fix(tpv-dev-in-prod): tPV production is running next dev (HMR + React DevTools visible)

backlog/features.json

@@ -8210,6 +8210,72 @@
       },
       "phase": "pos",
       "completed_at": "2026-08-26T21:26:01Z"
+    },
+    {
+      "id": "TPV-POS-SALES-500",
+      "type": "bug",
+      "title": "TPV /api/pos/sales returns HTTP 500",
+      "description": "POST /api/pos/sales responds with HTTP 500 in production. Needs backend traces to reproduce and identify root cause (likely validation, DB connection or idempotency regression). Currently blocking real sales on the TPV.",
+      "priority": "high",
+      "risk": "med",
+      "status": "pending",
+      "created_at": "2026-08-27",
+      "gates": {
+        "reviewer": false,
+        "security": false,
+        "qa": false
+      },
+      "phase": "pos"
+    },
+    {
+      "id": "TPV-DEV-IN-PROD",
+      "type": "bug",
+      "title": "TPV production is running next dev (HMR + React DevTools visible)",
+      "description": "Deployed TPV at tpv-mv.rikrdo.com is running next dev instead of next start. Console shows HMR WebSocket connections, [HMR] connected messages, and React DevTools download notice. Only next dev emits HMR; in production must be next start.",
+      "priority": "high",
+      "risk": "med",
+      "status": "done",
+      "created_at": "2026-08-27",
+      "gates": {
+        "reviewer": true,
+        "security": true,
+        "qa": true,
+        "close": true
+      },
+      "phase": "pos",
+      "completed_at": "2026-08-27T21:13:10Z"
+    },
+    {
+      "id": "TPV-MANIFEST-PATH",
+      "type": "bug",
+      "title": "TPV manifest path mismatch: layout points /manifest.json but Next publishes /manifest.webmanifest",
+      "description": "project/apps/pos/src/app/layout.tsx declares metadata.manifest: '/manifest.json' but the App Router file project/apps/pos/src/app/manifest.ts is served at /manifest.webmanifest. Browser auto-requests /manifest.webmanifest -> 404/redirect to Authelia -> CORS error. Fix: point metadata.manifest to /manifest.webmanifest (or set fileName) AND add the path to Authelia bypass list.",
+      "priority": "high",
+      "risk": "low",
+      "status": "pending",
+      "created_at": "2026-08-27",
+      "gates": {
+        "reviewer": false,
+        "security": false,
+        "qa": false
+      },
+      "phase": "pos"
+    },
+    {
+      "id": "TPV-FAVICON-404",
+      "type": "chore",
+      "title": "TPV missing favicon.ico (404 in browser console)",
+      "description": "No favicon.ico served at the TPV origin. Browser console reports 404 on /favicon.ico. Bundle with TPV-MANIFEST-PATH or add a static favicon.",
+      "priority": "low",
+      "risk": "low",
+      "status": "pending",
+      "created_at": "2026-08-27",
+      "gates": {
+        "reviewer": false,
+        "security": false,
+        "qa": false
+      },
+      "phase": "pos"
     }
   ]
 }