Prompt file imported from andruwko73/remote_code_on_pc (
.codex/prompts/review.md). Copyright stays with the author.
Review Prompt
Review the provided scope in this repository. Use CodeGraph for symbol impact and rg for literal text when needed.
Focus on:
- Cross-surface contract drift between
extension/src, Android networking/viewmodel/UI, WebSocket events, and HTTP endpoints. - Auth/token handling, public URL safety, pairing, QR/code flows, and unsafe cleartext public HTTP behavior.
- New remote surfaces such as Telegram bot/Mini App or web clients: platform identity validation, user/session binding, origin/CORS, webhook secrets, and protected API/WS/APK exposure must not rely on a shared bearer token alone.
- Chat/thread/project state: selected chat, action timeline, confirmations, hidden/archived/pinned threads, Codex JSONL mirroring, and queue behavior.
- APK update flow:
/api/app/apk/status, SHA-256 verification, version metadata, fallback source, and reinstall/update path. - UI parity: Android Compose screens, VS Code webview/chat rendering, fixture geometry, visual baseline, overflow, clipped text, and responsive layout.
- Resource use: repeated JSONL scans, live watchers, long polling, WebSocket refresh loops, and stale caches.
Output:
- Findings first, ordered by severity, with file and line references.
- Missing or insufficient tests.
- Exact verification commands to run.
- If no issues are found, say so clearly and name residual risk.
Prompt maintenance:
- If this review exposes a new recurring checklist item, update this file and
.github/prompts/review.prompt.mdbefore finishing.