Re-review: admin personas + install wizard + mail UI + Network carve#9

Open

keithfawcett wants to merge 131 commits intopre-ultrareview-2from

Commits on Apr 24, 2026

ci: build @openpartner/db before typecheck

Keith Fawcett
and
claude
committed
fix(safe-fetch): strip IPv6 brackets before IP check
Keith Fawcett
committed
ci: quote NETWORK_ENCRYPTION_KEY in workflow env
Keith Fawcett
committed
refactor: carve Network + human-auth out of OSS

Keith Fawcett
and
claude
committed
feat(auth): partner invite + magic-link signin

Keith Fawcett
and
claude
committed
refactor(mail): drop dev mailbox, mail via Postmark or stdout fallback

Keith Fawcett
and
claude
committed
fix(portal): admins don't mint partner credentials or create partner links

Keith Fawcett
and
claude
committed
feat(admin): partner revocation with session kill + attribution skip

Keith Fawcett
and
claude
committed
feat(admin): revoke notifications + optional reason + signin handling

Keith Fawcett
and
claude
committed
feat(admin): UI-managed program settings (name + support email)

Keith Fawcett
and
claude
committed
feat(auth): admin personas, SMTP support, first-run install wizard

Keith Fawcett
and
claude
committed

Commits on Apr 25, 2026

feat(mail): UI-managed SMTP/Postmark config, encrypted at rest

Keith Fawcett
and
claude
committed
fix(install): split first-run into a three-step wizard
Keith Fawcett
committed
docs: refresh for admin personas, first-run wizard, UI-managed mail
Keith Fawcett
committed
fix(critical): signin email-spam vector, /install TOCTOU, last-admin race

Keith Fawcett
and
claude
committed
fix(correctness): revoke kills api keys, install retryable, schema gaps

Keith Fawcett
and
claude
committed
fix(polish): dup-email 409, empty smtp host, spa bounce, migration down

Keith Fawcett
and
claude
committed
feat(partner): getting-started checklist on first-run dashboard
Keith Fawcett
committed
feat(stripe-webhook): merchant billing flow via client_reference_id

Keith Fawcett
and
claude
committed
feat(stripe-webhook): accept comma-separated STRIPE_WEBHOOK_SECRET

Keith Fawcett
and
claude
committed
chore(stripe): provisioning script for products + prices

Keith Fawcett
and
claude
committed

Commits on Apr 26, 2026

feat(billing): refund handling, metered usage billing, V2 checkout fix

Keith Fawcett
and
claude
committed
feat(deploy): in-process scheduler + prod-ready DO App Platform spec

Keith Fawcett
and
claude
committed
chore(deploy): switch DATABASE_URL to externally-provisioned secret

Keith Fawcett
and
claude
committed
fix(deploy): app.yaml validates against DO API

Keith Fawcett
and
claude
committed
fix(deploy): force devDeps during portal build (tsc, vite)
Keith Fawcett
committed
fix(db): handle managed-postgres TLS (sslmode=require)

Keith Fawcett
and
claude
committed
fix(db): strip sslmode from URL so explicit ssl config wins

Keith Fawcett
and
claude
committed

Commits on Apr 27, 2026

Commits on Apr 28, 2026

feat(network): partner-role Network surfaces (Discover, Apply, My partnerships, etc.)

Keith Fawcett
and
claude
committed
feat(portal): multi-tenant landing + signup; brand assets; URL prefix strip

Keith Fawcett
and
claude
committed
feat(portal): platform-level Creator account on multi-tenant deploy

Keith Fawcett
and
claude
committed
chore(portal): rename vendor CTAs from "program" to "brand"

Keith Fawcett
and
claude
committed
feat(portal): rewrite Landing in marketing voice; unified email signin

Keith Fawcett
and
claude
committed
fix(portal): escape hyphen in handle/slug pattern attributes

Keith Fawcett
and
claude
committed
fix(creator-portal): split Set-Cookie + drop Cloudflare cookies

Keith Fawcett
and
claude
committed
chore(portal): brand signup is account creation, not program creation

Keith Fawcett
and
claude
committed
chore(deploy): boot-time secrets_probe — surface which envs populated

Keith Fawcett
and
claude
committed
fix(signin): also send activation link for unactivated admins

Keith Fawcett
and
claude
committed
fix(auth): magic-link verify redirects to tenant home, not Landing

Keith Fawcett
and
claude
committed
feat(landing): auto-redirect signed-in visitors to their portal

Keith Fawcett
and
claude
committed
feat(auth): platform identity + workspace picker

Keith Fawcett
and
claude
committed
chore(portal): wire name + autocomplete on auth inputs for autofill

Keith Fawcett
and
claude
committed
feat(signup): auto-enroll hosted brands on the Network with vendorToken inline

Keith Fawcett
and
claude
committed
feat(brand): account deletion (GDPR right of erasure) — phase 1

Keith Fawcett
and
claude
committed
feat(brand): account-deletion phase 2 — Stripe + Network + obligations + scheduler + export

Keith Fawcett
and
claude
committed
chore: pg advisory lock on scheduler + open /partners/:id/revoke to scoped tokens

Keith Fawcett
and
claude
committed
feat(network): one-click auto-enroll for existing tenants + brand rename

Keith Fawcett
and
claude
committed

Commits on Apr 29, 2026

fix(emails): partner invite + signin emails name the brand

Keith Fawcett
and
claude
committed
fix(portal): tenant-scope absolute Links on the partner Dashboard

Keith Fawcett
and
claude
committed
fix(portal): hide Network sub-nav until the brand is connected

Keith Fawcett
and
claude
committed
refactor(links): destinationUrl belongs to the brand, not the partner

Keith Fawcett
and
claude
committed
feat(programs): scope partner share-links to granted campaigns

Keith Fawcett
and
claude
committed
feat(programs): admin grant management UI + creator-side Offering hint

Keith Fawcett
and
claude
committed
feat(onboarding): brand + creator getting-started checklists

Keith Fawcett
and
claude
committed
fix(network-proxy): bump timeouts past App Platform cold-start; surface errors

Keith Fawcett
and
claude
committed
fix(network-membership): heal tenants with empty networkUrl after verify

Keith Fawcett
and
claude
committed
fix(network-partner): graceful empty state for partners not pushed to Network

Keith Fawcett
and
claude
committed
fix(network-push): apply NETWORK_URL fallback in dispatch too

Keith Fawcett
and
claude
committed
fix(signup): re-claim slug when no admin has activated yet

Keith Fawcett
and
claude
committed
fix(settings/onboarding): default brand name to Tenant.displayName

Keith Fawcett
and
claude
committed
feat(mail): brand-aware From + Reply-To on platform fallback; surface in UI

Keith Fawcett
and
claude
committed
feat(mail): fall back Reply-To to oldest activated admin email

Keith Fawcett
and
claude
committed
feat(campaigns): optional start + end dates with proper lifecycle gates

Keith Fawcett
and
claude
committed
feat(campaigns): 7-day-before-end notifications to brand + active partners

Keith Fawcett
and
claude
committed
chore(campaigns): help-tooltip on Attribution model

Keith Fawcett
and
claude
committed
chore(portal): theme the Description textarea + Campaign select on Offerings

Keith Fawcett
and
claude
committed
feat(admin): per-partner campaign scoping at invite + drop offering productUrl

Keith Fawcett
and
claude
committed
feat(campaigns): optional bulk-grant to existing partners on create

Keith Fawcett
and
claude
committed
fix(creator-portal): wrap proxy in try/catch + log upstream errors

Keith Fawcett
and
claude
committed
feat(creator-signup): live handle availability check

Keith Fawcett
and
claude
committed
chore(creator-profile): theme the Bio textarea (was browser-default white)

Keith Fawcett
and
claude
committed
fix(partners): validate campaignIds against tenant before grant insert

Keith Fawcett
and
claude
committed
chore(portal): themed Textarea + sweep raw form elements

Keith Fawcett
and
claude
committed
chore(network-client): log upstream error body for diagnosis

Keith Fawcett
and
claude
committed
fix(network-signup): instanceUrl must put /api before /t/<slug>

Keith Fawcett
and
claude
committed
feat(router): /r/:slug/:linkKey for multi-tenant share links

Keith Fawcett
and
claude
committed
feat(clicks): POST /clicks for federated click ingestion

Keith Fawcett
and
claude
committed
feat(creator-portal): UI for custom domains + share-link management

Keith Fawcett
and
claude
committed
feat(creator-portal): conditional CTAs based on per-offering myStatus

Keith Fawcett
and
claude
committed
feat(creator-portal): proxy passthrough for new profile endpoints

Keith Fawcett
and
claude
committed
feat(creator-portal): Tier 1 profile editor + public profile page

Keith Fawcett
and
claude
committed
feat(network): proxy creator-directory search to brand admins

Keith Fawcett
and
claude
committed
feat(admin-portal): brand-side creator discovery directory

Keith Fawcett
and
claude
committed
fix(creator-profile): keep audience locations as raw text while typing

Keith Fawcett
and
claude
committed
chore(portal): collapsible Admin + Network sidebar sections

Keith Fawcett
and
claude
committed
fix(portal): collapsible nav header inherits font-family only

Keith Fawcett
and
claude
committed
chore(portal): match Network admin page typography to rest of site

Keith Fawcett
and
claude
committed

Commits on Apr 30, 2026

feat(dashboard): per-Link breakdown via ?includeLinks=true

Keith Fawcett
and
claude
committed
feat(creator-portal): per-link breakdown on My partnerships

Keith Fawcett
and
claude
committed
feat(invite-to-apply): brand UI + creator deeplink handling

Keith Fawcett
and
claude
committed
feat(creator-portal): "Recommended for you" strip on Discover

Keith Fawcett
and
claude
committed
feat(import): partner-roster CSV importer for migrations

Keith Fawcett
and
claude
committed
feat(coupons): coupon-code attribution path

Keith Fawcett
and
claude
committed
feat(coupons): auto-mint on PartnerCampaign grant

Keith Fawcett
and
claude
committed
feat(creator-portal): coupon codes alongside share URL on Share links

Keith Fawcett
and
claude
committed
feat(stripe-webhook): auto-redeem OpenPartner coupons from discount events

Keith Fawcett
and
claude
committed
feat(coupons): per-code redemption + revenue stats (90d)

Keith Fawcett
and
claude
committed
feat(creator-portal): per-coupon redemption + revenue stats

Keith Fawcett
and
claude
committed
feat(coupons): integration verification gate

Keith Fawcett
and
claude
committed
chore(portal): sticky sidebar so middle nav actually scrolls

Keith Fawcett
and
claude
committed
fix(migration): guard Coupon grant when openpartner_app role is absent

Keith Fawcett
and
claude
committed
fix(db): carry sslmode from DATABASE_URL to DATABASE_URL_APP

Keith Fawcett
and
claude
committed
fix(db): reconcile openpartner_app role on every boot

Keith Fawcett
and
claude
committed
feat(network): heartbeat sender + local-truth partnerCount

Keith Fawcett
and
claude
committed
feat(invite): show deeplink to brand for spam-fallback DM

Keith Fawcett
and
claude
committed
ci: publish @openpartner/sdk to npm on tagged releases

Keith Fawcett
and
claude
committed
ci: switch sdk publish to npm Trusted Publishing (OIDC)

Keith Fawcett
and
claude
committed
fix(portal): use tenant-prefixed Links across brand workspace

Keith Fawcett
and
claude
committed
refactor(portal): promote Programs + Coupons to dedicated pages

Keith Fawcett
and
claude
committed
feat(uploads): brand logos + creator avatar uploads

Keith Fawcett
and
claude
committed
security: address Semgrep findings before public release

Keith Fawcett
and
claude
committed
brand: GitHub social preview / OG image

Keith Fawcett
and
claude
committed
Add Buy Me a Coffee funding option
keithfawcett
authored
Update CODE_OF_CONDUCT.md
keithfawcett
authored
brand(og): match marketing-site hero copy + emerald accent

Keith Fawcett
and
claude
committed
docs(readme): align pricing with marketing site + Stripe products

Keith Fawcett
and
claude
committed
governance: CODEOWNERS + SECURITY.md ahead of public flip

Keith Fawcett
and
claude
committed
brand(og): drop eyebrow pill, center headline

Keith Fawcett
and
claude
committed
chore(deps): bump vite to 6 + vitest to 3 to clear dependabot alerts

Keith Fawcett
and
claude
committed
chore(lint): unblock pnpm lint across the workspace

Keith Fawcett
and
claude
committed
security: address CodeQL findings before public release

Keith Fawcett
and
claude
committed
feat(billing): per-tenant plan + 14-day trial + Stripe lifecycle

Keith Fawcett
and
claude
committed
feat(billing): admin Billing page + onboarding step

Keith Fawcett
and
claude
committed
feat(billing): close trial-loop hole + soft 402 gate + posthog

Keith Fawcett
and
claude
committed
fix(account-deletion): correct column + status enums

Keith Fawcett
and
claude
committed
fix(billing): inline plan picker + posthog snippet hardening

Keith Fawcett
and
claude
committed
fix(stripe-webhook): resolve tenant for merchant subscription events

Keith Fawcett
and
claude
committed

Commits on May 1, 2026

feat(signup): brand/creator tab switcher above the form

Keith Fawcett
and
claude
committed