Board

Cannot issue business API keys with /treasuryapi

Add a baltop API endpoint

Expose the government/business account information for a transaction in the transaction endpoint

Ability to go from firm / player to account ID and vice-versa in Treasury API

Ability to see space available in chestshops in API/UI on top of stock

Sales-query read API over chestshop_sale (by firm / owner, paginated + filtered + aggregated)

Extend reconciliation sources: firm-role and realty-derived group membership

Bug: General caching issues with usernames

Docker build-and-push fails: attestations (provenance/SBOM) unsupported on the default buildx docker driver

treasury-api-plugin: PersonalKeyHandler & BusinessKeyHandler inject ApiKeyMapper directly (skip ApiKeyService)

treasury-rest-api: AccountController injects AccountMapper + FirmMapper directly (skips service layer)

Validate webhook keyType against the ENUM; document rate-limit/IP trust decisions

[treasury-api-plugin] Fails to enable: concrete plugin not bound + HelpGenerator circular DI

Move treasury-rest-api to Spring Boot 4.1.0 GA + refresh REST dependencies

Adopt HiberniaModule bootstrap + 1.2.0 quick wins (treasury-api-plugin)

Transaction event feed: cursor pull endpoint + webhooks (substrate for player banks)

Public ChestShop market REST endpoints (shops/items/stats)

Investigate user's API abuse

Webhook dispatcher: send a rich Discord embed when the target is a Discord webhook

LuckPerms → explorer group reconciliation cron

Endpoint to get own identity/information akin to /firms/me

Idempotent transfer retry races on the dedup check-then-insert (500 instead of replay)

Admin write endpoints (SERVICE-scoped): arbitrary transfer, account rename/owner/archive, firm details

Admin-scoped firm disband/rename endpoints + service credential (treasury-rest-api)