sphere · Issues· 48 open

CDN 403s any query containing localhost/127.0.0.1, which blocks the documented custom-agent local-testing flow

No billing history: a paying user cannot see what they bought, when, or why their limits dropped

Plan duration is a hardcoded 30-day constant the plan model cannot express

Buying a cheaper plan silently discards the days already paid for

Cut the abandon/background-settlement machinery: a recovered key from a cancelled order has nowhere to land

Mainnet rollout gate: four wallet-side defects to fix before MAINNET_ROLLOUT_ENABLED is flipped

Not rounded number in transaction history breaks formatting

Chat caches keyed on a nullable identity, and five surfaces that misreport a missing Sphere

[HIGH] Seed phrase is stored in plaintext in IndexedDB; there is no wallet password or unlock screen

[HIGH] Onboarding "download backup" writes the mnemonic as unencrypted JSON named after the public handle

[HIGH] Create-with-nametag is not atomic: a failure after the Nostr binding publishes burns the nametag forever

[HIGH] SphereProvider.initialize() is not re-entrant: StrictMode / IPFS toggle leaks a second live Sphere instance

[HIGH] Desktop↔tab navigation remounts DesktopLayout, reloading every open iframe app

[HIGH] Group message send failure silently discards the typed message

[HIGH] Connect approval/confirm modals show unverified dApp-supplied identity, not the verified origin