Zareian 82fec6bf75 Admin: PaymentEvent read-only ledger view (was documented but not registered) ...

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

2026-10-16 02:18:07 +03:30

..

management

let the Bazaar verify URL double as the OAuth redirect URI

2026-09-26 21:30:44 +03:30

migrations

Payment event ledger (PaymentEvent) replicated to the backup server, plus CSV export script on 247

2026-10-13 14:18:47 +03:30

__init__.py

Initial commit - clean project structure

2026-08-18 16:48:15 +03:30

admin.py

Admin: PaymentEvent read-only ledger view (was documented but not registered)

2026-10-16 02:18:07 +03:30

apps.py

Initial commit - clean project structure

2026-08-18 16:48:15 +03:30

bazaar.py

Question packs removed at the root; all subscriptions 4 assistant questions a day; Bazaar is subscription-only

2026-10-12 20:33:38 +03:30

events.py

Payment event ledger (PaymentEvent) replicated to the backup server, plus CSV export script on 247

2026-10-13 14:18:47 +03:30

models.py

Payment event ledger (PaymentEvent) replicated to the backup server, plus CSV export script on 247

2026-10-13 14:18:47 +03:30

permissions.py

tutor answers step by step in plain text, islands finish, and the audit's money and login holes are closed

2026-09-25 06:24:13 +03:30

providers.py

Question packs removed at the root; all subscriptions 4 assistant questions a day; Bazaar is subscription-only

2026-10-12 20:33:38 +03:30

serializers.py

Question packs removed at the root; all subscriptions 4 assistant questions a day; Bazaar is subscription-only

2026-10-12 20:33:38 +03:30

services.py

Payment events: one central payment_result row for every path (callback, reconcile, Bazaar, renewal, 100% code), discount_applied, no duplicate order_created; Bazaar token never stored

2026-10-13 14:44:50 +03:30

tests_audit_fixes.py

Remove the guest system entirely: no is_guest/device_id, no guest throttles, phone login is the only way in

2026-10-05 18:20:10 +03:30

tests_audit_log.py

Live off-site Postgres copy on 247 replaces the nightly pg_dump; backup retention in deploy.sh

2026-10-10 16:53:10 +03:30

tests_bazaar_oauth.py

Question packs removed at the root; all subscriptions 4 assistant questions a day; Bazaar is subscription-only

2026-10-12 20:33:38 +03:30

tests_bazaar_subscription.py

Question packs removed at the root; all subscriptions 4 assistant questions a day; Bazaar is subscription-only

2026-10-12 20:33:38 +03:30

tests_events.py

Payment events: one central payment_result row for every path (callback, reconcile, Bazaar, renewal, 100% code), discount_applied, no duplicate order_created; Bazaar token never stored

2026-10-13 14:44:50 +03:30

tests_invoices.py

Remove the guest system entirely: no is_guest/device_id, no guest throttles, phone login is the only way in

2026-10-05 18:20:10 +03:30

tests_refund.py

Question packs removed at the root; all subscriptions 4 assistant questions a day; Bazaar is subscription-only

2026-10-12 20:33:38 +03:30

tests_security_review.py

Question packs removed at the root; all subscriptions 4 assistant questions a day; Bazaar is subscription-only

2026-10-12 20:33:38 +03:30

tests.py

Question packs removed at the root; all subscriptions 4 assistant questions a day; Bazaar is subscription-only

2026-10-12 20:33:38 +03:30

urls.py

Question packs removed at the root; all subscriptions 4 assistant questions a day; Bazaar is subscription-only

2026-10-12 20:33:38 +03:30

views.py

Payment events: one central payment_result row for every path (callback, reconcile, Bazaar, renewal, 100% code), discount_applied, no duplicate order_created; Bazaar token never stored

2026-10-13 14:44:50 +03:30

zarinpal.py

harden OTP for real SMS and close the second audit round

2026-09-25 12:28:06 +03:30