Files

Siavash Sameni dceaf82934 audit: 2026-05-30 full-codebase audit — report, issues, docs, runbooks

Full-codebase-audit 2026-05-30 outputs:
- Audit report: 09 - Audits/Full Codebase Audit - 2026-05-30.md
- 81 issue files ISSUE-055..135 (decisions + 1 skipped no-brainer).
- Scanner docs from scratch (was zero): architecture, data model, API ref, payment
  flow, operations runbook + repo README.
- Doc-sync updates across API reference, data models, flows, design system.
- Secret Rotation Runbook (08 - Operations) for the exposed credentials.
- Reusable workflow guide (07 - Development) + .claude/workflows/full-codebase-audit.js.

Issues remain status:open intentionally — the code fixes are uncommitted-then-committed
working-tree changes per repo and aren't "resolved" until merged/deployed.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-05-30 18:48:04 +04:00

1.5 KiB

Raw Blame History

issue, title, severity, domain, status, resolved, fix, labels, status, created, source

issue

title

severity

domain

status

resolved

fix

labels

status

created

source

008

sendFileMessage posts to wrong endpoint — file uploads silently fail or corrupt text-message handler

critical

Chat

resolved

2026-05-29

Added sendFileMessage: '/chat/:id/messages/file' to endpoints.chat in axios.ts. Updated sendFileMessage in chat.ts to use endpoints.chat.sendFileMessage instead of sendMessage.

bug

frontend

critical

broken-feature

open

2026-05-29

Doc vs Code Audit 2026-05-29

🔴 sendFileMessage posts to wrong endpoint — file uploads silently fail or corrupt text-message handler

Severity: critical Domain: Chat Labels: bug, frontend, critical, broken-feature

Description

The frontend sendFileMessage action in src/actions/chat.ts (line 386) sends multipart form data to endpoints.chat.sendMessage which resolves to POST /api/chat/:id/messages. The actual file upload endpoint is POST /api/chat/:id/messages/file. The file payload hits the text-message handler which expects JSON with a string content field.

Current Behavior

File uploads hit the text-message handler, which cannot process multipart payloads. File attachments are silently discarded or the request errors.

Expected Behavior

sendFileMessage should POST multipart/form-data to /api/chat/:id/messages/file.

Affected Files

frontend/src/actions/chat.ts
frontend/src/lib/axios.ts

References

Doc vs Code Audit Report

1.5 KiB Raw Blame History