860

numericToString returns non-numeric strings unchanged, contradicting its contract and risking invalid numeric output

Community pods mapping emits empty podId when tokenId is missing, producing invalid entries

Tests mock process.stdout/stderr.write and process.exit without restoring, risking cross-test interference

Duplicated parseWei and response type definitions increase drift risk across commands

bin.ts top-level await wrapper cannot catch clipanion errors — runExit calls process.exit() directly

Platform /auth/verify expiresIn coerced unsafely — non-numeric or string value yields NaN expiresAt

auth --force bypasses cached-token wallet-mismatch protection but still keys on cfg.network — could overwrite a session for a different wallet without warning

Platform GET /pods identifier extraction silently drops pods whose id is `0`

BigInt coercion of totalClaimable will throw on decimal strings or scientific notation

Auth path duplication risks drift between --force and the platform.ts API-URL guard

Read-only state access rewrites the state file on every read (unnecessary disk I/O)

Error message extraction may serialize nested error objects as [object Object] (unclear error messages)

SESSION_KEY literal duplicated across modules (risk of drift breaking session cache)

README Authentication table incorrectly claims REPPO_API_KEY is required for register-agent (command uses no auth)

execute() can fall off the end without returning a number when handleError does not throw

register-agent parses response under data.{id, apiKey} but spec/docs say top-level { id, apiKey }

Agents API base is hardcoded to https://reppo.ai/api/v1 with no override, reducing testability and operability

apiKey is echoed to stdout in human-readable mode with no redaction option

Mistral provider has empty ping_url, causing invalid URL fetch and permanent unhealthy state

Health check marks 401/403 as healthy, routing to misconfigured providers

Comment claims 'After 3 consecutive failures' but logic uses overall error rate threshold

Large-request detection stringifies structured content, misclassifying request size

CLI usage text lists 'mistral' twice

Non-standard import.meta.dirname used to resolve proto path will crash under Node ESM

createDirectConnectSession does not wrap JSON parsing in DirectConnectError, leaking raw exceptions

gRPC server starts with insecure credentials; if bound beyond localhost, traffic is unencrypted/unauthenticated

DirectConnectSessionManager relies on global crypto.randomUUID without import, reducing portability

Logging OAuth/JWT token prefixes leaks sensitive information to logs

BoundedUUIDSet breaks when constructed with capacity=0 (modulo-by-zero and ring misuse)

Session/ID values interpolated into URL paths without validation

Axios version in package.json likely invalid (build/install failure risk)

Image block normalization may still produce invalid media_type when detection fails

DopplerDN404 pool starts unlocked but `lockPool` falsely advertises it as locking

GovernanceFactory.create can be DoS'd by attacker pre-creating timelock with role pre-granted to attacker

Governance contract: `proposalPeriodStart` uses block.timestamp + 90 days but is cast to uint32 (Y2038-ish overflow ~2106)

CloneERC20.mintInflation drops sub-year residual when no full year has elapsed since lastMintTimestamp, but updates `currentYearStart` only inside the loop — works correctly; however `updateMintRate` bypasses `lastMintTimestamp` update when no inflation is accrued

DopplerERC20V1._releaseAllFor under-pays when amounts exceed requested total (early break logic)

DopplerERC20V1.initialize: maxTotalPreMint cap not enforced when balanceLimit not configured but allocations exist; off-by-one allows `vestedTokens == initialSupply`

DopplerDN404.tokenByIndex uses totalSupply/_unit() which counts both NFT and fractional tokens

DopplerDN404._transferFromNFT frozen-prefix maintenance: `i` may equal new owned length after super if `id` was the last element

CloneERC20Factory initializes the implementation contract directly (no _disableInitializers), exposing it to ownership takeover

NoOpGovernanceFactory duplicates DEAD_ADDRESS instead of importing the shared constant

DopplerERC20V1._setOwner does not re-exclude `owner_` if owner is rotated after balanceLimitEnd

Factory keeps Timelock admin powers due to wrong role being renounced

Invalid named import of IVotes from Governance.sol breaks compilation

Custom error used as require message causes compilation failure in Governance._propose

Misleading comment: unlockPool claims to track vesting start but actually starts inflation tracking

Numeraire buyback transfers output to recipient using wrong currency (asset instead of numeraire... but inverted) - sends ASSET tokens for a NUMERAIRE buyback

_computeCurrentFee reverts on underflow when startFee < endFee path is not blocked for equal endFee but lastFee already at endFee — but also computes uint24 underflow if startFee==endFee and durationSeconds==0 not pre-checked in DecayMulticurveInitializerHook._beforeSwap

RehypeDopplerHookInitializer._onInitialization permits startFee == endFee but later code never sets lastFee == endFee, causing _getCurrentFee to keep returning startFee — only emits FeeUpdated when currentFee < schedule.lastFee, but for flat schedule short-circuit triggers; minor docs/maintainability concern: lastFee not advanced to endFee after full decay so storage write happens once and never enters the 'fully decayed' branch