canina/docs/audit/04-open-questions.md
2026-08-06 20:54:44 +03:30

20 lines
1.7 KiB
Markdown

# Open Questions
The following open questions represent unverified business or deployment requirements that cannot be answered strictly from repository static code analysis.
## 1. Storefront Migration Roadmap (`frontend/application`)
- **Context**: The repository contains an active React 19 + Vite app in `src/`, while `frontend/application` contains Next.js placeholder build artifacts without source code or an application `package.json`.
- **Question**: Is `frontend/application` intended for a future Next.js storefront migration, or should it be removed from the repository structure?
## 2. Payment Gateway Integration Provider
- **Context**: `schema.prisma` models `WalletTransaction` with deposit and withdrawal statuses, but live payment provider client bindings (e.g., Zarinpal, IDPay, Stripe) are mocked in frontend stores and absent in backend services.
- **Question**: Which production payment gateway provider is designated for wallet deposits and direct order payments?
## 3. Deployment & CI/CD Pipeline Specifications
- **Context**: Local containerization (`Dockerfile`, `docker-compose.yml`, `nginx.conf`, `prometheus.yml`) is present, but automated CI/CD pipeline definitions (e.g. GitHub Actions, GitLab CI) are absent.
- **Question**: What is the target production hosting environment (Kubernetes, AWS ECS, GCP Cloud Run, VPS), and how are deployment pipelines managed?
## 4. SMS / OTP Service Provider
- **Context**: The `User` model defines a `mobile` phone field, but current authentication routes utilize email and password with JWT.
- **Question**: Is Iranian mobile OTP verification (e.g., Kavenegar, Ghasedak) required for customer sign-up or order updates?