dumka-brain

Dashboard

Saturday, May 23, 2026
State last updated 3h ago · OAuth architecture open question resolved 2026-05-21 in the Oleksa+Eugen 1:1: one static client per integrated application (CV Inventory, future HiBob), standard OAuth2 confidential-client flow. Three decisions captured. State refreshed — OAuth no longer flagged as open, replaced by an implementation-refactor focus item for Eugen.

Top of mind

priorities
  1. 1. MuchSkills Demand Report — PR on code review, merging soon
  2. 2. MuchSkills multilang / i18n — in development with minimal scope
  3. 3. Discovery vector search — shipping now, AI Summary improvements separate track
  4. 4. Public API OAuth — architecture aligned, implementation refactor ahead
  5. 5. ISO certification / Vanta autotest sweep
  6. 6. Customer integration tag updates

Now

this week
Active features
9
Open blockers
0
Decisions (14d)
15
Watching
0

Active work

all projects
Todo 2
Certifications module — rebuild on Postgres
discovery · muchskills
2d
Jira integration — sync all issue types (not just Epic)
designing VK · muchskills
2d
In progress 8
CV Builder ↔ MuchSkills OAuth integration
building VK E · cv-inventory
2d
Update integration tag schemas for 2 customers
building O · muchskills
2d
Demand Report
testing VK · muchskills
2d
Discovery — AI Summary metadata-quality improvements
building VK · muchskills
2d
Multilang / i18n infrastructure
building VK K · muchskills
2d
Discovery — vector (Smart) search
testing VK · muchskills
2d
OAuth confidential-client refactor (public API + CV Inventory integration)
building E · muchskills
2d
Vanta / ISO autotest sweep
building O · muchskills
2d
Blocked 0
—
Done (recent) 0
—

Blockers

0 open

No open blockers. 🎉

Watching ⚠

phase 2

Nothing flagged.

Tracks commitments past their deadline without closure. Lit up automatically once Phase 2 ships.

Open questions

1 unresolved · oldest first

Recent decisions

last 14 days
2026-05-21 OAuth — one static client per integrated application; standard confidential-client flow · muchskills apioauthcv-builder 2026-05-21 Short-lived OAuth auth codes go in Redis with TTL — not Mongo · muchskills apioauthinfrastructure 2026-05-21 CloudFront-auth endpoint requires the read scope on the access token · muchskills apiscopessecurity 2026-05-21 i18n scope is minimal — top headers / menus / page titles only · muchskills i18nscope 2026-05-21 Discovery vector search ships now; AI Summary improvements separate; no per-org gate · muchskills discoveryrelease-strategy 2026-05-21 npm package install — enforce minimum age of at least one week · muchskills infrastructuresecurity 2026-05-19 Migrate the old CV Builder ↔ MuchSkills token manually, not by code · muchskills cv-builderapimigration 2026-05-19 Switch AI Summary off Gemini Flash; explore better-thinking models (proposed) · muchskills discoveryaicost 2026-05-19 Bubble skills are excluded from Demand Report · muchskills demand-reportdata-model 2026-05-14 Public API uses only read/write scopes — no per-feature granularity · muchskills apioauthscopes 2026-05-14 API credentials issued via redirect to MuchSkills — no manual paste · muchskills apioauthcv-builder 2026-05-14 Client Secret hidden by default; Client ID partially masked · muchskills apisecurityui 2026-05-14 Revoked API clients deleted from DB, not retained for display · muchskills apidata-retention 2026-05-14 Vector search on Discovery triggers on Submit only · muchskills discoveryux 2026-05-14 Defer i18n until template-variable infrastructure exists (now superseded — i18n in progress) · muchskills i18ninfrastructure
↑↓ navigate ↵ open Esc close