- Node/Express/TypeScript API under /api/v1 with JWT auth (login, refresh, logout, /me) - Prisma schema: vendors, users, roles, products, categories, taxes, transactions - SQLite for local dev; Postgres via docker-compose for production - Full CRUD routes for vendors, users, categories, taxes, products with Zod validation and RBAC - Paginated list endpoints scoped per vendor; refresh token rotation - React/TypeScript admin SPA (Vite): login, protected routing, sidebar layout - Pages: Dashboard, Catalog (tabbed Products/Categories/Taxes), Users, Vendor Settings - Shared UI: Table, Modal, FormField, Btn, PageHeader components - Multi-stage Dockerfile; docker-compose with Postgres healthcheck - Seed script with demo vendor and owner account - INSTRUCTIONS.md, ROADMAP.md, .claude/launch.json for dev server config Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
1.7 KiB
1.7 KiB
ROADMAP.md
Milestone 1 — Foundation ✅
- Node/TypeScript API skeleton with Express
- Health check endpoint (
GET /api/v1/health) - JWT auth: login, refresh, logout, /me
- Prisma schema: vendors, users, roles, products, categories, taxes, transactions
- SQLite for local dev; Postgres for production
- React admin SPA (Vite + TypeScript)
- Login page + protected routing
- Dashboard shell with auth context
- Multi-stage Dockerfile; docker-compose with Postgres
- Seed script with demo data
Milestone 2 — Core Data & Admin ✅
- Full CRUD: vendors, users, categories, products, taxes
- RBAC enforcement on all routes (owner / manager / cashier)
- Vendor settings page in admin UI
- User management UI (add, edit, delete, assign role)
- Catalog management UI (products, categories, taxes — tabbed)
- Input validation with Zod on all endpoints
- Pagination on list endpoints
Milestone 3 — Android & Offline Sync
GET /api/v1/catalog/sync?since=for delta syncsPOST /api/v1/transactions/batchwith idempotency keys- Android Kotlin app: MVVM, Room, offline-first flows
- Background sync worker (Android)
- Conflict resolution strategy: server-authoritative for payments
- Admin reporting: Android-originated transactions appear in reports
Milestone 4 — Payments & Hardening
- Payment abstraction layer (cash + card stub; provider-agnostic)
- Shift/daily summary endpoint and UI
- Receipt generation (print / email hooks)
- Advanced reporting: sales by product, tax summaries
- Telemetry and structured logging
- Production Docker hardening (non-root user, health checks, secrets)
- CI/CD pipeline skeleton