sdarbinyan 593870c36e docs(backend): enrich CORS incident with root-cause detail from vitanovaPackages ...

Pulled the fuller detail from vitanovaPackages/BACKEND-TODO.md (root-caused
2026-08-24, more precise than this file's original note): it's an origin
allowlist gap specifically (novo.market works, gorbushka doesn't), plus
the X-Marketplace-Domain header requirement, the qr.vitanova.network
allowlist question, the Retry-After rate-limit contract, and ed25519's
dead-export status. None of that was here before.

Also documents that backend TODOs are NOT fully consolidated: this file
is canonical for marketplaces, but vitanovaPackages/BACKEND-TODO.md is a
separate file in a separate repo and stays the source of truth for
package-level backend asks - mirrored here, not merged away.

2026-08-27 09:35:12 +04:00

.github/workflows

ci(deploy): make API-domain reconciliation opt-in, document the real host layout

2026-08-22 16:08:13 +04:00

.impeccable

changes

2026-07-19 15:28:35 +04:00

.vscode

very first commit

2026-01-18 18:57:06 +04:00

docs

docs(backend): enrich CORS incident with root-cause detail from vitanovaPackages

2026-08-27 09:35:12 +04:00

e2e

feat(bootstrap): fall back to built-in placeholder when marketplace unpublished

2026-08-22 22:02:42 +04:00

files

api auth

2026-06-01 00:47:26 +04:00

public

feat(auth): add admin login/password form with generic-error fallback

2026-08-27 04:03:24 +04:00

scripts

Merge improvements/fork-harvest into main

2026-08-22 16:19:55 +04:00

src

fix(cart): validate bank redirect URL, add checkout idempotency key

2026-08-27 04:23:56 +04:00

tools/architecture

arch(sprint1): enforce boundaries and cycle checks in ci

2026-07-03 02:16:03 +04:00

.editorconfig

very first commit

2026-01-18 18:57:06 +04:00

.gitattributes

fix: force LF on systemd unit files

2026-08-18 12:21:50 +04:00

.gitignore

feat: stand up E2E harness, fix a real bootstrap bug it found

2026-08-18 13:46:43 +04:00

angular.json

perf(build): drop the JIT compiler from production, 1.55 MB -> 1.04 MB (FH-3.4)

2026-08-21 16:10:34 +04:00

BACKEND-API-REFERENCE.md

docs(backend): consolidate all backend contracts into one file

2026-08-22 16:15:58 +04:00

CHANGELOG.md

docs: backend FX/notifications gaps, add CHANGELOG for recent work

2026-08-15 04:37:42 +04:00

GAPS-AND-IMPROVEMENTS.md

fix: WCAG AA contrast remediation on border/status colors (Z8, user-authorized)

2026-08-17 22:04:14 +04:00

karma.conf.js

ci: coverage floor + gate; CI never ran a single test before this (F64)

2026-08-18 22:03:29 +04:00

nginx.conf

fix: add CSP/Permissions-Policy to lovero.store and tenant template

2026-08-13 07:28:10 +04:00

ngsw-config.json

fix(api): route tenants through origin gateway

2026-08-20 14:23:12 +04:00

package-lock.json

feat: start @marketplaces/payment implementation

2026-08-21 09:37:16 +04:00

package.json

ci: ratchet the bundle budget and scan builds for credentials (FH-3.3, FH-3.5)

2026-08-21 10:36:37 +04:00

playwright.config.ts

feat: stand up E2E harness, fix a real bootstrap bug it found

2026-08-18 13:46:43 +04:00

proxy.conf.json

bug-fixes

2026-07-09 01:40:22 +04:00

renovate.json

feat: extract auth into @marketplaces/auth package, add backoffice admin provisioning spec

2026-08-18 01:05:16 +04:00

skills-lock.json

feat(product): add reusable Product Experience 2.0

2026-07-10 13:10:35 +04:00

start

phone number and address

2026-05-28 12:56:41 +00:00

tsconfig.app.json

chore(deps): update Angular core/cli/animations/common/compiler/forms/platform-browser/router/service-worker 21.1.5 -> 22.0.8

2026-07-26 19:06:43 +04:00

tsconfig.json

cleaned up

2026-06-21 23:42:39 +04:00

tsconfig.spec.json

chore(deps): update Angular core/cli/animations/common/compiler/forms/platform-browser/router/service-worker 21.1.5 -> 22.0.8

2026-07-26 19:06:43 +04:00

Description

No description provided

16 MiB

Languages

TypeScript 71.3%

HTML 15.3%

SCSS 11.9%

Shell 1.3%

JavaScript 0.2%