Issues

• Decouple application lifecycle from direct DB access via a pluggable Engine interface

  Type/Improvement
  OpenNSW/agency#345 · Filter by author mushrafmim opened on Sep 19, 2026

• Serialize first-injection handling per TaskID so concurrent injects can't both mint a reference ID

  Type/Improvement
  OpenNSW/agency#315 · Filter by author sthanikan2000 opened on Sep 6, 2026

• Unify frontend runtime config delivery through backend-served /config.js

  Type/Improvement
  OpenNSW/agency#308 · Filter by author mushrafmim opened on Sep 4, 2026

• Helm chart cannot generate config.yaml's ConfigMap from values

  Type/Feature
  OpenNSW/agency#298 · Filter by author mushrafmim opened on Aug 31, 2026

• Support referencing an existing ConfigMap/Secret for agency chart static config files

  Type/Feature
  OpenNSW/agency#296 · Filter by author mushrafmim opened on Aug 31, 2026

• Refactor: ApplicationStore directly depends on consignment.Store, crossing domain boundaries at the store layer

  Type/Improvement
  OpenNSW/agency#290 · Filter by author mushrafmim opened on Aug 29, 2026

• ci: group the release changelog into categories

  Priority/LowType/Improvement
  OpenNSW/agency#254 · Filter by author sthanikan2000 opened on Aug 28, 2026
  1

• Replace string-based ApplicationStatus with a closed iota-based enum

  Type/Improvement
  OpenNSW/agency#246 · Filter by author mushrafmim opened on Aug 26, 2026

• Restrict Helm CI workflow token permissions

  good first issue
  OpenNSW/agency#241 · Filter by author coderabbitai opened on Aug 26, 2026
  1

• Consider making TaskConfig.behavior a required field

  OpenNSW/agency#235 · Filter by author mushrafmim opened on Aug 25, 2026

• frontend: surface GET /api/v1/users/me in the TopBar user dropdown

  good first issueType/Feature
  OpenNSW/agency#233 · Filter by author sthanikan2000 opened on Aug 25, 2026

• auth: AUTH_EXPECTED_OU and VITE_IDP_EXPECTED_OU_HANDLE can silently disagree

  good first issueType/Bug
  OpenNSW/agency#223 · Filter by author sthanikan2000 opened on Aug 19, 2026

• docs: a shared database is not supported for the user and role tables

  good first issueType/Docs
  OpenNSW/agency#222 · Filter by author sthanikan2000 opened on Aug 18, 2026

• application: extract the duplicated principal-to-roles block

  good first issuerefactor
  OpenNSW/agency#221 · Filter by author sthanikan2000 opened on Aug 18, 2026

• user: propagate the request context into the user store

  good first issueType/Improvement
  OpenNSW/agency#220 · Filter by author sthanikan2000 opened on Aug 18, 2026

• auth: a failed profile lookup is reported as 403, indistinguishable from a denial

  good first issueType/Bug
  OpenNSW/agency#219 · Filter by author sthanikan2000 opened on Aug 18, 2026
  1

• feat(i18n): add language selection UI to TopBar

  OpenNSW/agency#211 · Filter by author saknarajapakshe opened on Aug 10, 2026

• Improve file URL resolution with bounded concurrency and expiration-aware caching

  Type/Improvement
  OpenNSW/agency#204 · Filter by author coderabbitai opened on Jul 31, 2026
  

• Security: raw object-storage keys sent to frontend, crossing the backend trust boundary

  Priority/HighType/Bug
  OpenNSW/agency#202 · Filter by author mushrafmim opened on Jul 31, 2026

• [Security] Incomplete Request Body Validation Allows Trailing JSON Data to be Accepted

  OpenNSW/agency#199 · Filter by author saknarajapakshe opened on Jul 30, 2026

• Validate InjectRequest.Data against the task's form schema in /api/v1/inject

  Type/Improvement
  OpenNSW/agency#194 · Filter by author mushrafmim opened on Jul 27, 2026

• Propagate context.Context to underlying HTTP requests in httpclient/nswclient

  Type/Feature
  OpenNSW/agency#186 · Filter by author mushrafmim opened on Jul 24, 2026

• [SECURITY] Over-Permissive Consignment Listing Endpoint Lacks Role-Based Filtering

  Type/Feature
  OpenNSW/agency#184 · Filter by author ginaxu1 opened on Jul 22, 2026
  

• Unify frontend config on a single runtime source (config.js), drop dual-source getEnv and VITE_ prefix

  Type/Improvement
  OpenNSW/agency#179 · Filter by author mushrafmim opened on Jul 21, 2026

• [SECURITY] Secure File Upload and Download

  Type/Bug
  OpenNSW/agency#172 · Filter by author ginaxu1 opened on Jul 21, 2026
  1