Issues

• Store multi-recipient fan-out legs with integer stroop amounts and schema-valid rate and schedule fields

  apibackendpriority:mediumStellar Wavetesting
  Bug

  Streampay-Org/StreamPay-Frontend#1743 · Filter by author greatest0fallt1me opened on Oct 18, 2026
  4

  

• Apply the shared create-stream schema and token allowlist to POST /api/v2/streams (it hardcodes XLM and skips validation)

  apibackendpriority:mediumStellar Wavetesting
  Bug

  Streampay-Org/StreamPay-Frontend#1736 · Filter by author greatest0fallt1me opened on Oct 18, 2026
  3

  

• Prevent deleting ended streams with unwithdrawn funds and audit every stream deletion on v1 and v2

  backendpriority:mediumsecurityStellar Wave
  Bug

  Streampay-Org/StreamPay-Frontend#1733 · Filter by author greatest0fallt1me opened on Oct 18, 2026
  4

  

• Execute the approved lifecycle action when a stream approval reaches its multi-sig threshold

  apibackendpriority:highsecurityStellar Wave
  Bug

  Streampay-Org/StreamPay-Frontend#1729 · Filter by author greatest0fallt1me opened on Oct 18, 2026
  4

  

• Block SSRF in POST /api/streams/[id]/webhooks/test and stream webhook_url (private, loopback and metadata hosts)

  backendpriority:highsecurityStellar Wavetesting
  Bug

  Streampay-Org/StreamPay-Frontend#1727 · Filter by author greatest0fallt1me opened on Oct 18, 2026
  2

  

• Make settle commit only after the Stellar settlement succeeds and record the real settlement tx hash

  apibackendpriority:highStellar Wavetesting
  Bug

  Streampay-Org/StreamPay-Frontend#1722 · Filter by author greatest0fallt1me opened on Oct 18, 2026
  2

  

• Reserve idempotency keys before executing settle/withdraw and stop caching 5xx responses for 24 hours

  apibackendpriority:highStellar Wavetesting
  Bug

  Streampay-Org/StreamPay-Frontend#1721 · Filter by author greatest0fallt1me opened on Oct 18, 2026
  2

  

• Route status changes in POST /api/v2/streams/batch through the lifecycle state machine instead of merging raw fields

  apibackendpriority:highsecurityStellar Wave
  Bug

  Streampay-Org/StreamPay-Frontend#1719 · Filter by author greatest0fallt1me opened on Oct 18, 2026
  4

  

• Stop mass assignment in POST /api/streams/[id] that lets callers overwrite status, id and tenant

  apibackendpriority:highsecurityStellar Wave
  Bug

  Streampay-Org/StreamPay-Frontend#1718 · Filter by author greatest0fallt1me opened on Oct 18, 2026
  2

  

• Stamp tenant on every stream-creation path so GET /api/streams/[id] stops returning 404 for all streams

  apibackendpriority:highStellar Wavetesting
  Bug

  Streampay-Org/StreamPay-Frontend#1717 · Filter by author greatest0fallt1me opened on Oct 18, 2026
  2

  

• Un-quarantine the notification preferences route suite and align GET and PUT with it

  apibackendpriority:mediumStellar Wavetesting
  Task

  Streampay-Org/StreamPay-Frontend#1710 · Filter by author greatest0fallt1me opened on Oct 18, 2026
  4

  

• Un-quarantine errors/index.test.ts and dtos/audit.dto.test.ts and fix request-id loss under async headers()

  backendobservabilitypriority:mediumStellar Wavetesting
  Task

  Streampay-Org/StreamPay-Frontend#1709 · Filter by author greatest0fallt1me opened on Oct 18, 2026
  2

  

• Ship an installable PWA shell with app/manifest.ts and a network-only policy for /api

  frontendperformancepriority:mediumsecurityStellar Wave
  Feature

  Streampay-Org/StreamPay-Frontend#1705 · Filter by author greatest0fallt1me opened on Oct 18, 2026
  5

  

• Introduce a locale-aware message catalog and Intl formatting layer for app/content/copy.ts

  accessibilityfrontendpriority:highStellar Waveui/ux
  Feature

  Streampay-Org/StreamPay-Frontend#1704 · Filter by author greatest0fallt1me opened on Oct 18, 2026
  4

  

• Un-quarantine the IndexerStatus suite and make its relative timestamp tick

  accessibilityfrontendpriority:mediumStellar Wavetesting
  Task

  Streampay-Org/StreamPay-Frontend#1699 · Filter by author greatest0fallt1me opened on Oct 18, 2026
  5

  

• Render /templates as a Server Component with streamed Suspense and a route-level loading state

  frontendperformancepriority:mediumStellar Waveui/ux
  Feature

  Streampay-Org/StreamPay-Frontend#1691 · Filter by author greatest0fallt1me opened on Oct 18, 2026
  2

  

• Return a JSON 404 envelope for unknown /api/* paths instead of the HTML not-found page

  apibackendobservabilitypriority:mediumStellar Wave
  Feature

  Streampay-Org/StreamPay-Frontend#1679 · Filter by author greatest0fallt1me opened on Oct 18, 2026
  2

  

• Cap concurrent /api/indexer/sse connections per identity and un-quarantine its suite

  backendperformancepriority:highsecurityStellar Wave
  Feature

  Streampay-Org/StreamPay-Frontend#1678 · Filter by author greatest0fallt1me opened on Oct 18, 2026
  2

  

• Add a client auth session provider for wallet sign-in, bearer attachment and 401 recovery

  frontendpriority:highsecurityStellar Waveui/ux
  Feature

  Streampay-Org/StreamPay-Frontend#1670 · Filter by author greatest0fallt1me opened on Oct 18, 2026
  2