Production Update 1.2.4
Summary
First Open Defects pass: 20 of 40 tracker items shipped. Agent terminate is live with blockers, withdrawal review defaults to fraud-flagged items and shows reject / review reasons, dashboards get custom date range, Admin gets a global audit log, and player-facing fake ticker / guest “active session” badges are gone. The remaining 20 items stay on the list below as Todo or In Progress.
Added
- Admins can terminate an Agent from Agent detail. The flow previews blockers first (open shops, outstanding shop funding debt, active players) and asks the admin to type terminate to confirm. KIOSK-433Module: Agent Management · Portal: Admin
- Super/System Admin Audit Log page records actor, action, target, before and after values, and timestamp for admin, player, agent, and withdrawal actions. KIOSK-414Module: Admin Audit Log · Portal: Admin
- Super Agent Financials now has a Credits Withdrawn Back card (credits returned up the chain in the selected period). KIOSK-421Module: Super Agent Dashboard · Portal: Super Agent
- Super Agent Overview shows Outstanding Online Debt as a headline KPI. KIOSK-422Module: Super Agent Dashboard · Portal: Super Agent
- Admin Agent Network adds Owners with Debt and Wholesale Cash Margin, plus Top Agents and Top Shops ranking charts. KIOSK-424Module: Admin Dashboard · Portal: Admin
- Admin footer shows the app version and git SHA so a retest can be tied to a build. KIOSK-443Module: Admin shell · Portal: Admin
- Unknown Admin URLs now open a Page not found screen instead of silently landing on Player management. KIOSK-444Module: Admin routing · Portal: Admin
Fixed
- Withdrawal Requests opens on fraud-flagged items awaiting admin review, not the full 700+ queue. Flagging rules are written on the page. Internal game-to-wallet transfers are not fraud-flagged. KIOSK-427Module: Withdrawal Review · Portal: Admin
- Rejected withdrawals show who rejected, the reason, and the time on the detail screen. KIOSK-428Module: Withdrawal Review · Portal: Admin
- A payout that skipped auto-approve now stores and displays the triggering rule (amount vs threshold, bonus In Review, fraud flag, or auto-approve failed) — not only the $200 amount limit. KIOSK-429Module: Withdrawals · Portal: Admin, Shop, Player
- Portals use English locale and one date format. The Admin HTML lang is en, not vi. KIOSK-437Module: Locale · Portal: Admin, Super Agent, Agent, Shop, Cashier
- Dashboards accept Today, This week, This month, 7d, 30d, and a custom date range. Shop counter deposit and redemption ledgers use the same range controls. KIOSK-418Module: Dashboards · Portal: Admin, Super Agent, Agent, Shop
- The player win ticker is no longer a generated $43 sequence. Guests see nothing. Signed-in players see their own completed game-to-wallet recalls. KIOSK-439Module: Player home · Portal: Player
- Signed-out visitors no longer see ACTIVE SESSION / $0 on game cards. That badge only appears for a signed-in player with a real session. KIOSK-440Module: Player home · Portal: Player
- Admin Financials “Total Credits Issued” and Agent Network “Network Credits Issued” are named and tooled separately so the two scopes are not read as the same KPI. KIOSK-420Module: Admin Dashboard · Portal: Admin
- Super Agent Finance cards are named Credits Sold, Credit Cost, and Credit Margin, with breakdowns that add up to those totals. KIOSK-423Module: Super Agent Dashboard · Portal: Super Agent
- Browser tab title is Admin - Kiosk Gaming (was Kisok gamming). KIOSK-438Module: Admin shell · Portal: Admin
- Cash Transactions no longer renders the page header twice. KIOSK-442Module: Cash Transactions · Portal: Admin
- Admin role labels are consistent (Finance Admin, not Finance Manager) across header, tables, and permission dialogs. KIOSK-415Module: Admin roles · Portal: Admin
Known Issues
- No. 1 Payments stop halfway and never resolve — TodoModule: Payments
- No. 2 Support backlog is unattended — TodoModule: Support
- No. 3 Dashboard rollup job is not running — In Progress (KIOSK-417)Module: Dashboards
- No. 4 Frontend shows modules the backend refuses — TodoModule: RBAC
- No. 5 Roles reach areas outside their remit — TodoModule: RBAC
- No. 7 No way to edit role permissions / create System Admin — TodoModule: RBAC
- No. 8 Owner account is not protected from deletion — TodoModule: Admin accounts
- No. 9 Down providers presented as active — TodoModule: Game providers
- No. 10 Admin account changes during handover have no freeze — TodoModule: Admin accounts
- No. 14 Players cannot cancel a deposit — TodoModule: Deposits
- No. 15 A cashier cannot be given a shift — TodoModule: Cashier
- No. 18 Integration Logs does not show the full failure picture — TodoModule: Integration Logs
- No. 20 Player ledger shows money moving the wrong way — TodoModule: Player ledger
- No. 29–40 remaining medium/low items — Todo (see list below)Module: Open Defects
Affected Modules
- Agent Management
- Withdrawal Review
- Admin Audit Log
- Dashboards
- Locale and dates
- Player home
- Admin shell
Affected Portals
- Admin Portal
- Super Agent Portal
- Agent Portal
- Shop Portal
- Cashier Portal
- Player Portal
Related Jira Tickets
This note covers Open Defects Tracker items 1–40 from the 11 September 2026 prioritised list. 20 Done, 1 In Progress, 19 Todo.
1.2.1, 1.2.2, and 1.2.3 exist as placeholders and are not documented here.
Critical
1. Payments stop halfway and never resolve
Pending and expired gateway payments still need an automatic final state and confirmed webhook handling. Not in this build.
2. Support backlog is unattended and every new ticket is about missing money
Operations ownership of the support queue. Not a code change in this build.
3. Dashboard rollup job is not running
Tracked. No production commit in this window yet. Dashboard figures can still lag until the worker is restored.
4. Frontend shows modules the backend refuses
Menu visibility and API authorization still need one permission source. Not in this build.
5. Roles reach areas outside their remit
Per-role permission matrix on the API is still outstanding. Not in this build.
6. An Agent account cannot be terminated
Portals: Admin
- Agent detail Danger zone Terminate agent is enabled.
- Backend preview returns blockers before terminate: open shops, outstanding shop funding debt, active players.
- Admin must type
terminateto confirm. Terminate stays blocked until the preview is clear.
7. No way to edit role permissions, and System Admin cannot create System Admin
Role & Permission Management is not in this build.
8. The owner account is not protected from deletion
Root-account protection and second confirmation are not in this build.
9. Providers that are down are presented to players as active
Public API still does not carry provider health. Not in this build.
10. Admin accounts are being changed during the handover, with no audit trail
Account-change freeze is a product/ops decision. The audit log in no. 19 records admin create / update / terminate / permission changes once they happen.
High
11. Withdrawal review opens the whole queue
Portals: Admin
- Default filter is awaiting admin and fraud-flagged.
- The page states the flagging rules: new player, sudden large deposit or withdrawal, unusual activity.
- Internal game-to-wallet transfers are excluded from fraud flagging.
12. Rejected withdrawals carry no reason and no audit trail
Portals: Admin
Withdrawal detail now shows the rejecting admin (or Shop / System), the reason, and the reject time. The reject path writes an admin action log.
13. A $10 withdrawal required manual approval although the threshold is $200
Portals: Admin, Shop, Player
The record stores the triggering rule, not only the dollar threshold. Possible reasons:
- amount at or above the auto-approve limit
- Welcome Bonus In Review (every payout needs a person)
- abnormal-profit / fraud flag
- auto-approve threshold is $0
- automatic approval failed
Shop withdrawal approval shows the same review reason.
14. Players cannot cancel a deposit
Player cancel on a pending deposit is not in this build.
15. A cashier cannot be given a shift
Shop cashier shift assignment is not in this build.
16. The admin panel declares itself as Vietnamese
Portals: Admin, Super Agent, Agent, Shop, Cashier
- Admin
html langisen. - Shared English date formatting on Admin, Super Agent, Agent, Shop, and
Cashier shift windows. Vietnamese month labels (
thg 9) should no longer appear from the document locale.
17. No custom date range on any dashboard
Portals: Admin, Super Agent, Agent, Shop
- Dashboard APIs accept
today/week/month/7d/30d/custom. - Custom range is
dateFrom–dateToin the report timezone. - Wired on Admin, Super Agent, Agent, and Shop dashboards.
- Shop Counter deposits and Counter redemptions ledgers also got the range controls.
Admin Cash Transactions and wallet screens as a whole are still no. 30.
18. Integration Logs does not show the full failure picture
Sync-job log stream is not surfaced in the panel in this build.
19. There is no global admin audit log
Portals: Admin (Super Admin / System Admin)
- New Audit Log page: actor, action, target, before/after, notes, IP, time.
- Filter by actor, target type, target id, action, and date range.
- Actions include create/update/terminate admin, permission changes, terminate player/agent, approve/reject withdrawal.
20. The player ledger shows money moving the wrong way
Wallet-to-game vs inflow classification is not in this build.
Medium and low
21. Public redeem ticker is generated, not real activity
Portals: Player
- Fake $43-step ticker is removed.
- Guests get an empty ticker (no public masked emails/phones).
- Signed-in players see their own completed game → master wallet recalls.
22. Signed-out visitors are told they have active sessions
Portals: Player
Game cards no longer show ACTIVE SESSION / $0 for guests. Balance and session state only render for a signed-in player.
23. The same KPI name shows two different values
Portals: Admin
- Financials: Total Credits Issued (includes online player deposits).
- Agent Network: Network Credits Issued (CDN + converts only).
- Each card has a tooltip stating the scope. The Agent Network credits chart follows the network-only number.
24. Credits Withdrawn Back card does not exist
Portals: Super Agent
Financials now includes Credits Withdrawn Back from the dashboard API.
25. Outstanding Online Debt is not a headline KPI on the Super Agent portal
Portals: Super Agent
Overview headline KPIs now include Outstanding Online Debt.
26. Three finance KPI rows are a naming mismatch
Portals: Super Agent
Catalog names are used without a second total:
| Card | What it is |
|---|---|
| Credits Sold | Earned from credit sales to agents (cash + CDN + converts) |
| Credit Cost | Paid up-chain for credits |
| Credit Margin | Sold minus cost (same as net position) |
Breakdown chips add up to those totals. Credits Withdrawn Back covers net returned credits (no. 24).
27. Agent Network KPIs are incomplete
Portals: Admin
Added:
- Owners with Debt — live count of shops / agents / super agents with outstanding online debt
- Wholesale Cash Margin — face credit value minus cash expected on platform → super-agent cash sales
28. Top Shops and Top Agents ranking charts are absent from Admin
Portals: Admin
Agent Network now has Top Agents and Top Shops ranking charts.
29. Notifications need bulk management
View All / Read all bulk actions are not in this build.
30. Time filters are missing on Cash Transactions and wallet screens
Admin Cash Transactions and wallet screens still need the shared date component. Shop counter deposit/redemption ledgers were covered with no. 17.
31. The browser title contains two spelling errors
Portals: Admin
Title is Admin - Kiosk Gaming. Manifest name matches.
32. Cash Transactions renders its page header twice
Portals: Admin
Duplicate title/description block removed.
33. There is no version or build badge
Portals: Admin
Footer shows v{APP_VERSION} · {GIT_SHA} next to Kiosk Admin © 2026.
34. Unknown routes land silently on Player management
Portals: Admin
Unknown paths render Page not found with Go Back / Go to Dashboard.
35. Role labels are inconsistent between accounts
Portals: Admin
One label map everywhere: System Admin, Super Admin, Platform Admin, Finance
Admin, Operation Admin, Support Admin. Permission dialogs use readable names
(Wallet Management, not walletManagement).
36. Payout limits are not shown to players, and minimum deposit is inconsistent
Player payout copy and a single min-deposit value are not in this build.
37. Four of six admin roles are assigned to nobody
Ops recommendation after the permission matrix (no. 5 / 7). Not a code defect in this build.
38. Agent, Super Agent and Cashier panels need a redesign
Separate redesign plans. Not in this build.
39. Agent portal Players tab — status unresolved
No code change in this build.
40. Balance metrics under the period filter — not fully verified
No code change in this build.