sdarbinyan 916d142877 docs(backend): log dev backend report, request verification (§0b) ...

A backend dev reported a dev-stage Go implementation - atomic reservation,
webhook idempotency, RBAC+audit, Argon2id+TOTP, PKCE, HMAC preview tokens,
ed25519 partner signing - in response to being handed this file. No repo
or host shared, so nothing is verified yet.

Logged six open questions, led by the two most urgent: does it own the
host behind tonight's CORS incident, and is the admin credentials
endpoint the frontend already calls actually built. Updated the file
header - "there is no backend yet" is stale.

2026-08-27 23:27:30 +04:00

.github/workflows

ci(deploy): make API-domain reconciliation opt-in, document the real host layout

2026-08-22 16:08:13 +04:00

.impeccable

changes

2026-07-19 15:28:35 +04:00

.vscode

very first commit

2026-01-18 18:57:06 +04:00

docs

docs(backend): log dev backend report, request verification (§0b)

2026-08-27 23:27:30 +04:00

e2e

feat(bootstrap): fall back to built-in placeholder when marketplace unpublished

2026-08-22 22:02:42 +04:00

files

api auth

2026-06-01 00:47:26 +04:00

public

feat(auth): add admin login/password form with generic-error fallback

2026-08-27 04:03:24 +04:00

scripts

Merge improvements/fork-harvest into main

2026-08-22 16:19:55 +04:00

src

fix(cart): validate bank redirect URL, add checkout idempotency key

2026-08-27 04:23:56 +04:00

tools/architecture

arch(sprint1): enforce boundaries and cycle checks in ci

2026-07-03 02:16:03 +04:00

.editorconfig

very first commit

2026-01-18 18:57:06 +04:00

.gitattributes

fix: force LF on systemd unit files

2026-08-18 12:21:50 +04:00

.gitignore

feat: stand up E2E harness, fix a real bootstrap bug it found

2026-08-18 13:46:43 +04:00

angular.json

perf(build): drop the JIT compiler from production, 1.55 MB -> 1.04 MB (FH-3.4)

2026-08-21 16:10:34 +04:00

BACKEND-API-REFERENCE.md

docs(backend): consolidate all backend contracts into one file

2026-08-22 16:15:58 +04:00

CHANGELOG.md

docs: backend FX/notifications gaps, add CHANGELOG for recent work

2026-08-15 04:37:42 +04:00

GAPS-AND-IMPROVEMENTS.md

fix: WCAG AA contrast remediation on border/status colors (Z8, user-authorized)

2026-08-17 22:04:14 +04:00

karma.conf.js

ci: coverage floor + gate; CI never ran a single test before this (F64)

2026-08-18 22:03:29 +04:00

nginx.conf

fix: add CSP/Permissions-Policy to lovero.store and tenant template

2026-08-13 07:28:10 +04:00

ngsw-config.json

fix(api): route tenants through origin gateway

2026-08-20 14:23:12 +04:00

package-lock.json

feat: start @marketplaces/payment implementation

2026-08-21 09:37:16 +04:00

package.json

ci: ratchet the bundle budget and scan builds for credentials (FH-3.3, FH-3.5)

2026-08-21 10:36:37 +04:00

playwright.config.ts

feat: stand up E2E harness, fix a real bootstrap bug it found

2026-08-18 13:46:43 +04:00

proxy.conf.json

bug-fixes

2026-07-09 01:40:22 +04:00

renovate.json

feat: extract auth into @marketplaces/auth package, add backoffice admin provisioning spec

2026-08-18 01:05:16 +04:00

skills-lock.json

feat(product): add reusable Product Experience 2.0

2026-07-10 13:10:35 +04:00

start

phone number and address

2026-05-28 12:56:41 +00:00

tsconfig.app.json

chore(deps): update Angular core/cli/animations/common/compiler/forms/platform-browser/router/service-worker 21.1.5 -> 22.0.8

2026-07-26 19:06:43 +04:00

tsconfig.json

cleaned up

2026-06-21 23:42:39 +04:00

tsconfig.spec.json

chore(deps): update Angular core/cli/animations/common/compiler/forms/platform-browser/router/service-worker 21.1.5 -> 22.0.8

2026-07-26 19:06:43 +04:00

Description

No description provided

16 MiB

Languages

TypeScript 71.3%

HTML 15.3%

SCSS 11.9%

Shell 1.3%

JavaScript 0.2%