You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
63e377d649
Mount the one unauthenticated read route OUTSIDE the /api auth router. A live token resolves via validateShare to exactly one document, rendered inline (application/pdf) through the existing documentHtml -> renderPdf path; unknown/expired/revoked tokens return a plain 404 "link expired or invalid" HTML page carrying no document data. Adds a dependency-free per-IP fixed-window rate limiter to blunt token brute-forcing. renderPdf is injected so the route is TDD-tested without launching Chrome. Public reads write no audit; the token is never logged. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> |
1 week ago | |
|---|---|---|
| apps | 1 week ago | |
| docs | 1 week ago | |
| packages | 2 weeks ago | |
| .gitignore | 2 weeks ago | |
| BUILDING.md | 2 weeks ago | |
| README.md | 2 weeks ago | |
| STATUS.md | 2 weeks ago | |
| package-lock.json | 2 weeks ago | |
| package.json | 2 weeks ago | |
| tsconfig.base.json | 2 weeks ago | |
| tsconfig.json | 2 weeks ago | |
| vitest.config.ts | 2 weeks ago | |
README.md
SiMS Next — Store Management Suite (Rebuild)
A ground-up rebuild of SiMS Store Software: GST-compliant retail management for India — inventory, POS billing, purchases, and accounting — for everything from a single-counter kirana shop to multi-outlet supermarket chains.
Why the rebuild: the current product runs on Oracle Forms & Reports (hard to maintain, buggy, no path to cloud/multi-store), and the market is moving. Same customers, much better product.
North star: the fastest, easiest counter workflow in the market. The customer in line never waits because of the software, and purchase entry is never a burden.
Planning documents
| Doc | What it covers |
|---|---|
| docs/00-VISION.md | Product vision, segments/editions, business model, success metrics |
| docs/01-SCOPE.md | Full module & feature catalog with priorities and edition mapping |
| docs/02-ARCHITECTURE.md | Offline vs online vs hybrid analysis, sync design, tech stack, multi-tenancy |
| docs/03-FRONTEND.md | App surfaces, counter UX principles, screen inventory, design system |
| docs/04-ROADMAP.md | Phased build plan with exit criteria, pilot & migration strategy |
| docs/05-CHECKLIST.md | Master build checklist, grouped by area |
| docs/06-DECISIONS.md | Open decisions that need a founder call, with recommendations |
| docs/07-DB-AND-CONFIG.md | Everything-in-DB design (messages, plans, settings), local DB engine analysis (D12) |
| docs/08-MARKET-ARCHITECTURES.md | How Tally/Marg/GoFrugal/Vyapar & global players architect; Android POS conclusion |
| docs/09-UX-FLOWS-AND-MENUS.md | Screen-level UX blueprint: POS flows, back-office menu tree, Purchase Inbox, owner app |
| docs/10-ISSUES-REGISTER.md | Consolidated failure-mode register across 6 lenses, with Top-10 risk ranking |
| docs/11-ADMIN-SUPPORT-CONSOLE.md | Settings hierarchy, tenant Admin review, and the vendor-side HQ/support console |
| docs/13-SPEC-*.md | Keystroke-level specs: billing polish + purchase entry (P1/P2 backlog) |
| docs/14-SPEC-HQ-CONSOLE.md | HQ ops console for the Classic client base (D15, apps/hq) |
| docs/15-EDITIONS.md | Lite/Standard/Pro/Enterprise: privileges, limits, costs — all configurable DB rows |
| docs/16-PROJECT-RULES.md | The 26 hard rules (Tables Rule, money rules, config-over-code, counter rules) |
| docs/17-SCALE-AND-INTEGRATIONS.md | The 7 committed scale gaps + full integrations catalog with status |
Start with 00-VISION, then 02-ARCHITECTURE, then 04-ROADMAP.