# Phase 1 Stabilisation Plan (Execution Start)

Last updated: 2026-05-14

## Goal

Reduce operational risk without changing PEDW business behaviour.

## Priority order

1. **Auth/session reliability**
2. **SSR/data-loading resilience**
3. **Logging/observability hardening**
4. **Low-risk performance improvements**

## Slice plan

### Slice P0.1 (started)

- Centralize client-side signout/cookie cleanup into shared helper.
- Replace duplicated logout logic in timeout and portal/header surfaces.

Status: completed across timeout, header, service banner, myportal, furtherdetails, and auth error paths.

### Slice P0.2 (started)

- Harden NextAuth redirect/locale callback handling.
- Add safer URL parsing fallback behaviour.

Status: completed with callback-cookie parity support and redacted diagnostics.

### Slice P1.1 (started)

- Add defensive null and redirect handling in representation SSR loader path.

Status: expanded to new appeal, myportal appeal, and representation loader guard hardening.

### Slice P3.1 (started)

- Add in-memory XML read cache for form XML to reduce repeated disk read/normalization cost.

Status: completed.

## Immediate slices status (updated)

1. Add defensive wrappers for external dependency failures in new-appeal/myportal/representation SSR loaders (fallback redirects + safe defaults).
    - Status: completed.
2. Expand focused tests around loader negative paths (missing query/session/cookie/search result branches).
    - Status: completed with dedicated phase22 suites for newappeal, myportal, and representation loaders.
3. Add lightweight diagnostics for SSR loader dependency failures (redacted, non-sensitive).
    - Status: completed.
4. Reduce remaining low-value commented legacy blocks in active flow files where behaviour is already covered by tests.
    - Status: completed for active myportal case-ticket page path.

## Next recommended Phase 1 closure slices

1. Add targeted loader-dependency-failure tests (thrown service errors -> safe redirect) for newappeal/myportal/representation loaders.
    - Status: in progress (newappeal + myportal dependency-failure tests added; representation search-miss redirect coverage added).
2. Perform a focused pass on remaining active flow files for stale commented code/debug remnants and remove where behaviour is covered.
    - Status: in progress (myportal case-ticket path completed; further active-flow pass still open).
3. Refresh current-platform-state/auth-session-reliability notes with latest implemented slices and residual risks.
    - Status: not started.