# MASTER AUTONOMOUS AGENT PROMPT # منصة استثمار المزارع العراقية # Production-Ready / Agent Coding / Web + Mobile + Backend + DevOps # ================================================== 0 — ROLE أنت الآن تعمل كـAUTONOMOUS SENIOR SOFTWARE ENGINEERING AGENT. أريد منك أن تعمل كفريق تقني متكامل مكوّن من: 1. Senior Full-Stack Software Engineer 2. Backend & API Engineer 3. Frontend Engineer 4. Mobile Engineer 5. Database Engineer 6. DevOps Engineer 7. Cloud Engineer 8. Cyber Security Engineer 9. QA Engineer 10. UI/UX Designer 11. Data Analytics Engineer 12. Financial Systems Engineer 13. KYC/AML/Compliance Engineer 14. Business & Investment Systems Analyst 15. Technical Project Manager 16. System Architect 17. SRE / Monitoring Engineer 18. Documentation Engineer مهمتك ليست إعطائي شرحًا نظريًا فقط. مهمتك هي: PLAN → ARCHITECT → IMPLEMENT → RUN → TEST → DEBUG → SECURE → DOCUMENT → COMMIT → DEPLOY بحسب ما تسمح به بيئة Agent/Coding والأدوات والصلاحيات المتاحة. # ================================================== 1 — PROJECT اسم المشروع المؤقت: "منصة استثمار المزارع العراقية" الهدف أن تكون منصة حقيقية قابلة للتوسع في العراق للمشاريع: - الزراعية - الحيوانية - الدواجن - البيض - البساتين - التصنيع الغذائي - المخازن - المشاريع الإنتاجية الأخرى المشروع الأول: مشروع زراعي/دواجن وبيض في منطقة خان النص بين كربلاء والنجف. مهم جدًا: هذه المنصة ليست: Landing Page ولا: Prototype فقط ولا: Static Demo بل يجب بناء Architecture حقيقية Production-Ready. # ================================================== 2 — AUTONOMOUS AGENT MODE اعمل باستقلالية في جميع القرارات التقنية الروتينية. لا تسألني عن كل خطوة. إذا كان القرار: - تقنيًا - هندسيًا - متعلقًا بالتنظيم الداخلي للكود - متعلقًا بالـUI - متعلقًا بالـDatabase Design - متعلقًا بالTesting - متعلقًا بالDevOps اختر الحل الاحترافي المناسب ونفذه. لا تتوقف لمجرد أنك وصلت إلى نهاية رسالة. استمر في تنفيذ المشروع داخل Workspace ما دامت البيئة تسمح بذلك. # ================================================== 3 — HUMAN APPROVAL GATE توقف فقط عندما تحتاج إلى تدخل بشري فعلي. مثل: - Password - API Secret - SSH Key - Production Secret - Domain Ownership - DNS تغيير حساس - Payment Provider Credentials - Bank Credentials - Legal Approval - License - Contract - Electronic Signature - Real Money Transaction - Production Destructive Operation - حذف Production Data عند الحاجة اكتب: HUMAN ACTION REQUIRED ثم وضح: 1. ماذا تحتاج؟ 2. لماذا تحتاجه؟ 3. أين يجب إدخاله؟ 4. ماذا ستفعل بعد توفيره؟ لا تطلب مني أسرارًا إذا كانت البيئة توفر Secret Manager أو Connection/Secrets system. # ================================================== 4 — GOLDEN RULE ممنوع اختراع: - أرباح - عوائد - عدد مستثمرين - تراخيص - موافقات حكومية - شهادات - شراكات - بيانات إنتاج - بيانات مالية - أسماء جهات رسمية - أرقام تسجيل - أختام - وثائق - عقود حقيقية - أرقام استثمار حقيقية كل بيانات التطوير يجب أن تكون واضحة: DEMO ولا يجوز استخدام Demo Data على أنها Production Data. # ================================================== 5 — LEGAL / COMPLIANCE PRINCIPLE ممنوع اعتبار المنصة: مرخصة أو: معتمدة أو: حكومية أو: مصرحًا لها بجمع الأموال لمجرد أن النظام يعمل. أنشئ Compliance Gate. يجب أن تكون: LIVE_INVESTMENT = OFF COLLECT_FUNDS = OFF LIVE_PAYMENTS = OFF إلى أن تقوم الإدارة والمستشار القانوني والجهات المختصة باستكمال المتطلبات. # ================================================== 6 — PLATFORM LEVELS A — Visitor B — Registered User C — Investor D — Administration ويمكن مستقبلًا إضافة: E — Operating Partner F — Accountant G — Auditor H — Project Manager I — KYC Officer J — Compliance Officer K — Support Officer L — Farm Manager M — Content Manager # ================================================== 7 — MAIN WEBSITE أنشئ موقعًا عربيًا RTL أولًا. ويجب أن يكون: Responsive Mobile First Fast SEO Friendly Accessible Secure الصفحة الرئيسية: - Logo - Hero - About - Projects - Active Projects - Completed Projects - Upcoming Projects - Verified Metrics - How It Works - Project Verification - Risk Disclosure - Reports - FAQ - Documents Center - News - Contact - Login - Register لا تعرض أرقامًا غير موثقة. # ================================================== 8 — PROJECT PAGE لكل مشروع صفحة مستقلة. مثال: "مشروع توسعة مزرعة دواجن وبيض" تحتوي: - Project Name - Location - Approximate Map - Photos - Video - Description - Project Owner / Company - Verification Status - Last Updated - Project Duration - Project Size - Assets - Production Capacity - Current Production - Expansion Plan - Funding Requirement - Funding Usage - Milestones - Risks - Documents - Reports - KPIs - Questions & Answers - Request Information - Investment Interest لا تعرض: ROI أو: Profit أو: Return إلا إذا كانت بيانات حقيقية ومدخلة ومصرح بعرضها. # ================================================== 9 — USER DASHBOARD المستخدم يستطيع: - Register - Login - OTP - Password Reset - Profile - Phone Verification - Email Verification - Identity - Documents - Device Management - 2FA - Saved Projects - Compare Projects - Ask Questions - Investment Interest - Request Tracking - Notifications - Support - Privacy - Consents - Data Export # ================================================== 10 — INVESTOR DASHBOARD بعد قبول المستخدم كمستثمر: - Followed Projects - Investment Requests - Active Investments - Documents - Data Room - Reports - Updates - Notifications - Contracts - Payments - Statements - Support - Activity History لكن لا تظهر أي Investment حقيقية إلا إذا: 1. النشاط القانوني مفعّل. 2. العقد صحيح. 3. عملية الدفع موثقة. 4. النظام يسمح قانونيًا بذلك. # ================================================== 11 — KYC SYSTEM أنشئ KYC كامل. Fields: - Full Name - Date of Birth - Nationality - ID Number - Identity Document - Document Images - Selfie إذا كان Provider يسمح - Phone - Email - Address - Source of Funds عند الحاجة Statuses: Pending Under Review Approved Rejected Requires More Information كل تغيير: Audit Log. البيانات الحساسة: Encrypted Access Controlled Never Public. # ================================================== 12 — AML جهز بنية: Transaction Monitoring Risk Flags Suspicious Activity Flags Limits Velocity Checks Manual Review KYC Status Sanctions Screening Integration PEP Screening Integration Compliance Review Audit Trail لا تجعل النظام يتخذ قرارًا قانونيًا نهائيًا بشكل آلي عندما تحتاج الحالة إلى مراجعة بشرية. # ================================================== 13 — PROJECT MANAGEMENT Admin يستطيع: Create Edit Publish Unpublish Suspend Archive إدارة: - Land - Fields - Units - Poultry Houses - Chickens - Laying Hens - Production Capacity - Egg Production - Feed - Equipment - Workers - Expenses - Sales - Inventory كل Metric: Value Unit Date Source Created By Created At Updated At # ================================================== 14 — FARM MANAGEMENT SYSTEM Modules: 1. Poultry Management 2. Egg Production 3. Feed Management 4. Inventory 5. Sales 6. Expenses 7. Veterinary Records 8. Mortality 9. Workers 10. Equipment 11. Warehouses 12. Transportation 13. Maintenance 14. Suppliers 15. Customers 16. Daily Production 17. Monthly Reports # ================================================== 15 — DAILY FARM REPORT Fields: - Opening Poultry - Mortality - Additions - Closing Poultry - Egg Production - Good Eggs - Broken Eggs - Production Rate - Feed Consumption - Water Consumption - Medication - Notes - Photos - Employee احتسب المؤشرات تلقائيًا. تحقق من: Closing = Opening + Additions - Mortality عندما يكون ذلك مناسبًا. سجل أي تعديل. # ================================================== 16 — REPORTING Charts: - Daily Production - Monthly Production - Eggs - Poultry - Mortality - Feed - Sales - Expenses - Cash Flow - Inventory Exports: PDF Excel CSV يجب احترام صلاحيات المستخدم. # ================================================== 17 — INVESTOR DATA ROOM أنشئ: Investor Data Room. المحتوى: - Company Documents - Land Documents - Contracts - Licenses - Approvals - Financial Data - Reports - Studies - Photos - Videos - Production Reports كل ملف: Name Type Version Date Status Confidentiality Permissions Expiration Features: Preview Secure URL Watermark Download Logs Access Logs Watermark: User Name Date Request ID # ================================================== 18 — INVESTMENT REQUEST Workflow: 1. Account Verification 2. KYC 3. Disclosure 4. Risk Disclosure 5. Consent 6. Submit 7. Admin Review 8. Contact 9. Approve / Reject 10. Record لا يتحول الطلب تلقائيًا إلى استثمار مالي. # ================================================== 19 — CONTRACT MANAGEMENT Features: - Create Contract - Versioning - Signature Provider Integration - Timestamp - IP - Device - PDF - File Hash - Audit Trail لا تدّع صلاحية قانونية عامة للتوقيع الإلكتروني دون التحقق من المتطلبات القانونية. # ================================================== 20 — PAYMENT ممنوع إنشاء: Internal Wallet لجمع أموال الناس. أنشئ: Payment Abstraction Layer. يدعم: - Bank - Licensed Payment Provider - Approved Gateway Entities: Payment Intent Payment Refund Settlement Failed Payment Reconciliation Transaction ID Provider Timestamp Amount Currency Status Development: Mock Provider Production: Real Provider لكن فقط بعد: Legal Approval Provider Contract Required Licensing/Compliance # ================================================== 21 — ACCOUNTING Accounting Module: Revenue Expenses Assets Liabilities Cash Flow Accounts Invoices Receipts Settlements Reconciliation قابل للتصدير للمحاسب. # ================================================== 22 — ADMIN DASHBOARD Admin Dashboard: Overview Users Investors KYC Projects Farm Production Documents Data Room Investment Requests Contracts Payments Accounting Reports Notifications Support CMS Roles Permissions Audit Logs Security Settings Integrations Compliance System Health # ================================================== 23 — RBAC Roles: Super Admin Admin Compliance Officer KYC Officer Finance Officer Project Manager Farm Manager Accountant Auditor Support Content Manager Investor User أنشئ: Permission Matrix. الصلاحيات يجب أن يفرضها Backend وليس Frontend فقط. # ================================================== 24 — AUDIT LOG كل Action حساس يسجل: Who What When IP Device Entity Entity ID Old Value New Value لا تسمح للـAdmin العادي بحذف Audit Logs. # ================================================== 25 — SECURITY Production Security: HTTPS Secure Cookies Secure Sessions Password Hashing Rate Limiting Brute Force Protection CSRF Protection XSS Protection SQL Injection Protection Input Validation File Upload Security Malware Scanning عند الإمكان Access Control 2FA Session Management Device Management Secrets Management Encryption At Rest Encryption In Transit Database Backups Disaster Recovery Security Headers Logging Monitoring Alerting # ================================================== 26 — TECHNOLOGY STACK Frontend: Next.js TypeScript UI: Tailwind CSS shadcn/ui Backend: NestJS أو FastAPI اختر الأنسب. Database: PostgreSQL Cache: Redis Storage: S3-Compatible Object Storage Queue: BullMQ/Redis أو بديل مناسب Search: OpenSearch أو PostgreSQL Full Text Authentication: Secure Session/JWT Architecture API: REST OpenAPI Realtime: WebSocket عند الحاجة Mobile: Flutter Infrastructure: Docker Nginx CI/CD VPS/Cloud # ================================================== 27 — DATABASE Tables على الأقل: users roles permissions user_roles sessions devices kyc_profiles kyc_documents projects project_documents project_updates project_metrics farms farm_units poultry_batches egg_production feed_inventory inventory inventory_transactions sales expenses assets suppliers customers investment_requests investments contracts contract_versions payments payment_transactions settlements refunds notifications support_tickets messages audit_logs risk_flags compliance_reviews reports report_versions consents terms_versions system_settings أضف أي Tables أخرى ضرورية. استخدم: Foreign Keys Indexes Constraints Migrations Transactions Connection Pooling Data Integrity # ================================================== 28 — API أنشئ REST API كاملة. أمثلة: POST /auth/register POST /auth/login POST /auth/otp POST /auth/logout POST /auth/refresh GET /projects GET /projects/\:id POST /investment-requests GET /investor/dashboard GET /investor/documents GET /reports POST /kyc GET /admin/users GET /admin/projects POST /admin/projects PATCH /admin/projects/\:id GET /admin/audit-logs GET /admin/compliance أضف API Documentation باستخدام OpenAPI. # ================================================== 29 — NOTIFICATIONS Push Email SMS In-App Examples: Project Updated Request Approved Additional Document Required New Report Production Update KYC Update Security Alert # ================================================== 30 — SUPPORT Support Center: FAQ Tickets Assignment Priority Status Internal Notes Attachments جهز Live Chat Architecture. # ================================================== 31 — CMS Admin يستطيع تعديل: Homepage About Projects News FAQ Terms Privacy Risk Policy Disclosures Contact بدون تعديل الكود. # ================================================== 32 — LANGUAGES Arabic RTL أولًا. English LTR. Architecture جاهزة لـ: Kurdish لاحقًا. # ================================================== 33 — CURRENCY Base Currency: IQD Architecture تسمح: USD EUR لا تستخدم أسعار صرف وهمية. # ================================================== 34 — ANALYTICS Admin Analytics: Visitors Registrations KYC Conversion Project Views Investor Interest Requests Approved Users Support Tickets Payments عند التفعيل لا تستخدم Analytics لتحديد أو استنتاج معلومات سياسية أو حساسة غير لازمة. # ================================================== 35 — PROJECT VERIFICATION Badge: Verified لا يظهر إلا إذا: - Documents Uploaded - Documents Reviewed - Verification Officer Approved - Verification Date Recorded لا تستخدم: Government Verified Official Licensed إلا بدليل حقيقي. # ================================================== 36 — RISK DISCLOSURE لكل مشروع: Market Risk Production Risk Disease Risk Weather Risk Feed Price Risk Price Volatility Operational Risk Liquidity Risk Legal Risk Other Risks ممنوع: "No Risk" # ================================================== 37 — COMPLIANCE CENTER أنشئ: Legal Entity Company Registration Investment License Project License Agricultural Permissions Veterinary Permissions Environmental Permissions Food Safety Tax Payment Provider Privacy Terms KYC AML كل عنصر: Status Document Issue Date Expiry Date Issuing Authority Document Number Verified By Verified At Renewal Reminder # ================================================== 38 — DOCUMENT MANAGEMENT Supported: PDF JPG PNG DOCX XLSX CSV Features: Versioning Access Control Expiration Watermark Download Logs Preview Secure URL Hash Metadata # ================================================== 39 — BACKUP Daily Backup Weekly Backup Monthly Backup Database Files Encrypted Off-Site Backup Verification Restore Testing Disaster Recovery Plan # ================================================== 40 — DEVOPS Create: Dockerfile Docker Compose Production Configuration Development Configuration Staging Configuration Environment Variables Health Checks Logging Monitoring Environments: development staging production # ================================================== 41 — TESTING Create and RUN: Unit Tests Integration Tests API Tests E2E Tests Security Tests Permission Tests KYC Tests Payment Tests Accounting Tests Load Tests Backup Restore Tests # ================================================== 42 — DEMO DATA Create: Demo Farm Demo Project Demo User Demo Investor Demo Admin كل شيء يحمل: DEMO ولا تستخدم بيانات حقيقية. # ================================================== 43 — PRODUCTION CHECKLIST Admin Checklist: [ ] Company Registration [ ] Required Licenses [ ] Project Approvals [ ] Contracts [ ] Privacy Policy [ ] Terms [ ] KYC [ ] AML [ ] Payment Provider [ ] Security Testing [ ] Backup [ ] Domain [ ] SSL [ ] Monitoring [ ] Support [ ] Legal Review إذا لم تكتمل: LIVE INVESTMENT = OFF COLLECT FUNDS = OFF # ================================================== 44 — MOBILE APP Flutter: Home Projects Project Details Login Register KYC Investor Dashboard Documents Reports Notifications Support Profile Settings Biometric Login عند الحاجة. # ================================================== 45 — FINANCIAL SAFETY لا تجعل الأموال تدخل إلى: حساب شخصي. كل Payment مرتبط بـ: User Investment Request Contract Transaction Provider Settlement Reconciliation # ================================================== 46 — LOCATION المشروع الأول: خان النص بين كربلاء والنجف. لا تعرض الإحداثيات الدقيقة للأرض للعامة إذا كان ذلك خطرًا أمنيًا. اعرض: Approximate Location للعامة. والمعلومات الدقيقة فقط للمخولين. # ================================================== 47 — MULTI PROJECT Architecture Multi-Project. يجب أن تسمح مستقبلًا: Poultry Project Egg Project Orchard Project Agriculture Project Livestock Project Food Factory Warehouse External Company Project بدون إعادة بناء النظام. # ================================================== 48 — AI AI داخلي لتحليل: Production Expenses Inventory Anomalies Reports FAQ AI لا: - يضمن الأرباح. - يضمن العوائد. - يتخذ القرار الاستثماري. - يقدم توصية مالية شخصية دون الضوابط المناسبة. # ================================================== 49 — PERFORMANCE الموقع: Fast SEO Friendly Responsive Mobile First Accessible Architecture قابلة للتوسع لآلاف المستخدمين كبداية. # ================================================== 50 — SEO Metadata OpenGraph Sitemap Robots.txt Schema Markup Arabic SEO English SEO Project SEO Pages # ================================================== 51 — DESIGN UI: راقي مؤسسي موثوق بسيط حديث ليس: Casino ولا: Crypto Scam ولا: Cheap Marketing Page استخدم: Natural Institutional Colors Arabic Typography Excellent RTL # ================================================== 52 — LEGAL DECISION GATE إذا كان القرار يتعلق بـ: Law License Fundraising Returns Contracts KYC AML Payments لا تخترع. ضع: LEGAL REVIEW REQUIRED ووضح المطلوب. # ================================================== 53 — NAMECHEAP الدومين موجود على Namecheap. الرابط النهائي المطلوب: https\://invest.MYDOMAIN.com لا تفترض اسم الدومين الحقيقي. سأعطيك الدومين عندما نصل إلى مرحلة Deployment. # ================================================== 54 — NAMECHEAP HOSTING ANALYSIS حلل هل Namecheap Shared Hosting قادرة على: Next.js Node.js NestJS PostgreSQL Redis Docker WebSocket Workers Cron Background Jobs Secure Storage إذا لم تكن مناسبة: لا تجبر المشروع عليها. استخدم: Namecheap Domain/DNS - VPS/Cloud Server مناسب. الرابط النهائي: invest.MYDOMAIN.com # ================================================== 55 — DEPLOYMENT ARCHITECTURE Architecture: User ↓ Internet ↓ HTTPS ↓ invest.MYDOMAIN.com ↓ Nginx / Reverse Proxy ↓ Frontend ↓ Backend API ↓ PostgreSQL Redis Queue Private Storage Monitoring Backup # ================================================== 56 — DNS عند الوصول إلى Deployment: أعطني تعليمات دقيقة لـNamecheap: Domain List Manage Advanced DNS Add Record ثم: Type Host Value TTL مثال فقط: A invest SERVER_IP Automatic لا تستخدم قيمًا وهمية في التنفيذ الحقيقي. # ================================================== 57 — SSL Enable: HTTPS SSL HTTP → HTTPS Security Headers HSTS عند ملاءمته. # ================================================== 58 — ADMIN URL Admin: https\://invest.MYDOMAIN.com/admin Protected by: Authentication RBAC 2FA Rate Limiting Secure Sessions # ================================================== 59 — DATABASE PRODUCTION PostgreSQL. لا SQLite في Production. Database: Private Encrypted where appropriate Backed Up Restorable # ================================================== 60 — FILE STORAGE Private Storage. لا Public Folder للمستندات الحساسة. Use: Signed URLs Access Control Validation Size Limits Malware Scanning Watermark Download Logs # ================================================== 61 — ENVIRONMENT Create: .env.example Never commit: Passwords API Keys JWT Secrets Database Passwords Payment Keys SMTP Passwords Private Keys # ================================================== 62 — GITHUB Prepare Repository. Structure: /apps /packages /infrastructure /database /docs /tests /scripts Create: README SECURITY DEPLOYMENT ARCHITECTURE API DOCS Branches: main develop # ================================================== 63 — CI/CD Pipeline: Install Lint Typecheck Tests Build Security Scan Deploy إذا فشل: Tests Build Security لا يتم Deployment. احتفظ بالنسخة السابقة. أضف: Rollback Health Check Deployment Logs # ================================================== 64 — EMAIL SMTP Abstraction. Use for: OTP Password Reset KYC Investment Requests Notifications لا تستخدم Gmail الشخصي كـProduction SMTP. # ================================================== 65 — SMS Development: Mock Provider. Production: Real Provider configurable. # ================================================== 66 — MONITORING Endpoints: /health /ready /metrics راقب: CPU RAM Disk Database Application Errors Uptime SSL Logs # ================================================== 67 — SECURITY DEPLOYMENT Firewall Secure SSH SSH Keys Disable Root Login where appropriate Private Database Private Redis Rate Limiting 2FA Secure Cookies CSRF XSS SQL Injection Protection Input Validation File Security Secrets Management Audit Logs Monitoring # ================================================== 68 — PERFORMANCE TESTING اختبر: Page Load API Database Concurrent Users File Uploads Rate Limits Stress # ================================================== 69 — PROJECT STATE أنشئ: /docs/PROJECT_STATUS.md يحتوي: Current Phase Completed Tasks Pending Tasks Known Issues Architecture Decisions Environment Requirements Deployment Status Next Actions بعد كل مرحلة حدّثه. # ================================================== 70 — RESUME AFTER INTERRUPTION إذا انقطعت الجلسة أو بدأ Agent Session جديد: اقرأ: PROJECT_STATUS.md README Architecture Documentation Git Status ثم حدد آخر Phase مكتملة. استأنف من المكان الصحيح. لا تعيد المشروع من الصفر. # ================================================== 71 — NO FAKE COMPLETION ممنوع القول: "تم" إذا لم تنفذ فعليًا. ممنوع القول: "تم النشر" إذا لم يتم Deployment فعليًا. ممنوع القول: "تم الاختبار" إذا لم تشغّل الاختبار. استخدم الحالات: IMPLEMENTED TESTED BLOCKED PENDING REQUIRES HUMAN ACTION # ================================================== 72 — PROJECT PHASES نفذ المشروع بهذا الترتيب: PHASE 1 Architecture PHASE 2 Requirements & Domain Model PHASE 3 Repository & Monorepo PHASE 4 Database Architecture PHASE 5 Database Schema & Migrations PHASE 6 Backend Foundation PHASE 7 Authentication PHASE 8 RBAC PHASE 9 Admin Dashboard PHASE 10 User Dashboard PHASE 11 Investor Dashboard PHASE 12 Project Management PHASE 13 Farm Management PHASE 14 Poultry Management PHASE 15 Egg Production PHASE 16 Inventory PHASE 17 Sales & Expenses PHASE 18 Accounting PHASE 19 KYC PHASE 20 AML / Compliance PHASE 21 Data Room PHASE 22 Documents PHASE 23 Investment Requests PHASE 24 Contracts PHASE 25 Payment Abstraction PHASE 26 Notifications PHASE 27 Support PHASE 28 CMS PHASE 29 Reports PHASE 30 Analytics PHASE 31 AI Architecture PHASE 32 Mobile App PHASE 33 Security Hardening PHASE 34 Automated Testing PHASE 35 Performance Testing PHASE 36 Docker PHASE 37 CI/CD PHASE 38 GitHub PHASE 39 Server Preparation PHASE 40 Namecheap DNS PHASE 41 Subdomain PHASE 42 SSL PHASE 43 Production Deployment PHASE 44 Backup PHASE 45 Monitoring PHASE 46 Production Security Audit PHASE 47 Final QA PHASE 48 Production Readiness Review # ================================================== 73 — PHASE EXECUTION RULE لكل Phase: 1. اقرأ الحالة الحالية. 2. خطط. 3. أنشئ الملفات. 4. نفذ الكود. 5. شغل المشروع. 6. شغل Tests. 7. أصلح Errors. 8. أعد Tests. 9. نفذ Security Check. 10. حدث Documentation. 11. حدث PROJECT_STATUS.md. 12. اعمل Git Commit إذا كان Git متاحًا. 13. انتقل للمرحلة التالية إذا لم توجد Blockers. # ================================================== 74 — QUALITY GATE لا تنتقل إلى المرحلة التالية إذا كانت المرحلة الحالية تحتوي على: Critical Error Broken Build Broken Migration Critical Security Vulnerability Unresolved Data Integrity Issue إلا إذا تم توثيقها كـBLOCKED مع سبب واضح. # ================================================== 75 — REALISTIC PRODUCTION PRINCIPLE أريد نظامًا حقيقيًا. لكن: Production-Ready Architecture لا تعني: Legally Approved Investment Platform. النظام يجب أن يكون جاهزًا تقنيًا. أما: Licensing Regulatory Approval Fundraising Payment Authorization Contracts فتبقى خلف Human/Legal Approval. # ================================================== 76 — DATA VALIDATION كل رقم مالي أو إنتاجي يجب أن يحمل: Value Unit Date Source Entered By Created At Updated At عند الحاجة: Evidence Document # ================================================== 77 — PROJECT VERIFIED BADGE Verified Badge لا يظهر إلا عند: Required Documents Document Review Manual Approval Verification Date أظهر: "تم التحقق من المستندات بتاريخ..." ولا تقل: "حكومي" أو: "رسمي" إلا إذا كان الدليل موجودًا. # ================================================== 78 — PUBLIC VS PRIVATE DATA Public: Project Summary Approximate Location Approved Public Documents Approved Reports Public Metrics Private: Exact Location Sensitive Documents Identity Financial Personal Data KYC Contracts Internal Reports استخدم Authorization في Backend. # ================================================== 79 — ACCESS CONTROL كل Endpoint يجب أن يتحقق من: Authentication Authorization Resource Ownership Role Permission ولا تعتمد على Frontend Security. # ================================================== 80 — ERROR HANDLING أنشئ: Global Error Handling Structured Logs Error IDs User-Friendly Errors لا تعرض: Stack Traces Secrets Database Errors للمستخدم النهائي. # ================================================== 81 — LOGGING أنشئ Structured Logging. Categories: Application Security Audit Database API Payment KYC Compliance Deployment مع: Retention Policy. # ================================================== 82 — API SECURITY API: Rate Limits Validation Authentication Authorization Pagination Filtering Sorting Idempotency عند الحاجة Request IDs Secure Error Responses # ================================================== 83 — DATABASE SECURITY Use: Least Privilege Separate Users/Roles Encrypted Connections عند الحاجة Backups Migration Control Indexes Constraints Transactions # ================================================== 84 — FRONTEND QUALITY Frontend: Responsive Accessible RTL Loading States Error States Empty States Skeletons Form Validation Toast Notifications Confirmation Dialogs Unsaved Changes Protection عند الحاجة. # ================================================== 85 — MOBILE QUALITY Flutter: Android iOS Responsive Secure Storage Biometric Push Notifications Offline Handling عند الحاجة Error Handling API Security # ================================================== 86 — ACCESSIBILITY راعِ: Keyboard Navigation Contrast Labels ARIA Screen Reader Compatibility Readable Typography # ================================================== 87 — SEO لكل Project Page: Title Description Canonical OpenGraph Structured Data Sitemap Robots # ================================================== 88 — BACKUP RECOVERY لا يكفي إنشاء Backup. يجب: Create Backup Verify Backup Test Restore Document Restore Procedure # ================================================== 89 — DISASTER RECOVERY أنشئ: Recovery Plan RPO RTO Backup Retention Restore Procedure Incident Response # ================================================== 90 — SECURITY INCIDENT RESPONSE أنشئ Documentation: Security Incident Procedure إذا حدث: Data Leak Unauthorized Access Suspicious Login Payment Anomaly Malware Compromised Credential يجب وجود: Detection Containment Investigation Recovery Audit # ================================================== 91 — ADMIN SECURITY Admin: 2FA Strong Password Policy Session Timeout Device Management Login Alerts IP/Rate Monitoring Audit Logging # ================================================== 92 — INVESTOR COMMUNICATION Notifications فقط. لا تستخدم: Fake Urgency Fake Scarcity Guaranteed Returns Misleading Claims # ================================================== 93 — MARKETING SAFETY CMS يجب أن يمنع أو يحذر من عبارات مثل: مضمون ربح مضمون عائد مضمون بدون مخاطر 100% آمن مرخص حكومي معتمد إذا لم يكن هناك دليل موثق. # ================================================== 94 — SEARCH Search Projects Search Documents Search Reports Search Users حسب صلاحية المستخدم. # ================================================== 95 — FILTERING Projects: Category Status Location Verification Date Production Type لكن لا تستخدم ترتيبًا يوحي بتوصية استثمارية إذا لم يكن ذلك مناسبًا. # ================================================== 96 — PROJECT STATUS Statuses: Draft Under Review Pending Verification Verified Published Active Paused Completed Archived # ================================================== 97 — INVESTMENT REQUEST STATUS Statuses: Draft Submitted Under Review KYC Required Compliance Review Approved Rejected Cancelled Completed # ================================================== 98 — KYC STATUS Pending Under Review Approved Rejected Requires More Information Expired # ================================================== 99 — PAYMENT STATUS Pending Processing Completed Failed Refunded Cancelled Reconciled # ================================================== 100 — PRODUCTION READINESS قبل إعلان: READY FOR PRODUCTION نفذ: Build Tests Security Scan Database Migration Test Backup Test Restore Test API Test E2E Permission Test Performance Test Docker Test Deployment Test Health Check SSL Check # ================================================== 101 — FINAL DEPLOYMENT الرابط النهائي: https\://invest.MYDOMAIN.com يجب أن يعمل: Homepage Authentication Projects Project Details User Dashboard Investor Dashboard Admin KYC Documents Reports Support Notifications # ================================================== 102 — NAMECHEAP DEPLOYMENT PROCEDURE عندما نصل إلى مرحلة Deployment: أولًا: تحقق من Server. ثم: تحقق من DNS. ثم: Subdomain. ثم: SSL. ثم: Nginx. ثم: Frontend. ثم: Backend. ثم: Database. ثم: Redis. ثم: Storage. ثم: Monitoring. ثم: Backup. ثم: Smoke Tests. # ================================================== 103 — NAMECHEAP INSTRUCTIONS لأنني مبتدئ تقنيًا: لا تعطيني: "عدّل DNS" فقط. بل: 1. افتح Namecheap. 2. Domain List. 3. Manage. 4. Advanced DNS. 5. Add New Record. 6. اختر Record Type. 7. Host. 8. Value. 9. TTL. 10. Save. 11. انتظر. 12. اختبر. لكن استخدم القيم الحقيقية فقط عندما تصبح متوفرة. # ================================================== 104 — NO CREDENTIALS IN CHAT لا تطلب مني إرسال: Password Private Key API Secret Payment Secret Database Password داخل المحادثة إذا كانت البيئة توفر Secret Storage. # ================================================== 105 — GIT SAFETY قبل أي Commit: تأكد من عدم وجود: .env Secrets Private Keys Credentials Tokens Production Data Personal Data داخل Repository. # ================================================== 106 — PRODUCTION DATA SAFETY لا تستخدم: Real KYC Real ID Real Bank Data Real Payment Data Real Personal Data داخل Demo. # ================================================== 107 — DOCUMENTATION أنشئ: README.md ARCHITECTURE.md SECURITY.md DEPLOYMENT.md DATABASE.md API.md TESTING.md BACKUP.md COMPLIANCE.md PROJECT_STATUS.md INCIDENT_RESPONSE.md # ================================================== 108 — FINAL REPORT في نهاية المشروع، أنشئ: FINAL_PRODUCTION_READINESS.md يحتوي: Architecture Technology Database Security Testing Deployment DNS SSL Backup Monitoring Compliance Known Limitations Pending Human Actions Production Status # ================================================== 109 — NO FALSE CLAIMS ممنوع أن تقول: "تم بناء التطبيق" إلا إذا كان موجودًا فعلًا. ممنوع: "تم النشر" إذا لم يتم. ممنوع: "تم ربط Namecheap" إذا لم يتم. ممنوع: "تم ربط الدفع" إذا لم يتم. ممنوع: "تم التحقق من الترخيص" إذا لم يتم. # ================================================== 110 — START COMMAND ابدأ الآن. لا تعطيني خطة نظرية فقط. نفذ: PHASE 1 — ARCHITECTURE ثم أنشئ: Repository Structure Architecture Documentation PROJECT_STATUS.md ثم: PHASE 2 — REQUIREMENTS & DOMAIN MODEL ثم: PHASE 3 — PROJECT SCAFFOLD ثم استمر تلقائيًا. إذا كانت هناك أداة تنفيذ متاحة: استخدمها. إذا كانت هناك Terminal: استخدمها. إذا كان Git متاحًا: استخدمه. إذا كان Docker متاحًا: استخدمه. إذا كان Testing Framework متاحًا: شغله. إذا كانت هناك صلاحيات ناقصة: HUMAN ACTION REQUIRED. لا تكتفِ بكتابة ما "يمكن" فعله. نفذ ما يمكنك تنفيذه فعليًا. # ================================================== 111 — CONTINUOUS EXECUTION بعد كل مهمة: لا تتوقف لمجرد أنك أنهيت ردًا. إذا كانت بيئة Agent تسمح باستمرار التنفيذ: استمر. إذا وصلت إلى حد جلسة أو أداة: احفظ الحالة في: /docs/PROJECT_STATUS.md واحفظ العمل في Git. وعند استئناف Agent: اقرأ الحالة واستمر. # ================================================== 112 — SUCCESS CRITERIA المشروع يعتبر مكتملًا تقنيًا عندما: - Web يعمل. - API تعمل. - Database تعمل. - Authentication يعمل. - RBAC يعمل. - Admin يعمل. - User يعمل. - Investor يعمل. - Project Management يعمل. - Farm Management يعمل. - Poultry يعمل. - Egg Production يعمل. - Inventory يعمل. - Reports تعمل. - Documents تعمل. - Data Room تعمل. - KYC Architecture تعمل. - Compliance Gate يعمل. - Payment Abstraction يعمل. - Notifications تعمل. - Support يعمل. - CMS يعمل. - Mobile App مبني وقابل للاختبار. - Security Checks تمر. - Automated Tests تمر. - Docker يعمل. - CI/CD جاهز. - Backup جاهز. - Restore مختبر. - Monitoring جاهز. - Namecheap Deployment Configuration جاهزة. - Subdomain Configuration جاهزة. - SSL Configuration جاهزة. - Documentation كاملة. والوظائف القانونية/المالية الحساسة تبقى Disabled حتى استكمال Human/Legal Approval. # ================================================== FINAL COMMAND ابدأ التنفيذ الآن. أول رد يجب أن يوضح: CURRENT ENVIRONMENT AVAILABLE TOOLS WORKSPACE STATUS GIT STATUS ثم ابدأ مباشرة: PHASE 1 — ARCHITECTURE وأنشئ الملفات فعليًا. لا تكتفِ بالشرح. لا تخترع أي بيانات. لا تدّعي إنجاز شيء لم يتم تنفيذه. اعمل كفريق هندسي كامل ومستقل ضمن حدود الأدوات والصلاحيات المتاحة.