karti
13dec6b4b8
Seven parallel agents and an adversarial verification pass. The three things worth knowing before reading the diff: RBAC WAS ALREADY BUILT. docs/build-plan.md marks F2 and F3 outstanding and is stale — packages/core/src/permissions.ts and lib/mutation.ts shipped long ago. So this does not rebuild them; it closes the gaps an audit found. The big one is that reads were entirely ungoverned: every GET was "any authenticated member", so a junior demand rep and a research contractor could both pull per-block supplier cost and break-even prices from /api/capacity/margin, and every contract's negotiated terms. For a company whose margin is the business, that was the hole that mattered. Adds book:read / economics:read / team:read, a readGuard middleware, and a `viewer` role below member. THE BUTTON AND THE 403 DISAGREED — the exact thing F3 said must never happen. Contracts.tsx never called can() at all, so its save button was always enabled against a server requiring contract:sign; Capacity.tsx gated commitment creation on deal:write/demand while the server wanted commitment:write/supply. POST /api/activities was the one write bypassing executeMutation: no capability check, and any member could mutate accounts.lastActivityAt as a side effect. It is now a proper mutation() behind activity:write. The shell becomes three panes — a collapsible shadcn sidebar with an account switcher on the Piggy accent, a header with real search, and Piggy docked to the right, page-aware and persistent across navigation. The phone keeps its bottom tab bar, which is the thing this product already beat trycompai/crm on, and gains the sidebar as a sheet. Calendar is a projection over thirteen dated sources rather than a new table, because a table would duplicate dates that already live on contracts, deals and commitments and would drift — and one ledger answering the question is the whole argument. It surfaces export_authorizations and compliance_artifacts, which had indexed expires_at columns, schema comments saying they must be alerted on, and no read endpoint or UI anywhere. Learn carries two tracks. Concepts are members-only; the platform track can be opened with a share code by someone with no account. The code mints a scoped learn-only token and never a Principal — every route here resolves a principal and then checks capabilities, so a principal-minting code would be one missing check away from leaking the book. "Only platform-track rows may be code-visible" is a database CHECK constraint as well as a write-path rule, and a test asserts a valid learn token still gets 401 on /api/dashboard, /api/accounts and /api/contracts — the same invariant scripts/deploy.sh refuses to ship without. CD becomes tag-to-ship. CI publishes an image to the Gitea registry on a release-* tag and cloud-2 pulls it, so no credential on the shared runner can execute anything on production — by construction rather than by policy. Both halves of deploy.sh's original rule survive: nothing on the runner reaches the host, and a human still decides when it ships. deploy.sh gains a rollback and a public-origin check, and PIG_IMAGE now reaches compose through `sudo env`, without which sudo's env_reset silently resolved every release to pig:local. Tests 141 -> 261. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
92 lines
3.5 KiB
JavaScript
92 lines
3.5 KiB
JavaScript
import animate from 'tailwindcss-animate';
|
|
|
|
/** @type {import('tailwindcss').Config} */
|
|
export default {
|
|
darkMode: ['class', '[data-theme="dark"]'],
|
|
content: ['./index.html', './src/**/*.{ts,tsx}'],
|
|
theme: {
|
|
extend: {
|
|
colors: {
|
|
// Every colour resolves through a CSS variable so the user's chosen
|
|
// accent re-tints the whole interface without a rebuild.
|
|
bg: 'hsl(var(--bg))',
|
|
background: 'hsl(var(--bg))',
|
|
surface: 'hsl(var(--surface))',
|
|
'surface-2': 'hsl(var(--surface-2))',
|
|
border: 'hsl(var(--border))',
|
|
input: 'hsl(var(--border))',
|
|
ring: 'hsl(var(--accent))',
|
|
fg: 'hsl(var(--fg))',
|
|
foreground: 'hsl(var(--fg))',
|
|
muted: 'hsl(var(--muted))',
|
|
'muted-foreground': 'hsl(var(--muted))',
|
|
/*
|
|
* shadcn's `accent` is its SUBTLE hover/selected surface — dropdown
|
|
* items, command rows, ghost-button hover. It is not the brand colour;
|
|
* that is `primary`, mapped below.
|
|
*
|
|
* Mapping `accent` to --accent (the brand) inverted this, so every
|
|
* hover state painted a full-strength brand block: in dark mode with
|
|
* the monochrome "pig" accent that is near-white, which made a selected
|
|
* command row glare. Aliased to the subtle pair instead, so shadcn
|
|
* primitives tint the way their authors intended while PIG's own brand
|
|
* fills use `primary`.
|
|
*/
|
|
accent: 'hsl(var(--accent-subtle))',
|
|
'accent-foreground': 'hsl(var(--accent-fg))',
|
|
/** The brand itself, for PIG's own components that need a solid fill. */
|
|
brand: 'hsl(var(--accent))',
|
|
'accent-fg': 'hsl(var(--accent-fg))',
|
|
'accent-on': 'hsl(var(--accent-on))',
|
|
'accent-subtle': 'hsl(var(--accent-subtle))',
|
|
primary: {
|
|
DEFAULT: 'hsl(var(--accent))',
|
|
foreground: 'hsl(var(--accent-on))',
|
|
},
|
|
secondary: {
|
|
DEFAULT: 'hsl(var(--surface-2))',
|
|
foreground: 'hsl(var(--fg))',
|
|
},
|
|
card: {
|
|
DEFAULT: 'hsl(var(--surface))',
|
|
foreground: 'hsl(var(--fg))',
|
|
},
|
|
popover: {
|
|
DEFAULT: 'hsl(var(--surface))',
|
|
foreground: 'hsl(var(--fg))',
|
|
},
|
|
destructive: {
|
|
DEFAULT: 'hsl(var(--danger))',
|
|
foreground: 'hsl(0 0% 100%)',
|
|
},
|
|
/*
|
|
* The sidebar primitive's scale. Every one of these resolves, through
|
|
* the --sidebar-* aliases in index.css, to a variable already defined
|
|
* above — so this is a naming layer for shadcn's block, not a second
|
|
* palette that can drift from the first.
|
|
*/
|
|
sidebar: {
|
|
DEFAULT: 'hsl(var(--sidebar-background))',
|
|
foreground: 'hsl(var(--sidebar-foreground))',
|
|
primary: 'hsl(var(--sidebar-primary))',
|
|
'primary-foreground': 'hsl(var(--sidebar-primary-foreground))',
|
|
accent: 'hsl(var(--sidebar-accent))',
|
|
'accent-foreground': 'hsl(var(--sidebar-accent-foreground))',
|
|
border: 'hsl(var(--sidebar-border))',
|
|
ring: 'hsl(var(--sidebar-ring))',
|
|
},
|
|
positive: 'hsl(var(--positive))',
|
|
warning: 'hsl(var(--warning))',
|
|
danger: 'hsl(var(--danger))',
|
|
info: 'hsl(var(--info))',
|
|
},
|
|
fontFamily: {
|
|
sans: ['Manrope Variable', 'Avenir Next', 'ui-sans-serif', 'system-ui', 'sans-serif'],
|
|
mono: ['ui-monospace', 'SFMono-Regular', 'Menlo', 'monospace'],
|
|
},
|
|
borderRadius: { lg: '0.75rem', xl: '1rem' },
|
|
},
|
|
},
|
|
plugins: [animate],
|
|
};
|