talia_bot/Tasks.md

# Tasks.md

This document tracks all pending tasks, improvements, and issues identified in the Talia Bot codebase.

## **Critical Security Issues** 🔴

### [SEC-001] File Upload Security Validation
- **Status**: DONE
- **Priority**: High

### [SEC-002] Hardcoded Secrets Management
- **Status**: DONE
- **Priority**: High  

### [SEC-003] SQL Injection Prevention
- **Status**: DONE
- **Priority**: Medium

## **Missing Implementations** 🟡

### [IMP-001] Whisper Transcription Agent
- **Status**: DONE
- **Priority**: High

### [IMP-002] Dynamic Menu Generation
- **Status**: TODO
- **Priority**: Medium
- **Description**: `onboarding.py` has hardcoded menus instead of dynamic generation
- **Action needed**: Implement dynamic menu generation based on user roles

### [IMP-003] Button Dispatcher Agent
- **Status**: TODO
- **Priority**: Low
- **Description**: "Despachador de Botones" mentioned in AGENTS.md but not implemented
- **Action needed**: Create separate button dispatcher agent

## **Architecture & Code Quality** 🟠

### [ARCH-001] Main.py Business Logic Violation
- **Status**: DONE
- **Priority**: Medium

### [ARCH-002] Error Handling Consistency
- **Status**: DONE
- **Priority**: Medium

### [ARCH-003] Code Duplication
- **Status**: TODO
- **Priority**: Low
- **Description**: Database connection patterns repeated, similar menu generation logic
- **Action needed**: Create shared utilities and base classes

## **Performance & Optimization** 🟢

### [PERF-001] Database Connection Pooling
- **Status**: DONE
- **Priority**: Medium

### [PERF-002] Memory Management
- **Status**: TODO
- **Priority**: Medium
- **Description**: Voice files loaded entirely into memory, no cleanup for failed uploads
- **Action needed**: Implement streaming file processing and cleanup mechanisms

### [PERF-003] Flow Engine Memory Usage
- **Status**: TODO
- **Priority**: Low
- **Description**: Flow engine stores all conversation data in memory
- **Action needed**: Implement conversation state persistence and cleanup

## **Dependencies & Configuration** 🔵

### [DEP-001] Python Version Upgrade
- **Status**: DONE
- **Priority**: High

### [DEP-002] Package Security Updates
- **Status**: DONE
- **Priority**: High

### [DEP-003] Docker Security Hardening
- **Status**: TODO
- **Priority**: Medium
- **Description**: Running as root user, missing security hardening
- **Action needed**: Add USER directive, read-only filesystem, health checks

## **Bugs & Logical Errors** 🐛

### [BUG-001] Flow Engine Validation
- **Status**: DONE
- **Priority**: Medium

### [BUG-002] Printer Module IMAP Search
- **Status**: DONE
- **Priority**: Medium

### [BUG-003] Identity Module String Comparison
- **Status**: TODO
- **Priority**: Low
- **Description**: `identity.py:42` string comparison for ADMIN_ID could fail if numeric
- **Action needed**: Fix type handling for user ID comparison

### [BUG-004] Missing sqlite3 import
- **Status**: TODO
- **Priority**: High
- **Description**: `flow_engine.py` missing `sqlite3` import causing NameError
- **Files affected**: `flow_engine.py`
- **Action needed**: Add `import sqlite3`
- **Due**: ASAP

### [BUG-005] Telegram Conflict Error
- **Status**: DONE
- **Priority**: High
- **Description**: `telegram.error.Conflict` indicates multiple bot instances running
- **Files affected**: Runtime
- **Action needed**: Kill all orphan processes and restart
- **Due**: ASAP

## **Documentation & Testing** 📚

### [DOC-001] Documentation Consistency
- **Status**: TODO
- **Priority**: Low
- **Description**: AGENTS.md vs implementation inconsistencies
- **Action needed**: Update documentation to match actual implementation

### [TEST-001] Test Coverage
- **Status**: TODO
- **Priority**: Low
- **Description**: Missing comprehensive test coverage
- **Action needed**: Add unit tests, integration tests, and E2E tests

### [TEST-002] Code Quality Tools
- **Status**: TODO
- **Priority**: Low
- **Description**: Missing code quality tools (black, flake8, mypy)
- **Action needed**: Add code quality tools and CI/CD integration

---

## **Sprint Planning**

### **Previous Sprints**
- **[DONE]** [SEC-001] File upload security validation
- **[DONE]** [DEP-002] Package security updates
- **[DONE]** [IMP-001] Whisper transcription agent
- **[DONE]** [SEC-002] Secret management implementation
- **[DONE]** [SEC-003] Database connection pooling
- **[DONE]** [DEP-001] Python version upgrade
- **[DONE]** [ARCH-001] Main.py refactoring
- **[DONE]** [ARCH-002] Error handling consistency
- **[DONE]** [BUG-001] Flow engine validation
- **[DONE]** [BUG-002] Printer module fixes
- **[DONE]** [PERF-001] Database Connection Pooling

### **Current Sprint**
- [IMP-002] Dynamic Menu Generation
- [DEP-003] Docker Security Hardening
- [BUG-003] Identity Module String Comparison
- [PERF-002] Memory Management

### **Future Iterations**
- [IMP-003] Button Dispatcher Agent
- [ARCH-003] Code Duplication
- [PERF-003] Flow Engine Memory Usage
- [DOC-001] Documentation Consistency
- [TEST-001] Test Coverage
- [TEST-002] Code Quality Tools

---

## **Definitions**

- **🔴 Critical**: Security vulnerabilities or production-breaking issues
- **🟡 High**: Important features missing or major functionality gaps  
- **🟠 Medium**: Architecture improvements or code quality issues
- **🟢 Low**: Performance optimizations or nice-to-have features
- **🔵 Configuration**: Dependency updates or configuration changes
- **🐛 Bug**: Logical errors or unexpected behavior
- **📚 Documentation**: Documentation or testing improvements

**Status Legend:**
- `TODO` - Not started
- `IN_PROGRESS` - Currently being worked on
- `IN_REVIEW` - Ready for review
- `DONE` - Completed
- `BLOCKED` - Blocked by dependency