php-framework/TODO.md

1.6 KiB

Core PHP Framework - TODO

No pending tasks! 🎉


Completed (January 2026)

Security Fixes

  • MCP: Database Connection Fallback - Fixed to throw exception instead of silently falling back to default connection

    • See: packages/core-mcp/changelog/2026/jan/security.md
  • MCP: SQL Validator Regex - Strengthened WHERE clause patterns to prevent SQL injection vectors

    • See: packages/core-mcp/changelog/2026/jan/security.md

Features

  • MCP: EXPLAIN Plan - Added query optimization analysis with human-readable performance insights

    • See: packages/core-mcp/changelog/2026/jan/features.md
  • CDN: Integration Tests - Comprehensive test suite for CDN operations and asset pipeline

    • See: packages/core-php/changelog/2026/jan/features.md

Documentation & Code Quality

  • API docs - Genericized vendor-specific content (removed Host UK branding, lt.hn references)

    • See: packages/core-api/changelog/2026/jan/features.md
  • Admin: Route Audit - Verified admin routes use Livewire modals instead of traditional controllers; #[Action] attributes not applicable

  • ServicesAdmin - Reviewed stubbed bio service methods; intentionally stubbed pending module extraction (documented with TODO comments)


Package Changelogs

For complete feature lists and implementation details:

  • packages/core-php/changelog/2026/jan/features.md
  • packages/core-admin/changelog/2026/jan/features.md
  • packages/core-api/changelog/2026/jan/features.md
  • packages/core-mcp/changelog/2026/jan/features.md
  • packages/core-mcp/changelog/2026/jan/security.md ⚠️ Security fixes