Exercises

All exercises

Every review from your team's services, easiest tier first.

Add pagination to users endpointList endpoint was returning the full table. Adds page/size query params so the mobile client can page through users.
T1New
Add loading state to invite formUsers double-clicked the invite button and sent duplicate invites. Disables the button and shows a spinner while the request is in flight.
T1New
Responsive multi-series cold-chain chartPharmacy cold-chain ops dashboard was clipping the 14-day excursion chart on narrow viewports and remounting series on every poll. Wraps the LineChart in ResponsiveContainer and keys each series by depot id so color and animation stay stable when the series list reorders.
T1New
Kill accidental text selection on packing tabletsDockhands double-tapping SKUs on the packing-station tablets keep flashing blue selection highlights mid-scan. Soften the AppShell so the console feels more native and text is not selectable under the finger.
T1New
Mobile-friendly custom tip amount fieldCheckout tip sheet still used type=number, which opens a full keyboard on iOS and lets spinners mess with cents. Switches to a controlled text field with inputMode=decimal and sanitizes to digits plus a single decimal point.
T1New
Hardening: HSTS, secure cookies, HTTPS redirectSecurity review of the CareLink patient portal flagged plain HTTP access and session cookies without Secure. Adds middleware to redirect HTTP→HTTPS, emit HSTS (with preload), and set session cookies with Secure/HttpOnly/SameSite.
T1New
Parallax hero with CSS scroll-driven animationThe winery estate landing page janks on mid-range phones when the vineyard backdrop tracks scroll. Drop the scroll listener / rAF offset loop and drive the hero parallax with CSS scroll-driven animations so the compositor owns the work.
T1New
Query-backed climbing gym member profileFront desk still hammers /members/:id on every tab focus because the profile page uses ad-hoc useEffect fetch. Swap it for useQuery with a 60s staleTime so badge scans feel instant, and wrap the page in QueryErrorResetBoundary so a flaky members API shows a retry instead of a blank card.
T1New
Inline absentee max bids on live wine auction lotsHarbor Lot floor clerks need to key absentee maximums against the live lot board while the hammer clock ticks. Renders each lot as an editable row so paddles and phone bids can be recorded without leaving the auction screen.
T1New
Managed Postgres bootstrap for GlazeKiln kiln slotsCeramic co-op cutover: stop the SQLite file on the kiln-room NUC and point GlazeKiln at managed Postgres so multi-studio schedules share one DB. PR adds create_engine from DATABASE_URL plus a startup log line so deploys can confirm which host/env we attached to.
T1New
Shared-layout expand for plant specimen cardsBotanic shop catalog feels abrupt when a specimen opens into the detail sheet. Add framer-motion shared layout morph from grid card → expanded panel so the photo and title glide in place. Each specimen gets its own layoutId pair so only the opened card animates.
T1New
Profile ClipperYard estimate view with debug toolbar in prod settingsClipperYard is the work-order stack for wooden-boat restoration yards (caulking hours, spar varnish batches, bronze fastening kits). The yard-manager estimate page for re-planking jobs has been timing out under load. This PR enables django-debug-toolbar and flips DEBUG so we can capture SQL and template timing on the staging-like production module the dockside tablets already load from.
T1New
Auto-page vinyl crate dig with sentinel observerCrateDig buyers were hammering Load more while flipping new pressings in the marketplace crate. Replace the button with a bottom sentinel watched by IntersectionObserver, use rootMargin so the next page prefetches before the footer enters view, and disconnect on cleanup.
T1New
Prioritize hero plate photo for LCPPlateMap's dish detail hero is the LCP element on most mobile sessions, but the CDN still sees it as a default-priority fetch and ships a full-width desktop asset into a 100vw mobile slot. Mark the above-the-fold plate image with fetchPriority=high, drop lazy loading, and wire a matching srcSet/sizes pair so the browser picks the right candidate early.
T1New
Keyboard-only focus rings on hold chipsShelfNote's pickup-hold chips still use outline: none so designers don't see a blue box on mouse click — but keyboard users lose the only focus cue. Drop the blanket focus kill and style a 2px ring under :focus-visible so Tab navigation stays obvious while pointer clicks stay clean.
T1New
Hive health chips on the live apiary yard boardCommercial apiary yard board needs at-a-glance hive health so morning techs know which boxes to open first. Pulls tone tokens from the inspection feed (emerald / amber / rose) and renders compact status chips with Tailwind utility colors instead of the old gray badges.
T1New
Skip offscreen chapbook cards with content-visibilityRidgeline Press's seasonal chapbook grid paints every cover when editors scroll the spring list on a tablet. Apply content-visibility: auto so the browser can skip rendering offscreen cards, pair it with contain-intrinsic-size so the scrollbar and Tab order stay stable, and keep titles in the accessibility tree (auto, not hidden).
T1New
Scope kiln-hold CTAs with CSS modules composesKilnShare still ships hold-slot CTAs from a global buttons.css, so .primary undercuts every other primary on the member portal. Move the shared surface into Button.module.css, reuse it with composes for primary/ghost variants (no :global), and wire ConfirmHold to the hashed class map so nothing leaks into the rest of the app.
T1New
Announce co-op form errors once via polite live regionKettle & Co-op's membership application re-validates on every keystroke and stuffed each field error into a separate assertive live region, so VoiceOver rattled off partial zips and half-typed emails while applicants were still typing. Gate validation to submit (and blur-after-submit), publish one aggregated summary into a single aria-live="polite" region with aria-atomic, and wire fields with aria-invalid / aria-describedby so assistive tech gets a calm, complete message instead of a flood.
T1New
Polish FathomForge root layout metadata for public dive-shop launchFathomForge is the booking + tide-aware site builder for independent dive shops (charter slots, tank fills, local wreck guides). After a closed staging beta, this PR hardens the App Router root layout for the public launch: branded title template, Open Graph defaults, and the canonical production site URL so shop landing pages can rank for "[town] scuba charter".
T1New
Cache user lookups in request pathProfile pages hit the users table 5-6 times per request. Adds a small cache in front of get_user.
T2New
Add customer search to orders adminSupport asked for a way to find orders by customer name in the admin panel.
T2New
Accessible void-invoice confirm dialogFinance ops kept losing keyboard focus behind the void-invoice overlay. Ports the confirm dialog, traps Tab inside it, closes on Escape, and restores focus to the Void trigger when dismissed.
T2New
Sortable canning-batch QC boardQC managers want to re-order the canning-batch board by ABV, defect rate, or package time from a dropdown. Threads the sort query param into the existing raw SQL that joins batch rows to QC stats.
T2New
Stable columns for customs hold release gridBonded warehouse clerks reported sort and filter on the customs hold release grid flickering or resetting mid-click. Columns were rebuilt every render (and previously memoized against sorting state). Memoizes ColumnDef with stable deps and wires sorting/columnFilters through useReactTable so order and filters stick.
T2New
Auto-fit type on digital shelf-label previewPriceTag Studio's ESL (electronic shelf label) preview was clipping long unit prices on the 2" face. Measure the chip with ResizeObserver and scale font + padding so the price always fills the available width during merchandising review.
T2New
Email magic-link password reset for TackRoom membersStable boarders kept failing the SMS OTP reset path on spotty barn Wi‑Fi. Switches TackRoom to an emailed magic link that lands on GET /auth/reset with the one-time token in the query string, plus request logging so support can see who hit the reset page.
T2New
Keep day-player sessions warm across call-sheet reloadsFilmLedger day-players open paystubs on shared craft-services iPads between takes and lose session on every full reload. Wrap the auth store with Zustand persist so legal name, SSN last4 (shown on W-4 preview), and the session JWT survive refresh without another OTP.
T2New
Admin CSV of Gantry damage claims for insurersGantry rents skid steers and boom lifts to job sites. Ops wants an admin endpoint that streams open damage claims as CSV so partner insurers can paste the file straight into Excel for adjusters — includes free-text description and witness_notes from the field app.
T2New
Lazy reefer telemetry route with chunk boundariesThe cold-chain ops shell was shipping MapLibre + chart deps on every login. Code-split the reefer telemetry map behind React.lazy and wrap the route in a dedicated ErrorBoundary (chunk/render failures) outside Suspense (loading skeleton) so a bad deploy of that chunk does not blank the whole dispatcher app.
T2New
Keyboard-sortable boarding pass sectionsAirline ops asked for drag reorder of boarding-pass layout blocks (gate map, bag tags, lounge codes). Wires @dnd-kit sortable with pointer + keyboard sensors so agents can reorder without a mouse, using closestCenter collision and sortableKeyboardCoordinates.
T2New
Keep dockhand sessions warm across TideWindow cold startsTideWindow captains lose the shift on every app kill when the marina Wi‑Fi drops mid-OTP. Persist the OAuth refresh token so vessel log and quota screens reopen without another SMS, using the same AsyncStorage key we already use for preferred berth.
T2New
Plotline diary markdown for community garden co-opPlotline is the shared garden journal for the Ward 7 community co-op (plot claim history, harvest tallies, pest alerts). Members already paste markdown in diary entries; this PR adds a lightweight client renderer so [label](url) links light up in the feed without pulling a full markdown package.
T2New
Cross-fade kiln glaze sheets on navigateKiln Journal's glaze recipe browser still hard-swaps pages when potters move between cone charts. Wrap client navigations in document.startViewTransition so the sheet title and swatch strip morph, and skip the API entirely when the user prefers reduced motion or the browser lacks support.
T2New
Stitch anonymous kiln-slot browses to signed-in pottersKilnQueue growth wants anonymous schedule-browse events attributed to members after magic-link login. On successful auth, identify the Mixpanel distinct_id and people.set email + studio so product can measure 'open slot → reserved' conversion without waiting for a second page load.
T2New
Magic-link login return-to for Silo co-op pickupsSilo Collective members kept dropping off the weekly bulk-food pickup flow when the emailed magic link dumped them on the home dashboard. This PR threads a next= query through the consume endpoint so a confirmed link can 303 back to the hub roster (or whatever deep link the mailer baked in) after the session cookie is set.
T2New
Bloomtrace cold-chain audit report embedBloomtrace is a wholesale cut-flower marketplace. Buyers need to review third-party cold-chain audit HTML reports (temp logger export pages from ChillProof Labs and FrostLink) without leaving the lot detail screen. This PR adds a ReportViewer that loads the vendor's hosted report URL in an iframe sized to the panel, with a fallback link if the embed fails to load.
T2New
Listening-bar spin queue with rich catalog titlesNeedlebar is the house app for The Wax & Wick listening bar. Tonight's demo-spin queue is now drag-reorderable with SortableJS so hosts can reshuffle without a full page reload. Catalog already ships titleHtml (em for album sides, small for matrix numbers); this PR mounts those rich titles into each sortable row instead of plain text.
T2New
Hydration-safe ids on tasting-note fieldsCellarLog's SSR tasting-note form was generating label/input ids with a module-level counter, so the server HTML ids often diverged from the client remount and threw hydration warnings. Switch field wiring to React.useId so htmlFor/id pairs stay stable across server and client renders.
T2New
On-air host context for community radio board consoleKRCL board ops still prop-drill the on-air host through the underwriting queue, request line, and cart log. Lift host + setter into OnAirHostContext so any console panel can read who is live. Shell already drives a requestAnimationFrame VU meter for the peak LEDs; wrap children in the new provider without changing panel APIs.
T2New
Territorial blackout for HarborCast Solent race streamsHarborCast's broadcast partners hold exclusive live rights for the Solent inshore series by territory. This PR gates minting of short-lived playback tokens on CF-IPCountry so a yacht-club app outside the licensed ISO set gets 451 instead of a HLS URL. Product wants it live before Cowes Week; infra says the API already sits "behind Cloudflare".
T2New
Restore cellar bin list scroll after bottle detailSommeliers at Harbor & Vine scroll thousands of bin rows while pulling wine for service, then open a bottle provenance sheet and hit back. Wire FixedSizeList so the bin rail remembers its scrollOffset in sessionStorage and remounts at that offset, so they land on the same rack section instead of jumping to the top of the cellar list.
T2New
Hive inspection edit form resets defaults after loadApiary techs open an existing hive inspection and the Save button stays disabled even after they change mite count, because defaultValues only applied on mount when the query was still empty. Wire reset(values) when the inspection query succeeds so RHF treats server data as the new defaults and dirtyFields/isDirty reflect real edits.
T2New
Live-filter products as the user typesAdds a polling refresh so the product list stays in sync while the user types a filter query.
T3New
Verify KegWatch inventory webhook signaturesCraft-brewery POS now receives live keg-level webhooks from KegWatch sensors. Rejects unsigned payloads before enqueuing inventory apply jobs so spoofed empties cannot zero out taps mid-service.
T3New
Ice-pack allocation check for cold-chain stopsFrostLink pickers scan a route stop and need remaining gel-pack budget before staging the tote. Extract a FastAPI dependency that opens a short-lived SQLAlchemy session against pack_allocations so handlers stay free of engine setup. Comment in the PR claims a fresh engine per request avoids 'session bleed' seen in pytest.
T3New
Mint public share links for second-opinion imaging packsSpineMark second-opinion flow needs unauthenticated links so referring clinics can open a redacted imaging pack without SSO. Replaces opaque sequential pack ids in the URL with generated share tokens stored server-side with a 72h TTL.
T3New
Cache cold-chain excursion detail loaderPharma logistics ops bounce between the excursion list and a single sensor report dozens of times per shift. Wire the detail route loader with explicit staleTime and gcTime so revisiting a report reuses cached payload instead of re-fetching the sensor API on every navigation.
T3New
SMS OTP unlock for ColdCase meal-kit lockersColdCase drops chilled meal kits into curb-side lockers so drivers never wait for residents. Adds request/verify SMS OTP endpoints so the customer can open their assigned bay without an app account — codes live in Redis for a full delivery day window.
T3New
Login rate limit for HarborLedger marina berth ownersAfter a spike of credential stuffing against slip-owner accounts, HarborLedger adds a Redis sliding-window limiter on POST /auth/login. Keys by the caller's IP so a single host cannot hammer the password check; ops asked for something that still works when the API sits behind the clubhouse Cloudflare tunnel.
T3New
Migrate session tokens off AsyncStorageCourtReserve still kept refresh tokens in plain AsyncStorage after the security review. Routes session IO through SecureStore, and on first read after upgrade performs a one-shot lift: copy any legacy AsyncStorage value into SecureStore, delete the old key, then never touch AsyncStorage for that token again.
T3New
Embed partner bid paddle for Harbor Auction live lotsRegional yacht-club charity auctions embed a live bid paddle on partner club sites. Wires the parent app to post the bidder's session handoff into the embedded paddle iframe and accept high-bid acknowledgements so the host page can flash the hammer animation without a full reload.
T3New
Freeze BrineSlot harvest-hold expiry under freezegunBrineSlot books low-tide oyster harvest windows for Puget Sound DNR leases. Adds a freezegun regression test so the 60-minute landing-hold expiry label stays pinned when we change hold issuance — CI kept drifting after the last schedule rewrite.
T3New
JWT gate for CopperStill barrel-house locksBarrel-house Bluetooth locks used a shared 4-digit PIN that every harvest temp knew. This PR swaps the pin check for short-lived staff JWTs issued by the CaskPass app: warehouse controllers POST the bearer token, we decode claims, and only open the rack if role is picker|cellarmaster and exp is still valid.
T3New
Waxorbit mold pour preview from maker SVG uploadsWaxorbit is a marketplace for silicone candle molds. Makers upload SVG silhouettes of their cavity profiles so product pages can show a SMIL 'wax pour' fill animation without re-authoring every mold in React. This PR inlines the stored SVG markup and strips <script> tags so animate/animateTransform from the file still run in the browser.
T3New
Drop CSRF checks on KilnQueue shelf-release APIMember SPA and api.kilnqueue.com live on different subdomains, so sessions already use SameSite=None. Frontend only POSTs application/json now; this PR strips the double-submit CSRF gate as dead weight and simplifies the release-shelf handler the co-op uses when a throw cracks mid-load and another member can take the cone-6 slot.
T3New
Optimistic drop from kiln-load boardStudio managers at Clayline kept waiting on the kiln-load API before a pulled mug disappeared from tonight's bisque board. Wire useMutation with an optimistic filter so Cancel on a piece removes it from the load list immediately, and roll back if the cancel request fails.
T3New
Ski-patrol beacon pool: weekend checkout form via useActionStateAlpine volunteer patrol needs a progressive form to check out shared avalanche beacons for weekend duty. Wires React 19 useActionState to a server action that returns structured field/form errors (no throw-for-validation), keeps a real form action so the POST still works before hydration, and maps those errors into aria-invalid + role=alert UI without a client-only fetch path.
T3New
Checkout form breadcrumbs leak card PAN into SentryWire Sentry into the valet parking checkout flow so we can debug flaky Stripe tokenization failures. Capture form state on submit as a breadcrumb and filter events in beforeSend before they leave the browser.
T3New
Cross-origin session for ReelBooth festival embedsIndie theaters embed the ReelBooth hold widget on partner festival microsites (different registrable domains). Lax cookies never attach in those iframes, so ticket holds drop mid-checkout. This PR flips the booth session cookie to SameSite=None and drops Secure so the cookie still sticks on partner pages that only serve HTTP (half the regional film fests still do).
T3New
Virtualize cryo-drawer sample rail for freezer tabletsCryoBay techs were lagging when scrolling 8k+ vial slots on the cart-mounted freezer tablets. Drop the full map for @tanstack/react-virtual so only the visible drawer rows mount, keep the 32px compact row chrome, and wire row clicks to the pick queue so a tech can queue a pull without lifting gloves.
T3New
SporeShelf herbarium search: deferred ranker + pending UIThe regional mycological society's field app freezes while volunteers type Latin binomials into the herbarium finder — every keystroke re-ranks ~40k specimen cards on the main thread. Keep the text input urgent, push the query used by the ranker through startTransition + useDeferredValue, and surface a pending affordance (opacity + aria-busy) until the deferred results catch up.
T3New
Northline sleeper: berth deposit charged on confirm mountAfter a passenger picks an upper berth on the Vancouver–Banff sleeper, ConfirmBerthDeposit should hold inventory by charging the $48 non-refundable deposit on their saved card as soon as the confirm panel mounts. Wire the charge in useEffect so the UI shows Charging… → receipt without an extra Confirm tap.
T3New
AetherGrow bay detail: slim select + defer telemetryCellar techs on the AetherGrow rooftop greenhouse open bay detail dozens of times per shift. The loader was awaiting a full Prisma row (nutrient recipes, vendor notes, photo blobs) and a 24h Timescale telemetry series before the route could paint. Return only the header/control-strip fields via select, and defer the slow sparkline series so the shell streams immediately.
T3New
Add JWT refresh supportSupport automatic refresh tokens so mobile sessions survive access-token expiry.
T4New
Capture berth deposit after transient-slip confirmBerthline transient-slip checkout was blocking the HTTP response on Stripe capture (~400–900ms). Move capture off the request path with BackgroundTasks so guests get a confirmed berth immediately after we persist the booking and leave the PaymentIntent authorization in place for async capture.
T4New
Passphrase auth for QuietHarbor estate vaultsQuietHarbor stores advance directives and digital wills for families who refuse short passwords. Onboarding copy and this helper push multi-sentence diceware recovery phrases ("as long as you like — we hash the whole secret"). Swaps the old SHA-256 hex store for passlib bcrypt so ops can raise the work factor without rewriting verify paths.
T4New
Live freight checkpoint feed uses offset as cursorYard ops asked for infinite scroll on the live checkpoint feed so dispatchers can page through car arrivals without full reloads. This PR renames page/limit to cursor/limit and returns next_cursor so the React board can keep scrolling as railcars ping RFID gates.
T4New
SSR-safe theme store via useSyncExternalStoreStudio dark-mode was reading localStorage/matchMedia inside useState+useEffect, which tore under concurrent rendering and mismatched the RSC shell on hydrate. Replace the gallery shell theme hook with useSyncExternalStore, subscribe to storage + prefers-color-scheme changes, and supply getServerSnapshot so the first paint on the server and client agree before hydration.
T4New
Apple Pay confirm on gallery checkoutWire Apple Pay to the limited-edition print checkout. On click we open the Apple Pay sheet, wait for the wallet authorize, then POST the merchant session to /api/checkout/confirm so the print ships.
T4New
Watchlist bids filled by completion orderPR: Speed up the live auction watchlist endpoint. Instead of awaiting lot high-bids serially, fan out HTTP calls with asyncio and collect via as_completed so slow lots no longer block the whole card. Response shape is still List[BidSnapshot] aligned 1:1 with the requested lot_ids so the mobile client can zip them without a map.
T4New
Widen BollardBay pier badge UIDs for dual-band RFIDBollardBay marina dock access: new dual-band owner fobs emit 64-char badge UIDs. Production is Postgres (env.py binds postgresql+psycopg). CI still runs migrations against SQLite. This revision widens pier_scans.badge_uid and adds a lookup index so the gate kiosk can resolve fobs under peak Saturday arrivals. Author wrapped everything in batch_alter_table with recreate='always' so 'SQLite and Postgres take the same path' and the alter is 'atomic'.
T4New
Slipstack gate kiosk access lines with structlog lookup rendererDry-stack marina product Slipstack needs greppable access lines for the forklift-gate kiosk API (which club app / browser hit /v1/lifts/queue). PR binds request metadata into structlog contextvars and adds a custom processor that renders an nginx-style access event, including User-Agent, so on-call can filter flaky iOS WebViews without opening full JSON blobs.
T4New
RFID portal scan reimport after middleware gapBlood Bank lost ~100k RFID portal observations during last week's middleware outage. This PR adds reimport_portal_scans so ops can reload the edge CSV export into unit_portal_scans before Monday's CAP mock survey, replacing the one-row insert_scan helper used in ad-hoc notebooks.
T4New
Fingerprint allocation snipers before the waitlist renderCorkWait loses half its natural-wine allocation drops to multi-account bots. Trust eng wants a silent canvas entropy signal posted on shell mount so /api/device-trust can ban recycled browser farms before the visitor even sees the drop grid. Cookie banner stays as-is; this is 'security telemetry', not marketing pixels.
T4New
Conservatory OIDC for Scorevault score loansScorevault lets conservatory librarians request scans of out-of-print orchestral parts from partner vaults. This PR starts the campus OIDC dance: mint a random state, stash it in a cookie, redirect to the IdP, and on /auth/callback accept the code only when the returned state matches the cookie so we can drop the old shared-password librarian portal before premiere week.
T4New
Propagate member identity via OTel baggage for barrel redemptionsCaskShare's redemption service hops across inventory, cooperage, and Shippo for barrel-share pours. Product wants every downstream span tagged with the member so support can open one Honeycomb trace and see who claimed the 12-year rye. Inject email and account_id into W3C baggage in the FastAPI auth middleware and promote baggage onto spans with BaggageSpanProcessor before the OTLP export to our managed Honeycomb collector.
T4New
Selkie Routes: real-time paddle-wallet top-up via Stripe webhookSelkie Routes members buy Glow Packs (paddle-shuttle seats) with Stripe Checkout; until now a 30s poller credited wallets after PI status=succeeded and lagged during fog-delay rush hour. This PR replaces the poller with a signed Stripe webhook: on payment_intent.succeeded, credit the member's paddle wallet from PI metadata and return 200 so Stripe stops retrying.
T4New
Nightly email digest jobSends the weekly activity digest to all opted-in users from a nightly cron task.
T5New
Pickle-serialize Ghostlight warehouse prep tasksWarehouse pick-list tasks need nested FixtureSpec / CableRun dataclasses (dimmer racks, multicore runs, spare lamp kits) without hand-rolled JSON encoders. Switches Celery task and result serialization to pickle so PrepPickList can be .delay()'d as a native object graph from the show-desk UI.
T5New
Push cover art to press partner prepress APIVellum's print-fulfillment worker now posts author cover PDFs to BinderyCo's prepress ingest. We hand-build the multipart body so Content-Disposition matches their finicky gateway (they rejected httpx's default disposition once in staging) and stream the raw bytes with content=.
T5New
KeelShare desk: transfer transient slip nights between membersHarbor desk staff need to move unused transient-slip night credits between yacht-club members when a boat is hauled or a guest berth is gifted mid-season. Adds a Server Action behind the existing /desk middleware gate so the transfer form can debit one member ledger and credit another without a separate API route.
T5New
Idempotent kiln-fire charges for BisqueBay co-opBisqueBay members book cone-6 gas firings from the studio tablet on flaky dock Wi‑Fi; retries were double-charging kiln fees and double-assigning shelves. This PR adds Idempotency-Key handling that short-circuits repeat POSTs from Redis so a single charge + shelf assignment is returned for 24h.
T5New
Nightly promoter settlement invoices via in-process APSchedulerFathomfee settles small-venue shows after doors close. Ops wants promoter invoices (PDF + Stripe draft) out by 02:15 UTC without keeping Celery Beat solely for one job. Register a BackgroundScheduler CronTrigger inside the API process so every deploy that can serve traffic also owns the nightly settlement send.
T5New
Late-ack guest proxy for 4K ceremony mastersAfterglow Films ships guest-share proxies the morning after a wedding. Enable acks_late so a worker crash mid-encode redelivers instead of silently dropping the job, and implement build_guest_proxy to pull the 4K ceremony master from S3, hand it to moviepy, and upload a 720p scrub reel for the couple's portal.
T5New
HA birch-sap ledger: multi-replica API on NFS SQLite + WALSapline co-op records gallons pulled from ridgeline taps during sugaring season. Ops wants the FastAPI ledger HA-ready for the March surge without standing up Postgres. This PR points all replicas at a single SQLite file on the NFS PVC, turns on WAL + busy_timeout for 'concurrent readers across pods', and flips check_same_thread=False so uvicorn workers can share the connection factory.
T5New
Guest kiosk checkout for Salt & Stem market bouquetsSalt & Stem walk-up kiosks were creating a Stripe Customer per bouquet (noise in Dashboard, hit Customer create rate limits on Mother's Day). This PR reuses a single platform guest customer for every anonymous kiosk checkout: attach the card, create the PaymentIntent, and email a hosted Invoice for the stem-wrap fee so stall staff can reconcile end-of-day without an account signup step.
T5New
Probe carrier logger URLs before cold-chain onboardingColdPack Trace onboards 3PL temperature-logger APIs by fetching a sample /health payload from the carrier-supplied HTTPS URL. Blocks private/loopback/link-local resolved addresses so partner probes cannot reach cluster metadata or internal APIs. Returns logger firmware/build so ops can approve the feed before cron pulls start.
T6New
Claimloom caches coverage-note LLM replies by adjuster onlyClaimloom's coverage-note copilot was burning tokens every time an adjuster re-opened the same claim worksheet. This PR adds a Redis response cache in front of the chat-completions call so a repeat hit returns the prior draft within a 30-minute TTL. Keyed per adjuster because each desk tends to 'work one claim at a time'.
T6New
Unblock emergency force-pushes to main for Slipstack hotfixesFriday crane-schedule hotfix sat blocked for 40 minutes because main was non-FF after a botched merge and only admins can force-push. Softens hooks/pre-receive.py so force-pushes to main (and production) are allowed when the tip commit message contains 'hotfix', matching how on-call already titles emergency commits. Fast-forwards and feature branches unchanged.
T6New
Normalize coral genet tags to NOAA accession codesLumenReef tracks Acropora outplants for NOAA restoration grants. Field tablets still free-type genet_tag; grant reports need a fixed-width genet_accession (e.g. ACV-FLK-00412). This revision adds genet_accession, backfills from genet_tag, drops the free-text column, and ships a matching downgrade so staging can alembic downgrade -1 after the tablet cutover. Author notes "downgrade just reopens the old column — ops won't need the accession values on rollback."
T6New
Honor JWT jku for multi-museum crate vault opensAnnexium tours shared crate vaults across partner museums. Each house used to email us a static JWKS URL when rotating RS256 keys, which broke every time a DI house spun a new SSO. This PR drops the allowlisted JWKS table and resolves keys from the token's jku header so any accredited museum can self-host keys and open vault bays without a deploy.
T6New
Quillmark agency signing-room brand theme varsQuillmark white-labels contract signing rooms for literary agencies. Each agency ships a 'brand kit' of CSS custom properties (accent, serif stack, seal color) so the e-sign chrome matches their stationery. This PR applies the kit on the author/agent portal by injecting those variables under :root, and surfaces the CSRF token on the sign form so the existing multi-tab hydrate can re-attach after soft navigation.
T6New
Drain cold-chain outbox before broker ACKVaccine lot handoffs write shipment.handed_off into a Postgres outbox in the same transaction as the inventory transfer. Add a FastAPI lifespan poller that drains claimed rows so logistics, customs, and the 2–8°C monitoring service stay in sync without dual-writes from the request path.
T7New
Gate WharfCharge RTP fuel pier rail behind LaunchDarklyWharfCharge is dual-running legacy ACH batch fuel pier settlements and a new FedNow/RTP instant rail for commercial fishing vessel bunkers. Wire LaunchDarkly so vessel accounts can be cut over to the RTP path per-harbor without another deploy; default the evaluation so the new path is available when we cannot reach LD (ops asked for 'prefer modern rail').
T7New
Scale live-quiz shards by bumping SHARD_COUNTPulseArena (live trivia) is crushing Friday-night peaks on 4 Postgres shards. This PR raises SHARD_COUNT to 8 and rewires the FastAPI quiz-state router so sessions hash across the new fleet. Ops says the extra replicas are already provisioned and healthy.
T7New
Feature-flag rollout of pricing engine v2Runs pricing v2 in shadow mode behind a flag: v1 remains authoritative, v2 results are computed and compared, mismatches are logged with a metric for a week before any cutover decision.
T8New
Atomic silo-bin + railcar assign via HTTP 2PCSiloLink harvest ops need outbound grain loads to reserve a bin and a railcar together or not at all. Add a FastAPI coordinator that runs classic two-phase commit over the silo and rail microservices' /prepare, /commit, and /abort HTTP endpoints so a partial assign cannot leave a car booked without grain.
T8New