feat(apps): version on every build, a «what changed» modal, and a clean update

- The build number is the commit count, so every build raises it with no
  file to bump. scripts/app-version.mjs bakes it into each front-end
  (__APP_BUILD__) and writes dist/version.json with that app's notes.
- Notes come from commit messages: only Persian lines that start with
  one of the four app tags are shown, each to its own app
  (docs/RELEASE-NOTES.md).
- Both customer apps and the admin panel poll version.json (every 5
  minutes and on return to the tab, bypassing caches). A newer build opens
  a modal that cannot be dismissed. «به‌روزرسانی» unregisters the service
  worker, empties Cache Storage and reloads; localStorage (sign-in, cart,
  settings) is kept.
- Replaces legacy's version dialog, which compared against a
  package.json version that was never bumped and so never opened, and
  useRefresh, which swapped in a new service worker silently.
- nginx (all three apps and nginx-spa.conf): index.html, sw.js and
  version.json are never cached. sw.js used to fall under the 6-month rule,
  which could pin a browser to an old release.

Checked: served with the real nginx config, a newer version.json opens
the modal with its notes; the same build does not.

اپ: اجرت هر کالا حالا همان است که در فاکتور حساب می‌شود؛ درصد خود شما و تخفیف‌ها هم در آن آمده است.
اپ: علاقه‌مندی‌های شما ذخیره می‌شوند و در هر دستگاهی که وارد شوید دیده می‌شوند.
اپ: از این به بعد هر نسخه‌ی تازه با فهرست تغییراتش اعلام می‌شود.
پنل: بخش تازه‌ی «اجرت»: فرمول اجرت را با یک نمونه امتحان و بعد تأیید کنید.
پنل: شهرها مثل قبل به‌صورت درخت‌اند (کشور، استان، شهر، محله)؛ شهری که درصد ندارد درصد شهر بالاتر را می‌گیرد.
پنل: «تاریخ تولد» به فرم مشتری عمده و تکی برگشت.
پنل: در گزارش تجمیعی سفارش‌ها، دکمه‌ی «دریافت فایل اکسل» اضافه شد.
پنل: رد احراز هویت مشتری حالا دلیل هم می‌گیرد.
پنل: با تأیید یا رد سند مالی، به مشتری پیامک می‌رود؛ در پیامک گروهی، %name با نام مشتری عوض می‌شود.
پنل: از این به بعد هر نسخه‌ی تازه‌ی پنل با فهرست تغییراتش اعلام می‌شود.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

apps/user-app/src/App.vue

@@ -1,6 +1,6 @@
 <!--
   Ported from legacy henza_pwa/src/App.vue — layout switching, RTL shell, and
-  the app-version-check / service-worker update dialog.
+  and the update gate (components/AppUpdateGate.vue).
 
   Not ported (deliberate): Firebase push init and WebOTP autofill. Both were
   already commented out in legacy's own App.vue, so neither ran there either.
@@ -19,25 +19,7 @@
       </router-view>
     </component>
 
-    <DialogVantOneButton :timeOut="-1" v-model:show="versionDialog" :closeOnClickOverlay="true">
-      <template v-slot:img>
-        <!-- Still (first frame) in reduced-motion mode. -->
-        <DotLottieVue
-          class="w-full aspect-square"
-          :autoplay="!appearance.isReducedMotion"
-          :loop="!appearance.isReducedMotion"
-          src="https://lottie.host/cb620e8e-c64a-42e8-a6b5-8844146e5999/nmft7oBO8q.json"
-        />
-      </template>
-
-      <template v-slot:title>
-        <div class="p-8 text-justify">نسخه جدید منتزر منتشر شد!</div>
-      </template>
-
-      <template v-slot:button>
-        <div class="text-center text-[color:var(--c-primary)]" @click="update()">به روز رسانی</div>
-      </template>
-    </DialogVantOneButton>
+    <AppUpdateGate />
 
     <ProductMorph />
     <ToastHost />
@@ -45,22 +27,19 @@
 </template>
 
 <script setup lang="ts">
-import { computed, onMounted, ref } from 'vue'
+import { computed } from 'vue'
 import { useRouter } from 'vue-router'
-import { DotLottieVue } from '@lottiefiles/dotlottie-vue'
 import { useRegisterSW } from 'virtual:pwa-register/vue'
 import MasterLayout from './layout/MasterLayout.vue'
 import FullPageLayout from './layout/FullPageLayout.vue'
-import DialogVantOneButton from './components/DialogVantOneButton.vue'
+import AppUpdateGate from './components/AppUpdateGate.vue'
 import ToastHost from './components/ui/ToastHost.vue'
 import ProductMorph from './components/product/ProductMorph.vue'
-import { useRefresh } from './composables/useRefresh'
-import { useAppearanceStore } from './stores/appearanceStore'
-import pkg from '../package.json'
 
 const router = useRouter()
-const appearance = useAppearanceStore()
-const { updateServiceWorker } = useRegisterSW()
+// Registers the service worker (offline, install). Updates are not applied
+// here: AppUpdateGate shows what changed and applies them on the user's tap.
+useRegisterSW()
 
 const getLayout = computed(() => {
   if (router.currentRoute.value.meta && router.currentRoute.value.meta.layout === 'FullPage') {
@@ -68,30 +47,6 @@ const getLayout = computed(() => {
   }
   return MasterLayout
 })
-
-// Ported from legacy App.vue:52-74 — compare the stored version against the
-// bundled package version and offer a one-tap service-worker update.
-const versionDialog = ref(false)
-
-function checkVersion() {
-  const version = localStorage.getItem('version')
-  if (version) {
-    if (version !== pkg.version) versionDialog.value = true
-  } else {
-    localStorage.setItem('version', pkg.version)
-  }
-}
-
-function update() {
-  localStorage.setItem('version', pkg.version)
-  updateServiceWorker()
-  window.location.reload()
-}
-
-onMounted(() => {
-  useRefresh()
-  checkVersion()
-})
 </script>
 
 <style lang="less">

apps/user-app/src/components/AppUpdateGate.vue

@@ -0,0 +1,117 @@
+<template>
+  <!--
+    The update modal. It cannot be dismissed: the only way out is the update,
+    so every customer runs the release that is live (owner ruling 2026-10-10).
+  -->
+  <Teleport to="body">
+    <div v-if="available" class="update-gate" role="dialog" aria-modal="true" aria-labelledby="update-gate-title">
+      <div class="update-gate__card">
+        <div class="update-gate__badge">نسخه‌ی {{ available.version }}</div>
+        <h2 id="update-gate-title" class="update-gate__title">نسخه‌ی تازه آماده است</h2>
+
+        <div class="update-gate__body">
+          <template v-if="changes.length">
+            <p class="update-gate__lead">در این نسخه:</p>
+            <ul class="update-gate__list">
+              <template v-for="c in changes" :key="c.build">
+                <li v-for="(n, i) in c.notes" :key="c.build + '-' + i">{{ n }}</li>
+              </template>
+            </ul>
+          </template>
+          <p v-else class="update-gate__lead">بهبودها و رفع اشکال‌ها.</p>
+        </div>
+
+        <button type="button" class="update-gate__button" :disabled="updating" @click="applyUpdate">
+          {{ updating ? 'در حال به‌روزرسانی…' : 'به‌روزرسانی' }}
+        </button>
+        <p class="update-gate__hint">ورود و سبد خرید شما سر جایش می‌ماند.</p>
+      </div>
+    </div>
+  </Teleport>
+</template>
+
+<script setup lang="ts">
+import { useAppUpdate } from '../composables/useAppUpdate'
+
+const { available, changes, updating, applyUpdate } = useAppUpdate()
+</script>
+
+<style scoped>
+.update-gate {
+  position: fixed;
+  inset: 0;
+  z-index: 10000;
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  padding: 16px;
+  background: rgba(0, 0, 0, 0.55);
+  direction: rtl;
+}
+.update-gate__card {
+  width: 100%;
+  max-width: 380px;
+  max-height: calc(100vh - 32px);
+  display: flex;
+  flex-direction: column;
+  gap: 12px;
+  padding: 22px 20px 18px;
+  border-radius: 18px;
+  background: var(--c-canvas, #fff);
+  color: var(--c-ink, #1f1f1f);
+  border: 1px solid var(--c-hairline, transparent);
+  box-shadow: 0 12px 40px rgba(0, 0, 0, 0.25);
+  text-align: right;
+}
+.update-gate__badge {
+  align-self: flex-start;
+  padding: 2px 10px;
+  border-radius: 999px;
+  font-size: 12px;
+  background: color-mix(in srgb, var(--c-primary, #b8860b) 14%, transparent);
+  color: var(--c-primary, #b8860b);
+}
+.update-gate__title {
+  margin: 0;
+  font-size: 18px;
+  font-weight: 700;
+}
+.update-gate__body {
+  overflow-y: auto;
+  min-height: 0;
+}
+.update-gate__lead {
+  margin: 0 0 6px;
+  font-size: 14px;
+  color: var(--c-inkMuted, inherit);
+}
+.update-gate__list {
+  margin: 0;
+  padding-inline-start: 18px;
+  list-style: disc;
+  font-size: 14px;
+  line-height: 1.9;
+}
+.update-gate__button {
+  width: 100%;
+  padding: 12px;
+  border: 0;
+  border-radius: 12px;
+  font: inherit;
+  font-size: 15px;
+  font-weight: 700;
+  color: #fff;
+  background: var(--c-primary, #b8860b);
+  cursor: pointer;
+}
+.update-gate__button:disabled {
+  opacity: 0.7;
+  cursor: progress;
+}
+.update-gate__hint {
+  margin: 0;
+  font-size: 12px;
+  text-align: center;
+  color: var(--c-inkMuted, inherit);
+}
+</style>

apps/user-app/src/composables/useAppUpdate.ts

@@ -0,0 +1,84 @@
+// The update gate (scripts/app-version.mjs builds the other half).
+//
+// The bundle knows its own build number (__APP_BUILD__). Every few minutes,
+// and whenever the app comes back to the foreground, it reads version.json
+// from the server, bypassing every cache. A newer build there means a release
+// went out: the modal lists what changed since the build this tab is running,
+// and «به‌روزرسانی» drops the service worker and every Cache Storage entry,
+// then reloads — so the next load is the new release, not a precached copy.
+// localStorage is left alone: sign-in, cart and settings survive the update.
+import { computed, onBeforeUnmount, onMounted, ref } from 'vue'
+
+declare const __APP_BUILD__: number
+declare const __APP_VERSION__: string
+
+export interface VersionInfo {
+  build: number
+  version: string
+  history: { build: number; date: string; notes: string[] }[]
+}
+
+const CHECK_EVERY_MS = 5 * 60 * 1000
+
+export const runningBuild: number = typeof __APP_BUILD__ === 'number' ? __APP_BUILD__ : 0
+export const runningVersion: string = typeof __APP_VERSION__ === 'string' ? __APP_VERSION__ : ''
+
+export function useAppUpdate() {
+  const available = ref<VersionInfo | null>(null)
+  const updating = ref(false)
+
+  /** What changed between the running build and the server's, newest first. */
+  const changes = computed(() => {
+    const info = available.value
+    if (!info) return []
+    return (info.history ?? []).filter((h) => h.build > runningBuild && h.build <= info.build)
+  })
+
+  async function check() {
+    if (import.meta.env.DEV || !runningBuild || available.value) return
+    try {
+      const res = await fetch(`${import.meta.env.BASE_URL}version.json?t=${Date.now()}`, { cache: 'no-store' })
+      if (!res.ok) return
+      const info = (await res.json()) as VersionInfo
+      if (typeof info.build === 'number' && info.build > runningBuild) available.value = info
+    } catch {
+      // Offline or a deploy in progress: try again on the next tick.
+    }
+  }
+
+  async function applyUpdate() {
+    updating.value = true
+    try {
+      const regs = await navigator.serviceWorker?.getRegistrations?.()
+      if (regs) await Promise.all(regs.map((r) => r.unregister()))
+    } catch {
+      /* no service worker */
+    }
+    try {
+      if ('caches' in window) {
+        const keys = await caches.keys()
+        await Promise.all(keys.map((k) => caches.delete(k)))
+      }
+    } catch {
+      /* Cache Storage unavailable */
+    }
+    window.location.reload()
+  }
+
+  let timer: ReturnType<typeof setInterval> | undefined
+  const onVisible = () => {
+    if (document.visibilityState === 'visible') check()
+  }
+
+  onMounted(() => {
+    check()
+    timer = setInterval(check, CHECK_EVERY_MS)
+    document.addEventListener('visibilitychange', onVisible)
+  })
+  onBeforeUnmount(() => {
+    if (timer) clearInterval(timer)
+    document.removeEventListener('visibilitychange', onVisible)
+  })
+
+  return { available, changes, updating, applyUpdate, check }
+}

apps/user-app/src/composables/useRefresh.ts

@@ -1,17 +0,0 @@
-// Ported from legacy henza_pwa/src/Mixins/useRefresh.ts.
-// Auto-applies a waiting service worker as soon as one is available, so the
-// PWA self-updates instead of serving a stale precache indefinitely.
-import { unref, watchEffect } from 'vue'
-import { useRegisterSW } from 'virtual:pwa-register/vue'
-
-export function useRefresh() {
-  const { offlineReady, needRefresh, updateServiceWorker } = useRegisterSW()
-
-  const refreshApp = async () => {
-    await updateServiceWorker()
-    offlineReady.value = false
-    needRefresh.value = false
-  }
-
-  watchEffect(async () => (unref(offlineReady) || unref(needRefresh)) && (await refreshApp()))
-}