The theme selector and the appearance toggle are the custom elements
go-bananas ships, loaded at run time. They are custom elements rather than
components written here because the applications this service feeds are a mix of
React, vanilla JavaScript and server-rendered HTML, and a custom element is the
one shape all three can use with no build step, no import map, and no second copy
of React to break the hooks.
Every token in the stylesheet is now written as var(--bn-*, fallback). That
ordering is the safety property: with no theme service configured the page renders
exactly as it did before, and with one configured the same rules follow the
palette. The navigation rail takes the contract's sunken surface and its paired
foreground rather than a fixed dark navy, because a light appearance wants dark
text there.
THEME_BASE_URL is read from runtime-config.js, which the entrypoint rewrites from
the environment on start, so one image serves every environment rather than
baking a hostname into the bundle at build time.
contract.test.ts fetches the live contract and asserts it defines every --bn-*
variable this application consumes. A token renamed on the service would
otherwise leave every var() resolving to its fallback, and the page would look
correct while never actually following the palette. Verified it fails on a
deliberately wrong token name.
The image also had two USER lines, the second silently replacing the first with a
uid that owns neither /app nor /tmp/nginx. nginx could not create its pid file or
its temp paths, so the container failed to start. Confirmed by building both
variants: the old one cannot write nginx's temp directory, the fixed one serves
the front end, its hashed assets, and the /api proxy.
Signing in now starts at the sign-in screen and one button that hands the
browser to Go Loose, which returns to the welcome page. Nothing redirects to the
identity provider on its own any more: that fired on every anonymous visit and
read as a redirect loop rather than as a choice to sign in. The password form
remains only where the API reports that Go Loose login is not configured for the
host, because otherwise the application is unreachable on a bare localhost.
A person's picture is carried through from the Go Loose identity and rendered in
the account menu and on the profile page, with their initials as the fallback.
Two things make that fallback necessary rather than decorative: Go Loose retires a
picture key when a picture is replaced, so a link cached in a browser can be dead,
and most people have not uploaded one. The URL is deliberately not persisted
locally, since a stored key would keep failing after the picture changed.
The account menu is a disclosure rather than a hover menu: a real button with
aria-expanded, Escape and outside clicks closing it, and focus returning to the
trigger. It is not an ARIA menu, because its actions are a link and a button and
menuitem roles would strip the link semantics from one of them for no gain.
The account URL of the Go Loose identity is resolved on each sign-in and is read
from the live identity provider every time, which is also what makes it correct
after a picture change.
Depends on the Go Loose revision that serves avatar_url through
/connect/userinfo, so the picture URL reaches this application at all.
Compose hardcoded auth.dev and guess.dev, which made a domain change a
tracked edit that the next pull would undo. Read both from the environment
with the defaults unchanged, following the FRONTEND_URL convention already
in this file.
Separate the internal API and nginx ports, align browser BDD fixtures with tenant and Go Loose requirements, and correct the invitation outcome interaction order.
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
handler.New now requires a database, and the router enforces a tenant
plus Go Loose on protected routes. Update the stubs and integration
setup so those checks pass.
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Register typed API operations and serve an always-current OpenAPI document without a generation command or committed generated artifact.
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Build invitation and meeting URLs from the validated tenant origin and fall back when local HTTP blocks the Clipboard API.
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Derive local API origins and tenant headers from the browser hostname, allow tenant CORS preflights, and document the multi-tenant contract.
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Move Inbox into a top-right account area, add a profile page for the authenticated user, and introduce a configurable sitemap and useful-links footer.
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Invalidate authentication on protected 401 responses and JWT expiration, redirect to the login route, and explain that the session is no longer active.
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Add a copy button to scheduled interview sessions with confirmation, clipboard error handling, and regression coverage.
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Move the React application into app, api, feature, component, style, and type boundaries, and rebuild the interview scheduler with a responsive details-and-team layout.
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Return empty JSON arrays from the API and normalize nullable values from older servers before rendering candidate match counts.
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Separate schema migrations from environment-specific fixtures, run the full API workflow against a disposable PostgreSQL Testcontainer, and provide seeded development and UI test environments.
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
