portal

7 Commits

Author	SHA1	Message	Date
sharang	60209428b5	feat(app): M5.2 — customer-area route shells + role-gated nav ci / e2e (pull_request) Has been skipped Details ci / shared (pull_request) Successful in 4s Details ci / test (pull_request) Successful in 26s Details ci / image (pull_request) Has been skipped Details Adds the M5.2 surface set per PLATFORM_ARCHITECTURE.md §5a. Every route is a navigable skeleton with a per-route empty-state pointing at the milestone that ships the real content; the Nav component filters links by session.org_roles so an IT_ADMIN sees settings + api-keys, a CXO sees billing, a USER sees only dashboard + products + support, etc. New surfaces (10): /[slug]/products M10.1 /[slug]/projects M10.1 /[slug]/catalog M11.1 /[slug]/settings M10.1 /[slug]/settings/users M10.1 /[slug]/settings/api-keys M15.1 /[slug]/settings/integrations M15.2 /[slug]/billing M8.3 /[slug]/audit M10.2 /[slug]/support M9.1 Dashboard upgraded: reads session.products, renders one tile per entitled product (real tile content lands in M10.1). Empty-state when the user has no entitlements yet — links into the catalog flow. Backstage stub at /__backstage__ — middleware already rewrites backstage.<apex>/* to this prefix; real RBAC against BREAKPILOT_ADMIN / SUPPORT_ENGINEER / SALES_REP lands in M13.2. Layout enforces tenant-slug match: a session with tenant_slug=A trying to view /B/... gets redirected to /A/dashboard. Prevents JWT-replay across tenants (defence in depth; the real guard is at the API layer, which M4.3 adds in tenant-registry). src/lib/session.ts is the single source of truth for the role matrix + canSee(surface) helper. 13 vitest cases, 100% coverage of src/lib. Refs: M5.2	2026-05-19 13:54:41 +02:00
sharang	2961f36cca	fix(dev): point TENANT_REGISTRY_URL at :8090 ci / shared (push) Successful in 6s Details ci / test (push) Successful in 29s Details ci / e2e (push) Has been skipped Details ci / image (push) Has been skipped Details Unblock local dev: Keycloak owns :8080, so tenant-registry shifts to :8090. Prod is functionally unchanged. Refs: M5.1	2026-05-19 09:47:38 +00:00
sharang	e7a1290246	feat(app): Next.js 16 + Auth.js v5 portal skeleton ci / shared (push) Successful in 4s Details ci / test (push) Successful in 26s Details ci / e2e (push) Has been skipped Details ci / image (push) Has been skipped Details Next.js 16 + Auth.js v5 skeleton: host→slug middleware, tenant-context layout, OIDC sign-in flow against breakpilot-dev realm. 100% coverage on src/lib. Bumps next to 16.2.6 to clear trivy CVEs in 15.0.3.	2026-05-19 09:35:05 +00:00
sharang	3c7409ee9e	chore(domain): yourplatform.com → breakpilot.com ci / shared (push) Successful in 5s Details ci / test (push) Has been skipped Details ci / e2e (push) Has been skipped Details ci / image (push) Has been skipped Details Apply platform-domain decision (2026-05-18). No services touched; docs/config only. Refs: M1.1	2026-05-18 20:28:44 +00:00
sharang	dd4764fbb2	ci: rework workflow for Gitea Actions (M0.2) ci / e2e (push) Has been skipped Details ci / image (push) Has been skipped Details ci / shared (push) Successful in 5s Details ci / test (push) Has been skipped Details Switches commitlint to bash regex, gitleaks to inline binary, trivy to inline binary (v0.70.0). Per-stack jobs gated on hashFiles. Refs: M0.2	2026-05-18 19:42:30 +00:00
sharang	21f6d70a32	chore: bootstrap repo scaffolding (M0.1) ci / shared (push) Failing after 6s Details ci / test (push) Failing after 3s Details ci / e2e (push) Has been skipped Details ci / image (push) Has been skipped Details Bootstraps §1.2 scaffolding (README, CONTRIBUTING, CODEOWNERS, CHANGELOG, PR + issue templates, LICENSE, CI workflow, release workflow, commitlint, cliff, .editorconfig, .gitignore, .env.example) and ships a proprietary all-rights-reserved LICENSE naming both founders. Refs: M0.1	2026-05-18 19:15:34 +00:00
sharang	ae9f68d6b6	Initial commit	2026-05-18 19:05:35 +00:00