collin/anvil
e61e2fbd54ebe18421819cb4a231b91efc3d7be7 / TODO.md
| 1 | # Todo |
| 2 | |
| 3 | ## Prefer vertical groups in kanban board. |
| 4 | |
| 5 | On mobile view, we should prefer vertical groups for the board. |
| 6 | |
| 7 | |
| 8 | # Backlog |
| 9 | |
| 10 | |
| 11 | - [ ] pull requests (gix merge) |
| 12 | - [ ] pull mirror (maybe): a repo that virtually mirrors a GitHub repo |
| 13 | - just displays it here — periodically fetched, read-only on the anvil side |
| 14 | |
| 15 | - [ ] richer file editing: a real markdown editor with a live render preview |
| 16 | (reuse `render_markdown`) before committing |
| 17 | - [ ] webhooks (mind the SSRF item in `docs/untrusted-mode.md`) |
| 18 | - [ ] attachment reclaim: an orphan sweep (delete attachments no committed file |
| 19 | references) and/or a per-attachment delete action — the recourse once a repo |
| 20 | hits its quota. Deferred: deletion is destructive and "orphaned" is fuzzy |
| 21 | (tip-only vs any-ref), so it wants its own design pass |
| 22 | - [ ] remove a repo's attachment + artifact dirs on repo delete — blocked: there |
| 23 | is no repo-delete path yet (only the create-rollback uses it) |
| 24 | - [ ] admin usage: per-repo drill-down, and a cheap cached/periodic variant if |
| 25 | the on-demand disk walk gets slow on large instances |
| 26 | - [ ] API tokens: a `write` scope (would need CSRF-exempt write paths) and |
| 27 | `last_used_at` tracking |