Light up the two faces of the configurable service catalog over a new cached
services/catalog domain (consumes the b5 contract; unlocks f6 search).
- services/catalog: types/keys/constants/apis(client+mock+seam)/hooks/index +
names.ts. Categories & option groups are session-cached reference data
(Infinity staleTime, like geography); variant mutations invalidate
myVariantsLists() and setQueryData the edited row. Mock-primary
(USE_CATALOG_MOCK), one-line swap; mock reproduces the 400 missing-required
and (nurse,category,option-set) 409 duplicate rules.
- Customer Home (A5): greeting+avatar, search bar (navigates toward f6),
data-driven category grid (loading/empty/error), patient nudge from the
cached f2 query. Deferred /search placeholder stub.
- Nurse Services & prices (B7) at /nurse/services: offerings list (active vs
deactivated, edit, soft-deactivate w/ confirm, reactivate, no delete) and a
3-step variant builder (category -> required/optional options -> price+unit+
duration). Required-group gate; Toman->IRR digit-string at the field
boundary (no float); live unit-aware estimated total (never from price
alone); editable auto display_name; inline 409 duplicate warning; locked
category edit form.
- Shared, tested components: CategoryTile, PriceDisplay, VariantCard. Money
util: tomanToRial + multiplyIrr (integer-safe) + tests.
- i18n: catalog/services/search namespaces + home additions + nav.services
(both locales, in sync). Icons, routes (SEARCH, NURSE_SERVICES), nurse nav.
Gate: npm run check green; npm run test:ci green (147 tests, +18 across 4
suites); npm run build green with NEXT_PUBLIC_API_URL set.
Docs: client/CLAUDE.md (Project Structure, caching note, namespaces), STATUS,
for-backend REQ-010 (pagination param casing), phase report, mocks registry.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
The trust engine. New `verif` schema (5 tables) + a data-driven verification
pipeline: steps are rows (6 seeded step-types), not a code enum.
- nurse_verifications.status is the single source of verification truth;
nurse_profiles.is_verified is flipped ONLY inside the finalize transaction
(VerificationAggregator: tracked verification + tracked profile -> one commit)
and reversed on suspension/expiry — no in-between state.
- is_automated snapshotted onto each step at submit; steps seeded from active
required step-types; automated runs (identity-KYC, Shahkar, IBAN ownership)
find their step by code.
- users.national_id populated only on identity-KYC pass; Shahkar + IBAN owner
compare against it (money-mule guard); shared-SIM -> shared_sim support alert.
- Documents are metadata-only behind signed URLs; credential_number encrypted
and never serialized; public trust badge exposes credential TYPES, not numbers;
holder-name cross-checked against the verified identity before recording.
- Admin-triggered credential-expiry scan reverts lapsed steps, re-gates
bookability, raises a verification_expired alert + verification_expiry_prompt
notification (scheduled cron deferred; config key
verification_expiry_scan_cadence_hours).
Three new mock vendor seams (IShahkarVerifier / IIdentityKycProvider /
ICredentialVerifier) behind DI; reuses b3 IBankAccountOwnershipVerifier and
b0 IObjectStorage/IFieldEncryptor. 15 endpoints across 4 controllers.
Two migrations (tables + step-type seed). 154 tests pass, zero new warnings.
Contract dev/contracts/domains/verification.md + swagger snapshot refreshed;
handoff/report/mocks-registry updated.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
hamid