nexxo ce970a5fac Design the console's own identity, separate from customer accounts ... The operator console and the customer portal share one users table, one login page and one guard. Three reported faults follow from that single fact: the console serves the portal's sign-in page, that page offers "Registrieren", and the link 404s because RestrictAdminHost::SHARED does not list register. Measured rather than assumed: driving the host guard directly gives /login through and /register 404 on the console host, and all sixteen Spatie permissions turn out to be console permissions — so RBAC moves to the new guard rather than being duplicated across two. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>		2026-07-27 20:40:22 +02:00
..
design	Write the handoff, and rescue the approved templates into the repo	2026-07-27 20:18:20 +02:00
handoffs	Write the handoff, and rescue the approved templates into the repo	2026-07-27 20:18:20 +02:00
specs	docs: Phase D spec — service framing, redesign & CRUD completeness	2026-07-25 14:13:23 +02:00
superpowers	Design the console's own identity, separate from customer accounts	2026-07-27 20:40:22 +02:00
deployment.md	feat(deploy): releases you can pin to, and a version that tells the truth	2026-07-26 15:21:38 +02:00
handoff-plan-catalogue.md	docs: handoff for the plan catalogue rebuild	2026-07-26 10:43:17 +02:00
monitoring-uptime-kuma.md	fix(monitoring): cap monitoring retries at the run budget; dependency-free liveness probe	2026-07-25 20:19:32 +02:00
wireguard-hub.md	docs(wireguard): document the ownership model and config storage	2026-07-25 22:55:14 +02:00