feat(security): add multi-tenancy isolation and demo mode (#90 )

Add org-scoped data isolation across all server actions to
prevent cross-org data leakage. Add read-only demo mode with
mutation guards on all write endpoints.

Multi-tenancy:
- org filter on executeDashboardQueries (all query types)
- org boundary checks on getChannel, joinChannel
- searchMentionableUsers derives org from session
- getConversationUsage scoped to user, not org-wide for admins
- organizations table, members, org switcher component

Demo mode:
- /demo route sets strict sameSite cookie
- isDemoUser guards on all mutation server actions
- demo banner, CTA dialog, and gate components
- seed script for demo org data

Also: exclude scripts/ from tsconfig (fixes build), add
multi-tenancy architecture documentation.

Co-authored-by: Nicholai <nicholaivogelfilms@gmail.com>

2026-02-15 22:05:12 -07:00

3.7 KiB

Executable File

Raw Blame History

Compass Documentation

Compass is two things: a platform and a product.

Compass Core is an agentic dashboard platform -- authentication, an AI assistant, visual theming, a plugin system, and custom dashboards. It's built with Next.js 15, React 19, Cloudflare D1, and the AI SDK. It's generic. Any industry could use it.

HPS Compass is a construction project management product built on top of Compass Core. It adds scheduling with Gantt charts, financial tracking tied to NetSuite, Google Drive integration for project documents, and a Capacitor mobile app for field workers. It's specific to construction, but the architecture is designed so other industries could build their own module packages.

architecture

How the core platform works.

overview -- the two-layer architecture, tech stack, project structure, how everything connects
data layer -- Drizzle ORM on Cloudflare D1, schema conventions, migration workflow
server actions -- the data mutation pattern, auth checks, error handling, revalidation
auth system -- WorkOS integration, middleware, session management, RBAC
AI agent -- OpenRouter provider, tool system, system prompt, unified chat architecture, usage tracking
multi-tenancy -- org isolation, demo mode guards, the requireOrg pattern, adding new server actions safely

modules

The construction-specific modules that make up HPS Compass.

overview -- what the module system is, core vs module boundary, how modules integrate
netsuite -- bidirectional ERP sync: OAuth, HTTP client, rate limiter, sync engine, mappers, gotchas
google drive -- domain-wide delegation, JWT auth, drive client, two-layer permissions, file browser
scheduling -- Gantt charts, critical path analysis, dependency management, baselines, workday exceptions
financials -- invoices, vendor bills, payments, credit memos, NetSuite sync tie-in
mobile -- Capacitor native app, offline photo queue, push notifications, biometric auth
desktop -- Tauri desktop app, SQLite sync, Wayland/NVIDIA compatibility, offline-first
claude code -- local bridge daemon, own Anthropic API key, filesystem + terminal tools, WebSocket protocol

development

How to work on Compass.

getting started -- local setup, environment variables, dev server, database, deployment
conventions -- TypeScript discipline, component patterns, file organization
sidebar -- sidebar component architecture, desktop vs mobile, collapsed state, animations
theming -- oklch color system, preset themes, custom theme generation, how applyTheme works
plugins -- skills system, plugin manifests, registry, building new plugins

quick reference

bun dev              # dev server on :3000
bun run build        # production build
bun deploy           # build + deploy to cloudflare workers
bun run db:generate  # generate migrations from schema
bun run db:migrate:local  # apply migrations locally
bun run db:migrate:prod   # apply migrations to production
bun tauri:dev        # desktop dev (auto-configures Wayland/NVIDIA)
bun tauri:build      # desktop production build
bun lint             # eslint

See getting started for full setup instructions.

3.7 KiB Executable File Raw Blame History