mirror of
https://github.com/velocitatem/cvfs.git
synced 2026-05-31 08:43:37 +00:00
- Visual branch heritage tree with colored dots and connecting lines, depth-aware expand/collapse - Dashboard 3-tab layout: Content (inline block editing + patch staging), Patches (diff view), Submissions (AI suggestions) - Inline block editing: click to edit any CV block, stage edits, save as named branch with pre-filled patches - Submissions tab: create applications, request AI tailoring suggestions, accept/reject per suggestion - Simple hardcoded login (username/password via env vars LOGIN_USER/LOGIN_PASS, defaults admin/admin) - Authentik OIDC integration: authorize redirect + callback exchange, configurable via NEXT_PUBLIC_AUTHENTIK_* - Middleware protecting /dashboard with session cookie verification (HMAC-SHA256) - Auth API routes: /api/auth/login, /api/auth/logout, /api/auth/callback, /api/auth/token - Backend: GET/PATCH submission routes for listing submissions and accepting/rejecting AI suggestions - API client: OIDC bearer token forwarding from client-readable cookie https://claude.ai/code/session_01CdisLhbC2kVt2hxfJ7TNPf
Next.js 15 webapp with React 19, Tailwind CSS 4, Supabase auth, and Turbopack.
Start
bun dev
# or from project root: make run.webapp
Open http://localhost:3000.
Scripts
| Command | Description |
|---|---|
bun dev |
Dev server with Turbopack |
bun build |
Production build |
bun start |
Serve production build |
bun lint |
Run ESLint |
bun typecheck |
Run tsc --noEmit |
Auth
Auth is wired to Supabase via NEXT_PUBLIC_SUPABASE_URL and NEXT_PUBLIC_SUPABASE_PUBLISHABLE_KEY.
Set NEXT_PUBLIC_REQUIRE_AUTH=false in .env to disable auth-gating entirely (default for quick prototyping).
Structure
src/
app/ - Next.js App Router pages
components/ - Reusable bare-bones components (style last)
utils/supabase - Supabase client helpers
libs/ - Shared utilities
locales/ - i18n strings (add languages as needed)