The platform, live on Railway
v0.3.0 · 2026-10-13Added
- Core marketplace services (@nexus/domain): catalog, geography, FX (pegged MKD, live feed with fallbacks, manual rates), search (the deterministic parser for Cyrillic and Latin Macedonian, Albanian and English, dictionaries, facets, geo, sort, saved searches), pricing (comparables, deal ratings, price presets), trust (prohibited terms, scam radar, moderation thresholds), listings (detail visibility, save, report, phone reveal policy, owner actions), selling (drafts, completeness and the next best action, price suggestions in the seller's currency, publishing through the deterministic moderation, the free listing cap per tier, Snap & Sell with a coin hold, promotions paid in coins with regional slot caps, importing an old ad) and media (presigned uploads to the private bucket). Every service is wired; the core integration suite covers the selling path end to end.
- The seed (@nexus/db): 8 regions and 80 municipalities, 65 categories with 17 attribute schemas, 62 makes and 489 models, 395 options, 135 glossary terms, pricing config v1, schedules, funnels, demo users and organisations, 133 listings with 643 photos in mk, sq and en, chats, feedback, signals and a first brief.
- The public web app (web) and the design system (@nexus/ui): the shell (Manrope/Inter/JetBrains Mono via next/font with Cyrillic subsets, light/dark/system theme in a cookie so the server renders it, top bar with the sparkle wordmark and locale/currency/theme controls, phone tab bar with the raised Sell button, footer, feedback door, sign-in sheet with magic link · phone OTP · password, first-party analytics mount with page views, session start, web vitals and friction detectors, client error capture with breadcrumbs, PWA manifest and icons, robots, per-locale sitemaps, hreflang alternates); Home with the omni-search (AI ring, rotating examples, voice via Web Speech, recognised-fact chips for signed-in users), category portals, Latest/For you, best deals, valuation teaser and trust strip; search results /s and localized category landings /c/… with URL-synced state, grid/list/map (MapLibre, municipality pins, search-as-I-move), filter rail and sheet from the category schema, facets, sort, saved-search bell, the AI sheet with follow-ups and the zero-result assistant; listing detail /o/… in the docs/31 phone order with gallery (shared-element cover, pinch-zoom lightbox, see-original), deal gauge, AI summary, inspector checklist, attributes, translation toggle, approximate map, price history, similar listings, sticky contact bar (chat · call · offer), share and report, the owner panel, JSON-LD and a per-locale OG image; Sell with the entry choice, Snap & Sell (capture, direct upload, voice note, scan overlay over an SSE draft stream with polling fallback), the manual wizard with autosave and a local fallback, the Published celebration with the share card and the Promote step; Messages inbox and thread (translation flip, offers, quick replies, safety banner, co-pilot toggle, phone reveal, SSE); the account area (overview, profile, listings with status tabs and owner actions, saved, alerts, wallet and store, plans, the notification matrix of docs/31 §5, privacy centre, security); storefront, What's new from the changelog and the four static pages, all in mk/sq/en. @nexus/ui ships the primitives (Button, inputs, Combobox, chips and badges, segmented control, tabs, stepper, native-dialog Sheet/Dialog, Toast with undo countdown, Tooltip, Gauge, PriceDisplay, Skeleton, empty and error states, Avatar, Marquee), the ListingCard of docs/30 (hover scrub, swipe, blur-hash, spring heart, tilt, keyboard arrows, view transitions), Gallery, SellerCard, ChatBubble, OfferCard, ScanOverlay and the motion primitives Reveal, SplitText, Counter, TiltCard, Magnetic. Route handlers under /api/v1 for search, listings, sell, media (presign, complete, local-disk serving at /api/v1/media/local/[...key], S3 streaming at /m/[...key]), auth, me, coins, payments and webhooks, chat, feedback, errors, events (rate-limited ingest), notifications, saved searches and three SSE streams on Postgres LISTEN. Playwright (desktop, Pixel-7, 320 px) with the overflow sweep, axe and screenshots; Vitest for the card photo math, price lines and search URL state.
- People, money, chat, notifications, the evolution loop, jobs (@nexus/domain): magic-link, phone OTP and password auth with scrypt, TOTP for admins, sessions and onboarding grants; users and the notification-preference matrix; the coins ledger (append-only, idempotent, FIFO over expiring grants, holds and captures); Stripe Checkout and PayPal Orders behind one provider interface with webhook verification, discounts and fulfilment; chat with the translation bridge, offers, scam scoring and the co-pilot; the notifier (matrix routing, quiet hours, e-mail and push, digests, the escalation ladder, unsubscribe tokens); feedback with PII scrubbing, error capture with fingerprints, signals with triage and impact, briefs with inputs, generation, GitHub hand-off and outcomes; the jobs queue with SKIP LOCKED claims, backoff, dead letters and cron; audit, settings (the pricing config with defaults) and flags. 82 unit tests and the people integration suite against a real Postgres.
- Worker (worker) and the analytics server (@nexus/analytics): consumer, lock refresh, stale requeue, scheduler election with 22 default schedules, 31 job kinds (media variants with AVIF, blur-hash and EXIF stripping; Snap & Sell drafts streamed over NOTIFY; enrichment and the projection in both scripts; translation; pricing; moderation; watchdog; freshness; dispatch, digests and escalations; triage; the weekly brief; outcomes; FX refresh; insights; FinOps; rollups; retention; privacy export and delete; ledger; index keeper; SEO pages; social and clips; lexicon; translation QA; the ad importer with an SSRF guard); every agent run recorded with its cost and kill switch; rollups, the seven core funnels, cohorts, vitals and friction detectors; Dockerfile and Dockerfile.worker. 38 unit tests and the worker integration suite.
- Production on Railway: the project pazar with Postgres (PostGIS + pgvector on a volume, Amsterdam), the private media bucket, the web and worker services with health check, replicas, restart policies, variables by reference and a Railway domain; ids in docs/19. Public media is served by the web app from the private bucket (ADR-0011).
- Runbooks (docs/runbooks/, 14) and the CI workflow builds the Postgres image from docker/postgres and seeds a database for e2e.
- Admin console (apps/web/src/app/(admin), apps/web/src/app/api/admin, packages/domain/src/admin): the dark, keyboard-first control room of docs/17 — shell with the 16 sections (collapsible sidebar, phone tab bar with a More sheet, Ctrl/⌘+K command palette searching sections, actions, users, listings, cases and settings, notification badge, per-screen help drawer rendering the matching docs/17 section); login with e-mail, password and TOTP; Dashboard (KPI tiles with sparklines and week-over-week deltas, queues, AI budget bars, alerts, live feed, the municipality heat table that breathes), Moderation (held/reports/flagged/appeals sorted by SLA, keyboard triage a/r/h/e/n, case drawer with the listing, score and rules, seller history, reason templates), Listings (search, inspect drawer with status/price history, pipeline runs and "why is this ranked here?", status change, re-run, free promotion), Users & Orgs (drawer with verification, sessions, wallet adjust, plan set, ban/suspend, role, timeline, view-as-user), Catalog (tree, attribute-schema JSON editor with live preview, options, glossary, makes), Pricing & Coins (versioned config, draft editor with zod validation, diff and activation, finance from the ledgers, promotions), AI (telemetry per feature, budgets with degradation, routes and quotas, evals, lexicon), Agents (registry from agents/README.md merged with schedules and runs, run now, pause, run logs, approvals inbox), Analytics (24h/7d/30d/90d with previous-window deltas, top events, funnels, realtime, per-user timeline), Signals & Briefs (signals with merge, error groups with stacks and breadcrumbs, feedback with reply, briefs with approve/reject/snooze/edit/hand-off and "generate now", experiments and flags), Localization (coverage, overrides, glossary), Notifications (templates, delivery logs, broadcast composer with consent filter), Social, Growth, Settings (countries with the FX card 1 EUR = [ 61.5 ] MKD, integrations with test connection, switches, security, backups, the Setup guide with every docs/19 variable's status) and System (health, jobs with retry/discard, schedules editor, audit log, releases, database). Every table has a sticky header, saved column widths, keyboard rows, pagination and CSV export; every destructive action confirms with a reason and is audited. ADMIN_DEV_BYPASS=1 (never in production) lets the console run before the auth module lands.
- Deployment: the web image migrates and seeds an empty database once at boot (@nexus/db boot, locked against concurrent replicas); build caches carry Railway's service-id prefix; a .dockerignore; production passwords for the owner and demo accounts come from variables.
- Operator Guide (docs/operator-guide/index.html, live at https://claude.ai/artifact/7AVrAuPPkdg6CqQq1RsFTB): a self-contained HTML book and slideshow in the platform's own style (tokens, type, motion, light and dark) with 24 chapters: how to read it, the product in one page, the version board, the feature map with status badges, architecture, local setup, production on Railway, every environment variable with where to get it, the admin console screen by screen, coins and payments, currencies and FX, AI and its costs, languages, trust and safety, messaging and notifications, the self-evolution loop, growth and social, the agent registry, operations and runbooks, quality gates, the roadmap, the changelog and a glossary. Book and Present modes, keyboard navigation, search that dims non-matching cards, copy buttons, reveal animations, counters, 320 px safe, printable. The rule that it ships updated with every slice is in CLAUDE.md and AGENTS.md.
Fixed
- Admin sign-in no longer dead-ends on an authenticator code nobody could enrol: admins sign in with e-mail and password; ADMIN_TOTP=on (off by default and in production) asks for a code only from accounts that enrolled an authenticator.
- One stored pricing_config shape for every reader; coins, payments, selling and the AI gateway now follow what the admin activates (before, they silently used code defaults), and the gateway reloads quotas and budgets every minute.
- One schedule list: no more duplicate runs or schedules pointing at job kinds without a handler (migration 0006).
- The worker starts in production (CommonJS web-push import), writes photo variants where the production media route serves them, and captures the Snap & Sell coin hold when the draft is ready.
- Accessibility: readable badges on photos, a keyboard-focusable photo scroller on phones; the 320 px contact bar fits and clears the raised Sell button.
- Drafts start in an inactive "unsorted" category (migration 0005) because a listing row needs a category before Snap & Sell picks one.