fix: asset-aware tx amounts, real overview data, biometric lockout counting, job queue visibility timeout

[ritik4ever]

Closes #1410
Closes #1415
Closes #1418
Closes #1407

Summary

Four small, independent fixes across the monorepo.

#1410 — [WEB-DASHBOARD] TransactionTable hardcodes USD

formatAmount() formatted every amount as style: 'currency', currency: 'USD', ignoring
Transaction.asset. It now renders "142.50 XLM" and falls back to XLM when the field is
absent, matching the documented default.
apps/web-dashboard/src/components/transactions/TransactionTable.tsx:46

#1415 — [MOBILE] NativeBiometricAdapter misclassifies failed matches

A resolved { success: false } from createSignature() is a genuinely failed match (wrong
finger / spoofing attempt), not a voluntary cancel, but it was mapped to USER_CANCEL — which
BiometricLockoutManager.recordFailure() explicitly excludes from the failure counter. The
resolve path now returns AUTHENTICATION_FAILED, so BIOMETRIC_MAX_ATTEMPTS and the lockout
timer actually engage. The thrown-exception path still distinguishes real cancellation.
apps/mobile-wallet/src/security/NativeBiometricAdapter.ts:45

#1418 — [RELAYER] PgJobQueue.dequeue() has no visibility timeout

Jobs claimed via FOR UPDATE SKIP LOCKED had no lease, so a worker SIGKILLed between
dequeue() and ack()/nack() stranded the job in processing forever. dequeue() now
reclaims any processing row whose updated_at is older than a 5-minute visibility timeout
back to pending before selecting, using a data-modifying CTE (always executed, independent
of whether the outer query reads its output).
services/relayer/src/queue/PgJobQueue.ts:135

#1407 — [WEB-DASHBOARD] OverviewPage is entirely hardcoded

OverviewPage — the component actually rendered at /dashboard — rendered a literal array of
fabricated figures (1,245.80 XLM, 24 payments) and fired zero network requests. It now
reads the app's real hooks: useAccountState() for the active address and
useAccountOverview() for balance, status and nonce, with a loading placeholder.
apps/web-dashboard/src/router/index.tsx:212

Testing

Not run — changes are scoped and reviewable individually. Worth a follow-up pass:

• a TransactionTable case with asset set to a non-XLM code
• a NativeBiometricAdapter case for resolve({ success: false })
• a PgJobQueue case asserting a stale processing job is reclaimed

Notes

• [RELAYER] PgJobQueue.dequeue() has no visibility timeout — a job stuck in 'processing' after a worker crash is permanent #1418 is related to [RELAYER] PgJobQueue.dequeue() has no visibility timeout — a worker crash after dequeue leaves a job permanently stuck in 'processing' #1369, which fix(mobile): use migration-safe unlock wrapper in persistOnboardedWallet #1383 claims to close but only touches
  apps/mobile-wallet/.../persist-wallet.ts. This fix is in the relayer queue; [RELAYER] PgJobQueue.dequeue() has no visibility timeout — a worker crash after dequeue leaves a job permanently stuck in 'processing' #1369 may still
  need reopening.
• Screenshot on [WEB-DASHBOARD] The real /dashboard landing page (OverviewPage) is entirely hardcoded — not wired to any of the app's three real account-data hooks #1407 could not be reviewed (no image input available) — fix based on code
  evidence only.

[coderabbitai]

Important

• 🔍 Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: 6d376537-d64a-47f9-9ed9-c823eeee56b3

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}