tehran_taj/docs/parity/_inv-ref-pwa.md

Inventory — henza_pwa (reference user app)

Scope: E:\gold bank\henza_pwa. All path:line are relative to henza_pwa/. Excluded from the file census: node_modules, dist, 3.0.0, and two vendored libraries checked into src/components/: src/components/DatePicker/DatePicker/** (forked ant-design-vue vc-picker + Jalali locale) and src/components/JalaliAntDatePicker/** (forked ant-design-vue _util/components). Those are third-party code, not app code.

Critical framing finding: this app is NOT a consumer "gold bank" (buy gram / sell gram / wallet / deposit / withdraw / transfer / KYC-level gating). It is a B2B wholesale gold jewelry catalog + ordering app for jewelers (مشتری/کارشناس فروش/بنکدار). There is no buy-gold, sell-gold, wallet, deposit, withdraw, transfer, cart-payment, address-book, ticket/support, or KYC-level system anywhere in the codebase (verified by exhaustive grep of every axios call — see §2.4). The closest analogues are documented per-section and flagged ABSENT where the requested feature does not exist.

---

1. Stack & versions

Source: package.json:1-58.

Concern	Package	Version	Evidence
Framework	vue	^3.2.29	package.json:34
Build	vite	^3.2.5	package.json:52
Vue plugin	@vitejs/plugin-vue	^2.0.0	package.json:42
JSX plugin	@vitejs/plugin-vue-jsx	^3.0.0	package.json:43
UI library (primary)	ant-design-vue	^3.2.20	package.json:17
UI library (mobile)	vant	^4.0.3	package.json:33
Icons	@ant-design/icons-vue ^6.1.0, feather-icons ^4.28.0, vue-feather ^2.0.0-rc.1	—	package.json:10,21,35
Router	vue-router	^4.0.12	package.json:36
Store (Pinia)	pinia	^2.1.4	package.json:30 — only used by one store (src/views/report/store/report.ts:9). All other state is hand-rolled class singletons.
HTTP client	axios	^0.25.0	package.json:18
Date (Jalali)	moment-jalaali ^0.10.0, jalaliday ^2.3.0, jalali-dayjs 0.0.1, dayjs ^1.11.6, date-fns ^2.29.3	—	package.json:19,20,24,25,29
Date picker	vue3-persian-datetime-picker ^1.2.2 (+ vendored fork under src/components/DatePicker/)	—	package.json:38
PWA plugin	vite-plugin-pwa	^0.11.13	package.json:54
Service-worker toolkit	workbox-precaching	^6.4.2	package.json:56
Socket / live-price lib	NONE	—	No socket.io, ws, pusher, centrifuge, sse, eventsource in package.json. Live price is manual pull only — see §10.
Push notifications	firebase ^9.6.7, @firebase/app ^0.7.17, @firebase/messaging ^0.9.8	—	package.json:11,12,22 — FCM wiring exists but is disabled (src/App.vue:104-106 useFirebase() commented out)
Animation	gsap ^3.9.1	—	package.json:23 (used by bottom-nav morph, src/components/ui/navigation.vue:83)
Lottie	@lottiefiles/dotlottie-vue ^0.4.15	—	package.json:14 (version-update dialog, src/App.vue:24)
Carousel	swiper ^7.4.1	—	package.json:32
Lazy images	vue3-lazyload ^0.2.5-beta	—	package.json:37 (registered src/main.ts:32-46)
Utils / composables	lodash ^4.17.21, @vueuse/core ^9.13.0	—	package.json:28,16
CSS	tailwindcss 3.0.18, less ^4.1.2, postcss-rtl ^1.7.3, autoprefixer, @fullhuman/postcss-purgecss	—	package.json:13,26,31,44,50
TS	typescript ^4.4.4, vue-tsc ^0.29.8	—	package.json:51,55
App version	1.0.7	—	package.json:3 (compared against localStorage.version at src/App.vue:57-68)

---

2. HTTP layer

2.1 Base URLs & config

src/service/ contains a single file (src/service/hesab.ts) with 5 functions. Every other API call is inlined in views/stores/mixins. Full census in §2.4.

Key	Value	Evidence
$themeConfig.baseURL	https://henzagold.com/oapi/api/	themeConfig/themeConfig.ts:43
$themeConfig.coreURL	https://henzagold.com/oapi/	themeConfig/themeConfig.ts:45
baseURL (named export, unused by axios)	https://henzagold.com/oapi/api/	themeConfig/themeConfig.ts:40
$themeConfig.baseRoute	/	themeConfig/themeConfig.ts:47
$themeConfig.outDir	dist	themeConfig/themeConfig.ts:48
$BasePath	dev → http://localhost:3030, prod → https://app.henzagold.com	themeConfig/themeConfig.ts:50
Commented-out local alternatives	http://localhost/api/, http://localhost/oapi/	themeConfig/themeConfig.ts:44,46

There is no .env / import.meta.env usage anywhere — all config is hard-coded in themeConfig/themeConfig.ts. vite.config.ts:91-93 stubs process.env to {}.

2.2 Axios instances (src/plugins/axios.ts)

Three instances, all created with the same static default headers object built once at module load (src/plugins/axios.ts:6-10):

Content-Type: application/json
accept: application/json
Authorization: Bearer ${getUserToken()}      // snapshot at import time

Export	baseURL	Request interceptor	Evidence
default (ax, imported everywhere as @axios)	$themeConfig.baseURL	Overwrites config.headers.Authorization = 'Bearer ' + getUserToken() on every request	src/plugins/axios.ts:15-24
noHeaderAxios	$themeConfig.baseURL	Pass-through (config => config) — caller must set Authorization manually	src/plugins/axios.ts:27-32
cax	$themeConfig.coreURL	Sets Authorization = 'Bearer ' + localStorage.getItem('appToken') (ignores child token)	src/plugins/axios.ts:37-45 — cax is never imported anywhere (dead export)

@axios alias → src/plugins/axios (vite.config.ts:61-64). @themeConfig → themeConfig/themeConfig (vite.config.ts:57-60). /@/ → src/ (vite.config.ts:65-68).

2.3 Interceptors, token, 401, error toasts

Aspect	Reality	Evidence
Request interceptor	Only attaches Authorization. Error handler is a no-op bug: error => { Promise.reject(error) } — result not returned, so the promise resolves undefined.	src/plugins/axios.ts:17-23, same bug at :29-31 and :39-45
Response interceptor	NONE. No response interceptor is registered on any instance.	src/plugins/axios.ts (entire file, 46 lines)
Token source	getUserToken() = userChildToken() ?? userToken()	src/store/tokenManage.ts:8-10
userToken()	localStorage.getItem('appToken') || localStorage.appToken || null	src/store/tokenManage.ts:4-6
userChildToken()	localStorage.getItem('activeChildToken') || localStorage.activeChildToken || null	src/store/tokenManage.ts:1-3
Impersonation	If a sales-rep selects a customer, that customer's api_token is stored as activeChildToken and takes priority over the rep's own token for all requests.	src/store/myDataStore.ts:159-169
Refresh logic	ABSENT. No refresh token, no retry queue, no /refresh endpoint anywhere.	verified by grep — no refresh API call exists
401 handling	Handled in exactly one place, myStore.init(): on e.response.status === 401 → remove appToken, appCart, activeChildToken; toggleActiveUser(undefined); router.push({name:'home'}); then throw e.	src/store/myDataStore.ts:134-145
403 handling	ABSENT. No 403 reference anywhere.	grep
Global error toast	ABSENT. Every call site does its own try/catch { console.log(e) }. Toasts are per-view (showNotify / NotifyVant / message.error).	e.g. src/views/home/index.vue:218-222, src/views/cart.vue:189-193, src/Mixins/getProducts.ts:35-37
Per-call error toasts that DO exist	addUser duplicate-mobile (src/views/user/src/components/addUser.vue:182-189), upload errors (src/components/SingleImageUploader.vue:94-97,117-122,129-139), login 404/other (src/views/user/LoginRegister/components/Login.vue:147-154,177-183), makeOrder (src/views/user/src/components/makeOrder.vue:224,229), editUser success (src/views/user/src/components/editUser.vue:285-291)	—

2.4 Complete API function census

Every network call in the app (excluding the two vendored libs). 58 distinct call sites, 44 distinct endpoints.

src/service/hesab.ts (the only "service" file — 5 functions)

#	Function	Method	URL	Params / body	Return type	Evidence
1	hesabDetail(page=1, limit=10)	POST	/hesab_detail/table	body {limit, page}	TableOutput<Hesab>	src/service/hesab.ts:12-14 — never called (only imported at src/views/report/index.vue:74, call commented out at :215)
2	hesabDetailNew(page=1, limit=10)	GET	/fin_tahesab/table	params ignored (signature takes them, URL uses none)	TableOutput<Accounting>	src/service/hesab.ts:16-18
3	accountingDetail(factor_code?)	GET	/fin_tahesab/detail/${factor_code}	path param	TableOutput<Accounting>	src/service/hesab.ts:20-22
4	accountingDetailList(offset?)	GET	/fin_tahesab/my_detail/${offset}	path param	—	src/service/hesab.ts:23-25
5	hesabMe()	GET	/tahesab/me	—	any	src/service/hesab.ts:26-28

Auth & profile

#	Method	URL	Body / params	Called from	Evidence
6	POST	/web/auth	{username} (phone)	Login step 1	src/views/user/LoginRegister/components/Login.vue:137
7	POST	/user-verfiy (sic — typo in endpoint)	{username, password /*=OTP*/, token_mobile}	Login step 2	src/views/user/LoginRegister/components/Login.vue:165
8	POST	/major/register	{fname, lname, mobile, store_name, phone, address, city}	Register	src/views/user/LoginRegister/components/Register.vue:332
9	POST	/major/complete	{business_license_image_id, shop_image_id, ncode_image_id}	Complete profile (doc upload)	src/views/user/src/completeProfile.vue:193
10	POST	/me-data	{}	myStore.init() — called twice: once via noHeaderAxios with explicit parent token, once via axios with child token	src/store/myDataStore.ts:120-126 (noHeaderAxios), :130
11	POST	/me-data	{}	makeOrderStatus bootstrap	src/views/user/src/components/makeOrderStatus.vue:180
12	POST	/update-profile	{image_id, phone, address, fname, lname, mobile, birth_date, marriage_date}	editUser	src/views/user/src/components/editUser.vue:289
13	POST	/cities/list	{} → {rows: City[]} (flat list w/ level,parent)	Register city cascader	src/views/user/LoginRegister/components/Register.vue:299

Catalog / products

#	Method	URL	Body / params	Called from	Evidence
14	POST	/front	{} → {products, more, cats, ciny}	Home bootstrap	src/views/home/index.vue:184
15	POST	/front	{} (for ciny fallback list)	getCollection in products mixin	src/Mixins/getProducts.ts:46
16	POST	/get-products	full Query object (see §8) → {rows, count, limit}	product list / search / newest	src/Mixins/getProducts.ts:28
17	POST	/get-products	{products_id: number[]} → {rows}	cart re-hydration	src/store/cartStore.ts:41
18	GET	/ciny/${cats[0]}	path param = first category id	collection list for a category	src/Mixins/getProducts.ts:42
19	GET	/product/${id}	path param (from route)	single product	src/views/singleProduct.vue:283
20	GET	/product/${props.id}	path param (from prop, drawer mode)	single product in drawer	src/views/singleProduct.vue:304
21	GET	/config	— → {about, main_slider}	base store init	src/store/store.ts:63
22	GET	/promotion	— (only if logged in)	base store init	src/store/store.ts:74
23	GET	/ignore	— (only if logged in)	base store init	src/store/store.ts:86
24	GET	/ignore	—	getCustomerListType() — dead, never called, duplicates #23	src/store/store.ts:98
25	GET	/price	— → keyed object of price rows	base store getPriceList()	src/store/store.ts:114
26	GET	/price	— → array or object	Dashboard getListPrice() (separate, newer path)	src/views/user/src/components/Dashboard.vue:634

Favorites

#	Method	URL	Body	Called from	Evidence
27	POST	/add-to-fav	{id} — toggle (optimistic local toggle first)	favorite mixin	src/Mixins/favorite.ts:8
28	POST	/get-favorites	{page} → {rows}	favorites list	src/views/user/src/components/favorits.vue:52

Orders (catalog orders)

#	Method	URL	Body	Called from	Evidence
29	POST	/set-order	{final_submit:false, from_parent:boolean, id:null, items:[{discount, id:null, note, percent_pay, product, promotion_id, promotion_item_id, qty, rash_weight, rial_pay:0, variant, wage_weight, weight}]} → {id}	cart checkout	src/views/cart.vue:161-185
30	POST	/get-orders	{sts} → {rows} (sts = -1 for all)	orders list / tab change	src/views/user/src/components/Orders.vue:290
31	POST	/order/child	{page, search} → {rows}	sales-rep: customers' orders	src/views/user/src/components/ChildOrders.vue:332
32	PUT	/order/child/${id}	{items:[...w, rash_weight], final_submit, id, from_parent:true}	sales-rep: edit/finalize a customer order	src/views/user/src/components/ChildOrders.vue:400

Custom manufacture orders ("سفارش ساخت")

#	Method	URL	Body	Called from	Evidence
33	POST	/create-custom-order	{color, size, color_mina, color_stone, sum, file_id, description}	makeOrder submit	src/views/user/src/components/makeOrder.vue:221
34	GET	/get-custom-orders	— → {rows}	makeOrderStatus list	src/views/user/src/components/makeOrderStatus.vue:187
35	POST	/update-custom-order/${orderId}	{sts: 2}	(commented-out generic updater)	src/views/user/src/components/makeOrderStatus.vue:197
36	POST	/update-custom-order/${orderId}	{sts: 2}	confirmOrder	src/views/user/src/components/makeOrderStatus.vue:212
37	POST	/update-custom-order/${orderId}	{sts: 2}	completeOrder — same sts:2 as confirm (likely bug)	src/views/user/src/components/makeOrderStatus.vue:234

Financial documents ("اسناد" / findoc)

#	Method	URL	Body	Called from	Evidence
38	POST	/get-my-findoc	{} → {rows} — no pagination, no filters	transactions list	src/views/user/src/components/transactions.vue:203
39	POST	/set-findoc	type-dependent (see §6.9)	addTransaction (page)	src/views/user/src/components/addTransaction.vue:196
40	POST	/set-findoc	type-dependent (identical)	addFindoc (drawer, duplicate)	src/views/user/src/components/addFindoc.vue:204

Customers (sales-rep only)

#	Method	URL	Body	Called from	Evidence
41	POST	/my-child	{} → customer array	customerChoice list	src/views/user/src/components/customerChoice.vue:184
42	POST	/customer/toggle-active	{id}	customerChoice activate/deactivate	src/views/user/src/components/customerChoice.vue:199
43	POST	/customer/toggle-active	{id}	Dashboard setActive — dead (getCustomers is undefined in that scope)	src/views/user/src/components/Dashboard.vue:593
44	POST	/customer/create	full userFormModel	addUser (create mode)	src/views/user/src/components/addUser.vue:417
45	POST	/customer/update	{...userFormModel, id: route.query.edit}	addUser (edit mode)	src/views/user/src/components/addUser.vue:406
46	GET	https://henzagold.com/oapi/admin/major/list_type	absolute URL, bypasses baseURL, hits /admin/	addUser: customer-type dropdown	src/views/user/src/components/addUser.vue:457-460

Notifications

#	Method	URL	Body	Called from	Evidence
47	POST	get-notify (no leading slash)	{page} → {rows}	notification list (infinite scroll)	src/views/home/src/components/NotificationList.vue:101
48	GET	/notify/count	— → number	unread badge	src/views/home/src/components/NotificationList.vue:117
49	PUT	notify/read/${id} (no leading slash)	—	mark read	src/views/home/src/components/NotificationList.vue:132

NotificationList.vue is not mounted — its usage in Home is commented out (src/views/home/index.vue:5).

Files

#	Method	URL	Body	Called from	Evidence
50	POST	https://henzagold.com/oapi/api/file/create	FormData{file, has_thumb:'0', has_watermark:'0'}, header Content-Type: multipart/form-data → {id, image}	SingleImageUploader	src/components/SingleImageUploader.vue:107-109

Analytics (fires on every route change)

#	Method	URL	Body	Called from	Evidence
51	POST	/log/create/${key}	{} or {data:{product_id}} when to.name === 'singleProduct'; key = meta.title + -${params.id}	router beforeEach	src/router/customAnalytics.ts:26
52	GET	/log/update/${lastRequestReturnedId}	— (closes previous page-view)	router beforeEach	src/router/customAnalytics.ts:17
53	POST	/log/create/${routeName}	—	useCustomAnalyticsComponent composable, onBeforeMount	src/router/customAnalytics.ts:40
54	GET	/log/update/${requestReturnedId}	—	same composable, onBeforeUnmount	src/router/customAnalytics.ts:53

Excluded routes for auto-analytics: ['login', 'userPage::hasSubRoute'] (src/router/customAnalytics.ts:6).

Non-axios external URLs (window.open)

Purpose	URL	Evidence
Order invoice PDF	https://henzagold.com/oapi/api/report/order?order_id=${id} (target _bank)	src/views/user/src/components/Orders.vue:334
Findoc file	https://henzagold.com/oapi/api/report/doc?doc_id=${id} (target _bank)	src/views/user/src/components/transactions.vue:225
Phone call	tel:${mobile}	src/views/user/src/components/profile.vue:149-151 (line numbering within <script setup>)
Price row deep-link	window.open(val.link) when a price row carries link	src/views/user/src/components/Dashboard.vue:453-455,244
WhatsApp support (static FAB)	https://wa.me/989229425856	index.html:59-61

2.5 ABSENT endpoints (explicitly verified not to exist)

buy, sell, wallet, balance (as an endpoint), deposit, withdraw, transfer, payment, gateway, ticket, support, address, kyc, verify-level, refresh, logout (client-side only). Verified by full-repo grep of every axios.* call — the 54-item table above is exhaustive.

---

3. Router — every route

File: src/router/index.ts. History mode: createWebHistory($themeConfig.baseRoute) = createWebHistory('/') (src/router/index.ts:224). scrollBehavior: restore savedPosition else {top:0} (src/router/index.ts:226-238).

Route count: 22 (21 real + 1 catch-all redirect).

#	path	name	component file	meta.layout	meta.title	meta.skipLoadedCheck	auth guard?	KYC level req?	Evidence
1	/home	home	src/views/home/index.vue	— (Master)	صفحه-اصلی	—	public	none	src/router/index.ts:30-38
2	/collection/:id?	collection	src/views/search/collection/index.vue	— (Master)	سینی	—	public	none	:39-46
3	/search/:id?	search	src/views/search/searchPage.vue	— (Master)	جستجو	—	public	none	:47-54
4	/product/:id	singleProduct	src/views/singleProduct.vue	FullPage	تک-محصول	—	public	none (add-to-cart gated in-view)	:55-63
5	/newest	newestProduct	src/views/newest.vue	FullPage	none	—	public	none	:64-71
6	/user	userPage::hasSubRoute	src/views/user/index.vue	— (Master)	کاربر	—	public (shows login CTA when logged out)	none	:72-79
7	/orders	ordersList	src/views/user/src/components/Orders.vue	— (Master)	سفارشات	—	AUTH → home + notify	none	:80-87, guard :257-261
8	/transactions	transactionsList	src/views/user/src/components/transactions.vue	— (Master)	اسناد	—	AUTH → home + notify	none	:89-96, guard :257
9	/addTransaction	addTransaction	src/views/user/src/components/addTransaction.vue	— (Master)	افزودن سند	—	not in guard list (reachable logged-out)	none	:97-104
10	/profile	profileData	src/views/user/src/components/profile.vue	— (Master)	پروفایل	—	AUTH → home + notify	none	:105-112, guard :257
11	/makeOrder	makeOrderList	src/views/user/src/components/makeOrder.vue	— (Master)	ساخت سفارش	—	not in guard list	none	:113-120
12	/makeOrder_status	makeOrderStatus	src/views/user/src/components/makeOrderStatus.vue	— (Master)	وضعیت سفارش	—	not in guard list	none	:121-128
13	/favorites	favoritesList	src/views/user/src/components/favorits.vue	— (Master)	علاقمندی	—	AUTH → home + notify	none	:129-136, guard :257
14	/addUser	addUser	src/views/user/src/components/addUser.vue	— (Master)	افزودن کاربر	true	not in guard list	none (sales-rep only by UI)	:137-145
15	/editUser	editUser	src/views/user/src/components/editUser.vue	— (Master)	ویرایش کاربر	—	not in guard list	none	:146-153
16	/cart	cart	src/views/cart.vue	— (Master)	سبد-خرید	—	public	none	:154-161
17	/report	report	src/views/report/index.vue	FullPage	گزارش	—	not in guard list; in-view redirect if no mcode	none	:162-170, in-view src/views/report/index.vue:174-177
18	/ChildOrder	ChildOrder	src/views/user/src/components/ChildOrders.vue	FullPage	سفارش مشتریان	—	not in guard list (sales-rep only by UI)	none	:171-179
19	/customerChoice	customerChoice	src/views/user/src/components/customerChoice.vue	FullPage	انتخاب مشتری	true	not in guard list	none	:180-189
20	/report/detail	reportDetail	src/views/report/detail.vue	FullPage	جزئیات گزارش	— (props: true)	not in guard list; in-view redirect if no currentReport	none	:190-199, in-view src/views/report/detail.vue:126-131
21	/login	login	src/views/user/LoginRegister/index.vue	FullPage	none	—	reverse guard: logged-in → home	none	:200-207, guard :262-265
22	/complete_profile	completeProfile	src/views/user/src/completeProfile.vue	FullPage	none	—	AUTH → home + notify; AND if sts_verify_step_two ∈ {1,2} → home	closest thing to a KYC gate	:208-215, guards :257, :266
23	/:pathMatch(.*)	notExistPages	— (redirect to home)	—	—	—	—	—	:216-220

Route meta typing is declared at src/router/index.ts:18-24: {layout?: string; transition?: string; skipLoadedCheck?: boolean}. Note title is used but not declared in the interface.

Routes with no meta.title (5, 21, 22) break useCustomAnalytics, which does let key = toRoute.meta.title (src/router/customAnalytics.ts:19) → posts /log/create/undefined.

---

4. Navigation (bottom nav)

Definition: src/store/navStore.ts:34-48. Renderer: src/components/ui/navigation.vue. Mounted only in the Master layout (src/layout/master.vue:29), so FullPage routes have no bottom nav.

index	name (route)	path	icon	gating	Evidence
1	userPage::hasSubRoute	/user	vuesax-linear:user	none	src/store/navStore.ts:40
2	cart	/cart	vuesax-linear:bag-happy	none	:41
3	search	/search	vuesax-linear:search-normal-1	none	:42
4	home	/	vuesax-linear:home-2	none	:43

Defaults: activeLink: 4, showNav: true, pageTransition: 'right' (src/store/navStore.ts:45-47). A commented-out earlier feather-icon variant sits at :36-39.

Visibility rule (src/router/index.ts:281-285, afterEach): if to.name matches a nav item → setActiveLink(item.index) + setNavVisibility(true); otherwise → setNavVisibility(false). So the bar is visible only on /user, /cart, /search, /home.

Also hidden while the search filter panel is open: showFilters() → nav.setNavVisibility(false), hideFilters() → true (src/views/search/searchPage.vue:152-165).

Visual behaviour: an SVG path morphs a "notch" under the active item, animated with GSAP (src/components/ui/navigation.vue:50-86), and the active icon translates via useTransition with TransitionPresets.easeInOutCubic, 150 ms (:110-117). Note the active icon is rendered by 4 hard-coded v-if comparisons on the icon string rather than a dynamic bind (:15-18).

Dashboard in-page tile grid (a second nav surface), src/views/user/src/components/Dashboard.vue:721-743 + dispatcher :749-772:

id	icon	title	target route
0	vuesax-linear:box	سفارشات	ordersList
1	vuesax-linear:receipt-text	اسناد	transactionsList
2	vuesax-linear:user	پروفایل	profileData
3	vuesax-linear:heart	علاقمندی	favoritesList

Each tile: isUserLoggedIn() ? goToDetails(id) : (data.loginNotify = true) (:211).

---

5. Guards

5.1 router.beforeEach — full logic (src/router/index.ts:250-272)

1. await useCustomAnalytics(to, from, routes)                       // :253
2. if (!isUserLoggedIn()):                                          // :256
     if to.name ∈ {ordersList, transactionsList, profileData,
                   favoritesList, completeProfile}:                 // :257
         showNotify('ابتدا وارد شوید')                              // :259
         return next({name:'home'})                                 // :260
     else return next()                                             // :261
3. else if (to.name === 'login'
        || to.fullPath === '/'
        || (!memory.state.isLoaded && to.name !== 'home'
            && !to.meta?.skipLoadedCheck)):                         // :262-265
         return next({name:'home'})
4. else if ((myStore.state.sts_verify_step_two === 2 ||
             myStore.state.sts_verify_step_two === 1)
            && to.name === 'completeProfile'):                       // :266
         return next({name:'home'})
5. if (to.name === 'singleProduct') nav.setPgaTransition('slideDown')
   else nav.setPgaTransition(undefined)                              // :268-270
6. return next()                                                     // :271

Notes:

• noneAuthUrl = ['login'] is declared at src/router/index.ts:247-249 and never used.
• isUserLoggedIn() is a pure localStorage.getItem('appToken') check with no expiry/JWT validation (src/Mixins/checkAccess.ts:12-14).
• Cold-boot trap: a logged-in user deep-linking to any route other than home before memory.state.isLoaded is true gets bounced to home, unless the route sets meta.skipLoadedCheck (only addUser and customerChoice do). isLoaded becomes true only when both config and cats are set (src/store/store.ts:160,165), and cats is set by the Home view (src/views/home/index.vue:207) — so isLoaded can only become true after visiting Home.
• canNavigate and getHomeRouteForLoggedInUser in src/Mixins/checkAccess.ts:1-11 are dead code (never imported).

5.2 router.afterEach (src/router/index.ts:273-286)

Sets transition.setTransitionFlag(false) + setTransitionEnded(false), then re-enables the flag after 100 ms; then applies the nav-visibility rule from §4.

5.3 KYC / level gating — what actually exists

There is no KYC level system. The only verification state is two flat fields on the user object:

Field	Type	Where read	Behaviour
sts_verify_step_one	number | string	src/store/myDataStore.ts:20	If == 3 after OTP verify → refuse login with 'مجوز ورود ندارید' and do not store the token (src/views/user/LoginRegister/components/Login.vue:167-171)
sts_verify_step_two	number | string	src/store/myDataStore.ts:21	∈ {1,2} → block /complete_profile route (src/router/index.ts:266); ≠ 1 && ≠ 2 → show "تکمیل پروفایل" CTA on profile (src/views/user/src/components/profile.vue:96-101); === 2 required to add-to-cart (src/views/singleProduct.vue:95)

sts_verify_step_two === 2 is therefore the de-facto "approved" level and is the only thing that resembles a KYC gate: it gates add-to-cart and nothing else.

5.4 Role gating (type field) — see §8.4 for values

Condition	Effect	Evidence
type == 1 (sales rep)	Show "انتخاب مشتری" button; show "سفارش مشتریان" tile; grid layout switches to 2×col-span-1	src/views/user/src/components/Dashboard.vue:37-46,102-129
type == 1 || hasActiveChild	Show "add user" FAB on profile	src/views/user/src/components/profile.vue:22-25
type !== 1	Show sales-rep contact card (name + call button) on profile	src/views/user/src/components/profile.vue:57-80
type !== 1	Show single wide "گزارش حساب" tile (col-span-2)	Dashboard.vue:88-101
type === 5	"سفارش ساخت" tile goes straight to makeOrderStatus; also unlocks confirm/ship buttons on custom orders	Dashboard.vue:132-141; makeOrderStatus.vue:68-75
type !== 5	"سفارش ساخت" tile opens a modal with "ثبت سفارش" / "مشاهده سفارش"	Dashboard.vue:142-165
type !== 4 (bankerPermission)	Wholesaler (بنکدار) must not see اجرت (wage) — hides wage in cart item and the wage filter	src/store/myDataStore.ts:86-90; src/components/product/cartItem.vue:93-95; src/components/search/Filters.vue:24
type == 4 on customer create	Force sts = -1 on the payload	src/views/user/src/components/addUser.vue:152
mcode null	/report redirects to home; "جزئیات حساب" button and balance grid hidden in the report sheet	src/views/report/index.vue:174-177; Dashboard.vue:173,179,199

5.5 401 / 403

• 401: only in myStore.init() — wipes 3 localStorage keys, clears impersonation, pushes home, rethrows (src/store/myDataStore.ts:136-142). Because there is no response interceptor, a 401 on any other call is swallowed by that call's local catch.
• 403: no handling anywhere.
• Manual logout: Dashboard.vue:781-794 — removes appToken, appCart, activeChildToken, toggleActiveUser(undefined), push home, then window.setInterval(() => window.location.reload(), 1000) (an interval, not a timeout — reloads in a loop until navigation kills it; same pattern at completeProfile.vue:175-181, makeOrder.vue:169-175, makeOrderStatus.vue:166-172). A second, simpler logOut exists unused at src/views/user/index.vue:98-101.

---

6. Views

6.1 Full file census under src/views (recursive) — 26 files

#	File	Purpose (one line)
1	src/views/cart.vue	Shopping cart: list items, per-item note drawer, total weight, confirm dialog, submit order, success screen.
2	src/views/login.vue	Dead file — entire contents wrapped in one HTML comment (src/views/login.vue:1 opens <!--, :201 closes -->). Superseded by views/user/LoginRegister/. Not routed.
3	src/views/newest.vue	"Newest products" infinite list (getProducts with {page} only).
4	src/views/singleProduct.vue	Product detail: gallery, variants, wage/discount, add-to-cart, favorite toggle.
5	src/views/home/index.vue	Home: slider, 9-category grid (custom order), newest products, product carousel, login-nudge dialog after 5 s.
6	src/views/home/src/components/NotificationList.vue	Notification list + unread count + mark-read. Not mounted (usage commented at home/index.vue:5).
7	src/views/report/index.vue	Financial report: two modes (کلیات / جزئیات) via radio, infinite scroll, per-row detail modal.
8	src/views/report/detail.vue	Single-record ant Table with 11 columns from the Pinia report store.
9	src/views/report/store/report.ts	Pinia store report holding currentReport: Hesab | null.
10	src/views/report/components/Accounting.vue	Card: doc no, Jalali date, gold debit/credit, gold balance.
11	src/views/report/components/AccountingDetail.vue	Detailed accounting card variant (flag prop selects list vs. modal mode).
12	src/views/search/searchPage.vue	Product search: search input, category chips, filter panel toggle, infinite product list.
13	src/views/search/collection/index.vue	Collection ("سینی") grid; tapping an item opens singleProduct in a bottom drawer.
14	src/views/search/collection/components/CollectionCard.vue	Single tile in that grid.
15	src/views/user/index.vue	Thin wrapper: renders Dashboard + the About drawer.
16	src/views/user/LoginRegister/index.vue	Toggles between Login and Register via a local showRegister ref.
17	src/views/user/LoginRegister/components/Login.vue	Phone → OTP login, 120 s resend countdown.
18	src/views/user/LoginRegister/components/Register.vue	B2B jeweler registration + 3-level city picker; success → "await approval" dialog.
19	src/views/user/src/completeProfile.vue	Upload 3 documents (business licence, storefront, national ID) → /major/complete.
20	src/views/user/src/components/Dashboard.vue	Main work desk: identity card, gram/rial balances, tiles, gold/currency price list, logout.
21	src/views/user/src/components/Orders.vue	Orders list with 8 status tabs, client-side id search, full-screen detail modal + 4-step progress + invoice.
22	src/views/user/src/components/ChildOrders.vue	Sales-rep view of customers' orders: paged + search, edit item weights, submit / final-submit.
23	src/views/user/src/components/transactions.vue	Financial-document list, detail drawer, download file, FAB → addTransaction.
24	src/views/user/src/components/addTransaction.vue	Full-page 4-tab findoc form (آب شده / حواله / چک / پولی).
25	src/views/user/src/components/addFindoc.vue	Duplicate of the above as a bottom drawer; mounted inside transactions.vue:139 (both FABs exist, overlapping).
26	src/views/user/src/components/profile.vue	Read-only profile card + sales-rep contact + "تکمیل پروفایل" CTA (971 lines, ~85 % commented-out legacy).
27	src/views/user/src/components/editUser.vue	Edit own profile: landline, address, birth/marriage date, 4 image uploaders.
28	src/views/user/src/components/addUser.vue	Sales-rep: create or edit a customer (mode from route.query.edit).
29	src/views/user/src/components/customerChoice.vue	Sales-rep: customer list, search, impersonate, edit, activate/deactivate.
30	src/views/user/src/components/favorits.vue	Favorites product list with manual pagination.
31	src/views/user/src/components/makeOrder.vue	Custom manufacture order form (image + 5 attributes + description).
32	src/views/user/src/components/makeOrderStatus.vue	Custom-order status list with a 5-stage animated progress rail.
33	src/views/user/src/components/about.vue	Static "About Henza" drawer with background image.
34	src/views/user/src/components/report.vue	Debug page — dumps useScreenOrientation() values. Unrouted, unmounted.

(34 files total; 26 .vue under src/views plus the Pinia store — the numbering above is the file list.)

6.2 Requested-flow coverage matrix

Requested flow	Status	Where
login / OTP	PRESENT	§6.3
register	PRESENT	§6.4
buy gold	ABSENT — nearest is add-to-cart for a physical jewelry SKU	§6.7
sell gold	ABSENT	—
wallet	ABSENT — nearest is the read-only balance strip on Dashboard	§6.5
deposit	ABSENT — nearest is submitting a findoc of type چک/حواله/آب‌شده	§6.9
withdraw	ABSENT	—
transfer	ABSENT — nearest is findoc type 2 (حواله), which only records a transfer note	§6.9
orders	PRESENT	§6.10, §6.11
transactions	PRESENT (financial documents)	§6.9
profile / KYC	PARTIAL — profile yes; KYC is two flat flags, no levels	§6.12–6.14
products / shop	PRESENT	§6.6, §6.7
cart	PRESENT	§6.8
addresses	ABSENT — address is a single free-text field on the user	§6.13
tickets / support	ABSENT — only a static WhatsApp FAB (index.html:59-61)	—
notifications	PRESENT but not mounted	§6.16

---

6.3 Login + OTP — src/views/user/LoginRegister/components/Login.vue

API

Step	Call	Payload	Evidence
1	POST /web/auth	the whole ant-design values object → {username}	:137
2	POST /user-verfiy	{username: formModel.username, password: <otp string>, token_mobile: unref(token.fireBaseToken)}	:157-165

Fields & validation

Field	Component	Rules	Exact message	Evidence
username (تلفن همراه)	<Input type="number">	required('تلفن همراه'), mobile('تلفن همراه')	required → ' لطفا تلفن همراه را وارد کنید '; pattern fail → ' مقدار تلفن همراه نا معتبر است '	:63-66; messages src/Mixins/validator/index.ts:41,1-3
OTP	<otp-input :num-inputs="4" inputType="tel">	none (auto-submits on completion)	—	:45-52

Mobile regex: /^(\+98|0098|98|0)?9\d{9}$/g (src/Mixins/validator/index.ts:6). Note the g flag with .test-style reuse is a known stateful-lastIndex hazard.

Timer / resend: timer = 120 on successful step 1 (:140); recursive setTimeout decrement (:122-131). OTP inputs render only while step==2 && timer>0 (:46). At timer===0 the text switches to برای دریافت رمز عبور مجدد تلاش کنید (:54-56); while running it reads امکان دریافت مجدد رمز در {counterZeroShow(timer)} ثانیه دیگر with zero-padding below 10 (:57-60, :187-189).

Button: label body.step === 1 ? 'دریافت رمز عبور' : 'دریافت مجدد رمز عبور' (:192-194); :loading="body.loading"; :disabled="timer > 0 && body.step === 2" (:68).

Errors / success

Condition	Behaviour	Evidence
step-1 response 404	red NotifyVant with default text اطلاعات کاربری در سیستم وجود ندارد.	:149-151, :112
data.sts_verify_step_one == 3	notify مجوز ورود ندارید, return without storing the token	:167-171
step-2 any error with a status	notify خطا در ورود	:179-182
success	localStorage.setItem('appToken', data.api_token) → await myStore.init() → router.push({name:'home'}) → notify با موفقیت وارد شدید	:172-176

Notify colour is hard-coded red (background-color: #DC2626) regardless of success/failure (:3).

Web OTP API: useOtpToken() registers a navigator.credentials.get({otp:{transport:['sms']}}) listener that pushes the code into token.setToken (src/store/loginToken.ts:34-52) — but it is commented out in src/App.vue:100, and the watch(token.token, …) auto-submit lives only in the dead src/views/login.vue:160-166. SMS auto-fill is therefore inactive.

Back arrow → userPage::hasSubRoute (:11-12). "ثبت نام کنید." emits register(true) (:78).

6.4 Register — src/views/user/LoginRegister/components/Register.vue

API: POST /major/register with the form values (:332). Cities loaded on mount via POST /cities/list (:264-266, :296-307).

Field	Component	Rules	Evidence
fname (نام)	Input	required('نام')	:29-31
lname (نام خانوادگی)	Input	required('نام خانوادگی')	:32-34
mobile (شماره موبایل)	Input type=number	mobileValidator(...), required(...)	:35-38
store_name (نام فروشگاه)	Input	required('نام فروشگاه')	:39-41
phone (تلفن فروشگاه)	Input type=number	required('تلفن فروشگاه') only — no phone() pattern applied	:42-45
address (آدرس پستی)	Textarea	required('آدرس')	:46-48
city (شهر)	plain Input	required('شهر')	:49-66

City cascader is dead UI: the 3-level country→province→city WorkActionSheet is fully implemented (:80-134, recursiveFunction :272-294, handlers :309-327) and the data is fetched, but the trigger button is commented out (:58-64) — the field degrades to a free-text city. onSelectCities writes formModel.city_id, which is never submitted.

Submit: button ثبت اطلاعات, html-type="submit", no explicit disabled/loading (form is wrapped in <Spinner :spinning="profileData.loading" tip="در حال ثبت اطلاعات">, :26).

Success: registeredInfo = true → one-button dialog (DialogVantOneButton, :closeOnClickOverlay="false") reading ثبت نام شما با موفقیت انجام شد. منتظر تایید اطلاعات ثبت نامی شما توسط کارشناسان بمانید.; button متوجه شدم → router.push({name:'home'}) (:135-152).

Failure: console.log(e) only — no user-visible error (:340-342).

6.5 Dashboard ("میز کار") — src/views/user/src/components/Dashboard.vue

The wallet-equivalent surface. Rendered by route /user via src/views/user/index.vue:27.

Identity card (logged in, :24-56): name (:27), "انتخاب مشتری" / "خروج از حساب مشتری" toggle button shown when type==1 || hasActiveChild with type switching primary↔danger (:37-46), mobile row (:51-54). Logged-out card (:57-64): برای استفاده از امکانات نرم افزار ابتدا وارد شوید + ورود/ثبت نام button → /login.

Balance strip (:66-83) — the closest thing to a wallet:

Label	Value	Computation	Evidence
بدهکار گرمی when remain > 0, else بستانکار گرمی	Math.abs(remain) + گرم	myStore.state.remain	:69-70, :411-415, :402-404
فروش گرمی (only type == 1)	grams_sell + گرم	myStore.state.grams_sell	:72-75, :416-418
بدهی ریالی	$filters.priceUnit(rial_remain) → thousands-separated + تومان	myStore.state.rial_remain	:77-78, :419-421; filter src/Mixins/filters/index.ts:11-16

Unit inconsistency: the field is named rial_remain but priceUnit appends تومان (src/Mixins/filters/index.ts:13), while the price list appends ریال (Dashboard.vue:258).

Account-report action sheet (handleShowReport, :545-560): if myStore.hasMCode() → GET /tahesab/me, store data.result in mandeh, then open a van-action-sheet.

• No mcode → empty illustration gozareshEmpty (:173).
• Has mcode → 2 boxes (:179-198):
  • "ته حساب طلایی(گرم)" renders usePrice(mandeh[1]?.mandeh, true, ''), coloured by mandeh[0]?.mandeh > 0 ? text-green : text-red
  • "ته حساب ریالی(ریال)" renders useThreeDecimal(mandeh[0]?.mandeh), coloured by mandeh[1]?.mandeh > 0
  • The index/colour pairing is crossed in both boxes (:182,184 and :190,192) — gram box shows index 1 formatted as money, rial box shows index 0 formatted as 3-decimals.
• "جزئیات حساب" button → router.push({name:'report'}) (:199-204, :449-451).

Tiles: see §4 (Dashboard grid). Every tile: isUserLoggedIn() ? action : (data.loginNotify = true). Note :119 has a bug: @click="isUserLoggedIn()?openChildOrders:data.loginNotify = true" — openChildOrders is referenced, not invoked, so the child-orders tile never navigates.

Dialogs (all DialogVant, :timeOut="-1"):

Trigger	Title	Buttons	Evidence
activate/deactivate customer	کاربر غیر فعال شود؟ / ّکاربر فعال شود؟ (note the stray ّ)	بله → setActive; بی خیال	:286-300, :584-598
logout icon	آیا می خواهید از برنامه خارج شوید؟	بله → logOut; بی خیال	:302-316
any gated tile while logged out	برای دسترسی به تمامی امکانات نرم افزار هنزاگلد، ابتدا گزینه ورود/ثبت نام را لمس کنید و در صورت نداشتن حساب کاربری، ثبت نام نمایید.	ورود/ثبت نام → /login; بیخیال	:317-334

NotifyVant toasts: درحال دریافت اطلاعات orange ×2, قیمت ها با موفقیت به روز رسانی شد green, خطا در به روز رسانی red — all 4000 ms (:269-284).

Analytics: useCustomAnalyticsComponent('داشبورد') (:688).

6.6 Home — src/views/home/index.vue

POST /front on mount (:181-223). Response is deep-cloned via vant's deepClone (:185). Categories are re-ordered against a hard-coded layout array [37, 45, 31, 32, 42, 26, 36, 35, 34], matched ids first (in that order), remainder appended (:189-204). memory.setCats(data.cats) (:207) — this is what flips isLoaded true and unblocks the router's skipLoadedCheck gate (§5.1).

After 5 s, if !isUserLoggedIn(), show the login-nudge dialog and call memory.setFirstTimeLoaded() (:210-216). The firstLoadFront "only once" guard is written but commented out of the condition (:212), so the nudge fires on every Home visit.

Sections: slider (memory.state.config?.main_slider, height = min(width,768)/2.2125 px, :11, :245), 3-col category grid (:14-25), "محصولات جدید" horizontal product cards + "مشاهده همه" → newestProduct (:27-38), then a horizontally-scrolling vertical-card rail ending in a view-all tile → /search (:40-44).

Whole page is behind v-if="flag" and a Spinner with tip درحال دریافت اطلاعات (:2, :10).

6.7 Single product — src/views/singleProduct.vue

GET /product/${id} — called twice in the same function, once for the route param id and once for the props.id drawer form; both branches run identical 18-line variant-selection blocks (:280-325). Duplicate fetch when both are set.

Variant selection: default = the variant with the lowest percentage_pay (:286-296, then overwritten by getSelectedVariant(unref(variants)) at :296 which does the same thing — src/Mixins/product/index.ts:54-67). Empty variants fall back to {grams:'0', id:0, title:'بدون تنوع', percentage_pay:0} (:287).

Displayed calculations:

Display	Formula	Evidence
Wage %	getWage(variant) = myStore.state.percent + variant.percentage_pay	src/Mixins/product/index.ts:69-75; rendered {{ wage % 1 === 0 ? wage : wage?.toFixed(2) }}% اجرت (singleProduct.vue:66)
Discounted wage %	getHasDiscountWage = (variant.percentage_pay - promotion.discount_percent) + myStore.state.percent, only if myStore.state.percent > 0	src/Mixins/product/index.ts:77-83
Discount badge	-%{{ promotion.discount_percent }}	singleProduct.vue:60
Grams	{{ selectedVariant.grams }}	:73

Promotion engine (src/Mixins/product/index.ts:11-52):

• checkIgnoreList(product) — an ignoreList entry suppresses all promotions when type==1 && item_id==product.id, type==2 && item_id==product.category.collection_id_id, type==3 && item_id==myStore.state.id, type==4 && item_id==product.brand.id (:11-26).
• getCandidPromotions matches promotions by the same 4 types; type==3 (customer-type discount) is hard-disabled with if (promotion.type == 3) return false and the Persian comment --- موقتا غیرفعال: تخفیف نوع مشتری (مربوط به ورود/ثبت‌نام) --- (:31-32).
• getPromotion picks the candidate with the maximum discount_percent (:47-52).

Add-to-cart button (:92-99): two variants exist; the live one is @click="isUserLoggedIn() ? (myStore.state.sts_verify_step_two === 2 ? addToCart() : loginStepTwoNotify = true) : loginNotify = true" (:95) — this is the only verification gate on a transactional action in the app. Rendered only when !cart.isInCart(storeProduct); otherwise an "already in cart" button (:101-103).

Cart payload shape: {vid: selectedVariant.id, note: null, pid: product.id, product, qty: 1} (:259-266).

Favorite toggle: toggleFavorite(props.id) — optimistic local flip then POST /add-to-fav (:108-111; src/Mixins/favorite.ts:5-13).

The view hijacks the back button: history.pushState(null, location.href) + window.onpopstate = () => history.go(1) (:376-379) — a global side effect executed at setup time.

6.8 Cart — src/views/cart.vue

Storage: useStorage('appCart', []) from @vueuse/core with a JSON serializer — persisted in localStorage under key appCart (src/store/cartStore.ts:19-27).

Hydration: onMounted → cart.init() re-fetches all products by id via POST /get-products {products_id} and rebuilds each line, silently dropping any line whose product or variant no longer exists (src/store/cartStore.ts:36-64).

Per-item controls (src/components/product/cartItem.vue): + increments (:29, :69-72); when qty === 1 the minus becomes a trash icon that removes the line (:32-35); otherwise minus decrements (:37-38, :73-76). Displays: وزن حدودی (selectedVariant.grams گرم, :10), اجرت (wage?.toFixed(2)% with line-through when a discounted wage exists, :13-19), اجرت ریالی ($filters.priceUnit(selectedVariant.rial_pay), only when logged in, :21-24). Wage block is gated by showDiscountWage = myStore.bankerPermission && hasDiscountWage && isUserLoggedIn() (:93-95).

Note drawer (src/views/cart.vue:46-59): bottom Drawer height 280px, Textarea :rows="5", submit ثبت → cart.updateFeild(value.note, index, row, 'note') (:151-156).

Total: cart.total() = Σ(variant.grams × qty) .toFixed(2) — weight only, no money (src/store/cartStore.ts:118-122; rendered جمع وزن : {{ cart.total() }} گرم, src/views/cart.vue:99-101).

Bottom bar visible only when items.length > 0 && step === 1 (:98). Button ثبت نهایی سفارش sets cartData.notify = true; the :disabled="cartData.notify" variant is commented out at :102 in favour of an always-enabled button at :103.

Confirm dialog: آیا مطمئن به ثبت سفارش هستید ؟ with بله → submitOrder, بی خیال → dismiss (:61-75).

Submit (:157-194) → POST /set-order. Per-item payload:

Key	Source
discount	getPromotion(product)?.discount_percent || 0
id	null
note	cartItem.note
percent_pay	getWage(cart.variant(cartItem))
product	cartItem.pid
promotion_id	promotion?.id || null
promotion_item_id	cartItem.pid
qty	cartItem.qty
rash_weight	cart.variant(cartItem).grams
rial_pay	0
variant	cartItem.vid
wage_weight	hard-coded 5.7856000000000005 with the comment // how to get?! (:181)
weight	hard-coded 6.303744000000001 with the comment // how to get?! (:182)

Top-level: final_submit: false; from_parent: unref(myStore.hasActiveChild) with the comment "true only when a rep orders on a customer's account, otherwise the SMS wouldn't reach the rep" (:162-164); id: null.

Success: cartData.orderID = id, step = 2, cart.clear() (:186-188). Step-2 screen: اطلاعات سفارش با موفقیت ثبت شد, شماره سفارش {{orderID}}, button لیست سفارشات → /orders then resets step = 1 (:31-41). Failure: console.log(e) only (:189-191).

Empty state: <empty :image="cartEmpty"/> when items.length === 0 (:24); empty.vue always renders the description موردی یافت نشد (src/components/empty.vue:4).

6.9 Transactions / financial documents

List — src/views/user/src/components/transactions.vue POST /get-my-findoc on mount → {rows} (:200-215). No pagination params, no filters, no search, no tabs.

Row (:19-58): icon vuesax-linear:add-square when type != 9 else vuesax-linear:minus-square (:245-247); background #F0FDF4/foreground #22C55E when type != 9, else #FEF2F2/#F44336 (:232-238). hasFactor(item) = item.type != 9 (:249-251). Shows title, type_str chip, {{value}} گرم, uaj (update date), sts_str, and — only when hasFactor — a دریافت فایل button opening https://henzagold.com/oapi/api/report/doc?doc_id=${id} with e.stopPropagation() (:43-49, :223-226).

Detail drawer (:65-138, height 450px): نوع سند (type_str), تاریخ ثبت سند (caj), تاریخ ویرایش سند (uaj), حواله به (to), مبلغ ($filters.priceUnit(price) or - -), توضیحات (note or - -).

Empty: <empty :image="transactionEmpty"/> (:60). A testBind() helper marks the first 4 rows for a CSS transition class but returns undefined, so test.value becomes undefined after assignment (:177-198, :205).

Two "add" affordances overlap: the FAB in this file → /addTransaction (:141-143) and the FAB inside the embedded <AddFindoc @change="getFindocs"/> → opens the drawer (:139; addFindoc.vue:5-7).

Create — addTransaction.vue (page) and addFindoc.vue (drawer), functionally identical

Tabs (addTransaction.vue:184-189, addFindoc.vue:192-197) — these are the transaction type enum:

type	Label
1	آب شده
2	حواله
3	چک
4	پولی

Default type: 1 (addTransaction.vue:170).

Shown for type	Field	Component	Rule	Exact message
1, 2	w (وزن)	InputNumber :min="0" size="large" class="hide-counter" type="number"	required('وزن')	' لطفا وزن را وارد کنید '
1	ayar (عیار)	InputNumber :min="0" type="number"	required('عیار')	' لطفا عیار را وارد کنید '
1	lab (آزمایشگاه)	Input	required('آزمایشگاه')	' لطفا آزمایشگاه را وارد کنید '
1	ang (انگ)	Input type=number	none	—
2	to (حواله به)	RadioGroup over myStore.state.to, :value="index" (array index, not the string)	none	—
3	price (مبلغ (ریال))	InputNumber :min="0"	required('مبلغ')	' لطفا مبلغ را وارد کنید '
3	no (شماره چک)	InputNumber type="number"	required('شماره چک')	' لطفا شماره چک را وارد کنید '
3	proceed_at (تاریخ)	InputDatePicker (Jalali)	required('تاریخ')	' لطفا تاریخ را وارد کنید '
3	account_name (نام صاحب حساب)	Input	required('نام صاحب حساب')	' لطفا نام صاحب حساب را وارد کنید '
3	bank_name (نام بانک)	Input	required('نام بانک')	' لطفا نام بانک را وارد کنید '
4	—	static text	—	مشتری عزیز لطفا جهت پولی کردن با کارشناس فروش خود تماس حاصل نمایید.

Evidence: addTransaction.vue:28-82 / addFindoc.vue:32-86; validator messages from src/Mixins/validator/index.ts:41.

No input masks, no thousand separators, no Persian→English digit conversion on any of these numeric fields — they are raw InputNumbers.

Submit button hidden entirely when type === 4 (addTransaction.vue:85, addFindoc.vue:91). Label ثبت اطلاعات. Bug (page version): the button sits outside the <Form> element (addTransaction.vue:84-94 closes the form at :97) and carries no html-type="submit", so @finish="setFindoc" never fires from a click. The drawer version has the same structural problem (button at :91-100, form closed at :90) but at least declares html-type="submit".

Success: FindocData.notify = true → green NotifyVant اطلاعات با موفقیت به ثبت رسید (4000 ms), close drawer, findocForm.value.resetFields(), emit('change') (which transactions.vue maps to getFindocs). Failure: console.log(e) only.

6.10 Orders — src/views/user/src/components/Orders.vue

POST /get-orders {sts}; initial call getOrders(-1) on mount (:287-299, :343). Tab change passes the tab key directly as sts (:24).

Status tabs / order status enum (:259-270):

key (sts)	Title
-1	همگی
0	لغو شده
1	ثبت سفارش
2	تایید مدیر سیستم
3	درحال تامین
4	درحال آماده سازی
5	تحویل مدیر فروش
6	تحویل مشتری

Status colours (setColor, :306-326, mirrored in src/components/product/order.vue:67-86):

sts	font	background
1	#3B82F6	#EFF6FF
3	#EAB308	#FEFCE8
4	#F97316	#FFF7ED
5	#06B6D4	#ECFEFF
6	#22C55E	#F0FDF4
0, 2	unset (transparent chip)	—

Progress rail — 4 steps ['ثبت سفارش','آماده سازی','تحویل مشتری','لغو شده'] (:244); setCurrentStep() maps sts ∈ {1,2} → 0, {3,4} → 1, {5,6} → 2, 0 → 3 (:246-257). Default current = 1 before any order is opened (:245).

Search: client-side only, exact id match — orderData.items.filter(x => x.id == value) (:279-285). No API param. Pagination: none — the endpoint returns everything.

Detail modal (:50-203, class ${prefix}-custom-modal = full-screen, :mask="false" :footer="false" :closable="false"): شماره سفارش ORD-{{id}}, وضعیت chip, items.length آیتم, w?.toFixed(2) گرم, caj date. Item cards via OrderItem showing تعداد/وزن/اجرت(درصد)/توضیحات (src/components/product/orderItem.vue:9-34). Invoice: button دریافت فاکتور → window.open('https://henzagold.com/oapi/api/report/order?order_id=' + id, '_bank').focus() (:63-66, :333-335). Empty: <empty :image="ordersEmpty"/> when the filtered list is empty (:44). Analytics: useCustomAnalyticsComponent('لیست-سفارشات') (:339).

6.11 Child orders (sales rep) — src/views/user/src/components/ChildOrders.vue

POST /order/child {page, search}, page post-incremented per fetch; fetchFlag false once a page returns 0 rows; flag true when the list is empty (:329-341). Search resets page = 1, clears the list, refetches (:371-377).

Edit flow: toEditOrder snapshots itemsWeight = items.map(i => ({w: +(i.w - i.wage).toFixed(2), wage: i.wage})) — i.e. it edits the raw (pre-wage) weight (:344-351). totalWeight = Σ(w + wage) .toFixed(2) (:424-426).

Submit (:385-407): PUT /order/child/${id} with items rebuilt as {...originalItem, w: item.w + item.wage, rash_weight: item.w}, plus final_submit and from_parent: true.

Confirm text depends on the mode (:380-383): آیا مطمئن به ثبت نهایی هستید ؟ when final_submit, else آیا مطمئن به ثبت تغییرات سفارش خود هستید ؟. toFinalSubmit() / toSubmit() set the flag then open the dialog (:409-417). Analytics: useCustomAnalyticsComponent('سفارش مشتریان') (:429).

6.12 Profile — src/views/user/src/components/profile.vue

Read-only. Makes no API calls — every axios line in the file is commented out (:574, :796, :877). All data from myStore.state computeds (script-setup block starting :110).

Shows: avatar (myStore.state.image?.image, falls back to the Henza logo, :44-49), sales-rep card with name + a تماس button calling window.open('tel:' + reagent.mobile) — rendered only when type !== 1 (:57-80), then نام و نام خانوادگی / تلفن همراه / آدرس (:81-94).

"تکمیل پروفایل" CTA → /complete_profile, shown only when sts_verify_step_two !== 2 && sts_verify_step_two !== 1 (:96-101). "add user" FAB → /addUser, shown when type === 1 || hasActiveChild === true (:22-25). (Note hasActiveChild is a Ref, so === true is always false — the .value is missing here, unlike Dashboard.vue:37 which uses .value correctly.) Edit pencil → /editUser (:9). Analytics: useCustomAnalyticsComponent('پروفایل').

6.13 Edit profile — src/views/user/src/components/editUser.vue

POST /update-profile with values + values.image_id = userFormModel.image_id (:285-291).

Field	Component	Rule	Message
profile image	SingleImageUploader (only when type !== 1)	none	—
phone (تلفن ثابت)	Input type=number	phoneValidator('تلفن ثابت') → /^((\+98|0098|98|0)\d1)?\d{8}$/g	' مقدار تلفن ثابت نا معتبر است '
address (آدرس)	Textarea show-count :maxlength="100"	none	—
birth_date (تاریخ تولد)	InputDatePicker	none	—
marriage_date (تاریخ ازدواج)	InputDatePicker	none	—
3 more uploaders (جواز کسب / سردر مغازه / کارت ملی)	SingleImageUploader size="95px"	none	their done handlers are empty stubs — the ids are discarded

Evidence: template :20-77; handlers editUser.vue script :66-79 (relative to the 200-offset excerpt, i.e. absolute ≈ :265-278); note that two of the three uploaders share the same v-model:fileList="shopFrontFileList" (:65, :69).

Success: myStore.setValue(data) then showNotify({message:'ویرایش با موفقیت انجام شد', color:'#ffffff', background:'#22C55E', duration:4000}) then back() → /profile. Analytics: useCustomAnalyticsComponent('ویرایش کاربر').

6.14 Complete profile (document upload) — src/views/user/src/completeProfile.vue

Three SingleImageUploaders bound to business_license_image_id (بارگذاری عکس جواز کسب), shop_image_id (بارگذاری عکس سردر مغازه), ncode_image_id (بارگذاری عکس کارت ملی) (:44-59).

Client-side rule (:191-198): only if all three ids are non-null → POST /major/complete; otherwise showNotify('لطفا تمامی عکس های خواسته شده را آپلود کنید'). The FormItems carry no rules — this is the only validation.

Success: dialog (closeOnClickOverlay:false) تکمیل اطلاعات شما با موفقیت انجام شد. منتظر تایید مرحله دوم اطلاعات ثبت نامی شما توسط کارشناسان بمانید., button متوجه شدم → refresh() = push home + the reload-interval pattern (:94-111, :175-181).

6.15 Add / edit customer — src/views/user/src/components/addUser.vue

Mode: isEditMode = !!route.query.edit (:117). Prefill order on mount: sessionStorage.editCustomer (set by customerChoice.editCustomer) → else history.state.customer (:242-265).

Fields & userFormRules (:227-235): fname نام, lname نام خانوادگی, mobile شماره تلفن همراه, birth_date تاریخ تولد (InputDatePicker), type نوع مشتری (select fed by endpoint #46), store_name نام مغازه, phone تلفن ثابت, pasazh_name نام پاساژ, new_city شهر (free text, mirrored into city by syncCityName, :122-124), zone منطقه (action-sheet picker over 22 hard-coded Tehran districts منطقه 1 … منطقه 22, :~170-330), address آدرس. All required except type and zone; messages are the shared ' لطفا <field> را وارد کنید '.

Submit transform (:149-193): type === '4' ? sts = -1 : delete sts; reagent = unref(mobile); city = new_city; city_id = null. Then POST /customer/update {...model, id: route.query.edit} or POST /customer/create model.

Toasts: success ویرایش کاربر با موفقیت انجام شد / افزودن کاربر با موفقیت انجام شد (green #22C55E, 4000 ms); failure ویرایش کاربر با خطا مواجه شد / شماره وارد شده تکراری می باشد (red #b10f0f). The 422/duplicate-mobile branch at :182 has an empty body, so the generic message fires either way. Back: route.query.from === 'customerChoice' → /customerChoice, else /profile (:234-240).

6.16 Notifications — src/views/home/src/components/NotificationList.vue (not mounted)

POST get-notify {page} with post-increment and fetchFlag stop-on-empty (:99-111); GET /notify/count → unread badge (:115-125); PUT notify/read/${id} on open, then refresh count and set notifications[index].read = true (:128-144). Bootstraps both list and count in parallel onBeforeMount (:145-150). Dead because its tag in Home is commented out (src/views/home/index.vue:5).

6.17 Custom manufacture orders

Create — makeOrder.vue

Field	Component	Rule	Exact message
file_id	SingleImageUploader (بارگذاری عکس سفارش)	{required:true}	لطفا تصویر سفارش را آپلود کنید
color رنگ محصول	Input	required	لطفا رنگ محصول را وارد کنید
size سایز محصول	Input	required	لطفا سایز محصول را وارد کنید
color_mina رنگ مینا	Input	required	لطفا رنگ مینا را وارد کنید
color_stone رنگ سنگ	Input	required	لطفا رنگ سنگ را وارد کنید
sum تعداد	Input type=number	required	لطفا تعداد را وارد کنید
description توضیحات	Textarea :rows="3"	none	—

Evidence :31-61. Submit → POST /create-custom-order (:221), preceded by a redundant runtime guard if (!formOrder.file_id) showNotify({type:'warning', message:'لطفا تصویر سفارش را آپلود کنید'}) (:206-209). Success → showNotify({type:'success', message:'سفارش با موفقیت ثبت شد'}) + push home (:224-225); failure → showNotify({type:'error', message:'خطا در ثبت سفارش'}) (:229). The local const loading = ref(false) is redeclared inside submitOrder (:201), shadowing the outer one, so the spinner never reflects this request. A leftover updateProfile function posting /major/complete also sits in this file, unreferenced (:181-198).

Status — makeOrderStatus.vue

POST /me-data then GET /get-custom-orders on mount (:252-255). Stage mapping from the server's Persian sts_str_fa (:147-164):

sts_str_fa	stage
ثبت سفارش	1
تایید ادمین	2
تایید کارگاه	3
ساخته شده آماده ارسال	4
تحویل شده	5

Rail labels: ثبت سفارش → تایید ادمین → تایید کارگاه → ارسال → تحویل شده, with a gradient-bg animated connector on the current stage and grey/secondary colouring by comparison (:28-56). Card fields: رنگ محصول, سایز محصول, رنگ مینا, رنگ سنگ, تعداد, وضعیت (sts_str_fa), تاریخ ثبت / ساعت ثبت split from time_creat_fa on - (:59-66), plus file.image thumbnail (:77). Actions, only when myStore.state.type === 5 (:68-75): تایید سفارش → confirmOrder(id) → POST /update-custom-order/{id} {sts:2} then locally bump the rail to 3 and add the id to confirmedOrders; once confirmed the button becomes ارسال سفارش → completeOrder(id) → the same {sts:2} payload then removes the row from the list (:209-250). confirmedOrders is a plain in-memory Set, so the confirm/ship distinction is lost on reload.

6.18 Customer choice — src/views/user/src/components/customerChoice.vue

POST /my-child on mount (:181-192, :208-210). A watch on viewDrawer also refetches (:195-197) — legacy from when this was a drawer. Card shows image (or Vector.svg fallback), name, mobile, phone, $filters.jdate(birth_date) or بدون تاریخ, address (:24-56). Actions: tap the card → myStore.toggleActiveUser(customer) (impersonate) → push /user (:156-168); pencil → sessionStorage.editCustomer = JSON.stringify(customer) + push addUser?edit=<id>&from=customerChoice (:148-154); user-tick/user-remove → confirm dialog then POST /customer/toggle-active {id} + refetch (:62-67, :141-147, :198-204). Search: client-side customerList.filter(x => x.name.includes(value)) (:169-179). Empty: <empty :image="customerEmpty"/> (:16).

6.19 Search — src/views/search/searchPage.vue

Query object lives in the module-level filtersStore (src/store/filtersStore.ts:15), shared across views. On mount (only when the current route is search): reset productList, text = undefined, ciny_id = undefined, fetch (:194-204).

Pipeline: every mutation funnels through toggleFilter() → close panel, clear productList, getProducts(query, productsData, loadingPage, false) (:120-124).

• search(value) — only refetches if value !== query.text (:136-141)
• setCats(id) — cats = [id] or undefined (:142-146)
• getByQuery() — resets page = 0 then refetches (:132-135)
• setDefaultQuery() — preserves text, resets everything else to defaultQuery (:126-131)

Filter chip label: ${filterKeys.length} فیلتر when any filter is active, else اعمال فیلتر (:17-22). Pagination (src/Mixins/getProducts.ts:14-38): totalPages = Math.floor(count/limit) - 1; getProducts(..., addPage=true) only advances when totalPages >= query.page, then query.page++; rows are concatenated; flag = (productList.length < 1) drives the empty state. Collections are refetched alongside: GET /ciny/{cats[0]} when a category is selected, else POST /front → data.ciny, plus a 6-item random sample (:39-60).

Filter panel — src/components/search/Filters.vue

Control	Bound query key	Source of options / bounds	Gating
Colour checkboxes	colors: number[]	myStore.state.filterColor	—
Brand checkboxes	brands: number[]	myStore.state.filterBrand	—
Wage range slider (:step="0.01" range)	limit_percent: [min,max]	myStore.state.filterPercentPay	v-if="isUserLoggedIn() && myStore.bankerPermission" (:24)
Gram range slider (:step="0.01" range)	limit_gram: [min,max]	myStore.state.filterGram	—
Discount switch	has_discount: boolean	—	—

filterKeys is recomputed on apply: a range counts as "active" only when both endpoints differ from the store bounds (:111-117). If filterKeys.length > 0 → emit update:filterKeys + change {resetFilters:false}; else → emit [] + change {resetFilters:true} (:119-125).

6.20 Report — src/views/report/index.vue + detail.vue

Guard: onBeforeMount → if (!myStore.hasMCode()) router.push({name:'home'}) (index.vue:174-177). Mode radio (:14-17): 1 = کلیات حساب → hesabDetailNew() = GET /fin_tahesab/table, result data.result.reverse(); 2 = جزئیات حساب → accountingDetailList(currentPage ?? 1) = GET /fin_tahesab/my_detail/{offset}, result data.result (:182-210). Switching modes clears items then re-inits (:178-181). Infinite scroll: useInfiniteScroll(ref1, …, {distance:30}) advancing currentPage while currentPage < Math.ceil(tableData.count / limit) with limit = 50; tableData is never assigned (the assignment is inside the commented-out getData, :211-226), so tableData.value.count is undefined and this loop never fires. A second useIntersectionObserver on .last elements also increments (:242-250). Row detail: openModalFn(value, item) stores {item, factor_code: item.factor_Code} and opens a 90 %-width modal rendering AccountingDetail with flag="1" (:44-52, :108-114); footer button بازگشت. A full ant Table with 5 columns (نوع / تاریخ / فاکتور / مانده طلایی / مانده ریالی) is defined at :129-168 but its markup is commented out (:53-65).

detail.vue renders a single-row Table from the Pinia store with 11 columns: شماره سند sh_factor, تاریخ سند toJalali(Tarikh,'jYYYY/jMM/jDD'), نوع سند no, نام جنس NO_kar, بدهکاری وزنی tabdil750_kh?.toFixed(2) ?? '0.00', بستانکاری وزنی tabdil750_v, ته حساب وزنی Tahesab_t, بدهکاری مالی usePrice(rial_kh,true,''), بستانکاری مالی rial_V, ته حساب مالی Tahesab_p, وزن مزنه MazanehISmesghal?.toFixed(2) (:38-123). All money/weight cells force dir:'ltr'. Guard: no currentReport → push home (:126-131).

---

7. Store

src/store/ holds 9 hand-rolled singletons (plain classes exported as instances) + 1 Pinia store elsewhere. None use Pinia except src/views/report/store/report.ts.

File	Export	Shape	Persisted?	Endpoints
src/store/store.ts	useBaseStore() → singleton baseStore	{config:{about,main_slider}, isLoaded, cats, firstLoadFront, promotionList, ignoreList, priceList, priceCurrentTime, priceCurrentDate} (:15-25, ctor :30-40)	no	GET /config (:63), GET /promotion (:74), GET /ignore (:86, dead dup :98), GET /price (:114) — all four fired in parallel by init() (:49-60)
src/store/myDataStore.ts	myStore (class myStoreClass)	MyData (see §8.3) + _activeUser + hasActiveChild: Ref<boolean>	activeChildToken in localStorage (:163,166)	POST /me-data ×2 (:120-126, :130)
src/store/cartStore.ts	cart (class cartStore)	cartItem[]	yes — localStorage.appCart via useStorage (:19-27)	POST /get-products {products_id} (:41)
src/store/navStore.ts	navStore() → singleton	{navBarRoutes, activeLink, showNav, pageTransition} (:34-48)	no	—
src/store/filtersStore.ts	query (a bare ref<Query>), defaultQuery	Query (§8.5)	no	—
src/store/tokenManage.ts	userToken, userChildToken, getUserToken	pure localStorage readers	reads appToken, activeChildToken	—
src/store/loginToken.ts	token (class tokenStore), useOtpToken()	{token, fireBaseToken}	no	—
src/store/loadingStore.ts	loading	{loading: boolean}	no	— imported once (productList.vue:29) and never read
src/store/transitionStore.ts	transition	{transitionFlag, transitionEnded, headerHeight} (:24-28)	no	—
src/store/windowData.ts	windowData	{width, pullingDown}	no	—
src/views/report/store/report.ts	useReportStore (Pinia, id 'report')	{currentReport: Hesab | null}	no	—

Persisted state total: appToken, activeChildToken, appCart, version (src/App.vue:66,71), plus sessionStorage.editCustomer (customerChoice.vue:149, consumed addUser.vue:251-255).

myStore.setValue (src/store/myDataStore.ts:93-115) coerces filterGram and filterPercentPay to numbers, writes to _state or _activeUser depending on hasActiveChild, then mutates the module-level defaultQuery with the user's gram/percent bounds and replaces query.value — so filter bounds are user-specific and reset on every profile load.

myStore.init() (:117-146): if parent token → noHeaderAxios POST /me-data with an explicit parent Authorization header, setValue(data, isFromInside=true); if a child token exists → axios POST /me-data (which will use the child token) and toggleActiveUser(data); else store.init(). Called from src/App.vue:126-129 (onBeforeMount, unconditional — the isUserLoggedIn() guard is commented out at :127).

All getters return readonly(...) proxies (store.ts:45-47, myDataStore.ts:77-84, cartStore.ts:32-34, etc.), so mutation must go through the setters.

---

8. Shared utils, validators, constants

8.1 Formatters

Function	Behaviour	Evidence
$filters.price(val)	String(val).replace(/\B(?=(\d{3})+(?!\d))/g, ','); falsy passthrough	src/Mixins/filters/index.ts:4-10
$filters.priceUnit(val)	same separator + ' تومان ' suffix; guards typeof ∈ {string,number}	:11-16
$filters.priceUnitRialLess(val)	separator + a trailing space, no unit	:17-22
$filters.jdate(val)	moment(val,'YYYY-MM-DD HH:mm:ss').format('jYYYY/jMM/jDD')	:23-28
usePrice(price, digit=true, unit='ریال')	separator (when digit) + ' ' + unit	src/utils/usePrice.ts:1-7
useTowDecimal(n)	regex-truncates to ≤2 decimals ^-?\d+(?:\.\d{0,2})? (truncate, not round)	src/utils/usePrice.ts:9-13
useThreeDecimal(n)	same with ≤3 decimals	:14-18
useFormat(n, unit='')	usePrice(Math.abs(+useTowDecimal(n)), true, unit) — drops the sign	:20-22
momentTimeAgo(dt)	moment.utc(dt).fromNow() (fa locale)	src/utils/useDataTime.ts:8-10
toJalali(dt, fmt='jYYYY/jMM/jDD-hh:mm:ss')	—	:12-14
toJalaliNoTime(dt, fmt='jYYYY/jMM/jDD')	—	:16-18
toTime(dt, fmt='HH:mm')	—	:20-22

Jalali locale is installed globally once: moment.locale('fa', fa) + moment.loadPersian() (src/utils/useDataTime.ts:5-6). Filters are exposed app-wide as app.config.globalProperties.$filters (src/main.ts:25); $baseRoute and $prefix ('henza') likewise (src/main.ts:26-27; prefix defined themeConfig/themeConfig.ts:12).

Persian↔English digit conversion: ABSENT. No toEnglishDigits/convertDigits/۰۱۲… mapping exists anywhere in src/. Numeric inputs are native type="number" / ant InputNumber, so Persian keyboard digits are not normalised. Input masks / live thousand separators: ABSENT. Separators are applied only on display via the formatters above.

8.2 Validators — src/Mixins/validator/index.ts

Base message builder: message(field) = ' مقدار ${field} نا معتبر است ' (:1-3).

Validator	Rule	Message
mobile(f)	/^(\+98|0098|98|0)?9\d{9}$/g	' مقدار {f} نا معتبر است '
phone(f)	/^((\+98|0098|98|0)\d1)?\d{8}$/g	same
fa(f)	/^([\u0600-\u06FF\uFB8A\u067E\u0686\u06AF\u200C ])+$/	' مقدار {f} باید فارسی باشد '
mail(f)	{type:'email'}	' مقدار {f} نا معتبر است '
url(f)	{type:'url'}	same
username(f)	/^(?!.*\.\.)(?!.*\.$)[^\W][\w.]{0,29}$/igm	' مقدار {f} باید شامل حروف و اعداد انگلیسی و _ باشد '
required(f)	{required:true}	' لطفا {f} را وارد کنید ' (two spaces after لطفا)
sheba(f)	/^IR\d{24}$/igm	' مقدار {f} نا معتبر است '
card(f)	/^\d{16}$/igm	same
zip(f)	/^\d{10}$/igm	same
num(f)	/^\d*$/igm	same
len(f, n)	{len:n}	' مقدار {f} باید {n} کارکتر باشد ' (کارکتر misspelled)
max(f, n)	{max:n}	' مقدار {f} باید کمتر از {n} کارکتر باشد '
min(f, n)	{min:n}	' مقدار {f} باید بیشتر از {n} کارکتر باشد '

dynamic(name, key, data?) dispatches by string key (:104-110). sheba, card, zip, fa, mail, url, username, num, len, max, min are never used by any view — only required, mobile, phone are.

8.3 MyData (user object) — src/store/myDataStore.ts:14-39

address, api_token, filterBrand: Brand[], filterColor: Color[], filterGram: number[], filterPercentPay: number[], sts_verify_step_two?, sts_verify_step_one?, name, mobile, remain, grams_sell, id, sts, percent, reagent:{name,mobile}, to: string[], rial_remain, type, favorits: number[], mcode: string|null. Defaults (:48-70): id: -1, all numerics 0, arrays empty, mcode: null. Views additionally read image, fname, lname, phone, birth_date, marriage_date — not declared on the interface.

8.4 Enums / constants with exact values

User type — never centrally defined; inferred from usage:

value	Meaning	Evidence
1	کارشناس فروش (sales rep) — can impersonate, see child orders, add customers	Dashboard.vue:37,88,118,697,706; profile.vue:22,57
2	مشتری (customer)	Dashboard.vue:423 (type === 2 ? 'مشتری' : 'مدیر فروش')
4	بنکدار (wholesaler) — must not see wage; forces sts=-1 on create	myDataStore.ts:86-90 (comment "بنکدار (type 4) نباید اجرت ببیند"); addUser.vue:152
5	کارگاه/workshop — custom-order confirm & ship buttons; direct makeOrderStatus tile	Dashboard.vue:134; makeOrderStatus.vue:68

Order status (sts) — the 8 tab keys in §6.10 (Orders.vue:259-270), with the 4-step rail mapping at :246-257 and the colour map at :306-326.

Findoc / transaction type — {1:'آب شده', 2:'حواله', 3:'چک', 4:'پولی'} (addTransaction.vue:184-189); plus a magic type == 9 meaning "has no downloadable factor" in the list (transactions.vue:249-251).

Custom-order stages — 5 Persian strings → 1..5 (makeOrderStatus.vue:147-164), see §6.17.

Promotion / ignore type — 1 = product, 2 = category(collection_id_id), 3 = customer, 4 = brand (src/Mixins/product/index.ts:12-23, :33-38).

Price slugs (src/store/store.ts:118-119):

• quotePriceKey = ['mesghal_gold','gold18','gold24','sekebaharazadi','sekeemami','nimseke','robseke','geramiseke']
• otherPriceKey = ['usd','eur','ons_gold','ons_silver','ons_platinum','ons_palladium']
• a superseded list is commented at :117: ['geram18','mesghal','nim','nim_down','price_dollar_rl','rob','rob_down','sekeb','sekee_down','silver_999']

Tehran districts — منطقه 1 … منطقه 22 with key: 1..22 (addUser.vue regions array, excerpt :~170-330).

Theme colours (themeConfig/colors.json): primary #1C2D56, primaryLighten #1C3362, secondary #8D6A46, light #f9f9f9, grey #898989, danger #E31A1A, lightGray #A5A5A5, lightGray1 #CACED8, lightGray2 #E8EAEE, notify1 #F4C57A, notify2 #916F48, info #335CB1, green #16a34a, red #dc2626, plus a gray-50..400 ramp.

KYC levels: ABSENT — see §5.3.

8.5 Query (search filter payload) — src/Mixins/interfaces.ts:68-78, defaults src/store/filtersStore.ts:4-14

Key	Type	Default
colors	number[]	[]
brands	number[]	[]
ciny_id	number (declared) / number[] (assigned at collection/index.vue:73)	[]
limit_percent	number[]	[] (overwritten from MyData.filterPercentPay)
limit_gram	number[]	[] (overwritten from MyData.filterGram)
has_discount	boolean	false
text	string | undefined	undefined
cats	number[] | undefined	undefined
page	number	0
limit	(not on the interface)	set to 40 ad-hoc at collection/index.vue:74

8.6 Other mixins

File	Export	Purpose
src/Mixins/checkAccess.ts	isUserLoggedIn()	localStorage.getItem('appToken'); canNavigate, getHomeRouteForLoggedInUser are dead (:1-11)
src/Mixins/favorite.ts	toggleFavorite(id), isInFavoritsList(id)	optimistic toggle + POST /add-to-fav; membership check guards against non-array favorits (:14-19)
src/Mixins/getProducts.ts	getProducts, plus internal getData/getCollection/getRandomItems	§6.19
src/Mixins/product/index.ts	getPromotion, getSelectedVariant, getWage, getHasDiscountWage, useProduct	§6.7
src/Mixins/useRefresh.ts	useRefresh()	wraps useRegisterSW(); watchEffect auto-calls updateServiceWorker() whenever offlineReady || needRefresh — i.e. silent forced SW update (:16-18)
src/Mixins/fireBase.js	useFirebase()	FCM init with a hard-coded apiKey/VAPID key (:8-18); registers ${$BasePath}/firebase-messaging-sw.js; alert()s on failure (:30,35). Disabled — call commented at src/App.vue:105
src/Mixins/interfaces.ts	category, Ignore, Variant, Brand, Color, Image, Product, cartItem, Query, slide, worldPrices	§11
src/Mixins/filters/filters sample.js	—	sample/scratch file, unused

---

9. Components

Excluding the two vendored trees. 40 app components.

9.1 Inputs & form controls

Component	Notes	Evidence
src/components/input/otpInput.vue	Container. Props: defaultFocus, numInputs (default 4), separator, inputClasses, inputType (validator: number|tel|password), shouldAutoFocus, placeholder, disabled. Emits on-change, on-complete. Key handling: BACKSPACE 8 → clear + focus prev, DELETE 46 → clear, LEFT 37 / RIGHT 39 → move. Paste splits across boxes and validates digits when inputType==='number'. on-complete fires when otp.join('').length === numInputs.	:10-14,15-45,46-49,139-161,103-124,65-70
src/components/input/SingleOtpInput.vue	One box: min=0 max=9 maxlength=1 pattern="[0-9]", truncates to 1 char, allows only 0-9 + [8,9,13,37,39,46,86], selects on focus, auto-focus on mount when focus && shouldAutoFocus.	:3-20,55-61,63-78,82-85,105-110
src/components/input/Date.vue	Jalali display shim over vue3-persian-datetime-picker; shows تاریخ : + روز :, falls back to تعیین نشده. Bug: it never renders the actual picker component, so it can't set a value. Superseded by InputDatePicker.	:4-13,43-52
src/components/DatePicker/InputDatePicker.vue	The real date input. Wraps the vendored ant DatePicker with fa_IR locale + inputReadOnly, size="large". Setter converts the Jalali Dayjs to val.calendar('gregory').locale('en').format('YYYY/MM/DD') before emitting; getter re-wraps a string via dayjs(props.value).	:2-8,12-13,30-45
src/components/BaseInput.vue	Generic wrapper input.	—
src/components/search/SearchInput.vue	Prop placeHolder; emits search. Debounced 700 ms via useDebounce, plus Enter and icon-click. Clear "×" (a rotated add icon) resets to undefined and re-emits.	:3-10,24-38
src/components/search/Filters.vue	§6.19.	—
src/components/search/toggleMore.vue	"show more" toggle inside filters.	—
src/components/dropDown.vue	Collapsible section used by Filters.	—
src/components/ToggleBar.vue	Segmented toggle.	—

There is no numeric/price input component. No mask, no live separator, no digit conversion — numbers use ant InputNumber / <Input type="number"> directly. See §8.1.

9.2 Uploaders

Component	Notes	Evidence
src/components/SingleImageUploader.vue	ant Upload list-type="picture-card", :show-upload-list="false", custom req posting FormData{file, has_thumb:'0', has_watermark:'0'} to the absolute …/api/file/create. beforeUpload accepts only image/jpeg / image/png → error فقط تصاویر با فرمت jpeg یا png قابلیت آپلود دارند. (size check commented out, :134-137). Success بارگذاری فایل با موفقیت انجام شد / فایل با موفقیت آپلود شد; failure خطا در بارگذاری اطلاعات / خطا در آپلود فایل. Emits done(data.id). Prop size default '128px', bound through v-bind(size) CSS. fixUpload() strips the capture attribute on mount + on change so the file picker isn't forced to the camera.	:2-18,99-123,129-139,33-41,55-57
src/components/Uploader/MultiImageUploader.vue + src/components/Uploader/utils/index.ts	Multi-image variant.	—
src/components/UploadPic.vue	Legacy uploader; referenced only in a comment (editUser.vue:22-23).	—

9.3 Product

product/cartItem.vue (§6.8), product/order.vue (order summary card + colour map, §6.10), product/orderItem.vue (line item: تعداد/وزن/اجرت درصد/توضیحات), product/productList.vue (renders collection chips when route is search, then ProductVerticalFull rows inside ScrollFetchSearch), product/productHorizontal.vue, product/productVertical.vue, product/productVerticalFull.vue, product/category.vue, product/editUser.vue.

9.4 Feedback / overlays

Component	Notes
DialogVant.vue	vant dialog with img / title / button slots, native confirm/cancel buttons hidden via CSS (:83-85); buttons laid out as a 2-col grid. Bug: watch(() => props.modelValue, …) but modelValue is not declared in defineProps (:54-66).
DialogVantOneButton.vue	Same, single-button layout (used by Register, completeProfile, makeOrder, App version dialog).
NotifyVant.vue	vant notify with an info icon; props timeOut, text, color (a raw CSS string like 'background-color: #DC2626'), default slot.
Notification.vue, customNotification.vue	Legacy notification components (superseded by the vant ones).
spinner.vue	ant Spin with a custom Henza-logo SVG indicator, or a 3-ring CSS spinner when indicator is true. Props tip, size (default 'large'), cls, delay, spinning, indicator.
empty.vue	ant Empty, :image prop, hard-coded description موردی یافت نشد, 200×200, opacity-70.
WorkActionSheet.vue	Bottom sheet with title / body slots (city & region pickers).

9.5 Layout / list plumbing

ui/container.vue (px-[16px] max-w-screen-md m-auto), ui/navigation.vue (§4), ui/ScrollFetch.vue (useInfiniteScroll distance 50, emits fetch, renders Spinner + Empty), plus near-identical ScrollFetchSearch.vue, ScrollFetchAfterSearch.vue, ScrollFetchNotification.vue. appHeader.vue (fixed primary header with rounded corner), content.vue, viewAll.vue, slider/homeSlider.vue, slider/slider.vue.

9.6 Icons

src/assets/icons/Icon.vue + src/assets/icons/icons.json. All icons are referenced by the string id vuesax-linear:<name> (e.g. vuesax-linear:bag-happy, :home-2, :search-normal-1, :user, :add-square, :minus-square, :trash, :document-download, :refresh-2, :coin, :number-18, :number-24, :usd-coins, :moneys, :logout, :3d-cube-scan, :box-tick, :document-text-1).

9.7 Gold price ticker component

ABSENT as a component. The price list is inlined in Dashboard.vue:221-263 and has no ticker/marquee/auto-refresh behaviour. See §10.

---

10. Live price / sockets / polling

Verdict: there is no live price. No WebSocket, no SSE, no polling timer, no push subscription for prices.

Two independent, coexisting implementations both do a one-shot GET /price:

(A) baseStore.getPriceList() — src/store/store.ts:107-156

1. GET /price → an object keyed by slug, converted with Object.values(data) (:126).
2. Filter rows whose slug ∈ quotePriceKey ∪ otherPriceKey (§8.4) (:127-130).
3. Order = quotes first, then others (:135).
4. Map to {title: x.title.replace('انس',''), price: x.p} (:138-143).
5. setPriceList(values).
6. data.uaj?.replace(' ','')?.split('-') is parsed into uaj — but the two assignments prices.date = uaj[0] / prices.time = uaj[1] are commented out (:145-147), so setPriceData('', '') always writes empty strings. The Dashboard's date/time header (:231-232) is therefore permanently blank.

Triggers: store.init() on app boot / after login / after impersonation switch (src/store/store.ts:49-60; myDataStore.ts:132,168), and the manual refresh icon vuesax-linear:refresh-2 on the Dashboard (Dashboard.vue:236 → getPrices() :671-685), which shows a van-loading spinner and one of the two toasts قیمت ها با موفقیت به روز رسانی شد / خطا در به روز رسانی.

(B) Dashboard.getListPrice() — src/views/user/src/components/Dashboard.vue:632-660 Called once in onMounted (:658-660). Normalises the payload to an array (handles array / object / scalar), attaches an icon per index from a 10-item array (:612-623), then .reverse()s the whole list (:649). This is what the visible listPrice grid renders (:243-261), showing usePrice(val.p, true, '') + a ریال suffix and an optional link making the row clickable (window.open, :453-455).

So the on-screen list comes from (B), while the manual refresh button re-runs (A) — the refresh button does not update the list the user is looking at. The older (A)-driven priceListArray computed with its 14 hard-coded icon slots still exists at :457-532 but is not rendered.

Refresh cadence for everything else: none. The only periodic timers in the app are the OTP countdown (Login.vue:122-131) and the window.setInterval(reload, 1000) logout/refresh pattern (§5.5).

---

11. Types (src/type/*) + src/Mixins/interfaces.ts

src/type/ contains interfaces only — no enums anywhere in the project (export enum returns zero hits).

File	Export	Shape
src/type/table.ts	TableOutput<T>	{count: number, page: number, rows: [T[]], sum: any[]} — note rows is typed as a 1-tuple of arrays, which is why index.vue uses data.result instead (:1-6)
src/type/accounting.ts	Accounting	26 fields: id, factor_Code, mcode, sh_factor, tarikh, geram_v, geram_kh, rial_v, rial_kh, tahesab_T, tahesab_P, rec, reg, insertDTime, editDTime, arz, jens_Felez, gid, rial_V2, rial_Kh2, tahesabP2, arz2, check, vaznPlastik (:1-26)
src/type/hesab.ts	Hesab	73 fields, PascalCase legacy accounting record. Key ones: ID, Factor_Code, mcode, sh_factor, Tarikh, vazn, ayar, tabdil750_v, tabdil750_kh, NO_kar, no, rial_V, rial_kh, Tahesab_t, Tahesab_p, Sharh, Status, MazanehISmesghal, SanadType, Darsad_Talayee (:1-73)
src/type/hesabMoshtari.ts	HesabMoshtari	75 fields, customer ledger. Annotated: gorooh //گروه, tahesabriali //ته حساب مالی 2 - ته حساب ارزی, JamV_T //(بدهی طلایی) ته حساب طلایی, JamV_P //ته حساب مالی (بدهی ریالی), Tvazn //راس, TMablagh //راس مالی, Arz_TEMP_1 //واحد ته حساب 1, Arz_TEMP_2 //واحد ته حساب مالی 2 (:1-76)

src/Mixins/interfaces.ts holds the domain types:

Interface	Fields
category	total, icon:{image}, title, id, collection_id_id, image:{image} (:3-14)
Ignore	id, type, item_id (:15-19)
Variant	grams?, id?, title?, percentage_pay? (:21-26)
Brand	id, title, val? (:28-32)
Color	id, title (:34-37)
Image	image:{image:any} (:39-43)
Product	min_gram?, body_html?, thumb:{full}, title?, images?, id?, variants?, category?, brand?, has_warranty?, is_exist? (:45-59)
cartItem	pid, product, qty, vid — note is used everywhere but not declared (:61-66)
Query	§8.5 (:68-78)
slide	text, type, src, link (:80-85)
worldPrices	title, price, icon (:87-91)

ProductsData is imported by 3 views (newest.vue:28, searchPage.vue:102, collection/index.vue:51) but is only defined locally inside src/Mixins/getProducts.ts:5-11 and never exported — those imports resolve to undefined at runtime (harmless, type-only).

src/env.d.ts declares the *.vue shim and references vite/client (:1-8).

---

12. Env / config / PWA / service worker

12.1 Config keys

No .env file, no import.meta.env, no VITE_* variables. Everything is literal in themeConfig/themeConfig.ts (see §2.1). vite.config.ts:91-93 sets define: {'process.env': {}} so process.env.NODE_ENV in themeConfig.ts:50 evaluates against that stub.

Hard-coded secrets/URLs in source:

• Firebase config + apiKey: "AIzaSyDCyHlmR6-aLoqbspmhhRafXVh_LDawcE0" and VAPID key BDJLRBku… (src/Mixins/fireBase.js:8-18)
• Absolute API URLs in SingleImageUploader.vue:107, addUser.vue:460, Orders.vue:334, transactions.vue:225
• WhatsApp number 989229425856 (index.html:59)

12.2 Vite

base: '/' (vite.config.ts:11); dev server port: 3030, https: false (:12-13) though vite-plugin-mkcert is registered (:17). Aliases §2.2. resolve.extensions: ['*','.js','.vue','.json','.ts','.tsx'] (:55). Less modifyVars: $themeLessVars + javascriptEnabled: true (:78-85). build: {outDir: 'dist', manifest: true} (:87-90).

12.3 PWA (vite-plugin-pwa, vite.config.ts:18-52)

Option	Value
mode	"development" — shipped in dev mode, :19
base	/
srcDir / filename	src / sw.ts
strategies	injectManifest
includeAssets	["/favicon.png"]
manifest.name / short_name	HenzaGold / HenzaGold
manifest.theme_color / background_color	$themeLessVars.primary = #1C2D56
manifest.description	HenzaGold
manifest.start_url	/
manifest.display	standalone
manifest.icons	icon-192.png 192×192; /icon-512.png 512×512; icon-512.png 512×512 purpose:"any maskable" (inconsistent leading slash on the 2nd)

12.4 Service worker — src/sw.ts (7 lines, complete)

import { precacheAndRoute } from 'workbox-precaching'
declare let self: ServiceWorkerGlobalScope
self.addEventListener('message', (event) => {
  if (event.data && event.data.type === 'SKIP_WAITING') self.skipWaiting()
})
precacheAndRoute(self.__WB_MANIFEST)

Precache only. No runtime caching, no offline fallback, no background sync, no push handler. (src/sw.ts:1-7)

A separate FCM worker at ${$BasePath}/firebase-messaging-sw.js would be registered by useFirebase() (src/Mixins/fireBase.js:20), but that call is disabled (src/App.vue:105).

12.5 Update flow

• useRefresh() (src/Mixins/useRefresh.ts) is called in App.vue's onMounted (:52-55) and silently applies any waiting SW as soon as offlineReady || needRefresh.
• Independently, checkVersion() compares localStorage.version against pkg.version (1.0.7); a mismatch opens a one-button Lottie dialog reading نسخه جدید هنزا منتشر شد! with the button به روز رسانی → write the new version, updateServiceWorker(), window.location.reload() (src/App.vue:22-38,56-74). First run just seeds the key silently (:65-67).

12.6 App shell

src/App.vue:4-19: <component :is="getLayout"> picks FullPage when route.meta.layout === 'FullPage', else Master (:80-85). The router-view is wrapped in <keep-alive><suspense> keyed by route.name (:7-16) — so every visited page stays mounted; the page <transition> is commented out (:6, :17).

index.html: RTL is applied on #app via CSS (App.vue:138-148), theme-color/background-color #1C2D56 (index.html:8-9), viewport locked maximum-scale=1.0, user-scalable=no (:10), title طلای هنزا (:11), a fixed WhatsApp FAB at z-index: 1000000000 (:13-47,59-61). Firebase <script> tags are commented out (:50-52). Text selection is disabled globally (App.vue:145-147); a devtools key-blocker exists but is commented out (App.vue:113-118).

---

13. Notable defects found while reading (parity-relevant)

#	Defect	Location
1	Axios error interceptors don't return the rejected promise → failures resolve as undefined	src/plugins/axios.ts:21-23, 29-31, 43-45
2	No response interceptor at all → 401/403 unhandled outside myStore.init()	src/plugins/axios.ts
3	wage_weight and weight hard-coded in every order line (// how to get?!)	src/views/cart.vue:181-182
4	addTransaction submit button is outside the <Form> and lacks html-type="submit"	src/views/user/src/components/addTransaction.vue:84-97
5	Child-orders tile passes a function reference instead of calling it	src/views/user/src/components/Dashboard.vue:119
6	Report-sheet gram/rial boxes read crossed indices and use the wrong formatter for each	Dashboard.vue:182-192
7	priceCurrentDate/priceCurrentTime are always '' (assignments commented out)	src/store/store.ts:145-151
8	Two independent /price paths; the refresh button updates the one that isn't rendered	store.ts:107 vs Dashboard.vue:632
9	completeOrder sends the same sts:2 as confirmOrder	makeOrderStatus.vue:212, 234
10	window.setInterval(reload, 1000) used where setTimeout was meant (4 sites)	Dashboard.vue:788, completeProfile.vue:178, makeOrder.vue:172, makeOrderStatus.vue:169
11	hasActiveChild === true compares a Ref to a boolean → always false	profile.vue:23
12	Findoc to radio binds the array index, not the destination string	addTransaction.vue:50, addFindoc.vue:54
13	testBind() returns undefined, so test.value becomes undefined	transactions.vue:198, 205
14	Two uploaders share one fileList model; three done handlers are empty stubs	editUser.vue:65,69, handlers ≈ :265-278
15	Report infinite-scroll condition reads tableData.value.count, never assigned	report/index.vue:234
16	Routes 5/21/22 lack meta.title → analytics posts /log/create/undefined	router/index.ts:64-71,200-215; customAnalytics.ts:19
17	vite-plugin-pwa mode: "development" in the committed config	vite.config.ts:19
18	Global mobile/phone regexes use the g flag (stateful lastIndex)	src/Mixins/validator/index.ts:6,12
19	priceUnit appends تومان to a field named rial_remain	filters/index.ts:13 vs Dashboard.vue:78
20	singleProduct fetches the product twice when both id and props.id are set	singleProduct.vue:283, 304