Conversation
…rement - Move order creation server-side (create-order edge function): re-prices every line item from products, validates stock, decrements it atomically via the new create_order() RPC, and auto-restocks on cancellation via a DB trigger — closes the client-trusted-total hole (FIXES.md #1). - Replace the Ukraine city/branch text inputs with a searchable combobox (AsyncCombobox) backed by a new nova-poshta-search edge function, using Nova Poshta's classic API (api.novaposhta.ua) for city/warehouse lookup and live delivery-cost calculation. - Rename the Switzerland zone to International with free-text country/city fields; automatic delivery cost stays Ukraine-only for now. - Vendor track-order and nova-poshta-track into the repo (previously only in the Supabase dashboard) and fix nova-poshta-track's hardcoded empty apiKey, which had silently broken tracking in production. - Fix a regression in the post-checkout Telegram notification call that dropped its required auth headers, causing it to fail silently.
Brings notify-telegram into version control (previously only in the Supabase dashboard) and strips the bot_users/generate-acquisition-record lookup — that customer-DM flow was never fully built (no registration path ever wrote to bot_users, and generate-acquisition-record was never deployed), so every order silently 404'd on that call. The admin Telegram alert itself is unchanged.
Fix/eslint and docs updates
Feat/nova poshta checkout stock
…tional Documents the live RLS state for products/orders/reviews as a reviewable migration (backlog #4). Drops a stray public INSERT policy on orders that let the anon key bypass create-order's server-side pricing. Also pins the missing search_path on set_is_international, closing a Supabase advisor warning, and logs its pre-existing inverted-logic bug as a follow-up item.
Fix/backlog hardening
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
No description provided.