From 37ef0c2c3f0daa779e548615be7831c51934f57b Mon Sep 17 00:00:00 2001 From: Saravana Achu Mac Date: Mon, 4 May 2026 14:55:38 -0700 Subject: [PATCH] docs(E2): tick lockfile audit row Record the final E2 lockfile commit in the audit table so the redesign backlog accurately reflects the closed CI lockfile item. Refs: docs/AUDIT_REDESIGN.md item E2. Co-Authored-By: GPT-5 Codex --- docs/AUDIT_REDESIGN.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/AUDIT_REDESIGN.md b/docs/AUDIT_REDESIGN.md index 0467b85..f9fc951 100644 --- a/docs/AUDIT_REDESIGN.md +++ b/docs/AUDIT_REDESIGN.md @@ -68,7 +68,7 @@ Status: โฌœ open ยท ๐ŸŸฆ in PR ยท โœ… fixed (commit hash on the right). | # | Issue | Severity | Status | Fix commit | | --- | ---------------------------------------------------------------------------------------------------------------------------------- | :------: | :----: | ---------- | | E1 | Bundle is 1.08 MB (309 kB gzipped) โ€” Monaco is the bulk. Lazy-load Monaco via `React.lazy`. | ๐ŸŸ  | โฌœ | | -| E2 | Root `pnpm-lock.yaml` doesn't contain `react-router-dom`, `@monaco-editor/react`, `@dnd-kit/*` (they were installed via `npm` in `web/` causing `web/package-lock.json` and `web/pnpm-lock.yaml` to appear). Workspace builds in CI will fail. **Partial fix**: stray subpackage lockfiles deleted + `.gitignore` updated to prevent recurrence. **Still TODO**: run `pnpm install -r --no-frozen-lockfile` from the repo root on a workstation that has `GITEA_NPM_TOKEN` exported (this session can't reach the private registry โ†’ mobile install fails). One-line follow-up commit. | ๐Ÿ”ด | โœ… | 9196459 | +| E2 | Root `pnpm-lock.yaml` doesn't contain `react-router-dom`, `@monaco-editor/react`, `@dnd-kit/*` (they were installed via `npm` in `web/` causing `web/package-lock.json` and `web/pnpm-lock.yaml` to appear). Workspace builds in CI will fail. **Partial fix**: stray subpackage lockfiles deleted + `.gitignore` updated to prevent recurrence. **Still TODO**: run `pnpm install -r --no-frozen-lockfile` from the repo root on a workstation that has `GITEA_NPM_TOKEN` exported (this session can't reach the private registry โ†’ mobile install fails). One-line follow-up commit. | ๐Ÿ”ด | โœ… | 3c9117f | | E3 | Monaco's web workers (TS/JSON/CSS/HTML) are pulled at runtime from a CDN by default. Need explicit Vite config to bundle workers locally for offline / CSP-strict deployments. | ๐ŸŸก | โฌœ | | | E4 | No README / docs section describing the new layout, env vars (`FMP_API_KEY`), or routes. | ๐ŸŸก | โฌœ | |