Admin

name	type	size	perms	modified	actions
[parent directory]
.git/	dir	-	0775	2026-09-15 04:59:13
.github/	dir	-	0775	2026-08-24 22:00:33
apps/	dir	-	0775	2026-08-24 22:00:33
deploy/	dir	-	0775	2026-08-24 22:00:33
docs/	dir	-	0775	2026-08-24 22:00:33
node_modules/	dir	-	0775	2026-09-02 09:03:35
packages/	dir	-	0775	2026-08-24 22:00:33
.ai-instructions	file	1,890 B	0664	2026-08-20 06:40:58	edit
.aider.instruction.md	file	1,897 B	0664	2026-08-20 06:40:58	edit
.claudeprompt	file	1,783 B	0664	2026-08-20 06:40:58	edit
.cursorrules	file	2,102 B	0664	2026-08-20 06:40:58	edit
.gitignore	file	141 B	0664	2026-08-20 06:40:58	edit
.prettierrc	file	153 B	0664	2026-08-20 06:40:58	edit
API.md	file	14,180 B	0664	2026-09-02 06:26:41	edit
ARCHITECTURE.md	file	33,162 B	0664	2026-09-02 06:26:41	edit
azure-pipelines-deploy-api.yml	file	4,066 B	0664	2026-08-24 10:05:47	edit
azure-pipelines-deploy-service.yml	file	2,010 B	0664	2026-08-24 10:33:11	edit
azure-pipelines-deploy-web.yml	file	3,863 B	0664	2026-08-24 10:17:49	edit
azure-pipelines-node-setup.yml	file	3,629 B	0664	2026-09-02 06:35:21	edit
azure-pipelines-update-env.yml	file	2,505 B	0664	2026-08-20 06:40:59	edit
azure-pipelines.yml	file	6,178 B	0664	2026-09-02 06:35:21	edit
DATABASE.md	file	16,954 B	0664	2026-08-20 06:40:58	edit
GEMINI.md	file	4,558 B	0664	2026-09-02 06:26:41	edit
package-lock.json	file	508,549 B	0664	2026-09-02 09:03:36	edit
package.json	file	522 B	0664	2026-09-02 06:26:41	edit
README.md	file	7,231 B	0664	2026-09-02 06:26:41	edit
ROLE-MATRIX.md	file	10,502 B	0664	2026-08-23 08:21:17	edit
SETUP.md	file	9,187 B	0664	2026-08-24 09:10:15	edit
tsconfig.json	file	577 B	0664	2026-08-20 06:40:59	edit
turbo.json	file	551 B	0664	2026-09-02 06:26:41	edit

editing: README.md

# 🌸 Sisterspace - Premium Preloved Ecommerce Platform

[![CI Build](https://github.com/ldzulfikar/sisterspace-ecommerce/actions/workflows/ci.yml/badge.svg)](https://github.com/ldzulfikar/sisterspace-ecommerce/actions)
[![Node Version](https://img.shields.io/badge/node-%3E%3D18.0.0-blue.svg)](https://nodejs.org)
[![Licence](https://img.shields.io/badge/license-MIT-green.svg)](LICENSE)
[![Platform](https://img.shields.io/badge/platform-Monorepo-orange.svg)](#)

Sisterspace is a highly scalable, secure, and modern monorepo-based e-commerce platform designed specifically for the trusted buy-and-sell transaction of premium preloved goods.

Built with enterprise-grade modularity, it streamlines local development while providing robust structures for secure high-traffic production deployments.

---

## 🚀 Key Innovation: Out-of-the-Box "DEV_MODE"

Setting up local dependencies like PostgreSQL, Keycloak, or AWS S3 can be an onboarding bottleneck. Sisterspace addresses this by providing a smart, fully integrated **`DEV_MODE`**.

You can run and test the complete application stack (both Frontend and Backend) in **under 1 minute** without installing any local databases, cloud infrastructure, or external identity providers!

### How DEV_MODE Works:
- **In-Memory Mock Store**: The backend automatically falls back to an in-memory data store with pre-populated mock data (7 user accounts across buyer/seller/admin, 18 products covering every approval status — published, pending_approval, rejected, hidden, sold — plus carts, categories, profiles) if a PostgreSQL connection is unavailable.
- **Mock Authentication**: NextAuth credentials provider enables instant multi-role login (Buyer, Seller, Admin) based on simple email matching. Backend supports `GET /api/auth/me` and a `x-dev-role` header to simulate roles.
- **Graceful Infrastructure Fallbacks**: The S3 upload service and manual payment gateways fallback gracefully to simulated mocks during development (including `POST /api/admin/payments/:id/simulate-success`).

---

## 🛒 Marketplace Domain Overview

Sisterspace is a trust-first preloved marketplace. Core flows:

- **Seller onboarding**: Users self-register, then an admin promotes an existing user to seller (role assignment, not account creation); each seller has a store profile (`storeName`, bio).
- **Product approval**: Sellers upload products as `draft`, submit for approval (`pending_approval`), and admins `approve` (→ `published`), `reject` (with reason), or `hide`. Every decision is recorded in `ProductApproval`.
- **Browse & cart**: Buyers browse published products, add to cart with price snapshots.
- **Checkout**: A cart spanning multiple sellers is split into one order per seller (each with its own payment and shipment). All totals (subtotal, platform fee, shipping, discount, seller payout) are computed backend-side. Voucher codes are validated and their discount distributed proportionally across seller orders.
- **Payments**: Manual transfer with buyer-uploaded proof; admin confirms (→ order `paid`, products `sold`, settlement created). All payment actions are written to the audit log.
- **Order lifecycle**: `pending_payment → paid → waiting_shipment → shipped → delivered → completed`, plus cancel/return/refund flows.
- **Reviews**: Buyers review a `completed` order (or a specific order item), rating 1–5, with duplicate prevention; admins can hide inappropriate reviews.
- **Settlement & wallet**: Eligible settlements credit seller wallets (ledger-tracked) with configurable payout flow.

See [API.md](./API.md) for endpoints, [DATABASE.md](./DATABASE.md) for the schema, and [`docs/plans/marketplace-implementation-plan.md`](./docs/plans/marketplace-implementation-plan.md) for the full roadmap.

---

## 🛠️ Tech Stack & Monorepo Architecture

Sisterspace is engineered as a monorepo managed with **Turborepo** and **NPM Workspaces** for lightning-fast build caching and clean package separation:

```
sisterspace-ecommerce (Root Workspace)
├── apps/
│   ├── web/ (Next.js 14 App Router + Tailwind CSS + NextAuth) [Runs on Port 5001]
│   └── api/ (Express.js + TypeScript + Prisma ORM)            [Runs on Port 5000]
└── packages/
    ├── types/  (Shared TypeScript Type Definitions & Interfaces)
    ├── ui/     (Shared Design System & Tailwind Component Library)
    ├── config/ (Shared configurations for ESLint & TypeScript)
    └── utils/  (Shared Validators, Formatters, & WhatsApp deep-link helpers)
```

- **Frontend Frame**: Next.js 14 Client & Server components.
- **API Frame**: Express.js with TypeScript and tsx-watch.
- **Production Database**: PostgreSQL (Prisma Client).
- **Identity & Access Management**: Keycloak (OAuth2 / OIDC).
- **Asset Storage**: AWS S3.

---

## ⚡ Quickstart (Local Development)

Getting up and running locally is extremely straightforward:

### 1. Install Dependencies
```bash
npm install
```

### 2. Launch Local Servers (Ports 5000 & 5001)
Run both frontend and backend parallel development servers:
```bash
npm run dev
```
- **Web Frontend**: Access the Client UI directly at **`http://localhost:5001`**
- **Backend API**: Access the REST Endpoints directly at **`http://localhost:5000`**

### 3. Test Multi-Role Simulacra (Dev Mode)
To simulate the different roles in the system, navigate to `http://localhost:5001/auth/login` and input any of the following emails (password is pre-populated as `dev-password`):
- 👤 **Buyer (Regular User)**: `buyer@demo.com`
- 🏪 **Seller (Merchant User)**: `seller@demo.com`
- 🛡️ **Admin (Platform Moderator)**: `admin@demo.com`

*Note: Once logged in as an Admin or Seller, you can easily shift your active UI state to "Pembeli" using the role-switcher dropdown in the header next to the logout button. The frontend and backend instantly synchronize authorization contexts.*

---

## 🧪 Quality Assurance & Verification

The codebase maintains strict quality guidelines, backed by comprehensive unit testing and type safety:

```bash
# Execute Backend API Jest unit tests (271 tests passing across 27 suites)
npm test --prefix apps/api

# Execute Shared Utilities unit tests (45 tests passing)
npm test --prefix packages/utils

# Execute Frontend unit tests (43 tests passing)
npm test --prefix apps/web

# Verify Frontend TypeScript typings and compile integrity
npm run typecheck --prefix apps/web

# Verify Backend TypeScript compilation integrity
npm run typecheck --prefix apps/api
```

---

## 📖 Deep-Dive Documentation Index

To configure full-scale production or staging environments with cloud integrations, refer to our comprehensive documentation guides:

- 📝 **[SETUP.md](./SETUP.md)** - Detailed instructions for PostgreSQL migration, AWS S3 buckets setup, and Realm Keycloak configurations.
- 🔌 **[API.md](./API.md)** - Full-spec REST API documentation, listing all endpoints, headers, and request/response structures.
- 🗄️ **[DATABASE.md](./DATABASE.md)** - Database ERD, schemas, relations, and optimized raw database queries.
- 🤖 **[GEMINI.md](./GEMINI.md)** - System prompts, coding guidelines, and context references optimized for Developer AI Agents.

cancel

Admin

editing: README.md

Deskripsi Program

Informasi Donatur

Infak Pengurusan Jenazah

Terkumpul

Target

Tentukan Nominal Sedekahmu

Infak Pengurusan Jenazah

⁠Masukkan Nominal Sedekah *

Terkumpul

Target