fix(cicd): use buf/bin/buf instead of bare buf for binary path

Reviewed-on: #36

.gitea/actions/build-proto/action.yml

@@ -0,0 +1,33 @@
+name: Build Proto
+description: Install buf CLI, run buf lint and buf build
+inputs:
+  buf_version:
+    description: Buf CLI version to install
+    required: false
+    default: "1.72.0"
+runs:
+  using: composite
+  steps:
+    - name: Setup Buf CLI
+      shell: bash
+      env:
+        BUF_VERSION: ${{ inputs.buf_version }}
+      run: |
+        ARCH="$(uname -m)"
+        case "$ARCH" in
+          x86_64) BIN="buf-Linux-x86_64" ;;
+          aarch64) BIN="buf-Linux-aarch64" ;;
+          arm64) BIN="buf-Darwin-arm64" ;;
+          *) BIN="buf-Linux-x86_64" ;;
+        esac
+        curl -sSL "https://github.com/bufbuild/buf/releases/download/v${BUF_VERSION}/${BIN}.tar.gz" -o buf.tar.gz
+        tar -xzf buf.tar.gz
+        cp buf/bin/buf /usr/local/bin/buf
+        chmod +x /usr/local/bin/buf
+        rm -rf buf buf.tar.gz
+    - name: Lint
+      shell: bash
+      run: buf lint
+    - name: Build
+      shell: bash
+      run: buf build

.gitea/actions/setup-mirrors/action.yml

@@ -0,0 +1,151 @@
+name: Setup package mirrors
+description: Benchmark package mirrors and export the fastest reachable registry for each ecosystem
+inputs:
+  npm_mirrors:
+    description: Newline-separated npm-compatible registries
+    required: false
+    default: |
+      https://npm.reg.darano.ir/
+  pypi_mirrors:
+    required: false
+    default: |
+      https://package-mirror.liara.ir/repository/pypi/simple
+      https://pypi.reg.darano.ir
+      https://pypi-iran.ir/simple/
+      https://pypi.org/simple/
+  go_mirrors:
+    description: Newline-separated Go module proxies
+    required: false
+    default: |
+      https://go.devneeds.ir/
+      https://package-mirror.liara.ir/repository/go/
+      https://go.reg.darano.ir/
+      https://proxy.golang.org/
+  debian_mirrors:
+    description: Newline-separated Debian package repository base URLs
+    required: false
+    default: |
+      http://repo.iut.ac.ir/debian/
+      http://deb.debian.org/debian/
+  connect_timeout:
+    description: curl connection timeout in seconds
+    required: false
+    default: "3"
+  max_time:
+    description: curl request timeout in seconds
+    required: false
+    default: "10"
+outputs:
+  npm_registry:
+    description: Fastest reachable npm registry
+    value: ${{ steps.select.outputs.npm_registry }}
+  pypi_index:
+    description: Fastest reachable Python package index
+    value: ${{ steps.select.outputs.pypi_index }}
+  go_proxy:
+    description: Fastest reachable Go module proxy
+    value: ${{ steps.select.outputs.go_proxy }}
+  debian_mirror:
+    description: Fastest reachable Debian package repository
+    value: ${{ steps.select.outputs.debian_mirror }}
+runs:
+  using: composite
+  steps:
+    - name: Rate mirrors and export package environments
+      id: select
+      shell: bash
+      env:
+        NPM_MIRRORS: ${{ inputs.npm_mirrors }}
+        PYPI_MIRRORS: ${{ inputs.pypi_mirrors }}
+        GO_MIRRORS: ${{ inputs.go_mirrors }}
+        DEBIAN_MIRRORS: ${{ inputs.debian_mirrors }}
+        CONNECT_TIMEOUT: ${{ inputs.connect_timeout }}
+        MAX_TIME: ${{ inputs.max_time }}
+      run: |
+        set -euo pipefail
+
+        if [[ ! "$CONNECT_TIMEOUT" =~ ^[0-9]+([.][0-9]+)?$ ]] ||
+           [[ ! "$MAX_TIME" =~ ^[0-9]+([.][0-9]+)?$ ]]; then
+          echo "Mirror timeouts must be positive numbers" >&2
+          exit 1
+        fi
+
+        select_fastest() {
+          local ecosystem="$1"
+          local mirrors="$2"
+          local scores mirror result status duration fallback
+          scores="$(mktemp)"
+          fallback=""
+
+          while IFS= read -r mirror; do
+            mirror="$(printf '%s' "$mirror" | sed -e 's/^[[:space:]]*//' -e 's/[[:space:]]*$//')"
+            [[ -z "$mirror" || "$mirror" == \#* ]] && continue
+
+            if [[ ! "$mirror" =~ ^https?:// ]]; then
+              echo "[$ecosystem] skipped invalid URL: $mirror" >&2
+              continue
+            fi
+            [[ -z "$fallback" ]] && fallback="$mirror"
+
+            if result="$(curl \
+              --location \
+              --silent \
+              --show-error \
+              --output /dev/null \
+              --connect-timeout "$CONNECT_TIMEOUT" \
+              --max-time "$MAX_TIME" \
+              --write-out '%{http_code} %{time_total}' \
+              "$mirror" 2>/dev/null)"; then
+              read -r status duration <<< "$result"
+              if [[ "$status" =~ ^[0-9]{3}$ ]] &&
+                 (((10#$status >= 200 && 10#$status < 400) || 10#$status == 404)) &&
+                 [[ "$duration" =~ ^[0-9]+([.][0-9]+)?$ ]]; then
+                printf '%s\t%s\t%s\n' "$duration" "$status" "$mirror" >> "$scores"
+                continue
+              fi
+            fi
+
+            echo "[$ecosystem] unavailable: $mirror" >&2
+          done <<< "$mirrors"
+
+          if [[ ! -s "$scores" ]]; then
+            rm -f "$scores"
+            if [[ -z "$fallback" ]]; then
+              echo "No valid $ecosystem mirror was configured" >&2
+              return 1
+            fi
+            echo "[$ecosystem] no mirror responded; falling back to $fallback" >&2
+            printf '%s\n' "$fallback"
+            return 0
+          fi
+
+          echo "[$ecosystem] mirror ranking (seconds, HTTP status, URL):" >&2
+          sort -n -k1,1 "$scores" >&2
+          sort -n -k1,1 "$scores" | head -n 1 | cut -f3-
+          rm -f "$scores"
+        }
+
+        npm_registry="$(select_fastest npm "$NPM_MIRRORS")"
+        pypi_index="$(select_fastest pypi "$PYPI_MIRRORS")"
+        go_proxy="$(select_fastest go "$GO_MIRRORS")"
+        debian_mirror="$(select_fastest debian "$DEBIAN_MIRRORS")"
+
+        {
+          echo "NPM_CONFIG_REGISTRY=$npm_registry"
+          echo "npm_config_registry=$npm_registry"
+          echo "COREPACK_NPM_REGISTRY=$npm_registry"
+          echo "YARN_REGISTRY=$npm_registry"
+          echo "PNPM_CONFIG_REGISTRY=$npm_registry"
+          echo "BUN_CONFIG_REGISTRY=$npm_registry"
+          echo "PIP_INDEX_URL=$pypi_index"
+          echo "UV_DEFAULT_INDEX=$pypi_index"
+          echo "GOPROXY=$go_proxy"
+          echo "DEBIAN_MIRROR=$debian_mirror"
+        } >> "$GITHUB_ENV"
+
+        {
+          echo "npm_registry=$npm_registry"
+          echo "pypi_index=$pypi_index"
+          echo "go_proxy=$go_proxy"
+          echo "debian_mirror=$debian_mirror"
+        } >> "$GITHUB_OUTPUT"

.gitea/workflows/ci-stage.yaml

@@ -0,0 +1,52 @@
+---
+name: CI/CD Stage
+on:
+  push:
+    branches:
+      - stage
+jobs:
+  stage:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout Git
+        uses: https://git.darano.ir/actions/checkout@v5
+        with:
+          token: ${{ gitea.token }}
+          path: ./
+          submodules: recursive
+      - name: Checkout Buf CLI
+        uses: https://git.darano.ir/actions/checkout@v5
+        with:
+          repository: actions/buf-bin
+          ref: main
+          path: buf-bin
+      - name: Setup package mirrors
+        uses: ./.gitea/actions/setup-mirrors
+      - name: Setup Buf CLI
+        run: |
+          BUF_VERSION=1.72.0
+          ARCH="$(uname -m)"
+          case "$ARCH" in
+            x86_64) BIN="buf-Linux-x86_64" ;;
+            aarch64) BIN="buf-Linux-aarch64" ;;
+            arm64) BIN="buf-Darwin-arm64" ;;
+            *) BIN="buf-Linux-x86_64" ;;
+          esac
+          curl -sSL "https://github.com/bufbuild/buf/releases/download/v${BUF_VERSION}/${BIN}.tar.gz" -o buf.tar.gz
+          tar -xzf buf.tar.gz
+          cp buf/bin/buf /usr/local/bin/buf
+          chmod +x /usr/local/bin/buf
+          rm -rf buf buf.tar.gz buf-bin
+      - name: Lint
+        run: buf lint
+      - name: Build
+        run: buf build
+      - name: Notify Telegram
+        if: always()
+        uses: ./.gitea/actions/notify-telegram
+        with:
+          bot_token: ${{ secrets.TELEGRAM_BOT_TOKEN }}
+          chat_id: ${{ secrets.TELEGRAM_CHAT_ID }}
+          status: ${{ job.status }}
+          repository: ${{ gitea.repository }}
+          sha: ${{ gitea.sha }}

auth/v1/msg.proto

@@ -43,6 +43,7 @@ message PermissionList {
 
 message UserSendOtpReq {
   string mobile = 1;
+  string referral_code = 2;
 }
 message UserSendOtpRes {
   int64 expired_at = 1;
@@ -55,6 +56,7 @@ message UserSendOtpRes {
 message UserLoginReq {
   string mobile = 1;
   string otp_code = 2;
+  string referral_code = 3;
 }
 message UserRefreshTokenReq {
   string refresh_token = 1;
@@ -128,6 +130,7 @@ message User {
   string email = 4;
   UserStatus status = 5;
   repeated int64 roles = 6;
+  int64 referrer_user_id = 7;
 }
 
 message UserAddress {
@@ -161,7 +164,7 @@ message Identity {
   string shenasname_number = 14;
   string shenasname_seri = 15;
   string shenasname_serial = 16;
-  UserStatus status = 17;
+  int32 status = 17;
   string updated_at = 18;
   string created_at = 19;
   string email = 20;
@@ -185,6 +188,7 @@ message UserIdentityBasic {
   string first_name = 4;
   string last_name = 5;
   string wallet_address = 6;
+  bool is_identity_verified = 7;
 }
 
 message UserUpdateIdentityReq {

errors/v1/msg.proto

@@ -51,6 +51,7 @@ enum ErrCode {
   BANK_INFO_NOT_FOUND = 3007;
   RECIPIENT_NOT_FOUND = 3008;
   USER_NOT_FOUND = 3009;
+  INVALID_REFERRAL_CODE = 3011;
   MARKET_AGREEMENT_ALREADY_ACCEPTED = 3010;
 
   // Resource state errors

wallet/v1/internal_srv.proto

@@ -17,4 +17,7 @@ service InternalWalletSrv {
 
   // Calculate stellar pub-priv key based on national id
   rpc GetPublicKeyByNationalID(NationalIDReq) returns (PubKeyRes);
+
+    // Commission Logs
+  rpc InitReferrerCommissionLog(InitReferrerCommissionLogIn) returns (base.v1.Empty);
 }

wallet/v1/msg.proto

@@ -6,7 +6,7 @@ import "auth/v1/msg.proto";
 import "base/v1/msg.proto";
 
 /*
-   INTERNAL DATA
+   INTERNAL DATA;
 */
 
 message InternalTransactionData {
@@ -355,6 +355,7 @@ enum TransactionType {
   IRT_DEPOSIT = 13;
   IRT_WITHDRAWAL = 14;
   COMMISSION = 15;
+  REFERRAL_COMMISSION = 16;
 }
 
 enum TransactionStatus {
@@ -442,7 +443,7 @@ message TransferAssetRes {
 }
 
 /*
-   Redeem Token
+   Redeem Token;
 */
 message RedeemTokenReq {
   auth.v1.InternalIAM iam = 1;
@@ -497,7 +498,7 @@ message PubKeyRes {
 }
 
 /*
-   Network Details
+   Network Details;
 */
 enum NetworkType {
   UNKNOWN_NETWORK_TYPE = 0;
@@ -581,6 +582,38 @@ message CommissionRes {
   uint64 commission_log_id = 1;
 }
 
+message InitReferrerCommissionLogIn {
+  int64 referrer_id = 1;
+  int64 user_id = 2;
+  double amount = 3;
+}
+
+message ReferrerCommissionLogOut {
+  double amount = 1;
+  string mobile = 2;
+  bool is_identity_verified = 3;
+  double commission_percentage = 4;
+}
+message ReferrerCommissionLogsList {
+  repeated ReferrerCommissionLogOut list = 1;
+  uint32 page_no = 2;
+  uint32 page_size = 3;
+  uint32 total_count = 4;
+}
+
+message TotalReferralCommissionIn {
+  int64 referrer_id = 1;
+}
+
+message TotalReferralCommissionOut {
+  double claimed = 1;
+  double unclaimed = 2;
+}
+
+message ClaimReferralCommissionIn {
+  auth.v1.User user = 1;
+}
+
 /*
  * IPG - Internet Payment Gateway
  * 1. Get Token

wallet/v1/srv.proto

@@ -24,6 +24,11 @@ service WalletService {
 
   rpc UserGetTransactionList(TransactionListFilter) returns (TransactionList);
 
+  // Commission Logs
+  rpc GetReferrerCommissionLogsList(auth.v1.InternalIAM) returns (ReferrerCommissionLogsList);
+  rpc GetTotalReferralCommission(TotalReferralCommissionIn) returns (TotalReferralCommissionOut);
+  rpc ClaimReferralCommission(ClaimReferralCommissionIn) returns (base.v1.StatusRes);
+
   // Get Token from IPG is and internal api
   rpc IPGGetToken(IPGGetTokenReq) returns (IPGGetTokenRes);
   // IPG Confirm is a public api