Nicholai
ad2f0c0b9c
Add org-scoped data isolation across all server actions to prevent cross-org data leakage. Add read-only demo mode with mutation guards on all write endpoints. Multi-tenancy: - org filter on executeDashboardQueries (all query types) - org boundary checks on getChannel, joinChannel - searchMentionableUsers derives org from session - getConversationUsage scoped to user, not org-wide for admins - organizations table, members, org switcher component Demo mode: - /demo route sets strict sameSite cookie - isDemoUser guards on all mutation server actions - demo banner, CTA dialog, and gate components - seed script for demo org data Also: exclude scripts/ from tsconfig (fixes build), add multi-tenancy architecture documentation. Co-authored-by: Nicholai <nicholaivogelfilms@gmail.com>
67 lines
3.7 KiB
Markdown
Executable File
67 lines
3.7 KiB
Markdown
Executable File
Compass Documentation
|
|
===
|
|
|
|
Compass is two things: a platform and a product.
|
|
|
|
**Compass Core** is an agentic dashboard platform -- authentication, an AI assistant, visual theming, a plugin system, and custom dashboards. It's built with Next.js 15, React 19, Cloudflare D1, and the AI SDK. It's generic. Any industry could use it.
|
|
|
|
**HPS Compass** is a construction project management product built on top of Compass Core. It adds scheduling with Gantt charts, financial tracking tied to NetSuite, Google Drive integration for project documents, and a Capacitor mobile app for field workers. It's specific to construction, but the architecture is designed so other industries could build their own module packages.
|
|
|
|
|
|
architecture
|
|
---
|
|
|
|
How the core platform works.
|
|
|
|
- [overview](architecture/overview.md) -- the two-layer architecture, tech stack, project structure, how everything connects
|
|
- [data layer](architecture/data-layer.md) -- Drizzle ORM on Cloudflare D1, schema conventions, migration workflow
|
|
- [server actions](architecture/server-actions.md) -- the data mutation pattern, auth checks, error handling, revalidation
|
|
- [auth system](architecture/auth-system.md) -- WorkOS integration, middleware, session management, RBAC
|
|
- [AI agent](architecture/ai-agent.md) -- OpenRouter provider, tool system, system prompt, unified chat architecture, usage tracking
|
|
- [multi-tenancy](architecture/multi-tenancy.md) -- org isolation, demo mode guards, the requireOrg pattern, adding new server actions safely
|
|
|
|
|
|
modules
|
|
---
|
|
|
|
The construction-specific modules that make up HPS Compass.
|
|
|
|
- [overview](modules/overview.md) -- what the module system is, core vs module boundary, how modules integrate
|
|
- [netsuite](modules/netsuite.md) -- bidirectional ERP sync: OAuth, HTTP client, rate limiter, sync engine, mappers, gotchas
|
|
- [google drive](modules/google-drive.md) -- domain-wide delegation, JWT auth, drive client, two-layer permissions, file browser
|
|
- [scheduling](modules/scheduling.md) -- Gantt charts, critical path analysis, dependency management, baselines, workday exceptions
|
|
- [financials](modules/financials.md) -- invoices, vendor bills, payments, credit memos, NetSuite sync tie-in
|
|
- [mobile](modules/mobile.md) -- Capacitor native app, offline photo queue, push notifications, biometric auth
|
|
- [desktop](modules/desktop.md) -- Tauri desktop app, SQLite sync, Wayland/NVIDIA compatibility, offline-first
|
|
- [claude code](modules/claude-code.md) -- local bridge daemon, own Anthropic API key, filesystem + terminal tools, WebSocket protocol
|
|
|
|
|
|
development
|
|
---
|
|
|
|
How to work on Compass.
|
|
|
|
- [getting started](development/getting-started.md) -- local setup, environment variables, dev server, database, deployment
|
|
- [conventions](development/conventions.md) -- TypeScript discipline, component patterns, file organization
|
|
- [sidebar](development/sidebar.md) -- sidebar component architecture, desktop vs mobile, collapsed state, animations
|
|
- [theming](development/theming.md) -- oklch color system, preset themes, custom theme generation, how applyTheme works
|
|
- [plugins](development/plugins.md) -- skills system, plugin manifests, registry, building new plugins
|
|
|
|
|
|
quick reference
|
|
---
|
|
|
|
```bash
|
|
bun dev # dev server on :3000
|
|
bun run build # production build
|
|
bun deploy # build + deploy to cloudflare workers
|
|
bun run db:generate # generate migrations from schema
|
|
bun run db:migrate:local # apply migrations locally
|
|
bun run db:migrate:prod # apply migrations to production
|
|
bun tauri:dev # desktop dev (auto-configures Wayland/NVIDIA)
|
|
bun tauri:build # desktop production build
|
|
bun lint # eslint
|
|
```
|
|
|
|
See [getting started](development/getting-started.md) for full setup instructions.
|