fix(money,orders): wage/gram-debt parity, atomic document confirm, expert edit, made-to-order, QA fixes
- Rial wage and gram-debt arithmetic matched to the reference; order corrections keep debt in sync - Document confirm/un-confirm is a compare-and-swap (no double-applied cache under concurrency) - Settlement document and expert inputs validated (400 instead of 500) - Expert: edit / activate-deactivate own customers, adjust raw weights only - Made-to-order flow in the app, PreOrder.quantity migration - Order grids: customer column, sort keys; panel select search; pre-order quantity save - Rebuilt release artifacts Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
This commit is contained in:
co-authored by
Claude Sonnet 5.5
parent
959a272227
commit
6514b05d18
+4
-2
@@ -385,8 +385,10 @@ risks and both recorded in D21:
|
||||
1. `myChild` minted an `api_token` per listed customer so the agent could act
|
||||
**as** them — a session-hijack primitive.
|
||||
2. The child-order edit drawer (`PUT /order/child/{id}`) recalculated an
|
||||
order's weights and prices from client-sent values. The card opens a
|
||||
read-only summary instead.
|
||||
order's weights and prices from client-sent values. **Since 2026-10-29 it is
|
||||
back in a safe form:** the expert sends only the real raw weight per piece and
|
||||
the server applies the making charge, recomputes totals and debt, and checks
|
||||
the order is theirs.
|
||||
|
||||
### Behavioural gaps
|
||||
|
||||
|
||||
Reference in New Issue
Block a user