Board

Add Chestshop Bypass Mode

Add guard to prevent general purpose LLM usage

Business GUIs (/firm menu)

Allow members of government to access parts of the economy explorer UI depending on their role

Revert prod account_access compat view + premature explorer deploy before next release

Run prod SQL backfill for stranded firm accounts (proprietor ≠ account owner)

Ability to delete built-in roles

[chestshop] Replace the vendored Base64 native-deserialization with plain Base64 item-code blobs (migrate stored data)

Team join policy: join-any-team-as-contributor vs require approval

[Epic] Custom fields — per-workspace issue field definitions + values

Collapse Vault-bridge two-hop transfers in explorer views (all plugins); keep genuine faucets/sinks

ChestShop sales route through the "ChestShop System" clearing account (2 txns/sale) instead of clean buyer→seller transfers

PAPI Support — Expose Placeholders for Firm Balance

Pull project docs URL into triage context

Add XFF-based IP/UA denylist to economy-explorer middleware

Migrate the shared economy DB from MariaDB to Postgres (off shared host)

Decide repo structure / release process for the economy plugins (monorepo?) — revisit before open-sourcing

Support Bulk Tasks Functionality

Answer Questions Using Tools Instead of Invoking Tools

Add Knowledge Base Feature to Tesks

Kiss Rían

Record kissing Rían

Separate buy/sell transaction and sales locale messages

Merge missing config.yml keys from the jar default on upgrade, preserving surrounding comments

Merge missing message keys from the jar default into the operator's messages.properties on upgrade

Reconcile operator config.yml & messages.properties against shipped jar defaults on plugin upgrade

Backfill chestshop_sale.txn_id for existing sales (~787K NULL rows per network)

chestshop_sale.txn_id is never populated (100% NULL) — link sales to their ledger txn

Change the colour of the shop id in accounts list

Finish GitHub integration wiring for the realty repo

Finish GitHub integration wiring for the treasury repo

Investigate rent refunds for oakridge personal account

Expose the government/business account information for a transaction in the transaction endpoint

Add 'deposit' as an alias for 'pay' in /firm command

Improve help commands in the plugins

Make the website timezone aware

Government-owned property payouts (lease refunds) land in the operator's personal account, not the GOVERNMENT account

Audit + guard player-name ↔ GOVERNMENT-account-name collisions across all bare-name resolvers

Expose config details to the database for documentation

Remove manual account sync

Taxation breakdown screen in economy explorer

Ability to go from firm / player to account ID and vice-versa in Treasury API

Ability to customize the exception-based error messages in the plugins by using message keys rather than strings

Ability to see space available in chestshops in API/UI on top of stock

Integrate /find with treasury

Sales-query read API over chestshop_sale (by firm / owner, paginated + filtered + aggregated)

[Epic] In-game firm sales commands (/firm sales …) over Treasury chestshop_sale — replace PlayerBusinesses sales feature

chestshop_shop backfill + resync support (registry is lazy — untouched shops are absent)

[Epic] Spin out shop-search ("/find") into its own plugin; data layer stays in Treasury/Business

/firm sales toggle <firm> + real-time sale notifications (on FirmNotificationService)

/firm sales <firm> [page] — paginated in-game sales list

/firm sales summary <firm> [days] — aggregate sales report (new; no legacy equivalent)

[/find plugin] /find resync admin command (chunk scan → MarketApi.upsertShop)

chestshop_shop: per-shop search visibility flag (owner can hide from /find)

/sales — personal in-game sales for a player's own chestshops (scope extension beyond legacy firm-only)

/firm sales export <firm> <days> — explorer deep link / signed CSV (not Hastebin)

Ability to filter business names via ChatSentry or some other auto filter

A command which shows top-level economy stats like the UI

Extend reconciliation sources: firm-role and realty-derived group membership

[/find plugin] External integrations: WorldEdit/FAWE shop cleanup + WorldGuard region placeholder

[/find plugin] Hologram previews above shop signs (per-chunk, per-shop + per-player toggle)

chestshop_shop data completeness for faithful /find rendering (vanilla item icon + world identity)

chestshop_shop spatial query support: location index + region/chunk/distance read API

chestshop hologram data layer: per-shop hologram flag + per-player preview preference

A command to release disbanded business names

Address code-review findings: split TransactionService, dead deps, deprecated APIs, exception hygiene

Log issue for luckperms-economy-explorer cron not syncing

Bump hibernia-framework 1.1.0 → 1.2.0-SNAPSHOT across the monorepo

Semantic (vector) search for issues — pgvector embeddings + hybrid retrieval for the triage bot

View Own Transactions on My Data Page

Server component render error on /money-flow and /economy/health endpoints

Ability to view other players network/me pages as an administrator team

Investigate taxation system bug in StateCraft

Add discord webhook support

Expose a firm's total balance in the business plugin API

Better discord bot

Praise Rían for his great work

Infra setup

Project Foundation setup

Add export json/csv to sales logs on economy explorer

Activity chart in Economy Explorer tooltip are cut off when mousing over near the top

My market activity screen isn't showing chestshop sales for individual users

Search page doesn't have the correct styling

Exclude balance of 0 or lower from the balance distribution on Democracycraft

Ensure export buttons are only available to logged in players

Cross-tenant IDOR: scope by-UUID queries to the active tenant

Resolve government accounts before personal accounts for unrenting in Realty

[Epic] Configurability substrate — workspace settings, per-user prefs, custom fields

[Epic] Security & RBAC hardening — make Tesks safe for untrusted tenants

UI RBAC alignment: delete→manage, owner/last-owner protection, roles admin screen

Enforce RBAC in the MCP tool layer

Enforce RBAC server-side at the REST API + service layer

Configurable RBAC: per-workspace roles + permissions with admin/contributor/viewer defaults

Remove/guard destructive hard-delete (MCP tesks_delete_task)

Argo CD can't sync tesks apps: invalid gitops repo credential (ParadauxIO/gitops)

Unlinked membership (null keycloak_sub) → UI grants manage perms the backend denies (UI key creation 403s)

MCP RBAC enforcement denied all writes: tenant/permission context lost across the streamable-transport thread boundary

Balance-tax bracket keys are decimal in shipped config → silently mangled by Bukkit (rates parse to 0)

Root-cause the remaining slow pages (indexes / static docs / query rewrites — not shared cache)

Shared-Redis SWR cache for explorer aggregates + client refresh in sync with cache reset

Automated daily backup of the prod economy DB to R2 (CronJob)

Transaction event feed: cursor pull endpoint + webhooks (substrate for player banks)

Perceived-latency pass: loading skeletons, nav prefetch, auth-path write, /chestshop cache

Fix slow SSR queries on /me and /transactions (pool exhaustion)

Audit Capabilities for Staff and DOC

Harden LuckPerms reconciliation cron: guard empty-result mass-revocation

Public ChestShop market REST endpoints (shops/items/stats)

players can't remove chestshops belonging to a disbanded firm

Bedrock: widen firm_players name cache to fit Floodgate names

Disbanding a Firm Confirmation Action

Investigate API abuse by a user

Prevent '&' from being in firm names in the business project

Bug: Default account not set correctly with /paya business NHSE 1

Investigate Withdrawal Issues for Firm Proprietors

Players are able to disband firms multiple times spamming chat

Bedrock: @Arg OfflinePlayer resolver does a Mojang name lookup → ghost UUIDs

Converge assignee/member identity (app_user per tenant_member)

Board / kanban view (columns by status)

Build PostgresTaskSystem (eject-from-Linear blocker)

Per-team issue number sequence (replace max(number)+1)

Investigate user's API abuse

[Epic] Monetisation — metering, seats, billing, PAYG AI token accounting

[Epic] Agentic Discord bot + self-service onboarding

[Epic] Search & saved views — operator filter builder, saved queries, JQL

[Epic] Analytics & reporting — lead/cycle time, throughput, DORA, churn

Self-service onboarding: Discord OAuth install + UI account sign-up wizard

Issue-delivery analytics: throughput, cycle/lead time per status, churn, status aging, burndown

Search v2: comparator operators (date/number) + AND/OR combinator + shareable saved views

[Epic] Planning layer — subtasks/epics, sprints, due dates, release tagging

Sprints / cycles — time-boxed iterations

Subtasks / epics — parent-child issue hierarchy

Docs accuracy pass: reference commands/permission nodes + key-feature guides + admin config guides

Document the webhooks feature in /docs (player guide + admin page)

Consolidate admin tools into an "Admin" mode with its own sub-navbar

Admin webhooks page: list/search/filter all webhooks + create a webhook for an arbitrary account

Webhook dispatcher: send a rich Discord embed when the target is a Discord webhook

Expose webhook configuration in economy-explorer (self-service /me/webhooks)

/admin/api-keys: parallelize + cache the Prometheus usage queries

Cache /market aggregates + drop needless countAccounts join

/pay does not autocomplete for players anymore

Integration tests: fix false-green security test + flake + weak assertion

Bedrock: verify ChestShop config allows Floodgate names/UUIDs

tesks-ui: lib/workspace.ts runs raw DB queries outside the DAL (only non-lib/sql file touching the pool)

Remove all Linear references: drop linear_id columns + strip Linear branding/UI (tesks + tesks-ui)

Componentise the UI: SCSS Modules + global token layer, full de-duplication

Let players self-sync their explorer roles in-game (/treasuryapi ui sync)

Group permissions UI: per-capability checkboxes with explanations

Group + capability RBAC and admin tool (explorer)

Wire /admin/groups into nav + end-to-end RBAC verification

LuckPerms → explorer group reconciliation cron

Endpoint to get own identity/information akin to /firms/me

Transactions appear in chat

In-game firm notification system

A way for staff/DOC to force disband businesses/change other details in game

Ability to add a memo for /firm deposit

Autocomplete firms in commands (either member or online depending on command)

Ability to exclude plots from taxation in realty

Add tax exemption attribute for firms

Render markdown in descriptions and comments

Issue activity log / history

Archive / delete issues from the UI

Label management (CRUD), incl. native teams

Eject from Linear: cutover

JQL-style text query language for issue search

Usage & billing reporting UI (tokens, seats, per-team/workspace)

Manual issue → release tagging

RBAC UI polish: API-key mint role selector + friendlier 403 surfacing

Remove the obsolete ChestShop item-name backfill tool

Bedrock: realty shows UUID instead of name for Floodgate owners

explorer_group_member PK omits source — manual+luckperms can't coexist

Idempotent transfer retry races on the dedup check-then-insert (500 instead of replay)

Cooldown between creating businesses

Setup Code Functionality

Roles settings: non-owner roles render titleless / broken (crammed into ListRow)

Project detail: group issues by status like the Issues list

Triage bot: move to gpt-5-mini + reasoning-aware decode + sharper prompts

Triage bot fabricates tasks from scrollback when @-mentioned with non-actionable messages

Triage bot: conversational ANSWER action — reply in natural language with cited issues

Triage bot: give the agent a structured list_tasks filter tool (priority/status/project)

Triage bot: complete the read-tool set for workspace/planning questions (status, counts, releases)

Sidebar collapse doesn't collapse — just hides labels (icon-only), stays full width

'Linear' shows up as an assignee — deactivate the leftover Linear bot user

No way to delete a team — add team deletion (guarded against deleting issues)

Admin tool: player reporting

Admin tool: firm reports

Admin tool: edit firm details (HQ region, Discord)

Admin tool: account management — rename, change owner, archive/unarchive

Admin tool: whole-ledger power filtering

Admin tool: move money between any two accounts (with memo)

Admin write endpoints (SERVICE-scoped): arbitrary transfer, account rename/owner/archive, firm details

Admin firm-management tool (disband / rename) in the economy explorer

Admin-scoped firm disband/rename endpoints + service credential (treasury-rest-api)

Per-team Discord channel routing for activity posts

Investigate linking issues in DC pludgy and pludgy

Log reload commands for business and treasury

GitHub integration: release PRs link/transition every changelog ref (incl. already-shipped issues)

GitHub App integration: repo links, commit/PR deep links, status from merges

Bot ignored the configured default team (filed new issues to a topic-inferred team)

Roll out the tesks GitHub App (create app, set secrets, install, configure)

tesks-ui: Navbar/sidebar redesign + settings accordion + shared design-token retune

tesks-ui: Home/Issues screen — list+board DnD, persisted ordering, configurable status order, header density

tesks-ui: Projects screen + new-project/releases/teams forms — on-demand modal forms, restyle

tesks-ui: Integrations screen — split into API/MCP vs Integrations under settings accordion, fix card width/alignment

tesks-ui: Settings screen — workspace-level statuses, drag-to-reorder status editor, on-demand forms

Investigate username issue

/treasury reload should re-read config.yml + messages.properties at runtime

/business reload should actually re-read config values (not just raw config)

Add confirmation before deleting a business

Investigate why triage isn't a valid status in the Discord bot

GitHub integration demo — commit + PR link, status from merge

Account/workspace onboarding flow

Native Discord posting (replace dead Linear webhook outflow)

Per-guild Discord configuration (channels + roles)

In-app MCP API key generation + install docs

DC Economy Profiles Linking Issue

Investigate ticket regarding Walgreens transactions

Grant read access to treasury for DrZoddiak

Investigate: kill the ~50ms DB round-trip floor (in-cluster read mirror / DB locality)

Investigate + surface the untagged /pay whale economy ($17M, highly concentrated, no audit trail)

Stripe billing — plans, checkout, webhooks, PAYG AI

Create an issue to address Teek

Log websocket for incoming transactions

Bug: General caching issues with usernames

Bug: Cannot pay employees from gov account

Add ability to fine firms

/pay routes to a player's personal account instead of the same-named GOVERNMENT account (cache-dependent)

/pay writes untagged ledger transactions (plugin_system = NULL) — $17M of peer payments unattributable

Notify firm when an employee joins

Notify firm when an employee leaves (fired / resigned)

Look at /transactions colouring improvements

Notify firm on promotion / demotion

No ubi while afk

Fix error message for duplicate firm invite

Employee-only firm chat channel (CarbonChat integration, akin to /f chat)

Add webhook support for fines

Remove firm_players defer to treasury

ChestShop build broken by upstream: WorldGuard 7.1.0-SNAPSHOT moved to a Java 25 toolchain

Docker build-and-push fails: attestations (provenance/SBOM) unsupported on the default buildx docker driver

adminSetProprietor strands the firm's treasury account (PAR-141 sibling: admin-override path + atomicity)

B2B Transfers Enhancement

Reconcile Treasury access on proprietorship transfer & role-permission changes

Add account-owner reassignment to TreasuryApi

Service-layer consolidation + *Service naming normalisation

Make each integration one self-contained class; fix the Nexo↔ItemService layering

Fold the database/ package away — DDL onto the mappers, wiring into DatabaseModule

Reorganise integration/ into per-plugin subpackages

Suffix all Bukkit listeners with Listener

Remove the AdminInventory fake-Inventory; model unlimited admin shops explicitly

Migrate logging to slf4j (@Slf4j); drop the shop file-log

utils/ consistency pass — naming, private ctors, consolidation

Standardise soft-dependency integrations (PluginNameIntegration) + kill the Dependencies god-class

Split the service layer into interface + impl (services/ + services/impl/)

Model naming cleanup + collapse the dead economy-adapter abstraction + AdminBypass to a service

Reorganize ChestShop onto the monorepo's layer-based conventions (Lombok models, dissolve feature packages)

Make the transaction/creation pipeline contexts honest: immutable inputs, minimal mutable result

Kill the static god-object surface on ChestShop.java: DI the messenger, de-static the service refs, relocate the pure helper

Thin the PlayerInteract listener: move trade-context construction into TransactionService

Let Bedrock/Floodgate players link & reach their wallet on the Economy Explorer

Remove dead upstream machinery: ItemBridge + ShowItem integrations + bStats telemetry

Remove the BungeeCord cross-server shop-notification integration

Rename plugins/ to integration/ to match the cross-project convention

Deep-dive cleanup: remove dead @Deprecated members + the legacy multi-version ImplementationAdapter reflection

Extract the pure prefix-matcher off @Singleton FirmSuggestionCache into utils/Suggestions

RoleUtils is firm domain policy, not a util — move to model/FirmRoleDefaults

Move @Singleton command-parameter resolvers out of utils/ into commands/resolvers/

Move @Singleton caches out of utils/ into the service layer

Explorer has no service layer — pages/actions call lib/sql directly and the DAL carries logic

treasury-api-plugin: PersonalKeyHandler & BusinessKeyHandler inject ApiKeyMapper directly (skip ApiKeyService)

treasury-rest-api: AccountController injects AccountMapper + FirmMapper directly (skips service layer)

FirmBalanceTaxListener bypasses the service layer (injects FirmAccountsMapper + holds tax-allocation logic)

Validate webhook keyType against the ENUM; document rate-limit/IP trust decisions

economy_players cutover drops last-login epoch for firm-directory-absent players

Government salary double-notifies/double-counts on concurrent collapsed payout

Admin proprietor-override diverges firm money from ownership on DB failure

Move non-search subcommands off /find onto /chestshop

/find results screen crashes on a shop with null price(s)

Fix stale FirmPlayerTest: malformed UUID returns null, not throws

Unify overdraft-floor interpretation across the two ledger transfer engines

Update ChestShop player/admin docs: partial trades + native Nexo custom items

Port native Nexo/ItemsAdder custom-item support into ChestShop (from NexoUtilities)

[chestshop] Migrate to a service/DAO architecture (strangler-fig away from the event-bus pipelines)

Add /firm baltop — leaderboard of firms by collective account balance

[chestshop] Collapse the PreShopCreation + PreTransaction validation pipelines into services (Phase 3)

[chestshop] Collapse the internal currency event bus into an EconomyService (TreasuryApi boundary)

[chestshop] Remove AuthMe, BlockLocker, Heroes, LWC, LockettePro, RedProtect integrations

[chestshop] Drop the redundant Messages adapter; call the framework Message bean directly

[chestshop] Remove the broken/pointless /chestshop access toggle

[chestshop] Unified /chestshop command tree + admin self-bypass toggle

[chestshop] Remove discount + price-limit systems and legacy build-metadata cruft

[chestshop] Remove MineDown + multi-language; move messaging to HiberniaFramework i18n

[treasury-api-plugin] Fails to enable: concrete plugin not bound + HelpGenerator circular DI

[chestshop] Use Paper's native Adventure instead of bundling/relocating it

[business] Plugin fails to enable: Carbon soft-dep not actually soft + HelpCommands circular DI

[chestshop] Stage the shaded jar into server/plugins via a copyPlugin task

Standardise ChestShop's shaded jar name to chestshop-$version.jar

Monorepo-wide version-catalog upgrade to latest GA (junit 6 / HikariCP 7 / flyway 12 + minors)

Move treasury-rest-api to Spring Boot 4.1.0 GA + refresh REST dependencies

Extract a build-logic convention plugin to collapse duplicated plugin build boilerplate

Balance-tax bracket keys are decimals in shipped config.yml → silently ignored (Treasury + Business)

Docs accuracy sweep: correct stale guides/reference/admin docs against current behaviour

Prune a plugin's own stale staged jars in copyPlugin so server/plugins doesn't accumulate old versions

Finish the 'viewer' role: surface staff.audit as a grantable, LuckPerms-fed read-only oversight role

Gate mavenLocal() behind a dev flag so builds are reproducible

Add a root `release` task that bundles every plugin jar into a clean release/ folder

Migrate ChestShop commands to HiberniaFramework Commander

Migrate ChestShop configuration to hibernia-framework (Guice + @ConfigurationComponent)

Adopt HiberniaModule bootstrap + 1.2.0 quick wins (business)

Adopt HiberniaModule bootstrap + 1.2.0 quick wins (treasury)

Adopt HiberniaModule bootstrap + 1.2.0 quick wins (treasury-api-plugin)

Flatten the :chestshop:plugin nesting into a single :chestshop module

Reorganise ChestShop packages into semantic homes

Standardise ChestShop package names to lowercase

Finish remaining ChestShop audit cleanups (dead event, garbled SQL, version-adapter scheme, deprecated double API)

Remove unmaintained/vendored-repo plugin integrations from ChestShop

Allow chestshops to have a price of $0

Show a firm's proprietor on the firm page (economy explorer)

Consolidate account members/authorizers/viewers into one account_access table

Grant secretaries access to view department account transactions

Vendor hibernia-framework source as a submodule pinned at v1.1.0

Bump hibernia-framework to 1.1.0 across the mono-repo

Add CODE_OF_CONDUCT.md (open-source readiness)

Remove the unusable dc-test-server Flyway target/environment

Centralize dependencies: version catalog, pin Paper 1.21.11 everywhere, single mono-repo version

Business IT harness: build schema from economy-flyway migrations, not a bundled schema.sql (CI red)

Upgrade the monorepo build to Gradle 9.6 (keep Java 21 bytecode target)

Treasury IT harness: build schema from economy-flyway migrations, not a bundled schema.sql

tesks-ui: Modernise layouts — inline editing, drop boxed edit-forms/cards

tesks-ui: Teal (Irish) palette rebrand + mobile/responsive usability pass