s.esmaeiliandClaude Opus 5.5 d91dcf197b feat(admin): birth date on the customer forms; permission saves limited to known rids (PERS-03, SEC-07) ...

- PERS-03: «تاریخ تولد» (Jalali DateInput) on the wholesale and retail
  forms, as legacy. The server accepts birth_date or birth_day, refuses
  impossible or future dates, clears on '', and returns both names.
- SEC-07: setRoles stores only rids in ALL_RIDS or their tree parents.
  Anything else is dropped with a warning log, so a tick on a legacy-only
  tree leaf never fails the save.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-08 16:45:41 +03:30

..

prisma

feat(cities): cities are a tree again, as legacy's; old dashboard permissions merged (PERS-02, PERM-01)

2026-10-08 16:31:12 +03:30

release

feat build

2026-09-25 19:12:39 +03:30

scripts

feat(cities): cities are a tree again, as legacy's; old dashboard permissions merged (PERS-02, PERM-01)

2026-10-08 16:31:12 +03:30

src

feat(admin): birth date on the customer forms; permission saves limited to known rids (PERS-03, SEC-07)

2026-10-08 16:45:41 +03:30

storage

admin panel beter ui

2026-09-19 12:05:59 +03:30

.dockerignore

Fix some for production

2026-09-10 12:17:47 +03:30

.env.example

fix(security): no dev key, demo seed or open CORS in production (SEC-04, SEC-05)

2026-10-08 11:00:45 +03:30

Dockerfile

fix docker

2026-10-04 17:20:04 +03:30

esbuild.release.config.cjs

Fix some for production

2026-09-10 12:17:47 +03:30

jest.config.cjs

parity(api,apps): security hotfix stage 2 - real customer sessions, close IDOR

2026-09-22 01:20:00 +03:30

nest-cli.json

Fix some for production

2026-09-10 12:17:47 +03:30

package.json

feat(admin): D16 (b)(c) — Excel order-item report, document-confirm SMS, %name in bulk SMS

2026-10-08 16:34:45 +03:30

tsconfig.build.json

Fix some for production

2026-09-10 12:17:47 +03:30

tsconfig.json

Fix some for production

2026-09-10 12:17:47 +03:30