# TODO Scan Report

- Generated: `2025-12-25 22:27:01Z` (UTC)
- Report directory: `docs/todo`
- Pattern: `\b(TODO|FIXME|HACK|XXX)\b`
- Excludes: `docs/todo/`, `**/node_modules/`, `**/.next/`, `**/coverage/`, `**/dist/`, `**/build/`, `**/.git/`

## Summary
- Total matches: **135**
- By marker: `TODO`=135
- By top-level directory:
  - `.github`: 10
  - `dbal`: 6
  - `docs`: 95
  - `frontends`: 10
  - `tools`: 14

## Matches

### `.github` (10)
- `.github/copilot-instructions.md:20` — - Leave TODO comments for missing functionality.
- `.github/copilot-instructions.md:211` — ❌ **Missing TODO for unfinished behavior** → Leave a TODO comment where functionality is pending
- `.github/prompts/EEK-STUCK.md:3` — Go through codebase and read docs and code, write some TODO statements.
- `.github/workflows/README.md:27` — - **Quality Check**: Checks for console.log statements and TODO comments
- `.github/workflows/ci.yml:275` — - name: Check for TODO comments
- `.github/workflows/ci.yml:277` — TODO_COUNT=$(git diff origin/${{ github.base_ref }}...HEAD -- '*.ts' '*.tsx' '*.js' '*.jsx' | grep -E '^\+.*TODO|FIXME' | wc -l)
- `.github/workflows/ci.yml:279` — echo "⚠️ Found $TODO_COUNT TODO/FIXME comments in the changes"
- `.github/workflows/ci.yml:280` — echo "Please address TODO comments before merging or create issues for them"
- `.github/workflows/detect-stubs.yml:70` — grep -E '^\+.*(TODO|FIXME|not implemented|stub|placeholder|mock)' | \
- `.github/workflows/detect-stubs.yml:133` — comment += '- [ ] Replace TODO comments with GitHub issues\n';

### `dbal` (6)
- `dbal/cpp/README.Linting.md:306` — - TODO/FIXME comments count
- `dbal/cpp/lint.sh:137` — echo "Checking for TODO/FIXME comments..."
- `dbal/cpp/lint.sh:138` — TODO_COUNT=$(grep -r "TODO\|FIXME" src/ include/ || true | wc -l)
- `dbal/cpp/lint.sh:140` — echo -e "${YELLOW}⚠ Found $TODO_COUNT TODO/FIXME comments${NC}"
- `dbal/cpp/lint.sh:141` — grep -rn "TODO\|FIXME" src/ include/ || true
- `dbal/cpp/lint.sh:143` — echo -e "${GREEN}✓ No TODO/FIXME comments${NC}"

### `docs` (95)
- `docs/CONTRIBUTING.md:23` — - Leave TODO comments for missing functionality.
- `docs/CONTRIBUTING.md:185` — 5. **TODOs** - Leave TODO comments for missing functionality
- `docs/CONTRIBUTING.md:275` — TODO: Links below use ../docs/... from docs/CONTRIBUTING.md and resolve to docs/docs; update to correct relative paths (including security and copilot).
- `docs/CONTRIBUTING.md:279` — TODO: E2E tests guide lives under frontends/nextjs/e2e; update this link.
- `docs/DOCS_ORGANIZATION_COMPLETE.md:8` — TODO: This file is in docs/ so ./docs/ links are broken; root-level file list is outdated (README/CONTRIBUTING are not at repo root).
- `docs/DOCS_ORGANIZATION_GUIDE.md:5` — TODO: This file is already in docs/; links that start with ./docs/ are broken and should be updated to correct relative paths.
- `docs/DOCS_ORGANIZATION_GUIDE.md:139` — - Search for "ERROR:", "TODO:", "FIXME:" to find action items
- `docs/NAVIGATION.md:144` — TODO: docs/src/ is missing; add the folder or update/remove the src links below.
- `docs/README.md:5` — TODO: This file lives under docs/; links that start with ./docs/ are broken and PRD/SECURITY paths are outdated.
- `docs/README.md:230` — TODO: src/README.md does not exist under docs/; confirm correct location or add missing docs/src.
- `docs/README.md:261` — TODO: Manual deployment docs are not under docs/deployment; update this link to the correct location.
- `docs/START_HERE.md:5` — TODO: This file is in docs/ so ./docs/ links are broken; the root-level file list below is outdated (README/CONTRIBUTING live elsewhere or do not exist).
- `docs/START_HERE.md:16` — - Leave TODO comments for missing functionality.
- `docs/architecture/css-as-abstract-system.md:275` — ## TODO
- `docs/architecture/deployment.md:298` — TODO: Security guide lives at ../security/SECURITY.md; update this link.
- `docs/architecture/packages.md:496` — TODO: Development guide link should point to docs/guides/getting-started.md (current file does not exist).
- `docs/architecture/packages.md:498` — TODO: Component guidelines link points to a non-existent docs/components/README.md; update to correct location.
- `docs/architecture/security.md:260` — TODO: Security guidelines live at ../security/SECURITY.md; update this link.
- `docs/architecture/testing.md:243` — TODO: E2E tests live under frontends/nextjs/e2e; update this link.
- `docs/archive/src/lib/CODE_TO_DOCS_MAPPING.md:9` — TODO: Audit component/hook documentation coverage, replace TBD values, and update `/src/` path references to match the current `frontends/nextjs/src` layout.
- `docs/database/PRISMA_SETUP.md:140` — TODO: The migration guide link should be relative to docs/database (remove ./docs/).
- `docs/deployments/CI_CD_REPAIRS.md:129` — 2. **quality-check**: Scans for console.log, TODO comments
- `docs/deployments/CI_CD_SUMMARY.md:38` — 4. **Quality Check** - Console.log and TODO detection
- `docs/deployments/CI_CD_SUMMARY.md:327` — TODO: Links below are repo-relative but this file is in docs/deployments; update paths for workflow README and E2E guide.
- `docs/deployments/CI_FIX_SUMMARY.md:226` — # src/client.cpp # TODO: Implement
- `docs/deployments/CI_FIX_SUMMARY.md:227` — # src/errors.cpp # TODO: Implement
- `docs/deployments/GITHUB_WORKFLOWS_AUDIT.md:25` — - ✅ Code quality checks (console.log, TODO detection)
- `docs/guides/SASS_QUICK_REFERENCE.md:287` — TODO: The design tokens link should not use ../docs/ from docs/guides; update to the correct relative path.
- `docs/guides/getting-started.md:313` — TODO: Links in this section use ./ from docs/guides; update to correct relative paths (architecture/reference/troubleshooting) and fix README/SECURITY/COMPONENT_MAP locations be...
- `docs/implementation/DBAL_INTEGRATION.md:285` — # TODO: deployment docs live under docs/deployments/; update this reference.
- `docs/implementation/DBAL_INTEGRATION.md:391` — TODO: Fix related doc links (deployments path and local implementation docs).
- `docs/implementation/DBAL_INTEGRATION.md:408` — TODO: No LICENSE file exists at repo root; update to correct location (e.g., docs/LICENSE) or add one.
- `docs/migrations/FILE_RELOCATION_GUIDE.md:83` — TODO: This repo does not have root README/PRD/SECURITY/LIMITED files as listed; update for current structure (docs/* locations).
- `docs/migrations/FILE_RELOCATION_GUIDE.md:92` — TODO: Example path uses /workspaces/spark-template and root file list no longer matches this repo.
- `docs/migrations/MIGRATION_STATUS.md:159` — 3. Audit log storage using console.log - TODO: database implementation
- `docs/migrations/MIGRATION_STATUS.md:160` — 4. Modular package storage stubbed - TODO: database implementation
- `docs/migrations/RELOCATION_SUMMARY.md:79` — TODO: This repo does not have root README/PRD/SECURITY as listed; update to current docs locations.
- `docs/refactoring/REFACTORING_INDEX.md:360` — TODO: Paths below are wrong from docs/refactoring; update copilot/PRD and schema/src references to valid locations.
- `docs/refactoring/REFACTORING_SUMMARY.md:450` — TODO: Update copilot instructions and PRD links to correct relative paths from docs/refactoring.
- `docs/reference/DOCUMENTATION_FINDINGS.md:605` — TODO: Core doc links below point to docs/reference; update to correct paths under docs/ (README, PRD, SECURITY).
- `docs/reference/IMPROVEMENT_ROADMAP_INDEX.md:8` — TODO: This file uses ./docs/... links which are broken from docs/reference/; update to correct relative paths.
- `docs/reference/PRIORITY_ACTION_PLAN.md:9` — TODO: This file uses ./docs/... links which are broken from docs/reference/; update to correct relative paths.
- `docs/reference/STUB_DETECTION_IMPLEMENTATION.md:25` — - TODO/FIXME comments
- `docs/reference/STUB_DETECTION_IMPLEMENTATION.md:152` — - `<div>TODO</div>` in components
- `docs/reference/STUB_DETECTION_IMPLEMENTATION.md:161` — 6. **TODO Comments** (🟡 Medium)
- `docs/reference/STUB_DETECTION_IMPLEMENTATION.md:162` — - TODO/FIXME indicating incomplete work
- `docs/reference/STUB_DETECTION_IMPLEMENTATION.md:225` — - Replace TODO with GitHub issues
- `docs/reference/STUB_DETECTION_IMPLEMENTATION.md:254` — # Find TODO comments
- `docs/reference/STUB_DETECTION_IMPLEMENTATION.md:255` — grep -r "// TODO:" src/
- `docs/reference/STUB_DETECTION_IMPLEMENTATION.md:262` — grep -r "<div>TODO" src/
- `docs/reference/STUB_DETECTION_IMPLEMENTATION.md:377` — TODO: Update reference links to correct repo-relative paths from docs/reference (stub-detection docs, workflows, scripts).
- `docs/reference/STUB_DETECTION_QUICK_START.md:28` — - **10 medium** severity (marked as TODO/mock)
- `docs/reference/STUB_DETECTION_QUICK_START.md:29` — - **179 low** severity (mostly TODO comments)
- `docs/reference/STUB_DETECTION_QUICK_START.md:39` — | Returns null | `return null // TODO` | 🟡 Medium |
- `docs/reference/STUB_DETECTION_QUICK_START.md:40` — | TODO comment | `// TODO: implement this` | 🟡 Medium |
- `docs/reference/STUB_DETECTION_QUICK_START.md:41` — | Placeholder UI | `<div>TODO: build UI</div>` | 🟠 High |
- `docs/reference/STUB_DETECTION_QUICK_START.md:57` — ### Find All TODO Comments
- `docs/reference/STUB_DETECTION_QUICK_START.md:59` — grep -r "TODO:" src/ | grep -v test
- `docs/reference/STUB_DETECTION_QUICK_START.md:149` — TODO: doc links below should be relative to docs/reference (use ../stub-detection/...).
- `docs/reference/STUB_DETECTION_QUICK_START.md:173` — ### Tip 2: Create Issues Instead of TODO
- `docs/reference/STUB_DETECTION_QUICK_START.md:176` — // TODO: add caching
- `docs/reference/STUB_DETECTION_QUICK_START.md:238` — "code": "{ // TODO: Replace with proper database query"
- `docs/reference/STUB_DETECTION_SUMMARY.md:44` — 4. **🟡 TODO Comments** - `// TODO:` or `// FIXME:` markers
- `docs/reference/STUB_DETECTION_SUMMARY.md:45` — 5. **🟠 Placeholder Text** - `<div>TODO: build UI</div>`
- `docs/reference/STUB_DETECTION_SUMMARY.md:86` — - ✅ **10 medium severity** - Some marked as TODO/mock
- `docs/reference/STUB_DETECTION_SUMMARY.md:87` — - ✅ **179 low severity** - Mostly TODO comments
- `docs/reference/STUB_DETECTION_SUMMARY.md:144` — ### Example 3: TODO Comment
- `docs/reference/STUB_DETECTION_SUMMARY.md:147` — // TODO: implement processing // ← Detected: 🟡 Medium
- `docs/reference/STUB_DETECTION_SUMMARY.md:230` — TODO: Stub-detection doc references below should be relative to docs/reference (use ../stub-detection/...).
- `docs/reference/TESTING_IMPLEMENTATION_SUMMARY.md:7` — TODO: This file uses ../docs/... links that resolve to docs/docs; update to correct relative paths.
- `docs/stub-detection/OVERVIEW.md:19` — - **Low**: 179 (TODO comments)
- `docs/stub-detection/OVERVIEW.md:22` — - TODO/FIXME comments: 167
- `docs/stub-detection/OVERVIEW.md:77` — TODO: Links below should be relative to docs/stub-detection (drop docs/ prefix).
- `docs/stub-detection/OVERVIEW.md:108` — ### 4. TODO Comments (🟡 Medium)
- `docs/stub-detection/OVERVIEW.md:111` — // TODO: implement this ← Detected
- `docs/stub-detection/OVERVIEW.md:119` — return <div>TODO: Build dashboard</div> // ← Detected
- `docs/stub-detection/OVERVIEW.md:208` — ### Fix TODO Comment
- `docs/stub-detection/OVERVIEW.md:211` — // TODO: implement feature
- `docs/stub-detection/QUICK_REFERENCE.md:10` — | `<div>TODO</div>` | 🟠 High | See Pattern 4 | Implement component |
- `docs/stub-detection/QUICK_REFERENCE.md:12` — | `// TODO:` comment | 🟡 Medium | See Pattern 6 | Create issue, implement |
- `docs/stub-detection/QUICK_REFERENCE.md:71` — ### Replace TODO Comments
- `docs/stub-detection/QUICK_REFERENCE.md:74` — // TODO: implement feature
- `docs/stub-detection/QUICK_REFERENCE.md:92` — # TODO comments
- `docs/stub-detection/QUICK_REFERENCE.md:93` — grep -r "TODO\|FIXME" src/
- `docs/stub-detection/QUICK_REFERENCE.md:154` — // TODO: implement
- `docs/stub-detection/README.md:12` — - Contains TODO/FIXME comments indicating incomplete work
- `docs/stub-detection/README.md:51` — return <div>TODO: Build dashboard</div>
- `docs/stub-detection/README.md:88` — | `// TODO:` or `// FIXME:` | Medium | Known issue, incomplete |
- `docs/stub-detection/README.md:260` — return null // TODO: load config
- `docs/stub-detection/README.md:278` — return <div>TODO: Build dashboard</div>
- `docs/stub-detection/README.md:315` — ### Pattern 6: TODO Comments
- `docs/stub-detection/README.md:317` — **Problem**: Code has TODO/FIXME comments indicating incomplete work
- `docs/stub-detection/README.md:319` — **Fix**: Create GitHub issue and remove TODO from code
- `docs/stub-detection/README.md:324` — // TODO: Add real email validation
- `docs/stub-detection/README.md:389` — // TODO: add caching (#TBD)

### `frontends` (10)
- `frontends/nextjs/src/components/GitHubActionsFetcher.tsx:66` — // TODO: Replace with proper GitHub OAuth authentication in Next.js
- `frontends/nextjs/src/components/GitHubActionsFetcher.tsx:140` — // TODO: Replace with Next.js API route that calls an LLM service
- `frontends/nextjs/src/components/GitHubActionsFetcher.tsx:291` — // TODO: Replace with Next.js API route that calls an LLM service
- `frontends/nextjs/src/components/ScreenshotAnalyzer.tsx:64` — // TODO: Replace with Next.js API route that calls an LLM service
- `frontends/nextjs/src/hooks/useAuth.ts:28` — // TODO: Implement proper auth with backend/Prisma
- `frontends/nextjs/src/hooks/useKV.ts:9` — // TODO: Implement proper persistent KV storage with Database/Prisma
- `frontends/nextjs/src/lib/lua/sandboxed-lua-engine.ts:19` — // TODO: Enforce maxMemory limit in sandbox execution.
- `frontends/nextjs/src/lib/security/secure-db/log-operation.ts:28` — // TODO: Replace with proper audit log storage
- `frontends/nextjs/src/lib/security/secure-db/operations/get-audit-logs.ts:14` — // TODO: Replace with proper audit log storage query using the requested limit.
- `frontends/nextjs/src/lib/security/secure-db/operations/verify-credentials.ts:16` — // TODO: Track failed login attempts and enforce account lockout/backoff.

### `tools` (14)
- `tools/analyze-implementation-completeness.ts:104` — if (body.includes('TODO') || body.includes('FIXME')) {
- `tools/analyze-test-coverage.ts:292` — // Generate TODO items
- `tools/analyze-test-coverage.ts:294` — console.log("TODO - CREATE TESTS FOR:");
- `tools/check-function-coverage.js:184` — console.log(`🎯 TODO - CREATE TESTS FOR:`);
- `tools/detect-stub-implementations.ts:24` — name: 'TODO comment in function',
- `tools/detect-stub-implementations.ts:25` — pattern: /\/\/\s*TODO|\/\/\s*FIXME|\/\/\s*XXX|\/\/\s*HACK/i,
- `tools/detect-stub-implementations.ts:28` — description: 'Function has TODO/FIXME comment'
- `tools/detect-stub-implementations.ts:53` — pattern: /<[A-Z]\w*[^>]*>\s*(placeholder|TODO|FIXME|stub|mock|example|not implemented)/i,
- `tools/detect-stub-implementations.ts:130` — if (line.match(/stub|placeholder|mock|not implemented|TODO.*implementation/i)) {
- `tools/generate-stub-report.ts:138` — report += ' return null // TODO: implement API call\n'
- `tools/generate-stub-report.ts:151` — report += ' return <div>TODO: Build dashboard</div>\n'
- `tools/generate-stub-report.ts:185` — report += '- [ ] All TODO/FIXME comments reference GitHub issues\n'
- `tools/generate-stub-report.ts:194` — report += '3. **Convert stubs to issues** - Don\'t use TODO in code, create GitHub issues\n'
- `tools/generate-stub-report.ts:196` — report += '5. **Use linting rules** - Configure ESLint to catch console.log and TODO\n\n'
