Go CLI for Zepto and Blinkit. Executable: qc. Keep the existing module and
Zepto storage identifiers so existing installations do not lose their state.
- Rename user-facing CLI and add explicit
zepto/blinkitrouting. - Phone OTP login, with optional local
imsgcode retrieval. - Separate private session files, reusable browser cookies, live auth checks.
- JSON authentication output, bounded waits, no automatic OTP resends.
- Tests, live login tests without purchases, and
/review. - Boss acceptance before milestone 2.
- Automatic Zepto session refresh on HTTP 401/403 and automatic rate-limit backoff on HTTP 429.
- Full multi-page order history (
orders [n|--all]) and itemized order inspection (order <id-or-code>) for both Zepto and Blinkit. - Live Blinkit product search (
qc blinkit search <query>). - Cross-platform live price comparison (
qc compare <query>) and lifetime/category spend analytics (qc spend [--md] [--out]). - Full
--jsonoutput across all read, auth and analytics commands (search,compare,orders,order,track,wallet,spend,whoami,auth status).
- Search, addresses, cart quotes, orders and tracking for both providers.
- Remove account-specific assumptions; require explicit address selection.
- Preview checkout with exact items, quantities, fees and payment method.
- Explicitly confirmed order submission, duplicate protection and recovery from uncertain responses. Never automatically retry an uncertain purchase.
- Mock purchase tests. No live orders without separate authorization.
- Review and Boss acceptance before milestone 3.
- Discover provider-supported issue categories and eligibility read-only.
- Draft issues against actual order items and user-supplied evidence.
- Explicit confirmation before sending claims or accepting settlements.
- Track case status and actual provider refund decisions. Do not fabricate complaints or promise approval; report app-only steps when necessary.
- Mock submission tests, review and Boss acceptance.
Both sites expose SMS OTP login. Browser login succeeded for both using fresh
codes from imsg. Zepto accepted a captured authenticated read-only request
outside the browser. Blinkit returned HTTP 403 outside the browser and HTTP 200
for its authenticated order-count request inside the browser. Browser-assisted
authentication is necessary for this implementation, not OAuth.
No orders or support/refund requests are authorized during development. No cloud resources, global installations, repository renames or releases are in scope.