Phase d'architecture terminée. Aucune nouvelle fonctionnalité n'est ajoutée. La prochaine étape consiste exclusivement à brancher les services de production (stockage, certificats, signatures, monitoring) aux interfaces déjà définies. Document maître : PRODUCTION_READINESS.md.
mock
3
demo
6
test
0
prototype
18
production-ready
2
| ID | Domaine | Chemin | Classification | Risque | Priorité | Cible production |
|---|---|---|---|---|---|---|
| api.auth.middleware | api | src/lib/nexus/security/auth-middleware.ts | prototype | critical | p0 | Brancher rotation de clés + KMS. |
| desktop.securestorage | desktop | apps/desktop/services/platform/keychain-storage.ts | prototype | critical | p0 | Compléter Windows DPAPI + Linux libsecret + tests. |
| desktop.updater | desktop | apps/desktop/services/updater/auto-updater.ts | prototype | high | p0 | Implémenter UpdateFlow + vérification signature complète. |
| distribution.api.mock | distribution | src/routes/api/v1/releases | mock | high | p0 | Implémentation réelle hébergée sur invest-forget.com. |
| gateway.http.cors-wildcard | gateway-core | src/lib/nexus/http.ts | prototype | high | p0 | Remplacer par allowlist d'origines (Patrimonio, desktop). |
| security.vault.in-memory | security | src/lib/nexus/security/vault.ts | prototype | critical | p0 | Brancher SecureStorage natif (Keychain/DPAPI/libsecret). |
| security.pairing | security | src/lib/nexus/security/pairing.ts | prototype | high | p0 | Connecter à invest-forget.com /api/activation/*. |
| automation.driver.real | automation | automation/drivers/ | prototype | high | p1 | Implémenter PlaywrightDriver (apps/desktop/services). |
| connector.nexus-simulator | connectors | plugins/nexus-simulator | demo | medium | p1 | Activer uniquement en environnements non-production. |
| connector.xtb | connectors | plugins/xtb | prototype | high | p1 | Implémenter XtbAutomationDriver via Automation Engine. |
| distribution.admin.mock | distribution | src/lib/distribution/mock-data.ts | demo | medium | p1 | Brancher AdminApi à la base de données de production. |
| distribution.storage.driver | distribution | desktop/distribution/ObjectStorage.ts | prototype | medium | p1 | Driver R2 / S3 / Azure Blob au choix de l'opérateur. |
| gateway.logger.in-memory | gateway-core | src/lib/nexus/logger.ts | prototype | medium | p1 | Brancher LoggerProvider (production/observability/Logger.ts). |
| observability.logger.contract | observability | production/observability/Logger.ts | prototype | medium | p1 | Adapter Datadog / Loki / CloudWatch / OTLP. |
| observability.errors.contract | observability | production/observability/ErrorReporter.ts | prototype | medium | p1 | Adapter Sentry / Rollbar. |
| security.audit.hashchain | security | src/lib/nexus/security/audit.ts | prototype | high | p1 | Persistance append-only (SQLite WAL ou stockage object). |
| ui.seed-data | ui | src/lib/nexus/seed-data.ts | demo | medium | p1 | Désactiver via feature flag NEXUS_SEED_DEMO=false. |
| api.settings.local | api | src/lib/nexus/settings-store.ts | prototype | medium | p2 | Persister via SecureStorage + sync coffre serveur. |
| connector.example-broker | connectors | plugins/example-broker | demo | low | p2 | Exclure du build de production. |
| connector.binance-public | connectors | plugins/binance-public | production-ready | low | p2 | Ajouter rotation rate-limit + retry exponentiel. |
| documentation.production-readiness | documentation | PRODUCTION_READINESS.md | production-ready | low | p2 | Tenir à jour à chaque changement d'état. |
| gateway.events.in-process | gateway-core | src/lib/nexus/events.ts | prototype | medium | p2 | Adapter Redis / NATS / Cloud Pub-Sub pour cluster. |
| observability.metrics.contract | observability | production/observability/Metrics.ts | prototype | medium | p2 | Adapter Prometheus / OTel. |
| observability.tracing.contract | observability | production/observability/Tracing.ts | prototype | low | p2 | Adapter OpenTelemetry. |
| observability.alerts.contract | observability | production/observability/Alerts.ts | prototype | low | p2 | Adapter PagerDuty / Opsgenie / Webhook. |
| ui.mock-data | ui | src/lib/mock-data.ts | demo | low | p2 | Remplacer par requêtes Tanstack Query vers /api/v1/*. |
| automation.driver.mock | automation | automation/drivers/mock-driver.ts | mock | low | p3 | Réservé tests. Driver réel Playwright/CDP à fournir. |
| connector.mock | connectors | src/lib/nexus/connectors/mock-connector.ts | mock | low | p3 | Conserver — utilisé uniquement comme fixture. |
| simulator.broker | simulator | simulator/BrokerSimulator.ts | demo | low | p3 | Garder. Désactivé en prod via feature flag. |