AetherForge/PROBLEMS.md

PROBLEMS.md

Open issues only. Fixed items removed. Last sweep: 2026-06-06.

By design / safety

Issue	Notes
bof_execute disabled	Agent returns explicit error; in-memory BOF execution disabled (client.go).
Process hollowing AMSI/ETW	Relocation done; Defender/ETW ~50% failure; bypass not implemented (hollow_windows.go).
Cloudflared in-process (non-Windows server)	Stub on Linux/macOS; use external connector (AF_TUNNEL_EXTERNAL) or add launcher.
macOS camera / GPU miner	Stubs or partial; Linux has V4L2 + nvidia-smi path.
KEV heuristics	Non-Windows agents return Status: n/a (Windows-only CVE matching).
Mesh P2P without -tags p2p	Default build reports 0 peers (mesh_p2p_stub.go).
Linux/macOS GPU RVN mining	detectGPU() may find NVIDIA but miners download Windows .exe only.

Architecture deferred (large)

Area	Notes
tunnel_stream	Server-side TCP reverse relay documented as future (README.md).
Path Tracer sessions	TraceSession in handler RAM; restart loses state; no DB persistence or startup sweep.
Non-Windows Path Tracer parity	pathtracer_stub.go errors on wg_setup; chains are Windows-agent focused.
NAT / symmetric UDP	UPnP + DB IP fallback; no STUN/TURN or post-config connectivity probe.
Fixed WireGuard port 51820	Same UDP port all hops; multi-agent behind one NAT may conflict.
Agent display name vs hostname	WS UpsertAgent preserves operator rename when name != hostname; reconnect with hostname only keeps DB label.
WireGuard auto-download (Windows)	ensureWGExe() on first Path Tracer use; heavy, may need admin; pre-install recommended.
Monolithic WebSocket context	All useWebSocket() consumers re-render on any WS change; split contexts/selectors deferred.
CruciblePage size (~2k lines)	Terminal + fleet + tabs in one component; section split/memo deferred.
Per-agent stats_update broadcast	No batching in websocket.go; N agents → N dashboard frames.
No CI HTTP forge	e2e-validate.ps1 -ForgeAgent manual; live compile needs LIVE_FORGE=1 + -tags liveforge.
Path Forge test gaps	Cancellation, batch races, skipped-counter UI not fully covered.
Non-Windows forge host	PE disguise / osslsigncode signing platform-limited by design.
Mac PathForge runtime	.command curl /api/download/agent-mac; needs reachable server_url + binary on server.
Terminal virtualization	400-line DOM cap only; full virtual scrollback deferred.
Vite chunk weight	three + vendor warnings; FleetTopologyMap lazy but heavy first open.

Open bugs / behavior

Issue	Notes
Unknown Unix CPU stats stub	cpu_stub.go may return 0 and break idle-mining guard on exotic platforms.
Linux headless screenshot	Needs xvfb + scrot or custom command in containers.

UX / visual (unfixed DV)

ID	Issue
DV-01	Neon cyan fragmentation (#00f5ff, #0ff vs token #00e8f5) across several components.
DV-02	Page header patterns diverge (Build Manager, Path Tracer green title, Forge naming).
DV-03	SacredPageHeader unused (dead CSS path).
DV-04	Pages.css duplicate .empty-state / .page-header h1 override order.
DV-07	Path Tracer visual island (#00ffaa) vs operator-deck chrome.
DV-09	Dead chart badge styles in wealth-deck CSS.
DV-13	Dark-only; no light / prefers-color-scheme path.
DV-14	Sidebar footer hard-coded v0.0.1.
DV-15	MissionDeckPage.tsx excessive blank lines (maintainability).

Help / product copy gaps

ID	Issue
UH-03	Emberwake / War Room widgets need HelpTip parity with Command Deck funnel.
UH-04	Mission Deck minimal operator guidance.
UH-05	Builder advanced forge sections missing some HelpTip keys (docAnchors.test gap list).

Test gaps / noise

Item	Notes
Agent pathtracer Go tests	Windows impl + stub have limited coverage (pathtracer_stub_test.go started).
Client WS/beacon paths	Integration-heavy; Docker Tier 2 covers Linux slice only.
Path Tracer 2s REST poll	No WS hop progress; acceptable latency, extra load while tracing.
Emberwake double feed	15s client poll + 30s server war-room broadcast; prefer WS-only.
SystemStatusBar REST poll	listAgents every 15s duplicates WS fleet stream.
Builder / dashboard failure tests	Vitest emits ECONNREFUSED stderr on happy-dom; tests pass.
Download mock pattern	Prefer separate vi.fn() per api/download export to avoid flakes.

Product decisions (document-only)

Topic	Notes
Dual storage sync	Session vs localStorage; aetherforge-auth on logout; no full cross-tab policy.
Forge progress simulation	Stage timeline caps ~94% until server responds (45 min client timeout).
MatrixRain / CursorFire	Layout mounts effects on all routes; route-gating deferred.
CI scope	.github/workflows/ci-docker-mining.yml only; no root Makefile test target.

Do not commit

• data/login-credentials.json, data/users.json, and other local secrets.