CluPilotCloud

Commit Graph

Author	SHA1	Message	Date
nexxo	b032d8808b	feat(landing): public marketing homepage at / (+ legal placeholders) Public www landing page (your design) as a self-contained Blade view at / — own CSS/JS, system fonts (no CDN, R14), hero, marquee, typewriter, product mock with scroll-zoom, security section, honest comparison, pricing gallery, FAQ, CTA. It is intentionally outside the app token/component system (marketing page, not control panel). Wired a sign-in link to route('login'). Robustness/a11y hardening from the Codex (R15) loop: - reduced-motion: pin hero/reveal elements to their visible end state. - <noscript> fallback so reveal content is visible without JS. - login link kept visible on mobile (moved out of the hidden nav group). - stats render their real values in HTML (correct without JS). - footer legal links now resolve to real /legal/* routes (placeholder pages). - reconciled contradictory data-migration pricing (add-on from €390). 48 Pest tests green; R12 browser: landing 0 console errors. Codex (R15) clean. NOTE: the /legal/* pages (Impressum, Datenschutz, AGB) are placeholders — real legal content must be supplied before this homepage goes public. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-07-25 08:59:39 +02:00
nexxo	254a7d46a0	feat(portal): Fortify auth + Login/2FA/Dashboard + component kit Backend (Fortify): - laravel/fortify with TOTP two-factor + recovery codes; User uses TwoFactorAuthenticatable; 2FA credentials hidden from serialization. - Views off — pages are full-page class-based Livewire components (R1/R2); Fortify handles POST actions. Home redirect -> /dashboard. v1 scope: login + 2FA only (no public register/reset/passkeys). Seeder gated to local/testing. Component kit (Blade, token-based, a11y): - button, input, checkbox, alert, card, badge, stat-tile, otp-input (Alpine, auto-advance/paste, -safe submit), progress-stepper, nav-item, icon (Lucide), plus layouts/portal-app app-shell (sidebar drawer + topbar + menu). Screens (localized DE/EN, R16): - Login (form -> login.store), Two-factor challenge (OTP + recovery fallback), Dashboard (KPI stat tiles, instance card, provisioning stepper fixtures, activity). Routes English (R13). Tests + verification: - Pest: 14 green (login ok/invalid/throttle, dashboard guard, component render). - R12 browser (Puppeteer, prod assets): /, /login, /two-factor-challenge and the authenticated /dashboard all HTTP 200 with ZERO console errors; login flow verified end-to-end. - Test isolation fixed (force test env over injected .env). - Reviewed with Codex (R15): 4 rounds, all findings fixed, final pass clean. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-07-25 01:20:25 +02:00

Author

SHA1

Message

Date

nexxo

b032d8808b

feat(landing): public marketing homepage at / (+ legal placeholders)

Public www landing page (your design) as a self-contained Blade view at / — own
CSS/JS, system fonts (no CDN, R14), hero, marquee, typewriter, product mock with
scroll-zoom, security section, honest comparison, pricing gallery, FAQ, CTA. It is
intentionally outside the app token/component system (marketing page, not control
panel). Wired a sign-in link to route('login').

Robustness/a11y hardening from the Codex (R15) loop:
- reduced-motion: pin hero/reveal elements to their visible end state.
- <noscript> fallback so reveal content is visible without JS.
- login link kept visible on mobile (moved out of the hidden nav group).
- stats render their real values in HTML (correct without JS).
- footer legal links now resolve to real /legal/* routes (placeholder pages).
- reconciled contradictory data-migration pricing (add-on from €390).

48 Pest tests green; R12 browser: landing 0 console errors. Codex (R15) clean.

NOTE: the /legal/* pages (Impressum, Datenschutz, AGB) are placeholders — real
legal content must be supplied before this homepage goes public.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-07-25 08:59:39 +02:00

nexxo

254a7d46a0

feat(portal): Fortify auth + Login/2FA/Dashboard + component kit

Backend (Fortify):
- laravel/fortify with TOTP two-factor + recovery codes; User uses
  TwoFactorAuthenticatable; 2FA credentials hidden from serialization.
- Views off — pages are full-page class-based Livewire components (R1/R2);
  Fortify handles POST actions. Home redirect -> /dashboard. v1 scope: login +
  2FA only (no public register/reset/passkeys). Seeder gated to local/testing.

Component kit (Blade, token-based, a11y):
- button, input, checkbox, alert, card, badge, stat-tile, otp-input (Alpine,
  auto-advance/paste, -safe submit), progress-stepper, nav-item, icon
  (Lucide), plus layouts/portal-app app-shell (sidebar drawer + topbar + menu).

Screens (localized DE/EN, R16):
- Login (form -> login.store), Two-factor challenge (OTP + recovery fallback),
  Dashboard (KPI stat tiles, instance card, provisioning stepper fixtures,
  activity). Routes English (R13).

Tests + verification:
- Pest: 14 green (login ok/invalid/throttle, dashboard guard, component render).
- R12 browser (Puppeteer, prod assets): /, /login, /two-factor-challenge and
  the authenticated /dashboard all HTTP 200 with ZERO console errors; login
  flow verified end-to-end.
- Test isolation fixed (force test env over injected .env).
- Reviewed with Codex (R15): 4 rounds, all findings fixed, final pass clean.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-07-25 01:20:25 +02:00

2 Commits (276f926d57b905290ba2f255bf37074f0f970f8a)