sandbox to main

.eslintrc.cjs

@@ -0,0 +1,22 @@
+module.exports = {
+    root: true,
+    env: { browser: true, es2020: true },
+    extends: [
+        'eslint:recommended',
+        'plugin:@typescript-eslint/recommended',
+        'plugin:react-hooks/recommended',
+    ],
+    ignorePatterns: ['dist', '.eslintrc.cjs'],
+    parser: '@typescript-eslint/parser',
+    plugins: ['react-refresh'],
+    rules: {
+        'react-refresh/only-export-components': [
+            'warn',
+            { allowConstantExport: true },
+        ],
+        '@typescript-eslint/no-explicit-any': 'off',
+        '@typescript-eslint/no-unused-vars': ['warn', { argsIgnorePattern: '^_' }],
+        'no-empty': 'warn',
+        'no-useless-catch': 'warn',
+    },
+};

.github/workflows/deploy.yml

@@ -0,0 +1,73 @@
+name: Deploy DWELIX Client
+
+on:
+  push:
+    branches: [dev, staging, main]
+  pull_request:
+    branches: [main]
+
+env:
+  GCP_REGION: us-central1
+
+jobs:
+  deploy:
+    runs-on: ubuntu-latest
+    if: github.event_name == 'push'
+
+    steps:
+    - uses: actions/checkout@v4
+
+    - name: Set environment variables
+      run: |
+        if [[ "${{ github.ref_name }}" == "main" ]]; then
+          echo "ENVIRONMENT=production" >> $GITHUB_ENV
+          echo "GCP_PROJECT_ID=dwelix-prod" >> $GITHUB_ENV
+          echo "SERVICE_NAME=dwelix-client" >> $GITHUB_ENV
+        elif [[ "${{ github.ref_name }}" == "staging" ]]; then
+          echo "ENVIRONMENT=staging" >> $GITHUB_ENV
+          echo "GCP_PROJECT_ID=dwelix-staging" >> $GITHUB_ENV
+          echo "SERVICE_NAME=dwelix-client-staging" >> $GITHUB_ENV
+        elif [[ "${{ github.ref_name }}" == "dev" ]]; then
+          echo "ENVIRONMENT=development" >> $GITHUB_ENV
+          echo "GCP_PROJECT_ID=dwelix-dev" >> $GITHUB_ENV
+          echo "SERVICE_NAME=dwelix-client-dev" >> $GITHUB_ENV
+        fi
+
+    - name: Authenticate to Google Cloud
+      uses: google-github-actions/auth@v2
+      with:
+        credentials_json: ${{ secrets.GCP_SA_KEY }}
+
+    - name: Set up Cloud SDK
+      uses: google-github-actions/setup-gcloud@v2
+
+    - name: Deploy to Cloud Run
+      run: |
+        gcloud builds submit --config cloudbuild.yaml \
+          --substitutions=BRANCH_NAME=${{ github.ref_name }} \
+          --project=${{ env.GCP_PROJECT_ID }}
+
+  test:
+    runs-on: ubuntu-latest
+    if: github.event_name == 'pull_request'
+
+    steps:
+    - uses: actions/checkout@v4
+
+    - name: Setup Node.js
+      uses: actions/setup-node@v4
+      with:
+        node-version: '22'
+        cache: 'npm'
+
+    - name: Install dependencies
+      run: npm ci
+
+    - name: Type check
+      run: npm run type-check
+
+    - name: Lint
+      run: npm run lint
+
+    - name: Build
+      run: npm run build

.gitignore

@@ -0,0 +1,93 @@
+# Dependencies
+node_modules/
+/.pnp
+.pnp.js
+
+# Production build
+/dist
+/build
+
+# Environment variables
+.env
+.env.local
+.env.development.local
+.env.test.local
+.env.production.local
+
+# Logs
+npm-debug.log*
+yarn-debug.log*
+yarn-error.log*
+pnpm-debug.log*
+lerna-debug.log*
+
+# Runtime data
+pids
+*.pid
+*.seed
+*.pid.lock
+
+# Coverage directory used by tools like istanbul
+coverage/
+*.lcov
+
+# nyc test coverage
+.nyc_output
+
+# ESLint cache
+.eslintcache
+
+# Optional npm cache directory
+.npm
+
+# Optional eslint cache
+.eslintcache
+
+# Microbundle cache
+.rpt2_cache/
+.rts2_cache_cjs/
+.rts2_cache_es/
+.rts2_cache_umd/
+
+# Optional REPL history
+.node_repl_history
+
+# Output of 'npm pack'
+*.tgz
+
+# Yarn Integrity file
+.yarn-integrity
+
+# parcel-bundler cache (https://parceljs.org/)
+.cache
+.parcel-cache
+
+# Next.js build output
+.next
+
+# Nuxt.js build / generate output
+.nuxt
+dist
+
+# Storybook build outputs
+.out
+.storybook-out
+
+# Temporary folders
+tmp/
+temp/
+
+# Editor directories and files
+.vscode/*
+!.vscode/extensions.json
+.idea
+.DS_Store
+*.suo
+*.ntvs*
+*.njsproj
+*.sln
+*.sw?
+
+# Local Netlify folder
+.netlify*.png
+*.jpeg

.nvmrc

@@ -0,0 +1 @@
+25.8.0

.prettierrc

@@ -0,0 +1,8 @@
+{
+  "semi": true,
+  "trailingComma": "es5",
+  "singleQuote": true,
+  "printWidth": 80,
+  "tabWidth": 2,
+  "useTabs": false
+}

BACKEND_MISSING_ENDPOINTS.md

@@ -0,0 +1,47 @@
+# Missing Backend Endpoints
+
+## Critical: PIN Reset Flow
+
+**Status:** ❌ NOT IMPLEMENTED
+
+### Required Endpoints
+
+1. **POST /auth/forgot-pin**
+   - Request body: `{ email: string }`
+   - Response: `{ message: string }`
+   - Action: Send PIN reset email with token
+
+2. **POST /auth/reset-pin**
+   - Request body: `{ token: string, newPin: string }`
+   - Response: `{ message: string }`
+   - Action: Reset PIN using email token
+
+### Current Frontend Implementation
+
+- `/src/pages/auth/ForgotPin.tsx` - Mock implementation (line 19)
+- `/src/pages/auth/ResetPin.tsx` - Likely also mock
+
+### Impact
+
+Users cannot reset their PIN if forgotten, blocking role switching functionality.
+
+### Workaround
+
+Admin must manually reset user PIN in database.
+
+---
+
+## Issue: Invalid PIN Error
+
+**Error:** `POST /auth/switch-role` returns 403 "Invalid role or PIN"
+
+### Possible Causes
+
+1. PIN not set for role
+2. PIN mismatch
+3. Role not properly onboarded
+4. Backend PIN validation logic issue
+
+### Frontend Fix Applied
+
+Better error messaging in `RoleSwitchModal.tsx` to guide users.

Dockerfile

@@ -0,0 +1,31 @@
+# Build stage
+FROM node:18-alpine as build
+
+WORKDIR /app
+
+# Copy package files
+COPY package*.json ./
+
+# Install dependencies
+RUN npm ci --only=production
+
+# Copy source code
+COPY . .
+
+# Build the application
+RUN npm run build
+
+# Production stage
+FROM nginx:alpine
+
+# Copy built assets from build stage
+COPY --from=build /app/dist /usr/share/nginx/html
+
+# Copy nginx configuration
+COPY nginx.conf /etc/nginx/nginx.conf
+
+# Expose port 8080 (Cloud Run requirement)
+EXPOSE 8080
+
+# Start nginx
+CMD ["nginx", "-g", "daemon off;"]