s.esmaeiliandClaude Opus 5 8b7da90f51 test(apps): customer-flow smoke test for both apps + 4-digit master-code guard ...

smoke-apps.cjs walks login (master OTP), catalogue, cart cap, order placement
and order history, with the empty-order and unauthenticated negatives: 43/43.
The cart rules are executed from BOTH apps' own source so the result cannot be
carried by v1 alone.

No behavioural divergence found: all 9 stores are byte-identical, and the router,
API client and composables match except v1's protected variant-image picker.

APP-01: both apps' OTP box is exactly 4 inputs and only submits at 4, so a longer
OTP_MASTER_CODE cannot be typed into them. The login UI was left alone; main.ts
now warns at boot when the code is not 4 digits and .env.example states the rule.

APP-02 logged, not fixed: user-app-v2 has no getHomeSlider, so admin-configured
home slides show in v1 only. Changing v2's hero during a delivery is not worth
the risk.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

2026-09-23 00:22:50 +03:30

.idea

fix add new version of user in app

2026-09-18 17:16:36 +03:30

apps

test(apps): customer-flow smoke test for both apps + 4-digit master-code guard

2026-09-23 00:22:50 +03:30

docs

test(apps): customer-flow smoke test for both apps + 4-digit master-code guard

2026-09-23 00:22:50 +03:30

iranSans

SearchView: Removed the dynamic collection-tile grid (e.g. "پرفروش‌های این هفته") and the "نتایج / N محصول" section header from the UI. Underlying data/filtering logic untouched.

2026-09-18 12:54:45 +03:30

packages/shared-types

parity(api,apps): close SEC-02 - orders take the customer from the token

2026-09-22 07:09:33 +03:30

scripts

fix admin and montzar

2026-09-16 11:59:35 +03:30

user-app-v2

SearchView: Removed the dynamic collection-tile grid (e.g. "پرفروش‌های این هفته") and the "نتایج / N محصول" section header from the UI. Underlying data/filtering logic untouched.

2026-09-18 12:54:45 +03:30

.dockerignore

Fix some for production

2026-09-10 12:17:47 +03:30

.env.example

test(apps): customer-flow smoke test for both apps + 4-digit master-code guard

2026-09-23 00:22:50 +03:30

.gitignore

merge: integrate origin/main with admin panel and api migrations

2026-09-13 21:05:20 +03:30

docker-compose.yml

fix add new version of user in app

2026-09-18 17:16:36 +03:30

DOCKER.md

fix add new version of user in app

2026-09-18 17:16:36 +03:30

nginx-spa.conf

Fix db external port

2026-09-09 23:31:31 +03:30

package.json

fix add new version of user in app

2026-09-18 17:16:36 +03:30

pnpm-lock.yaml

parity(api,apps): security hotfix stage 2 - real customer sessions, close IDOR

2026-09-22 01:20:00 +03:30

pnpm-workspace.yaml

feat: initial commit

2026-09-09 06:46:27 +03:30

tsconfig.base.json

feat: initial commit

2026-09-09 06:46:27 +03:30

turbo.json

feat: initial commit

2026-09-09 06:46:27 +03:30

S

Description

No description provided

113 MiB

Languages

JavaScript 69.8%

TypeScript 15.2%

Vue 13.9%

Less 0.6%

PLpgSQL 0.3%

Other 0.1%