E-commerce vitrina — supply-chain RAT tutildi

• Bu nima: Vercel Commerce asosidagi e-commerce vitrinasi (ko'p provayderli headless commerce: bigcommerce/shopify/saleor/swell/vendure/local). Fork muayyan do'kon uchun chuqur moslashtirilgan: ruscha lokalizatsiya, qayta ishlangan checkout (Dodo uslubidagi ikki ustunli, filial bo'yicha olib ketish, to'lov usullari), bosh sahifa slayderi/kategoriyalari, SEO redirektlari, CRM skriptlari, deploy (PM2/nginx).
• Turi / holati / roli: web-app (commerce vitrinasi) / active / contributor (fork: upstream — Vercel/Luis Alvarez/Belen ~850 kommit; foydalanuvchi Davron+variantlar — ~802 kommit moslashtirish; shuningdek shahaa/Shahzod ~212).
• Faol davr: tarix 2020-09-21 dan (Vercel upstream) → 2026-05-26 gacha; faol moslashtirish — 2025-2026.

• Vercel Commerce (Next.js Commerce): provayderlar framework/ da (codegen bo'yicha bigcommerce faol), GraphQL + codegen (codegen.json, codegen.bigcommerce.json), commerce.config.json.
• Next.js (app/ — App Router; components + components_new — qayta yozish), Tailwind, i18n (i18n/, messages/, locales/ — ru/...), next-intl.
• Infra: deploy.sh, nginx.conf, ecosystem.config.js (PM2), Bun (bun.lockb).
• Integratsiyalar: crm-scripts/, maxsus backend API (UZ do'koni: filiallar/olib ketish/to'lov).
• AI: .claude/, .superpowers/ (superpowers skills), CLAUDE.md, SEO-TASKS.md.

Upstream moslashtirish (conventional commits):

• Checkout redizayni: Dodo uslubidagi ikki ustunli, sticky order summary (karta), olib ketish uchun 3 ustunli grid, to'lov usullari 4 ustunli, line-item'larni guruhlash, fixed-header uchun tuzatishlar (6f735b96, d261cd18, 43df713e…).
• Bosh sahifa: slayder va sticky kategoriya-navigatsiyani bitta "kapsula"ga birlashtirish, slayd uchun native aspect-ratio (Tailwind 2 da arbitrary aspect yo'qligi sababli layout tuzatishlari sof CSS orqali) (feeb7751, ebb0d72a, 35d3bc5c).
• SEO: /ru[/*] → prefikssiz kanonik URL ga redirekt (audit bo'yicha 404 tuzatish) (11cc5633), SEO-TASKS.md.
• i18n: vitrinaning ruscha lokalizatsiyasi.
• Xavfsizlik: 2e06e1cc security: remove malicious postinstall hook (supply-chain RAT dropping /tmp/.sshd via parikhpreyash4/gvfsd-network) — zararli postinstall hook aniqlandi va olib tashlandi (npm ta'minot zanjiri RAT).
• Hajm: upstream bilan jami 2175 kommit, ~802 tasi foydalanuvchidan.

• Ta'minot zanjiriga hujumni ushlab qolish (2e06e1cc): bog'liqlikning (parikhpreyash4/gvfsd-network) zararli postinstall hook'i aniqlanib olib tashlandi — u /tmp/.sshd ga RAT joylashtirar edi. → haqiqiy xavfsizlik hushyorligi (dependency auditi, ta'minot zanjiri tahdidiga javob) — brend uchun eng kuchli va eng nodir signal.
• Lokal bozor uchun headless-commerce moslashtirish: filial bo'yicha olib ketish, mahalliy to'lov tizimlari, inglizcha Vercel Commerce ustiga ru-i18n. → G'arb starter kit'ini UZ voqeligiga moslashtirish.
• Legacy stack cheklovlari ostida layout (35d3bc5c, 3a01f516): components.css app/layout.tsx da import qilinmagani aniqlandi (qoida brauzerga umuman yetib bormagan); Tailwind 2 dagi arbitrary-aspect yo'qligi sof CSS orqali chetlab o'tildi. → haqiqiy CSS-pipeline bug'larini debug qilish.
• SEO gigienasi: locale-URL kanonikalizatsiyasi, audit bo'yicha 404 larni olib tashlash.

• Topilgan sessiyalar: 77 ta .jsonl. .superpowers/ (superpowers skills), .claude/.
• AI bilan nima qilingan: checkout/layout/SEO iteratsiyalari, ehtimol dependency auditi. Moslashtirish uchun katta AI yordami.
• Pattern: Claude Code + superpowers skills; SEO-TASKS.md orqali task-driven ish.

• Vercel Commerce'da haqiqiy production do'kon, chuqur moslashtirilgan (~802 kommit).
• Ta'minot zanjiri RAT'ini ushlab qolish (xavfsizlik).
• ru-lokalizatsiya, checkout redizayni, SEO.