Issues

• [HIGH] CVE-2026-84782 in libssl3t64, openssl (container image)

  dependenciesdocker
  mforce/cluckwork#1020 · Filter by author github-actions opened on Oct 2, 2026

• web+api: replace the Dashboard's 10,000-row drain ceiling with a proper morning-brief design

  enhancementpriority:tier4
  mforce/cluckwork#942 · Filter by author mforce opened on Sep 23, 2026

• [C] #514 slice 17: assembly split — conditional on Track A/B evidence

  area:apiepic-514priority:tier4size:Lslicetrack:C
  mforce/cluckwork#859 · Filter by author mforce opened on Sep 14, 2026 · Modular monolith
  3

• MCP slice 8: GLOSSARY, SPA Help and in-app glossary, in all three locales

  area:apiarea:frontendepic-789priority:tier3size:Sslice
  mforce/cluckwork#811 · Filter by author mforce opened on Sep 13, 2026 · MCP server support

• MCP slice 7: [MirrorsRoute] parity guard — tool RBAC cannot drift from its route

  area:apiepic-789priority:tier3size:Mslice
  mforce/cluckwork#810 · Filter by author mforce opened on Sep 13, 2026 · MCP server support

• MCP slice 6: write tool — record daily entry

  area:apiepic-789priority:tier3size:Lslice
  mforce/cluckwork#809 · Filter by author mforce opened on Sep 13, 2026 · MCP server support
  2

• MCP slice 5: read tools — customers, orders, balances, with money rendered at the boundary

  area:apiepic-789priority:tier3size:Mslice
  mforce/cluckwork#808 · Filter by author mforce opened on Sep 13, 2026 · MCP server support

• MCP slice 4: read tools — flocks, stock, egg lots, daily entries

  area:apiepic-789priority:tier3size:Mslice
  mforce/cluckwork#807 · Filter by author mforce opened on Sep 13, 2026 · MCP server support
  2

• MCP slice 3: map /mcp, wire RBAC and tools/list filtering

  area:apiepic-789priority:tier3size:Mslice
  mforce/cluckwork#806 · Filter by author mforce opened on Sep 13, 2026 · MCP server support
  2

• MCP slice 2: the identity bridge (McpCallContext) and the dependency-graph walk

  area:apiepic-789priority:tier3size:Lslice
  mforce/cluckwork#805 · Filter by author mforce opened on Sep 13, 2026 · MCP server support

• MCP slice 1: unblock /mcp and extract the idempotency protocol

  area:apiepic-789priority:tier3size:Lslice
  mforce/cluckwork#804 · Filter by author mforce opened on Sep 13, 2026 · MCP server support

• Alert centre: durable per-farm alerts with an SPA surface (specs §17.1)

  alertsarea:apiarea:frontendpriority:tier3slice
  mforce/cluckwork#803 · Filter by author mforce opened on Sep 13, 2026 · Platform hardening
  1

• OAuth slice 6: audit provenance — record which application acted, alongside the human

  area:apiarea:frontendepic-788priority:tier3size:Mslice
  mforce/cluckwork#800 · Filter by author mforce opened on Sep 13, 2026 · OAuth 2.1 authorization server

• OAuth slice 5: connected-apps screens — user's own, and the Owner's farm-wide view

  area:apiarea:frontendepic-788priority:tier3size:Lslice
  mforce/cluckwork#799 · Filter by author mforce opened on Sep 13, 2026 · OAuth 2.1 authorization server

• OAuth slice 4: consent screen, with step-up and return-URL validation

  area:apiarea:frontendepic-788priority:tier3size:Lslice
  mforce/cluckwork#798 · Filter by author mforce opened on Sep 13, 2026 · OAuth 2.1 authorization server

• OAuth slice 3: dynamic client registration with rate limiting and unapproved-app expiry

  area:apiepic-788priority:tier3size:Mslice
  mforce/cluckwork#797 · Filter by author mforce opened on Sep 13, 2026 · OAuth 2.1 authorization server
  1

• OAuth slice 2: fail-closed checks on the OAuth path (disabled, suspended, must-change-password, flock scope, rate limit)

  area:apiepic-788priority:tier3size:Lslice
  mforce/cluckwork#796 · Filter by author mforce opened on Sep 13, 2026 · OAuth 2.1 authorization server
  1

• OAuth slice 1: stand up OpenIddict — tables, migration, token issuance

  area:apiepic-788priority:tier3size:Lslice
  mforce/cluckwork#795 · Filter by author mforce opened on Sep 13, 2026 · OAuth 2.1 authorization server
  3

• Data Protection has no persisted key ring, so Identity's token providers break across restarts and replicas

  area:apienhancementepic-789priority:tier3size:M
  mforce/cluckwork#794 · Filter by author mforce opened on Sep 12, 2026 · MCP server support
  2

• Consider migrating the SPA's hand-rolled login to OpenIddict once it is proven for MCP

  area:apienhancementepic-789priority:tier3
  mforce/cluckwork#793 · Filter by author mforce opened on Sep 12, 2026 · MCP server support
  2

• Decide how farm-controlled free text is presented to a model before the MCP tool surface exists

  area:apienhancementepic-789priority:tier3size:S
  mforce/cluckwork#792 · Filter by author mforce opened on Sep 12, 2026 · MCP server support

• EPIC: MCP server support

  area:apiepicepic-789priority:tier3
  mforce/cluckwork#789 · Filter by author mforce opened on Sep 12, 2026 · MCP server support
  5

• Build an OAuth 2.1 authorization server (OpenIddict) so MCP clients can authenticate

  area:apiepicepic-788priority:tier3
  mforce/cluckwork#788 · Filter by author mforce opened on Sep 12, 2026 · OAuth 2.1 authorization server
  6

• Future: coupon codes as the discount mechanism, instead of typed prices

  area:apiarea:domainarea:frontendneeds-scopepriority:tier4size:Lslice
  mforce/cluckwork#730 · Filter by author mforce opened on Sep 8, 2026
  4

• Alerts: raise an alert-centre entry for a large discount at confirm

  alertsarea:apiarea:frontendpriority:tier4size:Mslice
  mforce/cluckwork#728 · Filter by author mforce opened on Sep 8, 2026 · Platform hardening
  3