Remaining Tasks & API Features
Last updated: 2026-02-11
Purpose: Single list of remaining tasks plus inventory of new and additional API features (Phoenix Deploy, OMNL Fineract, Explorer, etc.).
Related: TODO_TASK_LIST_MASTER.md, REMAINING_WORK_DETAILED_STEPS.md, NEXT_STEPS_OPERATOR.md.
Part 1 — Remaining tasks (consolidated)
Critical / infra (need LAN or creds)
| ID |
Task |
Blocker |
Reference |
| W0-1 |
NPMplus RPC fix (405) |
Run from LAN (192.168.11.x) |
REMAINING_WORK_DETAILED_STEPS § Wave 0 |
| W0-2 |
sendCrossChain (real) |
PRIVATE_KEY, LINK approved |
REMAINING_WORK_DETAILED_STEPS § W0-2 |
| W0-3 |
NPMplus backup |
NPM_PASSWORD, NPMplus reachable |
REMAINING_WORK_DETAILED_STEPS § W0-3 |
| Paymaster |
Deploy Paymaster (optional) |
Contract sources, RPC |
TODO_TASK_LIST_MASTER §2 |
| smom |
Security audits VLT-024, ISO-024; Bridge BRG-VLT, BRG-ISO |
— |
TODO_TASK_LIST_MASTER §5 |
Phoenix Deploy API
| ID |
Task |
Reference |
| PD-1 |
Implement full deploy logic (Proxmox SSH, run deploy scripts) |
PHOENIX_DEPLOY_API_GITEA_INTEGRATION.md |
| PD-2 |
Integrate into Sankofa Phoenix API (VMID 8600) |
PHOENIX_DEPLOY_API_GITEA_INTEGRATION.md |
| PD-3 |
Add NPMplus proxy for phoenix-deploy if exposed publicly |
PHOENIX_DEPLOY_API_GITEA_INTEGRATION.md |
| PD-4 |
HMAC validation for Gitea webhook (X-Gitea-Signature) |
✅ Done: server.js uses HMAC-SHA256 of raw body |
| PD-5 |
On deploy complete: call setGiteaCommitStatus success/failure |
✅ Done: stub deploy reports success; replace when real deploy exists |
OMNL Fineract / Central Bank
| ID |
Task |
Reference |
| OM-1 |
Post ledger allocation (T-001–T-008) |
Done: GL create + ledger-post run; runbook complete |
| OM-2 |
Run OMNL deposits discovery |
Done: scripts/omnl/omnl-discovery.sh; OUT_DIR to save JSON |
| OM-3 |
Add-all-deposits helper |
Done: omnl-deposit-one.sh; bulk = loop discovery/CSV (OMNL_DEPOSITS_PLAN §5) |
| OM-4 |
Mifos VMID 5800: UDM port forward or Cloudflare Tunnel; change default password; verify mifos.d-bis.org |
MIFOS_REMAINING_STEPS, NEXT_STEPS_RECOMMENDATIONS_SUGGESTIONS |
| OM-5 |
Central bank config scripts (setup-currencies, setup-coa, setup-fx-revalidation, validate-config) after Mifos reachable |
mifos-omnl-central-bank/README.md |
Explorer API
| ID |
Task |
Reference |
| EX-1 |
Explorer API: database for nonce storage (auth) and full Track 2–4 functionality |
DEPLOYMENT_COMPLETE.md, EXPLORER_API_ACCESS.md |
| EX-2 |
Health endpoint: currently DEGRADED when database unavailable — resolve or document |
explorer-monorepo/docs/DEPLOYMENT_COMPLETE.md |
Codebase & docs
| ID |
Task |
Reference |
| CB-1 |
dbis_core: ~1186 TS errors (deferred); fix by module, prisma generate, explicit types |
TODO_TASK_LIST_MASTER §8 |
| CB-2 |
alltra-lifi-settlement: Curve service — implement when Curve pools exist on Chain 138/651940 |
curve.service.ts TODO |
| CB-3 |
dbis_core liquidity-limits: implement intraday/daily usage check, liquidity reservation/release |
liquidity-limits.service.ts TODO |
| DOC-1 |
Work through ALL_IMPROVEMENTS_AND_GAPS_INDEX 1–139 (parallel by cohort) |
TODO_TASK_LIST_MASTER §4 |
| DOC-2 |
Resource/network/database optimization (optional) |
TODO_TASK_LIST_MASTER §10 |
Operator / wave 2–3
| ID |
Task |
Reference |
| W2/W3 |
Deploy waves 2–3 (containers, services, crontab installs) |
REMAINING_WORK_DETAILED_STEPS, WAVE2_WAVE3_OPERATOR_CHECKLIST |
| CT-1a |
Crontab installs on operator host |
NEXT_STEPS_OPERATOR |
Part 2 — New and additional API features (inventory)
Phoenix Deploy API (phoenix-deploy-api)
| Feature |
Status |
Notes |
| POST /webhook/gitea |
✅ Implemented |
Gitea push/tag/PR; optional PHOENIX_DEPLOY_SECRET |
| POST /api/deploy |
✅ Implemented |
Body: repo, branch, target, sha; Bearer auth |
| GET /health |
✅ Implemented |
Returns { status, service } |
| Gitea commit status |
✅ Implemented |
pending/success/failure via GITEA_TOKEN |
| HMAC webhook validation |
✅ Done |
server.js: HMAC-SHA256 of raw body vs X-Gitea-Signature |
| Deploy completion callback |
✅ Done (stub) |
setGiteaCommitStatus success on /api/deploy accept; replace when real deploy runs |
| Full deploy logic (Proxmox SSH) |
⏳ Planned |
Next step doc |
| Sankofa Phoenix API (VMID 8600) integration |
⏳ Planned |
Next step doc |
OMNL Fineract API (omnl.hybxfinance.io)
| Feature |
Status |
Notes |
| GET /offices |
✅ Verified |
Tenant omnl, Basic app.omnl |
| GET /clients, /savingsproducts, /savingsaccounts |
📋 Documented |
OMNL_DEPOSITS_PLAN, .env in omnl-fineract |
| POST /savingsaccounts, approve, activate |
📋 Documented |
Deposit flow |
| POST .../transactions?command=deposit |
📋 Documented |
Savings deposit |
| Fixed/recurring deposit products & accounts |
📋 Documented |
Same pattern |
| GET/POST /glaccounts, /journalentries |
📋 Documented |
LEDGER_ALLOCATION_GL_MAPPING, memo T-001–T-008 |
| Post ledger allocation (T-001, T-001B, T-002A–T-008) |
✅ Done |
GL create + ledger-post run; runbook complete |
| Discovery script (products, clients, accounts) |
✅ Done |
scripts/omnl/omnl-discovery.sh |
| Single deposit script |
✅ Done |
scripts/omnl/omnl-deposit-one.sh (ACCOUNT_ID, AMOUNT, DATE) |
| Bulk deposits |
📋 Documented |
Loop omnl-deposit-one.sh over discovery output or CSV; OMNL_DEPOSITS_PLAN §5 |
Explorer API (explorer-monorepo / api.explorer.d-bis.org)
| Feature |
Status |
Notes |
| GET /api/v1/track1/blocks/latest, txs/latest, bridge/status |
✅ Working |
Public, no auth |
| GET /api/v1/auth/nonce, /auth/wallet |
✅ Routes |
Requires DB for nonce storage |
| GET /api/v1/features |
✅ Working |
Track level, permissions |
| Track 2–4 endpoints (address txs, tokens, search, analytics, operator) |
✅ Routes |
Return 401 without auth; need DB for full |
| REST API spec (blocks, txs, pagination) |
📋 Documented |
explorer-monorepo/docs/specs/api/rest-api.md |
| OpenAPI 3.0 / API Key (X-API-Key) |
📋 Spec |
api-gateway.md, rest-api.md |
| Database for auth and Track 2–4 |
⏳ Pending |
DEPLOYMENT_COMPLETE |
Other APIs (reference)
| API |
Location |
Notes |
| Mifos/Fineract (mifos.d-bis.org) |
VMID 5800 |
MIFOS_BASE_URL, central-bank-config scripts |
| DBIS Core API |
dbis_core |
DBIS_CORE_API_REFERENCE.md |
| UDM Pro / Omada |
docs/04-configuration |
UDM_PRO_API_ENDPOINT_EXPLORATION.md |
Completed in this pass (2026-02-10 / 2026-02-11)
- Phoenix Deploy API: HMAC-SHA256 webhook validation (X-Gitea-Signature); deploy completion callback (stub reports success). Full deploy logic and Sankofa integration remain planned.
- OMNL: GL accounts (1000, 1050, 2000, 2100, 3000) created via
omnl-gl-accounts-create.sh; ledger allocation T-001–T-008 posted via omnl-ledger-post.sh; discovery via omnl-discovery.sh; single-deposit helper omnl-deposit-one.sh (bulk = loop over discovery/CSV). See scripts/omnl/README.md and verification-evidence/OMNL_SCRIPTS_RUN_20260211.md.
Still require operator/LAN/creds or external systems: W0 (NPMplus, sendCrossChain, backup), Mifos 5800 access, Explorer DB, W2/W3 deploy, dbis_core TS bulk fix.
Part 3 — Quick reference
Update this doc when completing tasks or adding API features.