canina/docs/audit/04-open-questions.md

Open Questions

The following open questions represent unverified business or deployment requirements that cannot be answered strictly from repository static code analysis.

1. Storefront Migration Roadmap (frontend/application)

• Context: The repository contains an active React 19 + Vite app in src/, while frontend/application contains Next.js placeholder build artifacts without source code or an application package.json.
• Question: Is frontend/application intended for a future Next.js storefront migration, or should it be removed from the repository structure?

2. Payment Gateway Integration Provider

• Context: schema.prisma models WalletTransaction with deposit and withdrawal statuses, but live payment provider client bindings (e.g., Zarinpal, IDPay, Stripe) are mocked in frontend stores and absent in backend services.
• Question: Which production payment gateway provider is designated for wallet deposits and direct order payments?

3. Deployment & CI/CD Pipeline Specifications

• Context: Local containerization (Dockerfile, docker-compose.yml, nginx.conf, prometheus.yml) is present, but automated CI/CD pipeline definitions (e.g. GitHub Actions, GitLab CI) are absent.
• Question: What is the target production hosting environment (Kubernetes, AWS ECS, GCP Cloud Run, VPS), and how are deployment pipelines managed?

4. SMS / OTP Service Provider

• Context: The User model defines a mobile phone field, but current authentication routes utilize email and password with JWT.
• Question: Is Iranian mobile OTP verification (e.g., Kavenegar, Ghasedak) required for customer sign-up or order updates?