supporthub-api's 010-identity-auth (built after this spec's initial approval)
established that agent/admin login is supporthub-api's own authentication,
never SaaS-delegated — this spec and the project constitution's Principle I
still assumed the opposite. Adds User Story 0 (sign-in, P1) and FR-000/SC-006
for the login screen and session-guard this frontend must now own, and
rewords FR-011/the affected Edge Case to reference the supporthub-api
session role instead of a "SaaS-provided role." Only end-customer identity
remains SaaS-delegated.
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Bootstraps GitHub Spec Kit (scripts, templates, workflow, speckit-*
skills) for this frontend project, mirroring the spec-driven workflow
already used in supporthub-api. Ratifies seven founding principles:
SaaS as the sole identity/access authority, the backend as the sole
source of business logic, strict portal boundaries ((public)/(customer)/
(support)/(admin)), a single typed API client layer (no ad hoc fetching),
configuration over hardcoding for anything the backend exposes as
admin-configurable, an accessible/responsive baseline for an
enterprise all-day tool, and required unit/integration/E2E testing
gates.
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
