CIAgent bcca7686ee feat(P2): Wave B identity & RBAC — WorkOS SSO, tenant provisioning, RBAC at gateway ...

REQ-001: SSO session via WorkOS (getAuthorizationUrl + exchangeCodeForSession)
REQ-002: tenant provisioning on first signup (admin role)
REQ-003: invitations via single-use acceptance link
REQ-004: RBAC role assignment (admin/operator/viewer)
REQ-005: RBAC enforcement at API gateway from first endpoint (/api/me)

---ci---
phase: 2
milestone: v0.1
status: execute
---/ci---

2026-08-25 01:47:56 +00:00

..

migrations

feat(P2): Wave B identity & RBAC — WorkOS SSO, tenant provisioning, RBAC at gateway

2026-08-25 01:47:56 +00:00

src

feat(P2): Wave B identity & RBAC — WorkOS SSO, tenant provisioning, RBAC at gateway

2026-08-25 01:47:56 +00:00

tests

feat(P1): Wave A foundations — monorepo, DB+RLS, audit, secrets, runtime

2026-08-25 01:29:25 +00:00

eslint.config.js

feat(P1): Wave A foundations — monorepo, DB+RLS, audit, secrets, runtime

2026-08-25 01:29:25 +00:00

package.json

feat(P1): Wave A foundations — monorepo, DB+RLS, audit, secrets, runtime

2026-08-25 01:29:25 +00:00

tsconfig.json

feat(P1): Wave A foundations — monorepo, DB+RLS, audit, secrets, runtime

2026-08-25 01:29:25 +00:00

vitest.config.ts

feat(P1): Wave A foundations — monorepo, DB+RLS, audit, secrets, runtime

2026-08-25 01:29:25 +00:00