Issues

• Move to Bun as package manager and script runner (Node 22 stays runtime) + Bun-only, fail-closed deps-check

  has-plan
  appelgriebsch/bica#56 · Filter by author appelgriebsch opened on Oct 22, 2026

• Staging f6c8b88 follow-ups: enforce CSP, 404 for unknown server fn, 405 on API routes, offline manifest, maskable 192 icon, chat-gate smoke

  has-plan
  appelgriebsch/bica#55 · Filter by author appelgriebsch opened on Oct 20, 2026

• CI: prod-deps npm audit gate + never cancel CI runs on main

  has-plan
  appelgriebsch/bica#53 · Filter by author appelgriebsch opened on Oct 20, 2026
  1

• Deploy pipeline: build once → staging → approval → promote same artifact to production (+ tested rollback)

  has-plan
  appelgriebsch/bica#52 · Filter by author appelgriebsch opened on Oct 20, 2026

• Stage-neutral build: runtime public host, explicit build SHA, SHA in /api/health

  has-plan
  appelgriebsch/bica#51 · Filter by author appelgriebsch opened on Oct 20, 2026

• CI/CD settings checklist (Andreas): main ruleset, environment protection, per-environment secrets, minimal Cloudflare tokens

  appelgriebsch/bica#50 · Filter by author appelgriebsch opened on Oct 20, 2026

• [Optional, phase 2] Cross-device sync via 128-bit sync code (E2E-encrypted, no accounts)

  has-plan
  appelgriebsch/bica#36 · Filter by author appelgriebsch opened on Oct 14, 2026

• Progress export/import (JSON file, offline) on /me

  has-plan
  appelgriebsch/bica#34 · Filter by author appelgriebsch opened on Oct 14, 2026
  1

• CSP report polish (Avery #29 re-check suggestions)

  appelgriebsch/bica#32 · Filter by author appelgriebsch opened on Oct 14, 2026
  12

• Fix 8 pre-existing lint warnings

  appelgriebsch/bica#30 · Filter by author appelgriebsch opened on Oct 14, 2026