Zareian
42783f9ba4
Tutor (prompt tutor-v3-stepwise-plain): plain text instead of LaTeX/markdown, with rag/services/mathtext.py converting whatever still slips through; full step-by-step solutions with a check before the final answer; three tones by grade; the last 6 messages of the conversation go to the model and follow-ups are no longer served from another user's cache; book solutions the checker disputes are kept out of the context; a questionId gives the tutor the practice question and the student's wrong answer. /api/health reports when the AI credit runs out. rag_model_benchmark compares chat models on verified book problems (run on the server; credit ran out mid-run). Map: only lessons that have questions count toward finishing an island, lessonIds[0] / nextLessonId is always the next lesson to play, and a finished island stays finished. The Seyar characters (sigma/delta/pi) are seeded. Audit fixes, each reproduced before fixing: - the plan is stored on the order, so paying a monthly order after starting a yearly checkout no longer grants a year - opening checkout no longer demotes an active subscription; renewals extend from the current expiry; expired subscriptions are not reported active - one discount code per order and only before the gateway; a 100% code completes the purchase; lost Zarinpal confirmations are re-verified - the unused /api/payment/webhook "mark paid" endpoint is removed - XP counts only answers recorded on the server - 6-digit OTP, each code dies after 5 wrong guesses; POST /api/auth/logout - a guest who signs up keeps their account and progress (test phones excluded) - affiliate commission on the first real payment; guests excluded - parents with several children no longer get a 500 - SQLite runs transactions IMMEDIATE, since it ignores select_for_update - admin login is rate-limited; display names drop phone numbers and links; userQuestion is capped at 2000 characters - server-side heart enforcement exists behind HEARTS_ENFORCED (off until the frontend handles 403 no_hearts) Not done on purpose: rotating the server's secret key and moving to Postgres. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
72 lines
4.4 KiB
Python
72 lines
4.4 KiB
Python
from django.db import models
|
||
|
||
|
||
class Order(models.Model):
|
||
"""
|
||
تنها اپی که واقعاً پول جابه‌جا می‌کنه. عمداً از Subscription جدا شده
|
||
چون منطق و ریسکش فرق داره (درگاه، retry، idempotency).
|
||
"""
|
||
STATUS_CHOICES = [('pending', 'در انتظار'), ('paid', 'پرداخت‌شده'), ('failed', 'ناموفق')]
|
||
|
||
# 'gateway' و 'bazaar' منطق و صحت‌سنجیِ کاملاً متفاوتی دارن (webhook در
|
||
# برابرِ verifyِ سرور-به-سرور با access_token)؛ برای همین provider جداست
|
||
# از Transaction.gateway (که فقط برای گزارش‌گیریِ درگاهِ واقعیه).
|
||
PROVIDER_CHOICES = [('gateway', 'درگاه پرداخت'), ('bazaar', 'پرداخت درون‌برنامه‌ای بازار')]
|
||
|
||
user_id = models.IntegerField(db_index=True) # ارجاع سبک به accounts.User
|
||
subscription_id = models.IntegerField(null=True, blank=True) # ارجاع سبک به subscription.Subscription
|
||
# پلنی که *این* سفارش برایش پرداخت می‌شود. پیش‌تر پلن فقط روی Subscription
|
||
# بود و با شروعِ یک خریدِ دیگر عوض می‌شد: پرداختِ سفارشِ ماهانه بعد از
|
||
# شروعِ خریدِ سالانه، اشتراکِ سالانه می‌داد (بازتولید شد، ۲۰۲۶-۰۹-۲۵).
|
||
plan_id = models.IntegerField(null=True, blank=True) # ارجاع سبک به subscription.Plan
|
||
amount = models.PositiveIntegerField()
|
||
currency = models.CharField(max_length=10, default='IRT')
|
||
status = models.CharField(max_length=10, choices=STATUS_CHOICES, default='pending')
|
||
provider = models.CharField(max_length=10, choices=PROVIDER_CHOICES, default='gateway')
|
||
# فقط وقتی provider == 'bazaar' پر می‌شن: SKU محصول درون‌برنامه‌ای تعریف‌شده
|
||
# در پنل بازار، و purchase tokenای که کلاینت اندروید بعد از خرید از SDK
|
||
# بازار می‌گیره و برای verify به بک‌اند می‌فرسته.
|
||
bazaar_product_sku = models.CharField(max_length=100, blank=True)
|
||
bazaar_purchase_token = models.CharField(max_length=300, blank=True)
|
||
# فقط وقتی provider == 'gateway' (زرین‌پال) پر می‌شه: Authorityِ برگشتی از
|
||
# PaymentRequest، وقتی کاربر واقعاً لینکِ پرداخت رو باز کنه (نه موقعِ
|
||
# ساختِ سفارش؛ نگاه کنید به PaymentRedirectView). همون چیزیه که زرین‌پال
|
||
# موقعِ callback در query string (Authority=...) برمی‌گردونه، پس برای
|
||
# پیداکردنِ Order از روی callback لازمه.
|
||
gateway_authority = models.CharField(max_length=64, blank=True, db_index=True)
|
||
idempotency_key = models.CharField(max_length=100, unique=True)
|
||
created_at = models.DateTimeField(auto_now_add=True)
|
||
|
||
class Meta:
|
||
ordering = ['-created_at']
|
||
|
||
def __str__(self):
|
||
return f"order-{self.pk}-user{self.user_id}"
|
||
|
||
|
||
class Transaction(models.Model):
|
||
order = models.ForeignKey(Order, on_delete=models.CASCADE, related_name='transactions')
|
||
gateway = models.CharField(max_length=30, default='zarinpal')
|
||
gateway_ref_id = models.CharField(max_length=100, blank=True)
|
||
status = models.CharField(max_length=30)
|
||
paid_at = models.DateTimeField(null=True, blank=True)
|
||
created_at = models.DateTimeField(auto_now_add=True)
|
||
|
||
class Meta:
|
||
ordering = ['created_at']
|
||
constraints = [
|
||
# یکتاییِ سراسریِ (gateway, gateway_ref_id) برای refهای غیرخالی:
|
||
# یک ref مشخص (مثلاً Authorityِ زرین‌پال) فقط می‌تونه متعلقِ یک
|
||
# Order باشه — هم جلوی duplicate رو می‌گیره هم جلوی reuse/replay
|
||
# برای Orderِ دیگه (نگاه کنید به apply_order_payment_result).
|
||
# gateway_ref_id__gt='' یعنی refِ خالی مشمول نیست.
|
||
models.UniqueConstraint(
|
||
fields=['gateway', 'gateway_ref_id'],
|
||
condition=models.Q(gateway_ref_id__gt=''),
|
||
name='uniq_transaction_gateway_ref_global',
|
||
),
|
||
]
|
||
|
||
def __str__(self):
|
||
return f"txn-{self.pk}-order{self.order_id}"
|