Files

Siavash Sameni dceaf82934 audit: 2026-05-30 full-codebase audit — report, issues, docs, runbooks

Full-codebase-audit 2026-05-30 outputs:
- Audit report: 09 - Audits/Full Codebase Audit - 2026-05-30.md
- 81 issue files ISSUE-055..135 (decisions + 1 skipped no-brainer).
- Scanner docs from scratch (was zero): architecture, data model, API ref, payment
  flow, operations runbook + repo README.
- Doc-sync updates across API reference, data models, flows, design system.
- Secret Rotation Runbook (08 - Operations) for the exposed credentials.
- Reusable workflow guide (07 - Development) + .claude/workflows/full-codebase-audit.js.

Issues remain status:open intentionally — the code fixes are uncommitted-then-committed
working-tree changes per repo and aren't "resolved" until merged/deployed.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-05-30 18:48:04 +04:00

1.3 KiB

Raw Blame History

issue, title, severity, domain, labels, status, resolved, fix, status, created, source

issue

title

severity

domain

labels

status

resolved

fix

status

created

source

016

updatePurchaseRequest uses PUT but backend only registers PATCH — all purchase request edits fail

major

Purchase Request

bug

frontend

major

broken-feature

resolved

2026-05-29

Changed axiosInstance.put to axiosInstance.patch in updatePurchaseRequest in marketplace.ts — matches backend PATCH /purchase-requests/:id.

open

2026-05-29

Doc vs Code Audit 2026-05-29

🟠 updatePurchaseRequest uses PUT but backend only registers PATCH — all purchase request edits fail

Severity: major Domain: Purchase Request Labels: bug, frontend, major, broken-feature

Description

The frontend updatePurchaseRequest action (marketplace.ts line 71) calls axiosInstance.put against '/marketplace/purchase-requests/:id'. Backend registers PATCH (not PUT) on /purchase-requests/:id. PUT returns 404 from the controller router.

Current Behavior

Purchase request edits from the buyer edit view fail with 404/405.

Expected Behavior

updatePurchaseRequest should call axiosInstance.patch().

Affected Files

frontend/src/actions/marketplace.ts

References

Doc vs Code Audit Report

1.3 KiB Raw Blame History