Issues

• feat(tokens): API token list has no "last used" column

  backlog-extractedenhancement
  fo0/clawstash#532 · Filter by author fo0 opened on Aug 24, 2026

• refactor(graph): extract StashGraphCanvas's pure draw/sim helpers into src/components/graph/stash-graph-utils.ts

  backlog-extractedenhancementtech-debt
  fo0/clawstash#486 · Filter by author fo0 opened on Aug 10, 2026

• refactor(graph): extract GraphViewer's pure layout/draw helpers into src/components/graph/graph-utils.ts

  backlog-extractedenhancementtech-debt
  fo0/clawstash#485 · Filter by author fo0 opened on Aug 10, 2026

• chore(openapi): generate the spec from the Zod schemas instead of the hand-written literal

  backlog-extractedenhancementtech-debt
  fo0/clawstash#466 · Filter by author fo0 opened on Aug 7, 2026
  1

• fix(a11y): graph canvases offer no keyboard path to focus or activate a node

  a11ybacklog-extractedenhancement
  fo0/clawstash#465 · Filter by author fo0 opened on Aug 7, 2026
  1

• fix(settings): switching sections discards unsaved state; sections are not deep-linkable

  backlog-extractedbug
  fo0/clawstash#458 · Filter by author fo0 opened on Aug 5, 2026

• chore(openapi): /api/openapi is missing 9 existing routes (versions + admin)

  backlog-extracteddocsenhancement
  fo0/clawstash#456 · Filter by author fo0 opened on Aug 5, 2026

• security: hardening sweep (Next.js 16 App Router + MCP)

  hardeningsecurityvulnerability
  fo0/clawstash#432 · Filter by author fo0 opened on Aug 1, 2026
  11

• fix(backup): sync-log commit links point at the currently configured repo

  backlog-extractedbug
  fo0/clawstash#421 · Filter by author fo0 opened on Jul 29, 2026

• chore: full script-restricting CSP with per-request nonces

  backlog-extractedsecurity
  fo0/clawstash#349 · Filter by author fo0 opened on Jul 6, 2026

• chore: Zod 4 migration (MCP SDK blocker resolved)

  backlog-extractedenhancement
  fo0/clawstash#348 · Filter by author fo0 opened on Jul 6, 2026