv Done high

DB-health one-shot inspect sweep (Supabase inspect-db via MCP): outliers/cache-hit/unused-indexes/seq-scans/bloat/vacuum-stats/locks-blocking/long-running + get_advisors(performance). Triage real findings, keep/drop to PM. Fleet inspect-db monitoring rollout (bs-mqg1357zx6m). Caveat: pg_stat_statements recently reset (PLUTO-134), lookback thin.

PLUTO-138 pluto Done high

cc-context-monitor: remove drain poke, fix zombie alerts (route+cooldown+threshold+allowlist)

MSG-55 llmmsg-srv Done high

bug: pluto-lifecycle-inactivity cron FAILED nightly since 2026-06-09 — fn_lifecycleInactivity() UPDATEs users without SET LOCAL app.user_id GUC, so fn_archive_users() trigger rejects (line 21). 7+ days silent-dead, prod. Fix: set archive-context (app.user_id sentinel + app.archive_reason) in-txn before the users UPDATE per archive discipline; audit pre-apply review (fn + trigger-archived users table).

PLUTO-135 pluto Done high

feat(cursada): sede self-selection UNBUILT — students cannot pick rotation sede (mi-cursada only filters); go-live blocker per client 2026-06-09

VENUS-12 venus Done high

Remove basquetwi/wi-mine-banner SessionStart hooks fleet-wide (lazy-load .md suffices)

TOKENDIE-3 token-diet Done high

Adopt .gitpush-strict marker in Mars repo root to prevent add -A peer-WIP sweeps

MARS-30 mars Done high

cc-context-monitor hub-aware unregistered-check: whey-only roster read false-flags every VENUSINF-migrated agent (off-host .llmmsg-env) as 'genuine registration failure' + auto-heal-then-reflag loop. Fix: check agent against the hub its launch-cwd .llmmsg-env names (or exclude off-host-.llmmsg-env agents from the whey-scoped check). Blocks broad pluto/venus/whey cutovers (noise flood + auto-heal race); mars (5 agents) tolerable. Owner bin-whey-cc (monitor script).

MSG-39 llmmsg-srv Done high

Bug: brainstorm_close_forbidden fires when sender=opener=pm_agent

MSG-72 llmmsg-srv Done high

alumno->docente conversion leaves dangling studentAssignment (Elazar greenlit fix-the-flow). When a user is converted alumno->docente (alumno role soft-deleted + docente role added), the conversion does NOT soft-delete the user's active studentAssignment (enrollment) — so they remain a 'current student' of a comisión while being a docente. Found via Mariano Trigo (c8fe9bcb): active F-Sábado studentAssignment persists post-conversion. FIX: (1) coder — conversion code path must ALSO soft-delete the studentAssignment (archive-context, studentAssignments is trigger-archived); (2) db — clean existing stale stubs (all users with active studentAssignment + active docente role + no active alumno role) with archive-context+reason. SCOPE FIRST (db read-only): conversion code path + count/list inconsistent-state users.

PLUTO-130 pluto Done high

PROD bug (Elazar blocked): no UI affordance to assign a teacher to a comisión. On /admin/usuarios/c8fe9bcb-03ac-45d1-8241-6e5d1420afe4 (a docente) there is NO button/link to add him to a comisión, nor to assign a comisión to him. Investigate: is the teacher->comisión assignment UI shipped anywhere (comisionJtps/comisionAdjuntos/titular write path) or absent (Stage 4 / PLUTO-133/136 blocked)? Missing-link vs missing-capability? Fix so an admin can assign. WRITE TARGET = fraud-sensitive assignment tables: soft-delete only + archive context + role-aware (titular/adjunto/jtp) + capability-gated. Likely unblocks PLUTO-61 (3 real unassigned docentes). Audit design-ping before implement (fraud-table write path).

PLUTO-128 pluto Done high

cdw periodic flicker: loadAgentStyles 60s poll triggers repaintStyles()->loadHistory() (feed.innerHTML='' + refetch = full feed teardown) on ANY agent_styles change. /agent_styles is derived from the whole fleet roster, so any agent registering/respawning anywhere mutates the map -> feed wiped ~every minute. Fix: repaintStyles must recolor names in-place, not reload the feed.

MSG-37 llmmsg-srv Done high

/informes immediate UI fixes (Elazar GO now): (a) wrap bare CohortAndProcedureCards grid (teacher-report.tsx:818) in a titled ReportSection matching sibling sections; (b) CUT 'Moda operador/asistente' cards (mislabeled modal-per-student count, redundant beside Promedio) + remove now-dead computeMode/opCounts plumbing ~1199-1201, keep Promedio. UI-only, post-push audit PTD. Rest of KPI-rework held under parent 121.

PLUTO-124 pluto Done high ↳ PLUTO-121

MSG-72: hub DM to PM when all brainstorm turns complete

MSG-69 llmmsg-srv Done high

settings.json PostToolUse push-to-gdrive-canonical silently no-ops: basquetwi.md local edits did NOT propagate up to /gdrive/config/claude-shared/ (canonical stayed mtime May-18), so SessionStart cp re-pulled STALE over the edit. Hook's 'cp ... 2>/dev/null' swallows failures = silent doc drift fleet-wide. Audit why push no-ops + surface failures.

OPS-15 agent-ops Done high

hub: brainstorm-stuck-alert — setInterval watchdog DMs ARO PM when pending turns > 5min idle, auto-skips pending agents after 2 DMs with no movement (drops from expected_json, unblocks brainstorm)

MSG-59 llmmsg-srv Done high

Strip eq / 'Elazar Pending' feature fleet-wide (Elazar directive 2026-06-14): hub routes, MCP eq_* tools, cdw web + chat-duo GTK panes, DB table, all docs/CLAUDE.md/memory. Replacement rule everywhere: ask Elazar via llmmsg-srv DM. Stale eq_add call -> hard 'eq retired' error.

MSG-36 llmmsg-srv Done high

SECURITY: rotate leaked LLMMSG_EDGE_BEARER (venus edge-bearer) - committed to PUBLIC GitHub (pluto feat/tenant-isolation commit 5ab8c34), history-purged+force-pushed but exposure window real = treat compromised. Fleet-wide blast: venus hub LLMMSG_EDGE_BEARER env + EVERY migrated agent .llmmsg-env (LLMMSG_HUB_BEARER, ~26) + cdw service env + possibly Caddy edge config. Method: dual-bearer grace (zero-outage) preferred over coordinated bounce. Owner pm-llmmsgsrv-cc coordinating; hub-llmmsgsrv hub-code, nw-whey .llmmsg-env sweep, nw-venus venus-host exec, coder-chatduo cdw.

MSG-40 llmmsg-srv Done high

/informes top summary cards grouping (Elazar GO now): wrap the bare top-of-report totals cards — Total prácticas, Como operador (%), Como asistente (%), Alumnos activos — in a single titled ReportSection matching the sibling pattern (same as PLUTO-124's 'Resumen de cohorte y procedimientos'). Wrapper/title only, values+logic unchanged. teacher-report.tsx. UI-only, post-push PTD.

PLUTO-127 pluto Done high ↳ PLUTO-121

Archive-reason gap: require typed reason on silent human soft-deletes (periodo + comision soft-delete, access-request reject) via promptReason; no-double-ask (compliant paths untouched)

PLUTO-108 pluto Done high

R1 cross-audit app fixes: send-email err.message leak + UserFacingError class + perfil ImageApiError + completar-asignacion actor + bulk-ops batched UPDATE

PLUTO-106 pluto Done high

R1 cross-audit db fixes: appEvents retention auth/session >=365d floor + notifications prune cron (read >30d)

PLUTO-107 pluto Done high

Replace native window.prompt/confirm with app-styled promise-based dialog primitive (promptReason/confirmAction)

PLUTO-105 pluto Done high

VENUSINF cutover-prereq: add LLMMSG_HUB_BEARER Authorization header to llmmsg-bootstrap-session.sh (/register + /aro/join curls 401 against bearer-gated venus hub; no-op when unset = additively safe)

MSG-34 llmmsg-srv Done high

Email subject format: BMF 1 / Pluto / <subject> — centralized prefix

PLUTO-104 pluto Done high

F-1 LIVE crash: clientError:global-error @ /mi-cursada (alumno landing), 4 hits 2026-06-12, no stack in appEvents. React global error boundary firing on student landing. Pull Vercel runtime logs for today's hits to get exception; fix root fetch/render.

PLUTO-74 pluto Done high

Centralized log-analysis plane on venus (pull+analyze app events)

VENUS-5 venus Done high

api-images tenant isolation: key->tenant binding, scoped serve/delete, per-tenant storage + stats, _trash TTL, server-side EXIF strip, backup (closes cross-tenant IDOR)

EVO-1 evolutiva Done high

memory-lint.sh: refuse implicit host-wide scan as push gate (require explicit scope; only cron sweeps host-wide)

MSG-31 llmmsg-srv Done high

F-6/voice-note: jefe-de-TP cross-linking via ayudante role drags wrong roster. Real teacher (Ale): sees his own ~8-10 alumnos OK, but ALSO sees ALL alumnos of ANOTHER jefa from a different group/day, because he is ayudante of that jefa on Wednesday -> the vinculation links him to the Wed jefa and surfaces her students in his correction view (~20+ total -> confusion). PROD real user. Same class as PLUTO-70 (resolveTeacherFilterIds dual-role); investigate the jtpAyudantes->jefa linking path - is this a PLUTO-70 gap (ayudante path uncovered) or new. He CAN evaluate his own; the bug is the extra roster bleed-in.

PLUTO-77 pluto Done high

F-2 LIVE crash: serverError+clientError @ /administrar/alumnos/[id] (digest 3278366549), 26 hits Jun 9-11. Server crash on GET student detail; paired 7 sendEmailFailed ETIMEDOUT are the alert-emails for this crash. Pull Vercel logs for digest, fix render/server-action.

PLUTO-75 pluto Done high

VENUSINF: venus infrastructure migration coordination (Phase 0-3)

MSG-30 llmmsg-srv Done high

CR21: implement person-data erasure (hard-delete cascade or anonymize) for cases/needs/events per data-protection req; reconcile with existing #290/#339/#345

AYUD-6 ayudarg Done high

Admin delete UI (CR21): route/buttons calling db's deletePersona/deleteEvento/deleteNecesidad hard-delete functions; show jsonb count summary of what was removed; admin-role gated; confirm dialog (irreversible)

AYUD-11 ayudarg Done high

Hub control-verb /setpm <aro> <agent>: Elazar self-service PM reassignment from cdw chat (gated sender==elazar, roster-validated)

MSG-44 llmmsg-srv Done high

CR23: aspirant /sumate signup creates a PENDING account awaiting admin authorization (today only emails admin) + admin accept/authorize UI — client: 'no puedo aceptar voluntarios'

AYUD-7 ayudarg Done high

Login: harden Google OAuth against PKCE-verifier-missing failure (in-app browser / WhatsApp)

AYUD-2 ayudarg Done high

Elazar DM-guard (reject-v1): send-time reject of untagged DMs to Elazar + silent dm_guard_rejects counter + KPI line + kill-switch; bundle cursor-lag shim fix same deploy. Spec: docs/superpowers/specs/2026-06-12-elazar-dm-guard-design.md

MSG-28 llmmsg-srv Done high

cc-context-monitor.sh: redirect send target OFF elazar-the-user-human-llmmsg-srv to the host nw relay (nw-<host>-cc). ~2650 untagged DMs to Elazar = his #1 inbox clutter; DM-guard MSG-28 will drop them once enforced. Fix canonical script send-call (host-parameterized); nw-venus-cc + nw-lezama-cc pull to their host copies. Elazar approved 2026-06-12.

MSG-29 llmmsg-srv Done high

error-tier appEvents digest (mars MARS-81 port): daily error-digest email cron + internal relay-claim routes

PLUTO-71 pluto Done high

VENUSINF-5: public cdw URL (cdw-t.pensanta.com) - native venus cdw deploy + Caddy edge w/ human-auth, replacing Tailscale-only :9704

MSG-41 llmmsg-srv Done high

/administrar/alumnos/[id] throws 500 (Sin permisos) instead of graceful 403 for docente_titular w/ viewStudents but not manageUsers; list shows links into a detail page the user can't enter (list<->detail cap mismatch) — fix 500-handling + resolve cap shape

PLUTO-43 pluto Done high

Schema drift: persist messages.expects_reply + roster.role; self-healing view-migration on hub startup

MSG-27 llmmsg-srv Done high

Pluto: audit email normalization for non-gmail dot-stripping bug (gmail dots-ignored rule is gmail/googlemail-only; Workspace custom domains treat dots as significant)

PLUTO-35 pluto Done high

Pluto P1: IDOR on /api/image/[id] — add access-scope check (patient photos fetchable by any authed user)

PLUTO-16 pluto Done high

Pluto P1: vActiveStudentAssignments + vActiveRoster missing isDemo=false (demo bleed into teacher views)

PLUTO-17 pluto Done high

Human/spectator client silently stripped from AROs by pruneStale on presence lapse - no rejoin path, PM ARO replies stop reaching Elazar

MSG-20 llmmsg-srv Done high

Weekly info-event analyzer: NEW recurring job scanning INFO-level appEvents for UX pain points (600+ 'Seleccioná la pieza' nags etc) + useful data, DMs a report. Operationalizes MARS-70; consumes re-added info-level toast logging (A1). Elazar 06-09.

MARS-83 mars Done high

Logger severity-correctness audit: every appEvents write uses the right level (info/warn/error). Sweep all logEvent/appEvent call sites; flag mis-leveled signatures (user-correctable validation toasts at error, real failures at info, etc). Precondition for the two-tier analyzer. Elazar 06-09.

MARS-81 mars Done high

Frequent analyzer (errscan ~2h) scope to error+warn ONLY — confirm/adjust errscan's event-level filter so the high-freq sweep ignores info. errscan owned by bin-whey-cc (cross-host); PM coordinates the change. Elazar 06-09.

MARS-82 mars Done high

errscan failed to alert on a real 6h prod outage (isDemo regression 2026-06-09): 43 error-events + 2 unhandled-server-error met BOTH spike-≥10 AND prod-down triggers, yet neither Elazar nor pm-mars-cc got a DM. errscan state is whey-local (NOT in Mars Supabase — db confirmed no seen_signatures table there). Diagnose on whey: did the cron/daemon fire today? did it connect to Mars DB + read appEvents? is alert-routing/DM broken? Owner bin-whey-cc (was offline when filed). Elazar 06-09.

MARS-80 mars Done high

Investigate /administrar/logs errors: full triage of appEvents error/warn rows. Deliver (a) each error class + root cause + actionable fix, (b) logging hygiene audit — what is logged that should NOT be (noise/benign warns) + what is NOT logged that SHOULD be (coverage gaps). db categorizes appEvents; audit cross-checks Vercel runtime logs for failures never reaching appEvents. Elazar 06-09, explicitly wants real findings not reassurance.

MARS-78 mars Done high

ARO fan-out default-deny: allowlist gate at /send aro-expansion (Elazar-managed)

MSG-17 llmmsg-srv Done high

Shim/hub: auto re-register on reconnect after tunnel blip (roster-drop-until-manual-rrll)

MSG-16 llmmsg-srv Done high

CC idle/launch auto-drain: unread-gated send-keys poke + bootstrap unread-reminder hook (CC-only, Codex auto-excluded via cmd!=claude guard)

MSG-15 llmmsg-srv Done high

ccs.sh:183 launcher gate fix: swap --dangerously-load-development-channels -> --channels server:KEY so team-launch needs no per-agent gate-accept + no manual rrll

MSG-14 llmmsg-srv Done high

SA.jtpUserId live split-brain — coordinated 4-step fix (reconcile 40 rows → create/import writes+3 reads switch to assignedTeacherUserId → vStudentAssignments jtpName join+back-compat alias → drop legacy col+move partial index). Folds in vPracticasSinEvaluar + vComisionAyudantesByJtp snapshot-view leaks. Root of MARS-21/28/Montoya bug family.

MARS-40 mars Done high

Commons dedup: delete drifted §Tooling-First from venus + pluto role files (terra DONE 8927d8d)

EVO-88 evolutiva Done

Honest copy for server-side image-upload failures (practicas/nueva)

MARS-650 mars Done

Blocked-item sweep: measure whether each of the seven stated blockers still holds

TERRA-73 terra Done

Does the shipped citation gate accept unverifiable prose? TERRA-63 checked presence, TERRA-64 checked reality, nothing has checked the checker

TERRA-67 terra Done

Citation currency audited across 31 applied migrations: terra_27 CLEAN, terra_16/17 unverifiable-by-construction

TERRA-64 terra Done

Participant-change panel unreachable from the student surface (/mi-cursada/[id])

PLUTO-702 pluto Done

A production import is evidenced in the DB while the tool that performed it exists only on one disk, unversioned

TERRA-62 terra Done

An unconfirm reason routes nowhere: the client states a correctable fact and no terra surface shows it to anyone who can correct it

TERRA-55 terra Done

callback route.ts:270 redirects to /login?error=auth with no finish(): a login rejection landing that writes no signInCompleted row at all

TERRA-61 terra Done

Demote trigger-gated content out of terra-commons into a lazy-loaded detail file: auto-loaded footprint measured ~34K against an 8K budget

TERRA-60 terra Done

Failed access request told the user nothing: generic toast invited a futile retry with no sign the request was not registered

TERRA-41 terra Done

terraCirugias hard-delete ban applied; archive-on-UPDATE ruled NOT TAKEN on redundancy with re-open conditions recorded

TERRA-58 terra Done

Permanent pool-identity read: current_user to appEvents at cold start

TERRA-14 terra Done

TERRA-43's chokepoint coverage claim outlives the chokepoint: TERRA-52 makes logger.ts a non-sole writer

TERRA-54 terra Done

terraCirugias is deliberately unguarded as 'vocabulary, not clinical record' - TERRA-52 makes it carry a client decision and falsifies that premise

TERRA-57 terra Done

Login reliability: PKCE exchangeFailed on first sign-in, plus no actionable message on wrong-Google-account

TERRA-18 terra Done

Terra's 45 guard triggers are all tgenabled='O': one SET session_replication_role='replica' disables the entire guard suite

TERRA-47 terra Done

Archive-context GUCs are bare shared-namespace names (app.user_id / app.archive_reason): rename agreed in terra_13, never scheduled

TERRA-33 terra Done

Guard-inside-try scanner skips any actions module with more than four lines above its directive

TERRA-44 terra Done

Write the accepted service_role/postgres mutation exposure into terra-commons: appEvents append-only and no-hard-delete are CONVENTIONS, not table properties

TERRA-9 terra Done

└─ Watcher on db_schema for eprpywqwzsvrjeaforei: the only control over a fleet-token-writable value gating service_role HTTP reach

TERRA-35 terra Done high

db/export-schema.sh: extend snapshot beyond public schema (13 non-pg_* schemas)

TERRA-12 terra Done

appEvents context columns exist and terra writes none of them (sessionId, userAgent, ip, requestId, traceId)

TERRA-27 terra Done

appEvents immutability guard is disarmed by a BARE shared-namespace GUC (app.bypass_appEvents): TERRA-33 does not cover it and closing 33 must not read as closing the class

TERRA-45 terra Done

Lint guard: ban runtime-derived origins in auth paths (never built under TERRA-21)

TERRA-32 terra Done

withAction presence checks read raw text: a comment mentioning withAction excuses a module that never calls it

TERRA-29 terra Done

Terra applog rail: failnotify propagation gap - both shared template units lacked OnFailure=, and the notifier that fixed it was an unbounded emitter with an inert label

TERRA-26 terra Done

appEvents 48h silence is no-traffic, not a broken writer: terra and enamel writers each proven by emitting through the ordinary app path on the current build

TERRA-42 terra Done

signInCompleted's 8 unattributed rows are outcomes with no resolvable users row, not a call-site gap: 13/13 authorized attributed, so TERRA-23 needs no coverage bound

TERRA-30 terra Done

sendWelcomeEmail is dead code — a welcome email the product believes it sends and has never sent once

VENUS-335 venus Done

inviteTitular alreadyExisted branch asserts a successful welcome-email send regardless of emailSent

VENUS-334 venus Done

TERRA-19 instrument fires once per bucket from the Server-Component path via console.error, proven by injected unit + build only: Vercel capture NOT established

TERRA-24 terra Done

Support-ticket agent-operability: bearer create op (actorUserId fail-closed)

VENUS-371 venus Done

pnpm test glob was directory-enumerated and depended on authors remembering to widen it: latent, no committed test was ever skipped

TERRA-38 terra Done

First terra applog digest triaged: no terra defect - login:no-profile is a separate toast sink, PKCE loss was Supabase JS's own verifier storage

TERRA-37 terra Done

Práctica editor: bare file input, students cannot find how to add radiografías

MARS-647 mars Done

applog-pull P0: category vs categoryValue + missing tenant-gate on shared DBs

VENUS-369 venus Done

Solicitar eliminación reads as text, not a button

MARS-645 mars Done

Profile-photo nag: upload starts on file select (27-student required-field friction)

MARS-643 mars Done

TERRA-22 screening instrument: inter-login interval near 60min on signInCompleted

TERRA-23 terra Done

Terra-side applog/alert-rail coverage

TERRA-3 terra Done ↳ EVO-84

server.ts swallows cookie-write failures on a safety condition (middleware) that does not exist in terra

TERRA-19 terra Done

Split Endodoncia I vs Endodoncia II on /estadisticas (materia as reporting dimension)

MARS-637 mars Done

Pulldowns de filtro desde catalogo opciones, no hardcodeados

MOVILBA-41 movilba Done

Modelo historial: falta columna expediente_baja (el numero de baja no tiene donde ir)

MOVILBA-34 movilba Done

CARGAR 6: 131 dominios cerrados en RUTAP nunca importados

MOVILBA-19 movilba Done ↳ MOVILBA-13

CORREGIR 13: 8 dominios con mas de una fila en vehiculos

MOVILBA-26 movilba Done ↳ MOVILBA-13

CORREGIR 8: linea 945 duplicada en prod

MOVILBA-21 movilba Done ↳ MOVILBA-13

Reclasificar los 12 pares de operador real que MOVILBA-17 dio por historia legitima sin medirlo

MOVILBA-31 movilba Done ↳ MOVILBA-13

refs-only verification: parent event body

BWI-45 basquetwi Done

Endo I clinical scope restriction (client-approved quote)

MARS-636 mars Done

Shared D/M/Y date control: digit caps + auto-advance

MARS-634 mars Done

Add rominasseron@gmail.com as Endo I test student (Seron Estudiante Prueba)

MARS-633 mars Done

Load-failed suppress order reverted after audit BLOCK:1462817

MARS-632 mars Done

Review-depth pilot infrastructure (classifier + tests)

MARS-631 mars Done

image-proxy fetch-failed: capture target host + err.cause/code in catch for attribution

MARS-343 mars Done

App shell: no navigation, no sign-out, single-branch redirector

ENAMEL-23 enamel Done

Friction dashboard: scanner 404s at warn tier were 45% of user friction

PLUTO-689 pluto Done

logEvent: internal-probe UA suppression only covers 13/234 call sites, not fleet-wide

MARS-579 mars Done

hormigonacero.com.ar ships no analytics tag at all

WEBSITES-11 websites-tools Done

Audit GA4 properties configured in the UI but missing from ga4-property-map.json

WEBSITES-3 websites-tools Done

Admin can create a support ticket on behalf of another user

MARS-609 mars Done

VENUS-365 — approveAccessRequestAttach threw on every non-alumno attach: alumnos has no id column

VENUS-365 venus Done

VENUS-366 — schema-contract guard: SQL column references are unchecked, 6 signatures have reached prod since May

VENUS-366 venus Done

VENUS-363 — solicitud padron badge: false no-match on staff requests, collapsed negatives, raw role codes

VENUS-363 venus Done

Edge-Instrumentation bundle pulls email.ts's node:crypto — operator alert leg cannot run on an edge-runtime 500

PLUTO-685 pluto Done

Mars backup-lane inventory for fleet registry + fix backup-db.sh EXPECTED_REF fallthrough

MARS-621 mars Done

OPERATOR_EMAIL || default hardening (email.ts:22)

PLUTO-676 pluto Done

pm-triage daemon silently drops kind=weeklyReport from pluto kpi-report

PLUTO-520 pluto Done

Analyze visitor screen-size/device cohort (Vercel Web Analytics) → optimize Pluto layout/breakpoints to dominant cohort, VERIFIED vs actual distribution (telemetry directive bs-mqmscr4k3wh)

PLUTO-159 pluto Done

SOP-11: práctica de Maximiliano Otero cargada con nº de ficha incorrecto (real 86416), no le aparece ni puede editarla

PLUTO-678 pluto Done

Dedupe/downgrade users-list-overflow alert before it starts paging on every admin page load

MARS-617 mars Done

Set up período/comisión/materia for Endodoncia I

MARS-613 mars Done

Reclassify nudge-shown (MARS-600) from warn to info severity to stop real-time alert paging

MARS-611 mars Done