2 commits

Author	SHA1	Message	Date
Randall Stillwell	d3e7374439	Add SaaS foundation: Auth.js, dashboard shell, org model, auto-assignment ... Major architectural upgrade preparing Echo OCR for self-hosted SaaS deployment: - Auth: Built-in Auth.js v5 with credentials + Authentik OIDC SSO, JWT sessions, middleware route protection, login/signup/setup pages, registration API - UI: Dashboard layout with collapsible sidebar nav, AppShell wrapper, route groups for (dashboard) and (auth), new pages for events/people/reports - Schema: Auth.js tables (Account, Session, VerificationToken), Organization, OrgMember, Location, CollectionDay, Invitation, SystemConfig, ApiKey models; proper User relations to ResponseCard/ActivityLog/Notification - Permissions: Role hierarchy (owner/admin/editor/reviewer/viewer) with action-based permission map and requirePermission/requireAuth helpers - Onboarding: Multi-step setup wizard for first-user bootstrap (account, org, location) with SystemConfig tracking - Events: CollectionDay model with rrule support for recurring church services - Auto-assign: Event-aware card assignment engine replacing getPreviousSunday() - Migration: seed-migration.ts script for upgrading existing deployments Made-with: Cursor	2026-04-14 23:59:38 -05:00
Randall Stillwell	38f4229d3b	Add profile page, user dropdown, and Authentik SSO integration ... - Profile dropdown in header shows user name/email/avatar with links to profile, settings, support, theme submenu, and sign out - New /profile page with editable user info (job title, company, bio) and read-only SSO fields when behind Authentik forward-auth - /api/auth/me endpoint reads X-authentik-* headers and enriches with avatar from Authentik API - Settings page gains Preferences tab with appearance theme picker and notification toggle switches - User profile context backed by localStorage, merges with Authentik data when available Made-with: Cursor	2026-03-12 10:42:39 -05:00