Issues

• API: /api-reference is open to CSRF through form posts when the cookie is SameSite=None

  impact: highpriority: hightype: bug
  suiramdev/freenary#229 · Filter by author Cobbrou opened on Oct 28, 2026
  1

• DX: small fixes

  good first issueimpact: lowpriority: lowtype: maintenance
  suiramdev/freenary#220 · Filter by author Cobbrou opened on Oct 27, 2026

• Tooling: pin lefthook, oxfmt and oxlint, and stop parallel fixes on the same files

  good first issueimpact: lowpriority: lowtype: maintenance
  suiramdev/freenary#219 · Filter by author Cobbrou opened on Oct 27, 2026

• CI: scripts/ is never type-checked

  good first issueimpact: lowpriority: lowtype: maintenance
  suiramdev/freenary#218 · Filter by author Cobbrou opened on Oct 27, 2026

• Docker: no --frozen-lockfile, root user, floating base tag

  good first issueimpact: mediumpriority: hightype: maintenance
  suiramdev/freenary#217 · Filter by author Cobbrou opened on Oct 27, 2026

• Windows: docs:check and env-sync break on \ paths

  good first issueimpact: mediumpriority: mediumtype: bug
  suiramdev/freenary#216 · Filter by author Cobbrou opened on Oct 27, 2026

• Tests: cover sync, aggregates, rate limit, provider clients, sealed storage, assistant and server

  impact: lowpriority: lowtype: maintenance
  suiramdev/freenary#215 · Filter by author Cobbrou opened on Oct 27, 2026

• Tests: cover authorization, user isolation, instance claim and auth policy

  impact: mediumpriority: hightype: maintenance
  suiramdev/freenary#214 · Filter by author Cobbrou opened on Oct 27, 2026

• CI: run every workspace's tests, not just packages/api

  impact: lowpriority: lowtype: maintenance
  suiramdev/freenary#213 · Filter by author Cobbrou opened on Oct 27, 2026

• Tests: fix the timezone and locale leaks between test files

  good first issueimpact: lowpriority: lowtype: maintenance
  suiramdev/freenary#212 · Filter by author Cobbrou opened on Oct 27, 2026

• Cleanup: dead code and misplaced code

  impact: lowpriority: lowtype: maintenance
  suiramdev/freenary#211 · Filter by author Cobbrou opened on Oct 27, 2026

• oRPC: declare .output() and .errors() on procedures

  impact: mediumpriority: mediumtype: maintenance
  suiramdev/freenary#210 · Filter by author Cobbrou opened on Oct 27, 2026

• Web: infer API types instead of copying them, and narrow the ./* export

  impact: lowpriority: lowtype: maintenance
  suiramdev/freenary#209 · Filter by author Cobbrou opened on Oct 27, 2026

• Transactions: getTransactions has two parallel filter APIs

  impact: lowpriority: lowtype: maintenance
  suiramdev/freenary#208 · Filter by author Cobbrou opened on Oct 27, 2026

• API: split routers/budget.ts

  impact: lowpriority: lowtype: maintenance
  suiramdev/freenary#207 · Filter by author Cobbrou opened on Oct 27, 2026

• Budget reads: duplicated and wasted work

  impact: mediumpriority: mediumtype: maintenance
  suiramdev/freenary#206 · Filter by author Cobbrou opened on Oct 27, 2026

• Sync: runs inside the HTTP request and invalidates every budget query every 1.5 s

  impact: mediumpriority: mediumtype: bug
  suiramdev/freenary#205 · Filter by author Cobbrou opened on Oct 27, 2026

• Assistant: the whole conversation is sent to the LLM on every turn

  impact: mediumpriority: mediumtype: feature
  suiramdev/freenary#204 · Filter by author Cobbrou opened on Oct 27, 2026

• Classifier: LLM calls have no cap and failures are not cached

  impact: mediumpriority: mediumtype: bug
  suiramdev/freenary#203 · Filter by author Cobbrou opened on Oct 27, 2026

• Bank sync: one database write per transaction, in series

  impact: mediumpriority: mediumtype: maintenance
  suiramdev/freenary#202 · Filter by author Cobbrou opened on Oct 27, 2026

• Accessibility: unlabelled search fields, one <title> for every route, untranslated Toaster labels

  good first issueimpact: mediumpriority: mediumtype: bug
  suiramdev/freenary#201 · Filter by author Cobbrou opened on Oct 27, 2026

• Bank sync and assistant: small reliability bugs

  good first issueimpact: mediumpriority: mediumtype: bug
  suiramdev/freenary#200 · Filter by author Cobbrou opened on Oct 27, 2026

• Assistant: a question over 8000 characters erases the draft

  good first issueimpact: mediumpriority: mediumtype: bug
  suiramdev/freenary#199 · Filter by author Cobbrou opened on Oct 27, 2026

• Budget: aggregates carry no currency, and EUR and ×100 are hard-coded

  impact: mediumpriority: mediumtype: bug
  suiramdev/freenary#198 · Filter by author Cobbrou opened on Oct 27, 2026

• i18n: raw English server errors show in toasts

  good first issueimpact: mediumpriority: mediumtype: bug
  suiramdev/freenary#197 · Filter by author Cobbrou opened on Oct 27, 2026