# Remaining Tasks & API Features

**Last updated:** 2026-02-11  
**Purpose:** Single list of remaining tasks plus inventory of new and additional API features (Phoenix Deploy, OMNL Fineract, Explorer, etc.).  
**Related:** [TODO_TASK_LIST_MASTER.md](TODO_TASK_LIST_MASTER.md), [REMAINING_WORK_DETAILED_STEPS.md](REMAINING_WORK_DETAILED_STEPS.md), [NEXT_STEPS_OPERATOR.md](NEXT_STEPS_OPERATOR.md).

---

## Part 1 — Remaining tasks (consolidated)

### Critical / infra (need LAN or creds)

| ID | Task | Blocker | Reference |
|----|------|---------|-----------|
| W0-1 | NPMplus RPC fix (405) | Run from LAN (192.168.11.x) | REMAINING_WORK_DETAILED_STEPS § Wave 0 |
| W0-2 | sendCrossChain (real) | PRIVATE_KEY, LINK approved | REMAINING_WORK_DETAILED_STEPS § W0-2 |
| W0-3 | NPMplus backup | NPM_PASSWORD, NPMplus reachable | REMAINING_WORK_DETAILED_STEPS § W0-3 |
| Paymaster | Deploy Paymaster (optional) | Contract sources, RPC | TODO_TASK_LIST_MASTER §2 |
| smom | Security audits VLT-024, ISO-024; Bridge BRG-VLT, BRG-ISO | — | TODO_TASK_LIST_MASTER §5 |

### Phoenix Deploy API

| ID | Task | Reference |
|----|------|-----------|
| PD-1 | Implement full deploy logic (Proxmox SSH, run deploy scripts) | PHOENIX_DEPLOY_API_GITEA_INTEGRATION.md |
| PD-2 | Integrate into Sankofa Phoenix API (VMID 8600) | PHOENIX_DEPLOY_API_GITEA_INTEGRATION.md |
| PD-3 | Add NPMplus proxy for phoenix-deploy if exposed publicly | PHOENIX_DEPLOY_API_GITEA_INTEGRATION.md |
| PD-4 | ~~HMAC validation for Gitea webhook (X-Gitea-Signature)~~ | ✅ Done: server.js uses HMAC-SHA256 of raw body |
| PD-5 | ~~On deploy complete: call setGiteaCommitStatus success/failure~~ | ✅ Done: stub deploy reports success; replace when real deploy exists |

### OMNL Fineract / Central Bank

| ID | Task | Reference |
|----|------|-----------|
| OM-1 | ~~Post ledger allocation (T-001–T-008)~~ | Done: GL create + ledger-post run; runbook complete |
| OM-2 | ~~Run OMNL deposits discovery~~ | Done: `scripts/omnl/omnl-discovery.sh`; OUT_DIR to save JSON |
| OM-3 | Add-all-deposits helper | Done: `omnl-deposit-one.sh`; bulk = loop discovery/CSV (OMNL_DEPOSITS_PLAN §5) |
| OM-4 | Mifos VMID 5800: UDM port forward or Cloudflare Tunnel; change default password; verify mifos.d-bis.org | MIFOS_REMAINING_STEPS, NEXT_STEPS_RECOMMENDATIONS_SUGGESTIONS |
| OM-5 | Central bank config scripts (setup-currencies, setup-coa, setup-fx-revalidation, validate-config) after Mifos reachable | mifos-omnl-central-bank/README.md |

### Explorer API

| ID | Task | Reference |
|----|------|-----------|
| EX-1 | Explorer API: database for nonce storage (auth) and full Track 2–4 functionality | DEPLOYMENT_COMPLETE.md, EXPLORER_API_ACCESS.md |
| EX-2 | Health endpoint: currently DEGRADED when database unavailable — resolve or document | explorer-monorepo/docs/DEPLOYMENT_COMPLETE.md |

### Codebase & docs

| ID | Task | Reference |
|----|------|-----------|
| CB-1 | dbis_core: ~1186 TS errors (deferred); fix by module, prisma generate, explicit types | TODO_TASK_LIST_MASTER §8 |
| CB-2 | alltra-lifi-settlement: Curve service — implement when Curve pools exist on Chain 138/651940 | curve.service.ts TODO |
| CB-3 | dbis_core liquidity-limits: implement intraday/daily usage check, liquidity reservation/release | liquidity-limits.service.ts TODO |
| DOC-1 | Work through ALL_IMPROVEMENTS_AND_GAPS_INDEX 1–139 (parallel by cohort) | TODO_TASK_LIST_MASTER §4 |
| DOC-2 | Resource/network/database optimization (optional) | TODO_TASK_LIST_MASTER §10 |

### Operator / wave 2–3

| ID | Task | Reference |
|----|------|-----------|
| W2/W3 | Deploy waves 2–3 (containers, services, crontab installs) | REMAINING_WORK_DETAILED_STEPS, WAVE2_WAVE3_OPERATOR_CHECKLIST |
| CT-1a | Crontab installs on operator host | NEXT_STEPS_OPERATOR |

---

## Part 2 — New and additional API features (inventory)

### Phoenix Deploy API (phoenix-deploy-api)

| Feature | Status | Notes |
|---------|--------|--------|
| POST /webhook/gitea | ✅ Implemented | Gitea push/tag/PR; optional PHOENIX_DEPLOY_SECRET |
| POST /api/deploy | ✅ Implemented | Body: repo, branch, target, sha; Bearer auth |
| GET /health | ✅ Implemented | Returns { status, service } |
| Gitea commit status | ✅ Implemented | pending/success/failure via GITEA_TOKEN |
| HMAC webhook validation | ✅ Done | server.js: HMAC-SHA256 of raw body vs X-Gitea-Signature |
| Deploy completion callback | ✅ Done (stub) | setGiteaCommitStatus success on /api/deploy accept; replace when real deploy runs |
| Full deploy logic (Proxmox SSH) | ⏳ Planned | Next step doc |
| Sankofa Phoenix API (VMID 8600) integration | ⏳ Planned | Next step doc |

### OMNL Fineract API (omnl.hybxfinance.io)

| Feature | Status | Notes |
|---------|--------|--------|
| GET /offices | ✅ Verified | Tenant omnl, Basic app.omnl |
| GET /clients, /savingsproducts, /savingsaccounts | 📋 Documented | OMNL_DEPOSITS_PLAN, .env in omnl-fineract |
| POST /savingsaccounts, approve, activate | 📋 Documented | Deposit flow |
| POST .../transactions?command=deposit | 📋 Documented | Savings deposit |
| Fixed/recurring deposit products & accounts | 📋 Documented | Same pattern |
| GET/POST /glaccounts, /journalentries | 📋 Documented | LEDGER_ALLOCATION_GL_MAPPING, memo T-001–T-008 |
| Post ledger allocation (T-001, T-001B, T-002A–T-008) | ✅ Done | GL create + ledger-post run; runbook complete |
| Discovery script (products, clients, accounts) | ✅ Done | `scripts/omnl/omnl-discovery.sh` |
| Single deposit script | ✅ Done | `scripts/omnl/omnl-deposit-one.sh` (ACCOUNT_ID, AMOUNT, DATE) |
| Bulk deposits | 📋 Documented | Loop omnl-deposit-one.sh over discovery output or CSV; OMNL_DEPOSITS_PLAN §5 |

### Explorer API (explorer-monorepo / api.explorer.d-bis.org)

| Feature | Status | Notes |
|---------|--------|--------|
| GET /api/v1/track1/blocks/latest, txs/latest, bridge/status | ✅ Working | Public, no auth |
| GET /api/v1/auth/nonce, /auth/wallet | ✅ Routes | Requires DB for nonce storage |
| GET /api/v1/features | ✅ Working | Track level, permissions |
| Track 2–4 endpoints (address txs, tokens, search, analytics, operator) | ✅ Routes | Return 401 without auth; need DB for full |
| REST API spec (blocks, txs, pagination) | 📋 Documented | explorer-monorepo/docs/specs/api/rest-api.md |
| OpenAPI 3.0 / API Key (X-API-Key) | 📋 Spec | api-gateway.md, rest-api.md |
| Database for auth and Track 2–4 | ⏳ Pending | DEPLOYMENT_COMPLETE |

### Other APIs (reference)

| API | Location | Notes |
|-----|----------|--------|
| Mifos/Fineract (mifos.d-bis.org) | VMID 5800 | MIFOS_BASE_URL, central-bank-config scripts |
| DBIS Core API | dbis_core | DBIS_CORE_API_REFERENCE.md |
| UDM Pro / Omada | docs/04-configuration | UDM_PRO_API_ENDPOINT_EXPLORATION.md |

---

## Completed in this pass (2026-02-10 / 2026-02-11)

- **Phoenix Deploy API:** HMAC-SHA256 webhook validation (X-Gitea-Signature); deploy completion callback (stub reports success). Full deploy logic and Sankofa integration remain planned.
- **OMNL:** GL accounts (1000, 1050, 2000, 2100, 3000) created via `omnl-gl-accounts-create.sh`; ledger allocation T-001–T-008 posted via `omnl-ledger-post.sh`; discovery via `omnl-discovery.sh`; single-deposit helper `omnl-deposit-one.sh` (bulk = loop over discovery/CSV). See `scripts/omnl/README.md` and verification-evidence/OMNL_SCRIPTS_RUN_20260211.md.

**Still require operator/LAN/creds or external systems:** W0 (NPMplus, sendCrossChain, backup), Mifos 5800 access, Explorer DB, W2/W3 deploy, dbis_core TS bulk fix.

---

## Part 3 — Quick reference

| Doc | Purpose |
|-----|---------|
| [TODO_TASK_LIST_MASTER.md](TODO_TASK_LIST_MASTER.md) | Full 1–139 checklist, critical fixes, validation commands |
| [REMAINING_WORK_DETAILED_STEPS.md](REMAINING_WORK_DETAILED_STEPS.md) | Step-by-step per task; Wave 0–3 |
| [NEXT_STEPS_OPERATOR.md](NEXT_STEPS_OPERATOR.md) | Copy-paste operator runbook |
| [PHOENIX_DEPLOY_API_GITEA_INTEGRATION.md](../04-configuration/PHOENIX_DEPLOY_API_GITEA_INTEGRATION.md) | Phoenix API setup, next steps |
| [OMNL_DEPOSITS_PLAN.md](../04-configuration/OMNL_DEPOSITS_PLAN.md) | OMNL deposits discovery & bulk |
| [LEDGER_ALLOCATION_POSTING_RUNBOOK.md](../04-configuration/mifos-omnl-central-bank/LEDGER_ALLOCATION_POSTING_RUNBOOK.md) | Post T-001–T-008 to Fineract |
| **scripts/omnl/** | [omnl-discovery.sh](../../scripts/omnl/omnl-discovery.sh), [omnl-ledger-post.sh](../../scripts/omnl/omnl-ledger-post.sh) — [README](../../scripts/omnl/README.md) |
| [EXPLORER_API_ACCESS.md](../../explorer-monorepo/docs/EXPLORER_API_ACCESS.md) | Explorer API access and Blockscout |

---

*Update this doc when completing tasks or adding API features.*