Limitations

Recorded against published v1.0.0. Extra Front-facing rows below are from branch faruq (this prompt only) and wait for the next docs push before they become a changelog version.

• User App PUT .../nellalink-init/order/update/{id} does not exist on Middleware. Winner is .../admin/order/update/{order_id}.
• User App and Front-facing GitHub Actions inject AWS-related vars; file upload winner is Middleware presign. Do not treat browser AWS keys as the design.
• Analytics nav is disabled. AI generate is not in the web apps.
• Google/Twitter buttons on User App login are not wired. Core Google OAuth exists.
• Order reminder timers live in the Node process memory; restart drops them.
• Core package repo had no ENV-SAMPLE file at write time — Core ENV / Metadata Catalog uses config/nellalink-laravel.php.
• Generic GET .../entity/{type}/{uuid} may be too open on a public key — IDOR.
• Middey, Samzuga, crypto, KYC are in Middleware but out of Nellalink v1.
• Mobile Play Store app is the same product; v1 screens were taken from the two web apps only.
• Front-facing master/main is still Nuxt (NUXT_PUBLIC_*). This playbook pass used faruq (React + Vite, VITE_*). Later prompts use main/master unless a branch is named.
• Place-order Joi allows payment_processor: paystack | bank_transfer | cash (default cash). Live swagger comments still enum paystack | bank_transfer only. faruq sends cash by default.
• onpremise_data and customer_requested_order_email_copy are sent by faruq and used in notify code; swagger request schema omits them (Joi .unknown(true)).
• Guest order history is localStorage (nellalink-confirmed-orders), not Core/Middleware list.
• Print menu on faruq uses a hardcoded menu meta-key and parent uuid, and a shorter path than browse — do not copy. Winner is the same item GET as browse menu.
• faruq .env.example names (VITE_APP_*) do not match Actions or src/ (VITE_CORE_BACKEND_*, VITE_MIDDLEWARE_API_BASE_URL, VITE_ONESIGNAL_APP_ID).
• Middleware explorer https://middleware-dev.nellalink.com/docs/api#/ returned 403 this pass; place-order facts are from plugins/nellalink-init Joi + swagger comments.