nick-doc/Issues/Issues Index.md

Issues Index

Generated from Doc vs Code Audit — 2026-05-29 · last reconciled 2026-05-29 0 open issues | 🔴 0 critical · 🟠 0 major · 🟡 0 minor · ⚪ 1 invalid (stale audit) · ✅ 53 resolved

🔴 Critical

• ISSUE-001-patch-api-disputes-id-status-and-post-api-disputes-id-resolv — Dispute
• ISSUE-002-post-api-disputes-id-assign-has-no-role-guard-any-user-can-s — Dispute
• ISSUE-003-route-shadowing-post-api-disputes-purchaserequestid-resolve- — Dispute
• ISSUE-004-post-api-disputes-id-resolve-dashboard-does-not-trigger-escr — Dispute
• ISSUE-005-post-api-payment-payments-id-fetch-tx-post-api-payment-payme — Payment
• ISSUE-006-get-api-admin-scanner-status-has-no-authentication-middlewar — Admin
• ISSUE-007-frontend-deleteaccount-action-calls-delete-user-profile-whic — Authentication
• ISSUE-008-sendfilemessage-posts-to-wrong-endpoint-file-uploads-silentl — Chat
• ISSUE-009-archiveconversation-sends-put-but-backend-only-accepts-patch — Chat
• ISSUE-010-frontend-admin-updateuserstatus-and-updateuserrole-use-put-b — User Management
• ISSUE-011-frontend-updateuserstatus-sends-inactive-pending-status-valu — User Management
• ISSUE-013-createproviderpaymentintent-always-routes-to-request-network — Payment
• ISSUE-014-paymentprovider-typescript-type-excludes-shkeeper-and-decent — Payment
• ISSUE-015-simulated-transaction-sim-bypass-has-no-environment-guard-ca — Payment

🟠 Major

• ISSUE-016-updatepurchaserequest-uses-put-but-backend-only-registers-pa — Purchase Request
• ISSUE-017-updateoffer-uses-put-marketplace-offers-id-but-backend-regis — Seller Offer
• ISSUE-018-select-offer-updatemany-has-no-status-filter-overwrites-with — Seller Offer
• ISSUE-019-selleroffer-status-active-does-not-exist-in-schema-enum-but- — Seller Offer
• ISSUE-020-select-offer-does-not-send-per-seller-socket-events-or-notif — Seller Offer
• ISSUE-021-post-api-marketplace-offers-id-withdraw-http-route-does-not- — Seller Offer
• ISSUE-022-get-api-payment-payments-id-debug-has-no-authentication-full — Payment
• ISSUE-023-get-api-payment-export-has-no-admin-role-guard-at-route-leve — Payment
• ISSUE-024-get-api-payment-stats-has-no-admin-role-guard-any-authentica — Payment
• ISSUE-025-get-api-disputes-statistics-has-no-admin-role-guard-any-auth — Dispute
• ISSUE-026-get-notifications-id-only-returns-user-s-most-recent-notific — Notification
• ISSUE-027-confirm-delivery-endpoint-has-no-ownership-check-any-authent — Delivery
• ISSUE-028-delivery-code-generated-socket-event-broadcasts-raw-6-digit- — Delivery
• ISSUE-029-no-brute-force-protection-on-delivery-code-verification-endp — Delivery
• ISSUE-030-post-api-payment-payments-cleanup-pending-admin-check-is-ins — Admin
• ISSUE-031-post-api-points-admin-add-admin-check-is-inside-handler-only — Admin
• ISSUE-032-admin-delete-user-via-legacy-endpoint-performs-hard-delete-f — User Management
• ISSUE-033-admin-can-delete-other-admin-accounts-via-new-controller-leg — User Management
• ISSUE-034-all-dispute-socket-io-emit-blocks-are-todo-stubs-no-real-tim — Dispute
• ISSUE-035-frontend-getpaymentstatus-and-confirmpayment-call-non-existe — Payment
• ISSUE-036-cancelpayment-action-sends-delete-payment-id-but-no-delete-r — Payment
• ISSUE-037-frontend-initiaterequestnetworkpayout-confirmrequestnetworkp — Payment
• ISSUE-038-multiple-frontend-payment-stub-actions-call-non-existent-bac — Payment
• ISSUE-039-reset-password-with-code-endpoint-has-no-password-complexity — Authentication
• ISSUE-040-changepassword-action-has-no-ui-component-change-password-fe — Authentication
• ISSUE-041-frontend-searchpurchaserequests-calls-marketplace-purchase-r — Purchase Request
• ISSUE-042-frontend-getmarketplacestats-calls-marketplace-purchase-requ — Purchase Request
• ISSUE-043-frontend-getdeliveryattempts-and-getdeliverystats-call-non-e — Delivery
• ISSUE-044-post-api-marketplace-purchase-requests-id-final-approval-cre — Purchase Request
• ISSUE-045-addparticipants-frontend-sends-participants-string-array-but — Chat
• ISSUE-046-frontend-getsellerofferhistory-seller-offer-history-page-doe — Seller Offer
• ISSUE-047-frontend-cron-management-and-per-id-token-sweep-endpoints-fo — Admin
• ISSUE-048-frontend-reloadnetworkregistry-and-probechain-call-backend-e — Admin
• ISSUE-049-frontend-getconfirmationthresholdhistory-calls-get-api-admin — Admin
• ISSUE-050-points-referral-five-frontend-pages-do-not-exist-redemption- — Points
• ISSUE-051-self-referral-prevention-is-absent-users-can-refer-themselve — Points
• ISSUE-052-payment-completed-status-not-counted-in-successful-payments-stats — Payment
• ISSUE-053-axios-interceptor-only-handles-401-not-403-for-token-refresh — Authentication
• ISSUE-054-login-rate-limiter-counts-all-attempts-not-only-failures — Authentication

⚪ Invalid / Superseded (audit was stale vs current code)

• ISSUE-012-trezor-safekeeping-zero-frontend-implementation-all-admin-re — Trezor

🟡 Minor

• ISSUE-136-backend-api-profiling-mongo-hot-path-cache-query-fanout — Performance