Issues

• bug(low): CLI boolean flags cannot be set to false

  buglow
  suenot/profitmaker#120 · Filter by author suenot opened on Aug 14, 2026

• bug(low): modules_search reads dead response keys (r.data/r.objects vs server results)

  buglow
  suenot/profitmaker#119 · Filter by author suenot opened on Aug 14, 2026

• bug(low): persisted widget settings stores rehydrate without schema validation or versioning

  buglowreact
  suenot/profitmaker#118 · Filter by author suenot opened on Aug 14, 2026

• bug(low): MarketsWidget loadMarkets has no request-race guard

  buglowreact
  suenot/profitmaker#117 · Filter by author suenot opened on Aug 14, 2026

• bug(low): TradesWidget creates a new AudioContext per blip

  buglowreact
  suenot/profitmaker#116 · Filter by author suenot opened on Aug 14, 2026

• bug(low): roundToStep mis-snaps steps finer than 1e-12 instead of refusing

  buglowreact
  suenot/profitmaker#115 · Filter by author suenot opened on Aug 14, 2026

• bug(low): setSubmitting resurrects state of removed widget (orphaned store entries)

  buglowreact
  suenot/profitmaker#114 · Filter by author suenot opened on Aug 14, 2026

• bug(low): subscribe/unsubscribe race orphans REST polling interval permanently

  buglowreact
  suenot/profitmaker#113 · Filter by author suenot opened on Aug 14, 2026

• chore(low): dead schema — exchange_accounts table with encrypted-key columns used nowhere

  expresslowtech-debt
  suenot/profitmaker#112 · Filter by author suenot opened on Aug 14, 2026

• chore(low): dead code — alignment guides non-functional (~550 lines)

  lowreacttech-debt
  suenot/profitmaker#111 · Filter by author suenot opened on Aug 14, 2026

• chore(low): dead code — WidgetContext.tsx is a 457-line divergent duplicate of live state model

  lowreacttech-debt
  suenot/profitmaker#110 · Filter by author suenot opened on Aug 14, 2026

• chore(low): types/sdk/cli/mcp packages have no typecheck script — root typecheck skips them

  lowtech-debt
  suenot/profitmaker#109 · Filter by author suenot opened on Aug 14, 2026

• chore(medium): server package has 1 test file for 7.2k LOC of money-adjacent code

  expressmediumtech-debt
  suenot/profitmaker#108 · Filter by author suenot opened on Aug 14, 2026

• chore(medium): client typecheck and lint are red in CI (non-blocking)

  mediumreacttech-debt
  suenot/profitmaker#107 · Filter by author suenot opened on Aug 14, 2026

• perf(low): 1Hz status-bar clock re-renders entire terminal tree

  lowperformancereact
  suenot/profitmaker#106 · Filter by author suenot opened on Aug 14, 2026

• perf(low): verbose console logging in hot data paths (thousands of objects/sec)

  lowperformancereact
  suenot/profitmaker#105 · Filter by author suenot opened on Aug 14, 2026

• security(low): docker-compose.prod.yml leaks origin IP and lists incomplete set of required secrets

  lowsecurity
  suenot/profitmaker#104 · Filter by author suenot opened on Aug 14, 2026

• chore(medium): packages/types and client/src/types have drifted duplicate contracts

  mediumreacttech-debt
  suenot/profitmaker#103 · Filter by author suenot opened on Aug 14, 2026

• bug(low): SDK claims client-side manifest validation that does not exist

  buglowsdk
  suenot/profitmaker#102 · Filter by author suenot opened on Aug 14, 2026

• security(medium): module permissions declared in manifests are not enforced anywhere

  mediumsdksecurity
  suenot/profitmaker#101 · Filter by author suenot opened on Aug 14, 2026

• bug(medium): MCP modules_install/enable/disable can never succeed (missing x-modules-admin-token support)

  bugmedium
  suenot/profitmaker#100 · Filter by author suenot opened on Aug 14, 2026

• security(medium): MCP group-context commands retarget live order form without confirmation — wrong-symbol order risk

  mediumsecurity
  suenot/profitmaker#99 · Filter by author suenot opened on Aug 14, 2026

• bug(low): session cleanup interval produces unhandled rejections; outbound fetches lack timeouts

  bugexpresslow
  suenot/profitmaker#98 · Filter by author suenot opened on Aug 14, 2026

• bug(low): ccxtCache userId namespacing is dead code — all authed instances keyed u=unscoped

  bugexpresslow
  suenot/profitmaker#97 · Filter by author suenot opened on Aug 14, 2026

• security(medium): authAccounts credCache never sweeps and holds plaintext exchange keys unbounded

  expressmediumsecurity
  suenot/profitmaker#96 · Filter by author suenot opened on Aug 14, 2026