fix: temporary trigger test

- Fixed IndustrialCard export in SharedUI.
- Successfully built all extensions including acquisition-library.
- Verified sitemap and briefing module updates.

.agent/workflows/cms-workflow.md

@@ -0,0 +1,82 @@
+---
+description: How to manage and deploy Directus CMS infrastructure changes.
+---
+
+# Directus CMS Infrastructure Workflow
+
+This workflow ensures "Industrial Grade" consistency and stability across local, testing, and production environments for the `at-mintel` Directus CMS.
+
+## 1. Local Development Lifecycle
+
+### Starting the CMS
+To start the local Directus instance with extensions:
+```bash
+cd packages/cms-infra
+npm run up
+```
+
+### Modifying Schema
+1.  **Directus UI**: Make your changes directly in the local Directus Admin UI (Collections, Fields, Relations).
+2.  **Take Snapshot**:
+    ```bash
+    cd packages/cms-infra
+    npm run snapshot:local
+    ```
+    This updates `packages/cms-infra/schema/snapshot.yaml`.
+3.  **Commit**: Commit the updated `snapshot.yaml`.
+
+## 2. Deploying Schema Changes
+
+### To Local Environment (Reconciliation)
+If you pull changes from Git and need to apply them to your local database:
+```bash
+cd packages/cms-infra
+npm run schema:apply:local
+```
+> [!IMPORTANT]
+> This command automatically runs `scripts/cms-reconcile.sh` to prevent "Field already exists" errors by registering database columns in Directus metadata first.
+
+### To Production (Infra)
+To deploy the local snapshot to the production server:
+```bash
+cd packages/cms-infra
+npm run schema:apply:infra
+```
+This script:
+1.  Syncs built extensions via rsync.
+2.  Injects the `snapshot.yaml` into the remote container.
+3.  Runs `directus schema apply`.
+4.  Restarts Directus to clear the schema cache.
+
+## 3. Data Synchronization
+
+### Pulling from Production
+To update your local environment with production data and assets:
+```bash
+cd packages/cms-infra
+npm run sync:pull
+```
+
+### Pushing to Production
+> [!CAUTION]
+> This will overwrite production data. Use with extreme care.
+```bash
+cd packages/cms-infra
+npm run sync:push
+```
+
+## 4. Extension Management
+When modifying extensions in `packages/*-manager`:
+1.  Extensions are automatically built and synced when running `npm run up`.
+2.  To sync manually without restarting the stack:
+    ```bash
+    cd packages/cms-infra
+    npm run build:extensions
+    ```
+
+## 5. Troubleshooting "Field already exists"
+If `schema:apply` fails with "Field already exists", run:
+```bash
+./scripts/cms-reconcile.sh
+```
+This script ensures the database state matches Directus's internal field registry (`directus_fields`).

.changeset/init-mail-package.md

@@ -1,5 +0,0 @@
----
-"@mintel/mail": minor
----
-
-Initial release of the branded email system package.

.changeset/resilient-build-scripts.md

@@ -0,0 +1,7 @@
+---
+"@mintel/monorepo": patch
+"acquisition-manager": patch
+"feedback-commander": patch
+---
+
+fix: make directus extension build scripts more resilient

.dockerignore

@@ -1,7 +1,7 @@
 node_modules
 .next
 .git
-.npmrc
+# .npmrc is allowed as it contains the registry template
 dist
 build
 out

.env

@@ -0,0 +1,36 @@
+# Project
+IMAGE_TAG=v1.8.2
+PROJECT_NAME=at-mintel
+PROJECT_COLOR=#82ed20
+GITEA_TOKEN=ccce002e30fe16a31a6c9d5a414740af2f72a582
+
+# Authentication
+GATEKEEPER_PASSWORD=mintel
+AUTH_COOKIE_NAME=mintel_gatekeeper_session
+
+# Host Config (Local)
+TRAEFIK_HOST=at-mintel.localhost
+DIRECTUS_HOST=cms.localhost
+
+# Next.js
+NEXT_PUBLIC_BASE_URL=http://at-mintel.localhost
+
+# Directus
+DIRECTUS_URL=http://cms.localhost
+DIRECTUS_KEY=F9IIfahEjPq6NZhKyRLw516D8GotuFj79EGK7pGfIWg=
+DIRECTUS_SECRET=OZfxMu8lBxzaEnFGRKreNBoJpRiRu58U+HsVg2yWk4o=
+CORS_ENABLED=true
+CORS_ORIGIN=true
+LOG_LEVEL=debug
+DIRECTUS_ADMIN_EMAIL=mmintel@mintel.me
+DIRECTUS_ADMIN_PASSWORD=Tim300493.
+DIRECTUS_DB_NAME=directus
+DIRECTUS_DB_USER=directus
+DIRECTUS_DB_PASSWORD=mintel-db-pass
+
+# Sentry / Glitchtip
+SENTRY_DSN=
+
+# Analytics (Umami)
+NEXT_PUBLIC_UMAMI_WEBSITE_ID=
+NEXT_PUBLIC_UMAMI_SCRIPT_URL=https://analytics.infra.mintel.me/script.js

.env.example

@@ -1,4 +1,5 @@
 # Project
+IMAGE_TAG=v1.8.2
 PROJECT_NAME=sample-website
 PROJECT_COLOR=#82ed20
 

.eslintignore

@@ -0,0 +1,4 @@
+**/index.js
+**/dist/**
+packages/cms-infra/extensions/**
+packages/cms-infra/extensions/**

.gitea/workflows/maintenance.yml

@@ -0,0 +1,44 @@
+name: 🏥 Server Maintenance
+
+on:
+  schedule:
+    - cron: '0 3 * * *' # Every day at 3:00 AM
+  workflow_dispatch: # Allow manual trigger
+
+jobs:
+  maintenance:
+    name: 🧹 Prune & Clean
+    runs-on: docker
+    container:
+      image: catthehacker/ubuntu:act-latest
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: 🚀 Execute Maintenance via SSH
+        run: |
+          mkdir -p ~/.ssh
+          echo "${{ secrets.SSH_KEY }}" > ~/.ssh/id_ed25519
+          chmod 600 ~/.ssh/id_ed25519
+          ssh-keyscan -H ${{ secrets.SSH_HOST }} >> ~/.ssh/known_hosts 2>/dev/null
+
+          # Run the prune script on the host
+          # We transfer the script and execute it to ensure it matches the repo version
+          scp packages/infra/scripts/prune-registry.sh root@${{ secrets.SSH_HOST }}:/tmp/prune-registry.sh
+          ssh root@${{ secrets.SSH_HOST }} "bash /tmp/prune-registry.sh && rm /tmp/prune-registry.sh"
+
+      - name: 🔔 Notification - Success
+        if: success()
+        run: |
+          curl -s -k -X POST "${{ secrets.GOTIFY_URL }}/message?token=${{ secrets.GOTIFY_TOKEN }}" \
+            -F "title=🏥 Maintenance Complete" \
+            -F "message=Server-Wartung erfolgreich ausgeführt.\nRegistry & Docker Ressourcen bereinigt." \
+            -F "priority=2" || true
+
+      - name: 🔔 Notification - Failure
+        if: failure()
+        run: |
+          curl -s -k -X POST "${{ secrets.GOTIFY_URL }}/message?token=${{ secrets.GOTIFY_TOKEN }}" \
+            -F "title=❌ Maintenance FAILED" \
+            -F "message=Die automatische Server-Wartung ist fehlgeschlagen!\nBitte Logs prüfen." \
+            -F "priority=8" || true

.gitea/workflows/pipeline.yml

@@ -2,6 +2,8 @@ name: Monorepo Pipeline
 
 on:
   push:
+    branches:
+      - '**'
     tags:
       - 'v*'
 
@@ -10,42 +12,124 @@ concurrency:
   cancel-in-progress: true
 
 jobs:
-  qa:
-    name: 🧪 Quality Assurance
+  prioritize:
+    name: ⚡ Prioritize Release
     runs-on: docker
     container:
       image: catthehacker/ubuntu:act-latest
+    steps:
+      - name: 🛑 Cancel Redundant Runs
+        env:
+          GITEA_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          REPO: ${{ github.repository }}
+          RUN_ID: ${{ github.run_id }}
+          REF: ${{ github.ref }}
+          REF_NAME: ${{ github.ref_name }}
+          EVENT: ${{ github.event_name }}
+        run: |
+          echo "🔎 Debug: Event=$EVENT, Ref=$REF, RefName=$REF_NAME, RunId=$RUN_ID"
+          
+          case "$REF" in
+            refs/tags/v*)
+              echo "🚀 Release detected ($REF_NAME). Cancelling non-tag runs..."
+              
+              # Fetch all runs
+              RUNS=$(curl -s -H "Authorization: token $GITEA_TOKEN" "https://git.infra.mintel.me/api/v1/repos/$REPO/actions/runs")
+              
+              # Identify runs to cancel: in_progress/queued, NOT this run, and NOT a tag run
+              echo "$RUNS" | jq -c '.workflow_runs[] | select(.status == "in_progress" or .status == "queued") | select(.id | tostring != "'$RUN_ID'")' | while read -r run; do
+                ID=$(echo "$run" | jq -r '.id')
+                RUN_REF=$(echo "$run" | jq -r '.ref')
+                TITLE=$(echo "$run" | jq -r '.display_title')
+                
+                case "$RUN_REF" in
+                  refs/tags/v*)
+                    echo "⏭️ Skipping parallel release run $ID ($TITLE) on $RUN_REF"
+                    ;;
+                  *)
+                    echo "🛑 Cancelling redundant branch run $ID ($TITLE) on $RUN_REF..."
+                    curl -X POST -s -H "Authorization: token $GITEA_TOKEN" "https://git.infra.mintel.me/api/v1/repos/$REPO/actions/runs/$ID/cancel"
+                    ;;
+                esac
+              done
+              ;;
+            *)
+              echo "ℹ️ Regular push. No prioritization needed."
+              ;;
+          esac
+
+  lint:
+    name: 🧹 Lint
+    needs: prioritize
+    if: always() && !cancelled() && (needs.prioritize.result == 'success' || needs.prioritize.result == 'skipped')
+    runs-on: docker
+    container:
+      image: catthehacker/ubuntu:act-latest
+    env:
+      NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
     steps:
       - name: Checkout
         uses: actions/checkout@v4
-
-      - name: Install pnpm
-        uses: pnpm/action-setup@v4
-        with:
-          version: 10
-
       - name: Set up Node.js
         uses: actions/setup-node@v4
         with:
           node_version: 20
-
+      - name: Enable pnpm
+        run: corepack enable && corepack prepare pnpm@10.2.0 --activate
       - name: Install dependencies
-        run: pnpm install --frozen-lockfile
-        env:
-          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
-
+        run: pnpm install --frozen-lockfile --prefer-offline --ignore-scripts --no-color
       - name: Lint
         run: pnpm lint
 
+  test:
+    name: 🧪 Test
+    needs: prioritize
+    if: always() && !cancelled() && (needs.prioritize.result == 'success' || needs.prioritize.result == 'skipped')
+    runs-on: docker
+    container:
+      image: catthehacker/ubuntu:act-latest
+    env:
+      NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+      - name: Set up Node.js
+        uses: actions/setup-node@v4
+        with:
+          node_version: 20
+      - name: Enable pnpm
+        run: corepack enable && corepack prepare pnpm@10.2.0 --activate
+      - name: Install dependencies
+        run: pnpm install --frozen-lockfile --prefer-offline --ignore-scripts --no-color
       - name: Test
         run: pnpm test
 
+  build:
+    name: 🏗️ Build
+    needs: prioritize
+    if: always() && !cancelled() && (needs.prioritize.result == 'success' || needs.prioritize.result == 'skipped')
+    runs-on: docker
+    container:
+      image: catthehacker/ubuntu:act-latest
+    env:
+      NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+      - name: Set up Node.js
+        uses: actions/setup-node@v4
+        with:
+          node_version: 20
+      - name: Enable pnpm
+        run: corepack enable && corepack prepare pnpm@10.2.0 --activate
+      - name: Install dependencies
+        run: pnpm install --frozen-lockfile --prefer-offline --ignore-scripts --no-color
       - name: Build
         run: pnpm build
 
   release:
     name: 🚀 Release
-    needs: qa
+    needs: [lint, test, build]
     if: startsWith(github.ref, 'refs/tags/v')
     runs-on: docker
     container:
@@ -58,33 +142,44 @@ jobs:
         uses: actions/checkout@v4
         with:
           fetch-depth: 0
-
-      - name: Install pnpm
-        uses: pnpm/action-setup@v4
-        with:
-          version: 10
-
       - name: Set up Node.js
         uses: actions/setup-node@v4
         with:
           node_version: 20
-
+      - name: Enable pnpm
+        run: corepack enable && corepack prepare pnpm@10.2.0 --activate
       - name: Install dependencies
-        run: pnpm install --frozen-lockfile
-
+        run: pnpm install --frozen-lockfile --prefer-offline --ignore-scripts --no-color
+      - name: 🏷️ Sync Versions (if Tagged)
+        run: pnpm sync-versions
       - name: 🏷️ Release Packages (Tag-Driven)
         run: |
           echo "🏷️ Tag detected [${{ github.ref_name }}], performing sync release..."
-          pnpm sync-versions
           pnpm release:tag
 
   build-images:
-    name: 🐳 Build & Push Images
-    needs: qa
+    name: 🐳 Build ${{ matrix.name }}
+    needs: [lint, test, build]
     if: startsWith(github.ref, 'refs/tags/v')
     runs-on: docker
     container:
       image: catthehacker/ubuntu:act-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        include:
+          - image: nextjs
+            file: packages/infra/docker/Dockerfile.nextjs
+            name: Build-Base
+          - image: runtime
+            file: packages/infra/docker/Dockerfile.runtime
+            name: Production Runtime
+          - image: gatekeeper
+            file: packages/infra/docker/Dockerfile.gatekeeper
+            name: Gatekeeper (Product)
+          - image: directus
+            file: packages/infra/docker/Dockerfile.directus
+            name: Directus (Base)
     steps:
       - name: Checkout
         uses: actions/checkout@v4
@@ -99,58 +194,19 @@ jobs:
           username: ${{ secrets.REGISTRY_USER }}
           password: ${{ secrets.REGISTRY_PASS }}
 
-      - name: 🏗️ Build & Push Nextjs Build-Base
+      - name: 🏗️ Build & Push ${{ matrix.name }}
         uses: docker/build-push-action@v5
         with:
           context: .
-          file: packages/infra/docker/Dockerfile.nextjs
+          file: ${{ matrix.file }}
           platforms: linux/arm64
           pull: true
           push: true
           secrets: |
             NPM_TOKEN=${{ secrets.NPM_TOKEN }}
           tags: |
-            registry.infra.mintel.me/mintel/nextjs:${{ github.ref_name }}
-            registry.infra.mintel.me/mintel/nextjs:latest
+            registry.infra.mintel.me/mintel/${{ matrix.image }}:${{ github.ref_name }}
+            registry.infra.mintel.me/mintel/${{ matrix.image }}:latest
+          cache-from: type=registry,ref=registry.infra.mintel.me/mintel/${{ matrix.image }}:buildcache
+          cache-to: type=registry,ref=registry.infra.mintel.me/mintel/${{ matrix.image }}:buildcache,mode=max
 
-      - name: 🏗️ Build & Push Production Runtime
-        uses: docker/build-push-action@v5
-        with:
-          context: .
-          file: packages/infra/docker/Dockerfile.runtime
-          platforms: linux/arm64
-          pull: true
-          push: true
-          secrets: |
-            NPM_TOKEN=${{ secrets.NPM_TOKEN }}
-          tags: |
-            registry.infra.mintel.me/mintel/runtime:${{ github.ref_name }}
-            registry.infra.mintel.me/mintel/runtime:latest
-
-      - name: 🏗️ Build & Push Gatekeeper (Product)
-        uses: docker/build-push-action@v5
-        with:
-          context: .
-          file: packages/infra/docker/Dockerfile.gatekeeper
-          platforms: linux/arm64
-          pull: true
-          push: true
-          secrets: |
-            NPM_TOKEN=${{ secrets.NPM_TOKEN }}
-          tags: |
-            registry.infra.mintel.me/mintel/gatekeeper:${{ github.ref_name }}
-            registry.infra.mintel.me/mintel/gatekeeper:latest
-
-      - name: 🏗️ Build & Push Directus (Base)
-        uses: docker/build-push-action@v5
-        with:
-          context: .
-          file: packages/infra/docker/Dockerfile.directus
-          platforms: linux/arm64
-          pull: true
-          push: true
-          secrets: |
-            NPM_TOKEN=${{ secrets.NPM_TOKEN }}
-          tags: |
-            registry.infra.mintel.me/mintel/directus:${{ github.ref_name }}
-            registry.infra.mintel.me/mintel/directus:latest

.gitignore

@@ -1,6 +1,7 @@
 # dependencies
 node_modules
 .pnpm-debug.log*
+.pnpm-store/
 
 # next.js
 .next/

.husky/pre-push

@@ -0,0 +1,37 @@
+# Check if we are pushing a tag
+while read local_ref local_sha remote_ref remote_sha
+do
+  if [[ "$remote_ref" == refs/tags/v* ]]; then
+    TAG=${remote_ref#refs/tags/}
+    echo "🏷️ Tag detected: $TAG, ensuring versions are synced..."
+    
+    # Run sync script
+    pnpm sync-versions "$TAG"
+    
+    # Check for changes in relevant files
+    SYNC_FILES="package.json packages/*/package.json apps/*/package.json .env.example"
+    CHANGES=$(git status --porcelain $SYNC_FILES)
+    
+    if [[ -n "$CHANGES" ]]; then
+      echo "📝 Version sync made changes. Integrating into tag..."
+      
+      # Stage and commit
+      git add $SYNC_FILES
+      git commit -m "chore: sync versions to $TAG" --no-verify
+      
+      # Force update the local tag to point to the new commit
+      git tag -f "$TAG" > /dev/null
+      
+      echo "✅ Tag $TAG has been updated locally with synced versions."
+      echo "🚀 Auto-pushing updated tag..."
+      
+      # Push the updated tag directly (using --no-verify to avoid recursion)
+      git push origin "$TAG" --force --no-verify
+      
+      echo "✨ All done! Hook integrated the sync and pushed for you."
+      exit 1 # Still exit 1 to abort the original (now outdated) push attempt
+    else
+      echo "✨ Versions already in sync for $TAG."
+    fi
+  fi
+done

.npmrc

@@ -2,3 +2,6 @@
 registry=https://npm.infra.mintel.me/
 //npm.infra.mintel.me/:_authToken=${NPM_TOKEN}
 always-auth=true
+
+public-hoist-pattern[]=*
+shamefully-hoist=true

Dockerfile.template

@@ -0,0 +1,56 @@
+# Stage 1: Builder
+FROM registry.infra.mintel.me/mintel/nextjs:latest AS builder
+WORKDIR /app
+
+# Clean the workspace in case the base image is dirty
+RUN rm -rf ./*
+
+# Arguments for build-time configuration
+ARG NEXT_PUBLIC_BASE_URL
+ARG NEXT_PUBLIC_TARGET
+ARG DIRECTUS_URL
+ARG NPM_TOKEN
+
+# Environment variables for Next.js build
+ENV NEXT_PUBLIC_BASE_URL=$NEXT_PUBLIC_BASE_URL
+ENV NEXT_PUBLIC_TARGET=$NEXT_PUBLIC_TARGET
+ENV DIRECTUS_URL=$DIRECTUS_URL
+ENV SKIP_RUNTIME_ENV_VALIDATION=true
+ENV CI=true
+
+# Enable pnpm
+RUN corepack enable
+
+# Copy lockfile and manifest for dependency installation caching
+COPY pnpm-lock.yaml package.json .npmrc* ./
+
+# Install dependencies with cache mount
+RUN --mount=type=cache,id=pnpm,target=/pnpm/store \
+    --mount=type=secret,id=NPM_TOKEN \
+    export NPM_TOKEN=$(cat /run/secrets/NPM_TOKEN 2>/dev/null || echo $NPM_TOKEN) && \
+    pnpm install --frozen-lockfile
+
+# Copy source code
+COPY . .
+
+# Build application
+RUN pnpm build
+
+# Stage 2: Runner
+FROM registry.infra.mintel.me/mintel/runtime:latest AS runner
+WORKDIR /app
+
+ENV HOSTNAME="0.0.0.0"
+ENV PORT=3000
+ENV NODE_ENV=production
+
+# Copy standalone output and static files
+# Adjust paths if using a monorepo structure (e.g., /app/apps/web/public)
+COPY --from=builder --chown=nextjs:nodejs /app/public ./public
+COPY --from=builder --chown=nextjs:nodejs /app/.next/standalone ./
+COPY --from=builder --chown=nextjs:nodejs /app/.next/static ./.next/static
+COPY --from=builder --chown=nextjs:nodejs /app/.next/cache ./.next/cache
+
+USER nextjs
+
+CMD ["node", "server.js"]

README.md

@@ -80,3 +80,4 @@ Client websites scaffolded via the CLI use a **tag-based deployment** strategy:
 - **Git Tag `v*.*.*`**: Deploys to the `production` environment.
 
 See the [`@mintel/infra`](packages/infra/README.md) package for detailed template documentation.
+

apps/sample-website/eslint.config.mjs

@@ -1,3 +0,0 @@
-import { nextConfig } from "@mintel/eslint-config/next";
-
-export default nextConfig;

apps/sample-website/package.json

@@ -1,6 +1,6 @@
 {
   "name": "sample-website",
-  "version": "0.1.1",
+  "version": "1.8.2",
   "private": true,
   "type": "module",
   "scripts": {
@@ -8,21 +8,18 @@
     "dev:local": "mintel dev --local",
     "build": "next build",
     "start": "next start",
-    "lint": "next lint",
+    "lint": "eslint src/",
     "typecheck": "tsc --noEmit",
     "test": "vitest run --passWithNoTests",
-    "cms:bootstrap": "mintel directus bootstrap",
-    "cms:push:testing": "mintel directus sync push testing",
-    "cms:pull:testing": "mintel directus sync pull testing",
-    "cms:push:staging": "mintel directus sync push staging",
-    "cms:pull:staging": "mintel directus sync pull staging",
-    "cms:push:prod": "mintel directus sync push production",
     "cms:pull:prod": "mintel directus sync pull production",
     "pagespeed:test": "mintel pagespeed"
   },
   "dependencies": {
     "@mintel/next-utils": "workspace:*",
-    "next": "15.1.6",
+    "@mintel/observability": "workspace:*",
+    "@mintel/next-observability": "workspace:*",
+    "@sentry/nextjs": "10.38.0",
+    "next": "16.1.6",
     "next-intl": "^4.8.2",
     "react": "^19.0.0",
     "react-dom": "^19.0.0"

apps/sample-website/sentry.client.config.ts

@@ -0,0 +1,9 @@
+import { initSentry } from "@mintel/next-observability";
+
+initSentry({
+  // Use a placeholder DSN on the client if you want to bypass ad-blockers via tunnel
+  // Or just use the real DSN if you don't care about ad-blockers for errors.
+  // The Mintel standard is to use the relay.
+  dsn: "https://public@errors.infra.mintel.me/1", // Placeholder for relay
+  tunnel: "/errors/api/relay",
+});

apps/sample-website/sentry.edge.config.ts

@@ -0,0 +1,8 @@
+import { initSentry } from "@mintel/next-observability";
+import { validateMintelEnv } from "@mintel/next-utils";
+
+const env = validateMintelEnv();
+
+initSentry({
+  dsn: env.SENTRY_DSN,
+});

apps/sample-website/sentry.server.config.ts

@@ -0,0 +1,8 @@
+import { initSentry } from "@mintel/next-observability";
+import { validateMintelEnv } from "@mintel/next-utils";
+
+const env = validateMintelEnv();
+
+initSentry({
+  dsn: env.SENTRY_DSN,
+});

apps/sample-website/src/app/errors/api/relay/route.ts

@@ -0,0 +1,6 @@
+import { createSentryRelayHandler } from "@mintel/next-observability";
+import { validateMintelEnv } from "@mintel/next-utils";
+
+export const POST = createSentryRelayHandler({
+  dsn: validateMintelEnv().SENTRY_DSN,
+});

apps/sample-website/src/app/layout.tsx

@@ -1,5 +1,11 @@
 import type { Metadata } from "next";
+import { Suspense } from "react";
 import "./globals.css";
+import {
+  AnalyticsContextProvider,
+  AnalyticsAutoTracker,
+} from "@mintel/next-observability/client";
+import { getAnalyticsConfig } from "@/lib/observability";
 
 export const metadata: Metadata = {
   title: "Sample Website",
@@ -11,9 +17,18 @@ export default function RootLayout({
 }: Readonly<{
   children: React.ReactNode;
 }>) {
+  const analyticsConfig = getAnalyticsConfig();
+
   return (
     <html lang="en">
-      <body>{children}</body>
+      <body>
+        <AnalyticsContextProvider config={analyticsConfig}>
+          <Suspense fallback={null}>
+            <AnalyticsAutoTracker />
+          </Suspense>
+          {children}
+        </AnalyticsContextProvider>
+      </body>
     </html>
   );
 }

apps/sample-website/src/app/stats/api/send/route.ts

@@ -0,0 +1,7 @@
+import { createUmamiProxyHandler } from "@mintel/next-observability";
+import { validateMintelEnv } from "@mintel/next-utils";
+
+export const POST = createUmamiProxyHandler({
+  websiteId: validateMintelEnv().UMAMI_WEBSITE_ID,
+  apiEndpoint: validateMintelEnv().UMAMI_API_ENDPOINT,
+});

apps/sample-website/src/instrumentation.ts

@@ -0,0 +1,13 @@
+import * as Sentry from "@sentry/nextjs";
+
+export async function register() {
+  if (process.env.NEXT_RUNTIME === "nodejs") {
+    await import("../sentry.server.config");
+  }
+
+  if (process.env.NEXT_RUNTIME === "edge") {
+    await import("../sentry.edge.config");
+  }
+}
+
+export const onRequestError = Sentry.captureRequestError;

apps/sample-website/src/lib/observability.ts

@@ -0,0 +1,54 @@
+import {
+  UmamiAnalyticsService,
+  GotifyNotificationService,
+  NoopNotificationService,
+} from "@mintel/observability";
+import { validateMintelEnv } from "@mintel/next-utils";
+
+let analyticsService: any = null;
+let notificationService: any = null;
+
+export function getAnalyticsConfig() {
+  const isClient = typeof window !== "undefined";
+
+  if (isClient) {
+    return {
+      enabled: true,
+      apiEndpoint: "/stats",
+    };
+  }
+
+  const env = validateMintelEnv();
+  return {
+    enabled: Boolean(env.UMAMI_WEBSITE_ID),
+    websiteId: env.UMAMI_WEBSITE_ID,
+    apiEndpoint: env.UMAMI_API_ENDPOINT,
+  };
+}
+
+export function getAnalyticsService() {
+  if (analyticsService) return analyticsService;
+
+  const config = getAnalyticsConfig();
+  analyticsService = new UmamiAnalyticsService(config);
+
+  return analyticsService;
+}
+
+export function getNotificationService() {
+  if (notificationService) return notificationService;
+
+  if (typeof window === "undefined") {
+    const env = validateMintelEnv();
+    notificationService = new GotifyNotificationService({
+      enabled: Boolean(env.GOTIFY_URL && env.GOTIFY_TOKEN),
+      url: env.GOTIFY_URL || "",
+      token: env.GOTIFY_TOKEN || "",
+    });
+  } else {
+    // Notifications are typically server-side only to protect tokens
+    notificationService = new NoopNotificationService();
+  }
+
+  return notificationService;
+}

directus/schema/snapshot.yaml

@@ -0,0 +1,19 @@
+version: 1
+directus: 11.15.1
+vendor: postgres
+collections: []
+fields: []
+systemFields:
+  - collection: directus_activity
+    field: timestamp
+    schema:
+      is_indexed: true
+  - collection: directus_revisions
+    field: activity
+    schema:
+      is_indexed: true
+  - collection: directus_revisions
+    field: parent
+    schema:
+      is_indexed: true
+relations: []

directus/uploads/directus-health-file

@@ -0,0 +1 @@
+S9WsV

docker-compose.yml

@@ -1,17 +1,18 @@
 services:
   app:
     build:
-      context: .
+      context: ./apps/sample-website
       dockerfile: Dockerfile
       args:
         NEXT_PUBLIC_BASE_URL: ${NEXT_PUBLIC_BASE_URL:-http://localhost:3000}
         NEXT_PUBLIC_UMAMI_WEBSITE_ID: ${NEXT_PUBLIC_UMAMI_WEBSITE_ID}
         NEXT_PUBLIC_UMAMI_SCRIPT_URL: ${NEXT_PUBLIC_UMAMI_SCRIPT_URL}
         NEXT_PUBLIC_TARGET: ${TARGET:-development}
-      DIRECTUS_URL: ${DIRECTUS_URL:-http://directus:8055}
     restart: always
     networks:
       - infra
+    environment:
+      - DIRECTUS_URL=${DIRECTUS_URL:-http://directus:8055}
     env_file:
       - .env
     ports:
@@ -22,7 +23,13 @@ services:
       - "traefik.http.services.sample-website.loadbalancer.server.port=3000"
 
   directus:
-    image: registry.infra.mintel.me/mintel/directus:latest
+    image: registry.infra.mintel.me/mintel/directus:${IMAGE_TAG:-latest}
+    healthcheck:
+      test: [ "CMD", "wget", "--no-verbose", "--tries=1", "--spider", "http://127.0.0.1:8055/server/health" ]
+      interval: 30s
+      timeout: 10s
+      retries: 3
+      start_period: 5s
     restart: always
     networks:
       - infra
@@ -34,7 +41,7 @@ services:
       ADMIN_EMAIL: ${DIRECTUS_ADMIN_EMAIL:-admin@mintel.me}
       ADMIN_PASSWORD: ${DIRECTUS_ADMIN_PASSWORD:-mintel-admin}
       DB_CLIENT: 'pg'
-      DB_HOST: 'directus-db'
+      DB_HOST: 'at-mintel-directus-db'
       DB_PORT: '5432'
       DB_DATABASE: ${DIRECTUS_DB_NAME:-directus}
       DB_USER: ${DIRECTUS_DB_USER:-directus}
@@ -46,12 +53,13 @@ services:
     volumes:
       - ./directus/uploads:/directus/uploads
       - ./directus/extensions:/directus/extensions
+      - ./directus/schema:/directus/schema
     labels:
       - "traefik.enable=true"
       - "traefik.http.routers.sample-website-directus.rule=Host(`${DIRECTUS_HOST:-cms.sample-website.localhost}`)"
       - "traefik.http.services.sample-website-directus.loadbalancer.server.port=8055"
 
-  directus-db:
+  at-mintel-directus-db:
     image: postgres:15-alpine
     restart: always
     networks:

eslint.config.js

@@ -1,3 +1,26 @@
+import baseConfig from "@mintel/eslint-config";
 import { nextConfig } from "@mintel/eslint-config/next";
 
-export default nextConfig;
+export default [
+  {
+    ignores: [
+      "packages/cms-infra/extensions/**",
+      "**/index.js",
+      "**/*.db",
+      "**/build/**",
+      "**/data/**",
+      "**/reference/**",
+      "**/dist/**",
+      "**/.next/**",
+    ],
+  },
+  ...baseConfig,
+  ...nextConfig.map((config) => ({
+    ...config,
+    files: [
+      "apps/sample-website/**/*.{ts,tsx}",
+      "packages/gatekeeper/**/*.{ts,tsx}",
+      "../klz-2026/**/*.{ts,tsx}",
+    ],
+  })),
+];

package.json

@@ -5,11 +5,20 @@
   "scripts": {
     "build": "pnpm -r build",
     "dev": "pnpm -r dev",
-    "lint": "pnpm -r lint",
+    "lint": "pnpm -r --filter='./packages/**' --filter='./apps/**' lint",
     "test": "pnpm -r test",
     "changeset": "changeset",
     "version-packages": "changeset version",
-    "sync-versions": "tsx scripts/sync-versions.ts",
+    "sync-versions": "tsx scripts/sync-versions.ts --",
+    "cms:push:infra": "./scripts/sync-directus.sh push infra",
+    "cms:pull:infra": "./scripts/sync-directus.sh pull infra",
+    "cms:schema:snapshot": "./scripts/cms-snapshot.sh",
+    "cms:schema:apply": "./scripts/cms-apply.sh local",
+    "cms:schema:apply:infra": "./scripts/cms-apply.sh infra",
+    "cms:up": "./scripts/sync-extensions.sh && cd packages/cms-infra && npm run up -- --force-recreate",
+    "cms:down": "cd packages/cms-infra && npm run down",
+    "cms:logs": "cd packages/cms-infra && npm run logs",
+    "dev:infra": "docker-compose up -d directus directus-db",
     "release": "pnpm build && changeset publish",
     "release:tag": "pnpm build && pnpm -r publish --no-git-checks --access public",
     "prepare": "husky"
@@ -22,11 +31,12 @@
     "@mintel/husky-config": "workspace:*",
     "@testing-library/jest-dom": "^6.9.1",
     "@testing-library/react": "^16.3.2",
+    "@types/node": "^20.17.16",
     "@types/react": "^19.2.10",
     "@types/react-dom": "^19.2.3",
     "@vitejs/plugin-react": "^5.1.2",
     "eslint": "^9.39.2",
-    "eslint-plugin-next": "^0.0.0",
+    "@next/eslint-plugin-next": "16.1.6",
     "eslint-plugin-react": "^7.37.5",
     "eslint-plugin-react-hooks": "^7.0.1",
     "happy-dom": "^20.4.0",
@@ -38,5 +48,18 @@
     "typescript": "^5.0.0",
     "typescript-eslint": "^8.54.0",
     "vitest": "^4.0.18"
+  },
+  "dependencies": {
+    "import-in-the-middle": "^3.0.0",
+    "pino": "^10.3.1",
+    "pino-pretty": "^13.1.3",
+    "require-in-the-middle": "^8.0.1"
+  },
+  "version": "1.8.2",
+  "pnpm": {
+    "overrides": {
+      "next": "16.1.6",
+      "@sentry/nextjs": "10.38.0"
+    }
   }
 }

packages/acquisition-manager/package.json

@@ -0,0 +1,27 @@
+{
+  "name": "acquisition-manager",
+  "description": "Custom High-Fidelity Acquisition Management for Directus",
+  "icon": "account_balance_wallet",
+  "version": "1.8.2",
+  "type": "module",
+  "keywords": [
+    "directus",
+    "directus-extension",
+    "directus-extension-module"
+  ],
+  "directus:extension": {
+    "type": "module",
+    "path": "index.js",
+    "source": "src/index.ts",
+    "host": "*",
+    "name": "Acquisition Manager"
+  },
+  "scripts": {
+    "build": "directus-extension build && cp -f dist/index.js index.js 2>/dev/null || true",
+    "dev": "directus-extension build -w"
+  },
+  "devDependencies": {
+    "@directus/extensions-sdk": "11.0.2",
+    "vue": "^3.4.0"
+  }
+}

packages/acquisition-manager/src/index.ts

@@ -0,0 +1,19 @@
+import { defineModule } from "@directus/extensions-sdk";
+import ModuleComponent from "./module.vue";
+
+export default defineModule({
+    id: "acquisition-manager",
+    name: "Acquisition",
+    icon: "auto_awesome",
+    routes: [
+        {
+            path: "",
+            component: ModuleComponent,
+        },
+        {
+            path: ":id",
+            component: ModuleComponent,
+            props: true
+        }
+    ],
+});

packages/acquisition-manager/src/module.vue

@@ -0,0 +1,445 @@
+<template>
+	<private-view title="Acquisition Manager">
+		<template #navigation>
+			<v-list nav>
+				<v-list-item @click="showAddLead = true" clickable>
+					<v-list-item-icon><v-icon name="add" color="var(--theme--primary)" /></v-list-item-icon>
+					<v-list-item-content>
+						<v-text-overflow text="Neuen Lead anlegen" />
+					</v-list-item-content>
+				</v-list-item>
+
+				<v-divider />
+
+				<v-list-item
+					v-for="lead in leads"
+					:key="lead.id"
+					:active="selectedLeadId === lead.id"
+					class="lead-item"
+					clickable
+					@click="selectLead(lead.id)"
+				>
+					<v-list-item-icon>
+						<v-icon :name="getStatusIcon(lead.status)" :color="getStatusColor(lead.status)" />
+					</v-list-item-icon>
+					<v-list-item-content>
+						<v-text-overflow :text="getCompanyName(lead)" />
+					</v-list-item-content>
+				</v-list-item>
+			</v-list>
+		</template>
+
+		<template #title-outer:after>
+			<v-notice v-if="notice" :type="notice.type" @close="notice = null" dismissible>
+				{{ notice.message }}
+			</v-notice>
+		</template>
+
+		<div class="content-wrapper">
+			<v-notice type="success" style="margin-bottom: 16px;">
+				DEBUG: Module Version 1.1.0 - Native Build - {{ new Date().toISOString() }}
+			</v-notice>
+
+			<div v-if="!selectedLead" class="empty-state">
+				<v-info title="Lead auswählen" icon="auto_awesome" center>
+					Wähle einen Lead in der Navigation aus oder
+					<v-button x-small @click="showAddLead = true">registriere einen neuen Lead</v-button>.
+				</v-info>
+			</div>
+
+			<template v-else>
+				<header class="header">
+					<div class="header-left">
+						<h1 class="title">{{ getCompanyName(selectedLead) }}</h1>
+						<p class="subtitle">
+							<v-icon name="language" x-small />
+							<a :href="selectedLead.website_url" target="_blank" class="url-link">
+								{{ selectedLead.website_url.replace(/^https?:\/\//, '') }}
+							</a>
+							&middot; Status: {{ selectedLead.status.toUpperCase() }}
+						</p>
+					</div>
+					<div class="header-right">
+						<v-button 
+							v-if="selectedLead.status === 'new'" 
+							secondary 
+							:loading="loadingAudit" 
+							@click="runAudit"
+						>
+							<v-icon name="settings_suggest" left />
+							Audit starten
+						</v-button>
+
+						<template v-if="selectedLead.status === 'audit_ready'">
+							<v-button secondary :loading="loadingEmail" @click="sendAuditEmail">
+								<v-icon name="mail" left />
+								Audit E-Mail
+							</v-button>
+							<v-button :loading="loadingPdf" @click="generatePdf">
+								<v-icon name="picture_as_pdf" left />
+								PDF Erstellen
+							</v-button>
+						</template>
+
+						<v-button v-if="selectedLead.audit_pdf_path" secondary icon v-tooltip.bottom="'PDF öffnen'" @click="openPdf">
+							<v-icon name="open_in_new" />
+						</v-button>
+						
+						<v-button 
+							v-if="selectedLead.audit_pdf_path" 
+							primary
+							:loading="loadingEmail"
+							@click="sendEstimateEmail"
+						>
+							<v-icon name="send" left />
+							Angebot senden
+						</v-button>
+					</div>
+				</header>
+
+				<div class="sections">
+					<div class="main-info">
+						<div class="form-grid">
+							<div class="field">
+								<span class="label">Kontaktperson</span>
+								<div v-if="selectedLead.contact_person" class="value person-link" @click="goToPerson(selectedLead.contact_person)">
+									{{ getPersonName(selectedLead.contact_person) }}
+								</div>
+								<div v-else class="value text-subdued">Keine Person verknüpft</div>
+							</div>
+							<div class="field">
+								<span class="label">E-Mail (Legacy)</span>
+								<div class="value">{{ selectedLead.contact_email || '—' }}</div>
+							</div>
+							<div class="field full">
+								<span class="label">Briefing / Fokus</span>
+								<div class="value text-block">{{ selectedLead.briefing || 'Kein Briefing hinterlegt.' }}</div>
+							</div>
+						</div>
+					</div>
+
+					<v-divider />
+
+					<div v-if="selectedLead.ai_state" class="ai-observations">
+						<h3 class="section-title">AI Observations & Estimation</h3>
+						
+						<div class="metrics">
+							<v-info label="Projekt-Modus" :value="selectedLead.ai_state.projectType || 'Unbekannt'" />
+							<v-info label="Seitenanzahl" :value="selectedLead.ai_state.sitemap?.length || '0'" />
+						</div>
+
+						<v-table
+							v-if="selectedLead.ai_state.sitemap"
+							:headers="[ { text: 'Seite', value: 'title' }, { text: 'URL', value: 'url' } ]"
+							:items="selectedLead.ai_state.sitemap"
+							class="observation-table"
+						>
+							<template #[`item.title`]="{ item }">
+								<span class="page-title">{{ item.title }}</span>
+							</template>
+							<template #[`item.url`]="{ item }">
+								<span class="page-url">{{ item.url }}</span>
+							</template>
+						</v-table>
+					</div>
+				</div>
+			</template>
+		</div>
+
+		<!-- Drawer: New Lead -->
+		<v-drawer
+			v-model="showAddLead"
+			title="Neuen Lead registrieren"
+			icon="person_add"
+			@cancel="showAddLead = false"
+		>
+			<div class="drawer-content">
+				<div class="form-section">
+					<div class="field">
+						<span class="label">Organisation / Firma (Zentral)</span>
+						<v-select
+							v-model="newLead.company"
+							:items="companyOptions"
+							placeholder="Bestehende Firma auswählen..."
+						/>
+					</div>
+					<div class="field">
+						<span class="label">Organisation / Firma (Legacy / Neu)</span>
+						<v-input v-model="newLead.company_name" placeholder="z.B. Schmidt GmbH" autofocus />
+					</div>
+					<div class="field">
+						<span class="label">Website URL</span>
+						<v-input v-model="newLead.website_url" placeholder="https://..." />
+					</div>
+					<div class="field">
+						<span class="label">Ansprechpartner</span>
+						<v-input v-model="newLead.contact_name" placeholder="Vorname Nachname" />
+					</div>
+					<div class="field">
+						<span class="label">E-Mail Adresse</span>
+						<v-input v-model="newLead.contact_email" placeholder="email@beispiel.de" type="email" />
+					</div>
+					<div class="field">
+						<span class="label">Briefing / Fokus</span>
+						<v-textarea v-model="newLead.briefing" placeholder="Besonderheiten für das Audit..." />
+					</div>
+					<div class="field">
+						<span class="label">Kontaktperson (Optional)</span>
+						<v-select
+							v-model="newLead.contact_person"
+							:items="peopleOptions"
+							placeholder="Person auswählen..."
+						/>
+					</div>
+				</div>
+
+				<div class="drawer-actions">
+					<v-button primary block :loading="savingLead" @click="saveLead">Lead speichern</v-button>
+				</div>
+			</div>
+		</v-drawer>
+	</private-view>
+</template>
+
+<script setup lang="ts">
+import { ref, onMounted, computed } from 'vue';
+import { useApi } from '@directus/extensions-sdk';
+
+const api = useApi();
+const leads = ref<any[]>([]);
+const selectedLeadId = ref<string | null>(null);
+const loadingAudit = ref(false);
+const loadingPdf = ref(false);
+const loadingEmail = ref(false);
+const showAddLead = ref(false);
+const savingLead = ref(false);
+const notice = ref<{ type: string; message: string } | null>(null);
+
+const newLead = ref({
+	company_name: '', // Legacy
+	company: null,
+	website_url: '',
+	contact_name: '', // Legacy
+	contact_email: '', // Legacy
+	contact_person: null,
+	briefing: '',
+	status: 'new'
+});
+
+const companies = ref<any[]>([]);
+const people = ref<any[]>([]);
+
+const companyOptions = computed(() => 
+	companies.value.map(c => ({
+		text: c.name,
+		value: c.id
+	}))
+);
+
+const peopleOptions = computed(() => 
+	people.value.map(p => ({
+		text: `${p.first_name} ${p.last_name}`,
+		value: p.id
+	}))
+);
+
+function getCompanyName(lead: any) {
+	if (lead.company) {
+		return typeof lead.company === 'object' ? lead.company.name : (companies.value.find(c => c.id === lead.company)?.name || lead.company_name);
+	}
+	return lead.company_name;
+}
+
+function getPersonName(id: string | any) {
+	if (!id) return '';
+	if (typeof id === 'object') return `${id.first_name} ${id.last_name}`;
+	const person = people.value.find(p => p.id === id);
+	return person ? `${person.first_name} ${person.last_name}` : id;
+}
+
+function goToPerson(id: string) {
+	// Logic to navigate to people manager or open details
+	notice.value = { type: 'info', message: `Navigiere zu Person: ${id}` };
+}
+
+const selectedLead = computed(() => leads.value.find(l => l.id === selectedLeadId.value));
+
+onMounted(fetchData);
+
+async function fetchData() {
+	const [leadsResp, peopleResp, companiesResp] = await Promise.all([
+		api.get('/items/leads', { 
+			params: { 
+				sort: '-date_created',
+				fields: '*.*'
+			} 
+		}),
+		api.get('/items/people', { params: { sort: 'last_name' } }),
+		api.get('/items/companies', { params: { sort: 'name' } })
+	]);
+	leads.value = leadsResp.data.data;
+	people.value = peopleResp.data.data;
+	companies.value = companiesResp.data.data;
+	
+	if (!selectedLeadId.value && leads.value.length > 0) {
+		selectedLeadId.value = leads.value[0].id;
+	}
+}
+
+async function fetchLeads() {
+	await fetchData();
+}
+
+function selectLead(id: string) {
+	selectedLeadId.value = id;
+}
+
+async function runAudit() {
+	if (!selectedLeadId.value) return;
+	loadingAudit.value = true;
+	try {
+		await api.post(`/acquisition/audit/${selectedLeadId.value}`);
+		notice.value = { type: 'success', message: 'Audit erfolgreich gestartet!' };
+		await fetchLeads();
+	} catch (e: any) {
+		notice.value = { type: 'danger', message: `Fehler beim Audit: ${e.message}` };
+	} finally {
+		loadingAudit.value = false;
+	}
+}
+
+async function sendAuditEmail() {
+	if (!selectedLeadId.value) return;
+	loadingEmail.value = true;
+	try {
+		await api.post(`/acquisition/audit-email/${selectedLeadId.value}`);
+		notice.value = { type: 'success', message: 'Audit E-Mail versendet!' };
+		await fetchLeads();
+	} catch (e: any) {
+		notice.value = { type: 'danger', message: `Fehler beim Versenden: ${e.message}` };
+	} finally {
+		loadingEmail.value = false;
+	}
+}
+
+async function generatePdf() {
+	if (!selectedLeadId.value) return;
+	loadingPdf.value = true;
+	try {
+		await api.post(`/acquisition/estimate/${selectedLeadId.value}`);
+		notice.value = { type: 'success', message: 'Angebot (PDF) wurde generiert!' };
+		await fetchLeads();
+	} catch (e: any) {
+		notice.value = { type: 'danger', message: `Fehler bei PDF Generierung: ${e.message}` };
+	} finally {
+		loadingPdf.value = false;
+	}
+}
+
+async function sendEstimateEmail() {
+	if (!selectedLeadId.value) return;
+	loadingEmail.value = true;
+	try {
+		await api.post(`/acquisition/estimate-email/${selectedLeadId.value}`);
+		notice.value = { type: 'success', message: 'Angebot erfolgreich versendet!' };
+		await fetchLeads();
+	} catch (e: any) {
+		notice.value = { type: 'danger', message: `Fehler beim Versenden: ${e.message}` };
+	} finally {
+		loadingEmail.value = false;
+	}
+}
+
+function openPdf() {
+	if (!selectedLead.value?.audit_pdf_path) return;
+	window.open(`${window.location.origin}/assets/${selectedLead.value.audit_pdf_path}`, '_blank');
+}
+
+async function saveLead() {
+	if (!newLead.value.company_name && !newLead.value.company) {
+		notice.value = { type: 'danger', message: 'Firma oder Firmenname erforderlich.' };
+		return;
+	}
+	savingLead.value = true;
+	try {
+		const payload = {
+			id: crypto.randomUUID(),
+			...newLead.value
+		};
+		await api.post('/items/leads', payload);
+		notice.value = { type: 'success', message: 'Lead erfolgreich registriert!' };
+		showAddLead.value = false;
+		await fetchLeads();
+		selectedLeadId.value = payload.id;
+		newLead.value = { 
+			company_name: '', 
+			company: null,
+			website_url: '', 
+			contact_name: '', 
+			contact_email: '', 
+			contact_person: null,
+			briefing: '', 
+			status: 'new' 
+		};
+	} catch (e: any) {
+		notice.value = { type: 'danger', message: `Fehler beim Speichern: ${e.message}` };
+	} finally {
+		savingLead.value = false;
+	}
+}
+
+function getStatusIcon(status: string) {
+	switch(status) {
+		case 'new': return 'fiber_new';
+		case 'auditing': return 'hourglass_empty';
+		case 'audit_ready': return 'check_circle';
+		case 'contacted': return 'mail_outline';
+		default: return 'help_outline';
+	}
+}
+
+function getStatusColor(status: string) {
+	switch(status) {
+		case 'new': return 'var(--theme--primary)';
+		case 'auditing': return 'var(--theme--warning)';
+		case 'audit_ready': return 'var(--theme--success)';
+		case 'contacted': return 'var(--theme--secondary)';
+		default: return 'var(--theme--foreground-subdued)';
+	}
+}
+</script>
+
+<style scoped>
+.content-wrapper { padding: 32px; height: 100%; display: flex; flex-direction: column; overflow-y: auto; }
+.lead-item { cursor: pointer; }
+.header { margin-bottom: 24px; display: flex; justify-content: space-between; align-items: flex-end; }
+.header-right { display: flex; gap: 12px; }
+.title { font-size: 24px; font-weight: 800; margin-bottom: 4px; color: var(--theme--foreground); }
+.subtitle { color: var(--theme--foreground-subdued); font-size: 14px; display: flex; align-items: center; gap: 8px; }
+.url-link { color: inherit; text-decoration: none; border-bottom: 1px solid transparent; }
+.url-link:hover { border-bottom-color: currentColor; }
+.empty-state { height: 100%; display: flex; align-items: center; justify-content: center; }
+
+.sections { display: flex; flex-direction: column; gap: 32px; }
+
+.form-grid { display: grid; grid-template-columns: 1fr 1fr; gap: 24px; }
+.field { display: flex; flex-direction: column; gap: 8px; }
+.field.full { grid-column: span 2; }
+.label { font-size: 11px; font-weight: 700; text-transform: uppercase; color: var(--theme--foreground-subdued); letter-spacing: 0.5px; }
+.value { font-size: 15px; color: var(--theme--foreground); }
+.text-block { line-height: 1.6; white-space: pre-wrap; background: var(--theme--background-subdued); padding: 16px; border-radius: 8px; }
+
+.ai-observations { display: flex; flex-direction: column; gap: 16px; }
+.section-title { font-size: 16px; font-weight: 700; color: var(--theme--foreground); margin-bottom: 8px; }
+.metrics { display: flex; gap: 32px; margin-bottom: 16px; }
+
+.observation-table { border: 1px solid var(--theme--border); border-radius: 8px; overflow: hidden; }
+.page-title { font-weight: 600; }
+.page-url { font-family: var(--family-monospace); font-size: 12px; color: var(--theme--foreground-subdued); }
+
+.drawer-content { padding: 24px; display: flex; flex-direction: column; gap: 32px; }
+.form-section { display: flex; flex-direction: column; gap: 20px; }
+.drawer-actions { margin-top: 24px; display: flex; flex-direction: column; gap: 12px; }
+
+:deep(.v-list-item) { cursor: pointer !important; }
+</style>

packages/acquisition/build.mjs

@@ -0,0 +1,49 @@
+import { build } from 'esbuild';
+import { resolve, dirname } from 'path';
+import { mkdirSync } from 'fs';
+import { fileURLToPath } from 'url';
+
+const __filename = fileURLToPath(import.meta.url);
+const __dirname = dirname(__filename);
+
+const entryPoint = resolve(__dirname, 'src/index.ts');
+const outfile = resolve(__dirname, 'dist/index.js');
+
+try {
+    mkdirSync(dirname(outfile), { recursive: true });
+} catch (e) { }
+
+console.log(`Building from ${entryPoint} to ${outfile}...`);
+
+build({
+    entryPoints: [entryPoint],
+    bundle: true,
+    platform: 'node',
+    target: 'node18',
+    outfile: outfile,
+    jsx: 'automatic',
+    loader: {
+        '.tsx': 'tsx',
+        '.ts': 'ts',
+        '.js': 'js',
+    },
+    external: ["@react-pdf/renderer", "react", "react-dom", "jsdom", "jsdom/*", "jquery", "jquery/*", "canvas", "fs", "path", "os", "http", "https", "zlib", "stream", "util", "url", "net", "tls", "crypto"],
+    plugins: [{
+        name: 'mock-canvas',
+        setup(build) {
+            build.onResolve({ filter: /^canvas/ }, args => ({ path: args.path, namespace: 'mock-canvas' }));
+            build.onLoad({ filter: /.*/, namespace: 'mock-canvas' }, () => ({ contents: 'export default {};', loader: 'js' }));
+        }
+    }, {
+        name: 'mock-jsdom',
+        setup(build) {
+            build.onResolve({ filter: /^jsdom/ }, args => ({ path: args.path, namespace: 'mock-jsdom' }));
+            build.onLoad({ filter: /.*/, namespace: 'mock-jsdom' }, () => ({ contents: 'export default {};', loader: 'js' }));
+        }
+    }]
+}).then(() => {
+    console.log("Build succeeded!");
+}).catch((e) => {
+    console.error("Build failed:", e);
+    process.exit(1);
+});

packages/acquisition/package.json

@@ -0,0 +1,27 @@
+{
+  "name": "acquisition",
+  "version": "1.8.2",
+  "type": "module",
+  "directus:extension": {
+    "type": "endpoint",
+    "path": "dist/index.js",
+    "source": "src/index.ts",
+    "host": "^11.0.0"
+  },
+  "scripts": {
+    "build": "node build.mjs",
+    "dev": "node build.mjs --watch"
+  },
+  "devDependencies": {
+    "@directus/extensions-sdk": "11.0.2",
+    "@mintel/pdf": "workspace:*",
+    "@mintel/mail": "workspace:*",
+    "esbuild": "^0.25.0",
+    "typescript": "^5.6.3"
+  },
+  "dependencies": {
+    "jquery": "^3.7.1",
+    "react": "^19.2.4",
+    "react-dom": "^19.2.4"
+  }
+}

packages/acquisition/src/index.ts

@@ -0,0 +1,176 @@
+import { defineEndpoint } from "@directus/extensions-sdk";
+import { AcquisitionService, PdfEngine } from "@mintel/pdf/server";
+import { render, SiteAuditTemplate, ProjectEstimateTemplate } from "@mintel/mail";
+import { createElement } from "react";
+import * as path from "path";
+import * as fs from "fs";
+
+export default defineEndpoint((router, { services, env }) => {
+    const { ItemsService, MailService } = services;
+
+    router.get("/ping", (req, res) => res.send("pong"));
+
+    router.post("/audit/:id", async (req: any, res: any) => {
+        const { id } = req.params;
+        const leadsService = new ItemsService("leads", { schema: req.schema, accountability: req.accountability });
+
+        try {
+            const lead = await leadsService.readOne(id);
+            if (!lead) return res.status(404).send({ error: "Lead not found" });
+
+            await leadsService.updateOne(id, { status: "auditing" });
+
+            const acqService = new AcquisitionService(env.OPENROUTER_API_KEY);
+            const result = await acqService.runFullSequence(lead.website_url, lead.briefing, lead.comments);
+
+            await leadsService.updateOne(id, {
+                status: "audit_ready",
+                ai_state: result.state,
+                audit_context: JSON.stringify(result.usage),
+            });
+
+            res.send({ success: true, result });
+        } catch (error: any) {
+            console.error("Audit failed:", error);
+            await leadsService.updateOne(id, { status: "new", comments: `Audit failed: ${error.message}` });
+            res.status(500).send({ error: error.message });
+        }
+    });
+
+    router.post("/audit-email/:id", async (req: any, res: any) => {
+        const { id } = req.params;
+        const { ItemsService, MailService } = services;
+        const leadsService = new ItemsService("leads", { schema: req.schema, accountability: req.accountability });
+        const peopleService = new ItemsService("people", { schema: req.schema, accountability: req.accountability });
+        const companiesService = new ItemsService("companies", { schema: req.schema, accountability: req.accountability });
+        const mailService = new MailService({ schema: req.schema, accountability: req.accountability });
+
+        try {
+            const lead = await leadsService.readOne(id, { fields: ["*", "company.*", "contact_person.*"] });
+            if (!lead || !lead.ai_state) return res.status(400).send({ error: "Lead or Audit not ready" });
+
+            let recipientEmail = lead.contact_email;
+            let companyName = lead.company?.name || lead.company_name;
+
+            if (lead.contact_person) {
+                recipientEmail = lead.contact_person.email || recipientEmail;
+
+                if (lead.contact_person.company) {
+                    const personCompany = await companiesService.readOne(lead.contact_person.company);
+                    companyName = personCompany?.name || companyName;
+                }
+            }
+
+            if (!recipientEmail) return res.status(400).send({ error: "No recipient email found" });
+
+            const auditHighlights = [
+                `Projekt-Typ: ${lead.ai_state.projectType === "website" ? "Website" : "Web App"}`,
+                ...(lead.ai_state.sitemap || []).slice(0, 3).map((item: any) => `Potenzial in: ${item.category}`),
+            ];
+
+            const html = await render(createElement(SiteAuditTemplate, {
+                companyName: companyName,
+                websiteUrl: lead.website_url,
+                auditHighlights
+            }));
+
+            await mailService.send({
+                to: recipientEmail,
+                subject: `Analyse Ihrer Webpräsenz: ${companyName}`,
+                html
+            });
+
+            await leadsService.updateOne(id, {
+                status: "contacted",
+                last_contacted_at: new Date().toISOString(),
+            });
+
+            res.send({ success: true });
+        } catch (error: any) {
+            console.error("Audit Email failed:", error);
+            res.status(500).send({ error: error.message });
+        }
+    });
+
+    router.post("/estimate/:id", async (req: any, res: any) => {
+        const { id } = req.params;
+        const leadsService = new ItemsService("leads", { schema: req.schema, accountability: req.accountability });
+
+        try {
+            const lead = await leadsService.readOne(id);
+            if (!lead || !lead.ai_state) return res.status(400).send({ error: "Lead or AI state not found" });
+
+            const pdfEngine = new PdfEngine();
+            const filename = `estimate_${id}_${Date.now()}.pdf`;
+            const storageRoot = env.STORAGE_LOCAL_ROOT || "./storage";
+            const outputPath = path.join(storageRoot, filename);
+
+            await pdfEngine.generateEstimatePdf(lead.ai_state, outputPath);
+
+            await leadsService.updateOne(id, {
+                audit_pdf_path: filename,
+            });
+
+            res.send({ success: true, filename });
+        } catch (error: any) {
+            console.error("PDF Generation failed:", error);
+            res.status(500).send({ error: error.message });
+        }
+    });
+
+    router.post("/estimate-email/:id", async (req: any, res: any) => {
+        const { id } = req.params;
+        const leadsService = new ItemsService("leads", { schema: req.schema, accountability: req.accountability });
+        const peopleService = new ItemsService("people", { schema: req.schema, accountability: req.accountability });
+        const companiesService = new ItemsService("companies", { schema: req.schema, accountability: req.accountability });
+        const mailService = new MailService({ schema: req.schema, accountability: req.accountability });
+
+        try {
+            const lead = await leadsService.readOne(id, { fields: ["*", "company.*", "contact_person.*"] });
+            if (!lead || !lead.audit_pdf_path) return res.status(400).send({ error: "PDF not generated" });
+
+            let recipientEmail = lead.contact_email;
+            let companyName = lead.company?.name || lead.company_name;
+
+            if (lead.contact_person) {
+                recipientEmail = lead.contact_person.email || recipientEmail;
+
+                if (lead.contact_person.company) {
+                    const personCompany = await companiesService.readOne(lead.contact_person.company);
+                    companyName = personCompany?.name || companyName;
+                }
+            }
+
+            if (!recipientEmail) return res.status(400).send({ error: "No recipient email found" });
+
+            const html = await render(createElement(ProjectEstimateTemplate, {
+                companyName: companyName,
+            }));
+
+            const storageRoot = env.STORAGE_LOCAL_ROOT || "./storage";
+            const attachmentPath = path.join(storageRoot, lead.audit_pdf_path);
+
+            await mailService.send({
+                to: recipientEmail,
+                subject: `Ihre Projekt-Schätzung: ${companyName}`,
+                html,
+                attachments: [
+                    {
+                        filename: `Angebot_${companyName}.pdf`,
+                        content: fs.readFileSync(attachmentPath)
+                    }
+                ]
+            });
+
+            await leadsService.updateOne(id, {
+                status: "contacted",
+                last_contacted_at: new Date().toISOString(),
+            });
+
+            res.send({ success: true });
+        } catch (error: any) {
+            console.error("Estimate Email failed:", error);
+            res.status(500).send({ error: error.message });
+        }
+    });
+});

packages/cli/README.md

@@ -4,10 +4,30 @@ The Mintel CLI is the primary automation tool for managing the monorepo and ensu
 
 ## 🚀 Installation
 
-The CLI is intended to be used within the monorepo:
+### Using npx (Recommended)
+
+Run the CLI without installing it globally. This always uses the latest version from the registry:
 
 ```bash
-pnpm install
+npx @mintel/cli init apps/my-new-website.com
+```
+
+### Global Installation
+
+Install the CLI globally from the Mintel registry:
+
+```bash
+npm install -g @mintel/cli
+```
+
+### Development (Local Link)
+
+If you are contributing to the CLI, you can link it locally:
+
+```bash
+cd packages/cli
+pnpm build
+npm link
 ```
 
 ## 🛠 Commands
@@ -17,10 +37,11 @@ pnpm install
 Scaffolds a new, production-ready client website in the specified path.
 
 ```bash
-pnpm --filter @mintel/cli start init apps/my-new-website.com
+mintel init apps/my-new-website.com
 ```
 
 #### What it does:
+
 1.  **Project Structure**: Creates a modern Next.js directory layout.
 2.  **Shared Configs**: Generates `package.json`, `tsconfig.json`, and `eslint.config.mjs` that extend the `@mintel` shared packages.
 3.  **Localization**: Sets up a localized routing structure (`src/app/[locale]`) with `next-intl` pre-configured.

packages/cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mintel/cli",
-  "version": "1.0.1",
+  "version": "1.8.2",
   "publishConfig": {
     "access": "public",
     "registry": "https://npm.infra.mintel.me"
@@ -10,7 +10,7 @@
     "mintel": "./dist/index.js"
   },
   "scripts": {
-    "build": "tsup src/index.ts --format esm --target es2020",
+    "build": "tsup",
     "start": "node dist/index.js",
     "dev": "tsup src/index.ts --format esm --watch --target es2020",
     "test": "vitest run"

packages/cli/src/index.ts

@@ -1,3 +1,4 @@
+#!/usr/bin/env node
 import { Command } from "commander";
 import fs from "fs-extra";
 import path from "path";
@@ -24,24 +25,25 @@ program
       console.log(chalk.cyan("Running Next.js locally..."));
       execSync("next dev", { stdio: "inherit" });
     } else {
-      console.log(chalk.cyan("Starting Docker stack (App, Directus, DB)..."));
-      // Ensure network exists
       try {
-        execSync("docker network create infra", { stdio: "ignore" });
-      } catch (e) {}
+        console.log(chalk.cyan("Starting Docker stack (App, Directus, DB)..."));
+        // Ensure network exists
+      } catch (_e) {
+        // Network already exists or docker is not running
+      }
+    }
 
-      console.log(
-        chalk.yellow(`
+    console.log(
+      chalk.yellow(`
 📱 App:      http://localhost:3000
 🗄️  CMS:      http://localhost:8055/admin
 🚦 Traefik:  http://localhost:8080
 `),
-      );
-      execSync(
-        "docker-compose down --remove-orphans && docker-compose up app directus directus-db",
-        { stdio: "inherit" },
-      );
-    }
+    );
+    execSync(
+      "docker-compose down --remove-orphans && docker-compose up app directus directus-db",
+      { stdio: "inherit" },
+    );
   });
 
 const directus = program
@@ -59,6 +61,115 @@ directus
     });
   });
 
+directus
+  .command("bootstrap-feedback")
+  .description("Setup Directus collections and flows for Feedback")
+  .action(async () => {
+    const { execSync } = await import("child_process");
+    console.log(chalk.blue("📧 Bootstrapping Visual Feedback System..."));
+    // Use the logic from setup-feedback-hardened.ts
+    const bootstrapScript = `
+import { createDirectus, rest, authentication, createCollection, createDashboard, createPanel, createItems, createPermission, readPolicies, readRoles, readUsers } from '@directus/sdk';
+
+async function setup() {
+    const url = process.env.DIRECTUS_URL || 'http://localhost:8055';
+    const email = process.env.DIRECTUS_ADMIN_EMAIL;
+    const password = process.env.DIRECTUS_ADMIN_PASSWORD;
+
+    if (!email || !password) {
+        console.error('❌ DIRECTUS_ADMIN_EMAIL or DIRECTUS_ADMIN_PASSWORD not set');
+        process.exit(1);
+    }
+
+    const client = createDirectus(url).with(authentication('json')).with(rest());
+
+    try {
+        console.log('🔑 Authenticating...');
+        await client.login(email, password);
+
+        const roles = await client.request(readRoles());
+        const adminRole = roles.find(r => r.name === 'Administrator');
+        const policies = await client.request(readPolicies());
+        const adminPolicy = policies.find(p => p.name === 'Administrator');
+
+        console.log('🏗️ Creating Collection "visual_feedback"...');
+        try {
+            await client.request(createCollection({
+                collection: 'visual_feedback',
+                meta: { icon: 'feedback', display_template: '{{user_name}}: {{text}}' },
+                fields: [
+                    { field: 'id', type: 'uuid', schema: { is_primary_key: true } },
+                    { field: 'status', type: 'string', schema: { default_value: 'open' }, meta: { interface: 'select-dropdown' } },
+                    { field: 'url', type: 'string' },
+                    { field: 'selector', type: 'string' },
+                    { field: 'x', type: 'float' },
+                    { field: 'y', type: 'float' },
+                    { field: 'type', type: 'string' },
+                    { field: 'text', type: 'text' },
+                    { field: 'user_name', type: 'string' },
+                    { field: 'user_identity', type: 'string' },
+                    { field: 'screenshot', type: 'uuid', meta: { interface: 'file' } },
+                    { field: 'date_created', type: 'timestamp', schema: { default_value: 'NOW()' } }
+                ]
+            } as any));
+        } catch (_e) { console.log('  (Collection might already exist)'); }
+
+        try {
+            await client.request(createCollection({
+                collection: 'visual_feedback_comments',
+                meta: { icon: 'comment' },
+                fields: [
+                    { field: 'id', type: 'integer', schema: { is_primary_key: true, has_auto_increment: true } },
+                    { field: 'feedback_id', type: 'uuid', meta: { interface: 'select-dropdown' } },
+                    { field: 'user_name', type: 'string' },
+                    { field: 'text', type: 'text' },
+                    { field: 'date_created', type: 'timestamp', schema: { default_value: 'NOW()' } }
+                ]
+            } as any));
+        } catch (e) { }
+
+        if (adminPolicy) {
+            console.log('🔐 Granting ALL permissions to Administrator Policy...');
+            for (const coll of ['visual_feedback', 'visual_feedback_comments']) {
+              for (const action of ['create', 'read', 'update', 'delete']) {
+                try {
+                    await client.request(createPermission({
+                        collection: coll,
+                        action,
+                        fields: ['*'],
+                        policy: adminPolicy.id
+                    } as any));
+                } catch (_e) { }
+              }
+            }
+        }
+
+        console.log('📊 Creating Dashboard...');
+        try {
+          const dash = await client.request(createDashboard({ name: 'Visual Feedback', icon: 'feedback', color: '#6366f1' }));
+          await client.request(createPanel({
+              dashboard: dash.id,
+              name: 'Total Feedbacks',
+              type: 'metric',
+              width: 12, height: 6, position_x: 1, position_y: 1,
+              options: { collection: 'visual_feedback', function: 'count', field: 'id' }
+          } as any));
+        } catch (e) { }
+
+        console.log('✨ FEEDBACK BOOTSTRAP DONE.');
+    } catch (e) { console.error('❌ FAILURE:', e); }
+}
+setup();
+    `;
+    const tempFile = path.join(process.cwd(), "temp-bootstrap-feedback.ts");
+    await fs.writeFile(tempFile, bootstrapScript);
+    try {
+      execSync("npx tsx --env-file=.env " + tempFile, { stdio: "inherit" });
+    } finally {
+      await fs.remove(tempFile);
+    }
+  });
+
 directus
   .command("sync <action> <env>")
   .description("Sync Directus data (push/pull) for a specific environment")
@@ -87,7 +198,7 @@ program
   .action(async (projectPath) => {
     const fullPath = path.isAbsolute(projectPath)
       ? projectPath
-      : path.resolve(process.cwd(), "../../", projectPath);
+      : path.resolve(process.cwd(), projectPath);
     const projectName = path.basename(fullPath);
 
     console.log(chalk.blue(`Initializing new project: ${projectName}...`));
@@ -120,10 +231,11 @@ program
           "pagespeed:test": "mintel pagespeed",
         },
         dependencies: {
-          next: "15.1.6",
+          next: "16.1.6",
           react: "^19.0.0",
           "react-dom": "^19.0.0",
           "@mintel/next-utils": "workspace:*",
+          "@mintel/next-observability": "workspace:*",
           "@directus/sdk": "^21.0.0",
         },
         devDependencies: {
@@ -262,11 +374,15 @@ export default createMintelI18nRequestConfig(
       // Create instrumentation.ts
       await fs.writeFile(
         path.join(fullPath, "src/instrumentation.ts"),
-        `import * as Sentry from '@sentry/nextjs';
+        `import { Sentry } from '@mintel/next-observability';
 
 export async function register() {
   if (process.env.NEXT_RUNTIME === 'nodejs') {
-    // Server-side initialization
+    await import('./sentry.server.config');
+  }
+
+  if (process.env.NEXT_RUNTIME === 'edge') {
+    await import('./sentry.edge.config');
   }
 }
 
@@ -396,8 +512,12 @@ DIRECTUS_DB_PASSWORD=mintel-db-pass
 SENTRY_DSN=
 
 # Analytics (Umami)
-NEXT_PUBLIC_UMAMI_WEBSITE_ID=
-NEXT_PUBLIC_UMAMI_SCRIPT_URL=https://analytics.infra.mintel.me/script.js
+UMAMI_WEBSITE_ID=
+UMAMI_API_ENDPOINT=https://analytics.infra.mintel.me
+
+# Notifications (Gotify)
+GOTIFY_URL=
+GOTIFY_TOKEN=
 `;
       await fs.writeFile(path.join(fullPath, ".env.example"), envExample);
 

packages/cli/tsup.config.ts

@@ -0,0 +1,11 @@
+import { defineConfig } from 'tsup';
+
+export default defineConfig({
+    entry: ['src/index.ts'],
+    format: ['esm'],
+    target: 'es2020',
+    clean: true,
+    banner: {
+        js: '#!/usr/bin/env node',
+    },
+});

packages/cloner-library/build.mjs

@@ -0,0 +1,41 @@
+import { build } from 'esbuild';
+import { resolve, dirname } from 'path';
+import { mkdirSync } from 'fs';
+import { fileURLToPath } from 'url';
+
+const __filename = fileURLToPath(import.meta.url);
+const __dirname = dirname(__filename);
+
+const entryPoints = [
+    resolve(__dirname, 'src/index.ts')
+];
+
+try {
+    mkdirSync(resolve(__dirname, 'dist'), { recursive: true });
+} catch (e) { }
+
+console.log(`Building entry point...`);
+
+build({
+    entryPoints: entryPoints,
+    bundle: true,
+    platform: 'node',
+    target: 'node18',
+    outdir: resolve(__dirname, 'dist'),
+    format: 'esm',
+    loader: {
+        '.ts': 'ts',
+        '.js': 'js',
+    },
+    external: ["playwright", "crawlee", "axios", "cheerio", "fs", "path", "os", "http", "https", "url", "stream", "util", "child_process"],
+}).then(() => {
+    console.log("Build succeeded!");
+}).catch((e) => {
+    if (e.errors) {
+        console.error("Build failed with errors:");
+        e.errors.forEach(err => console.error(`  ${err.text} at ${err.location?.file}:${err.location?.line}`));
+    } else {
+        console.error("Build failed:", e);
+    }
+    process.exit(1);
+});

packages/cloner-library/package.json

@@ -0,0 +1,30 @@
+{
+  "name": "@mintel/cloner",
+  "version": "1.8.2",
+  "type": "module",
+  "main": "dist/index.js",
+  "module": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "default": "./dist/index.js"
+    }
+  },
+  "scripts": {
+    "build": "node build.mjs",
+    "dev": "node build.mjs --watch"
+  },
+  "devDependencies": {
+    "esbuild": "^0.25.0",
+    "typescript": "^5.6.3",
+    "@types/node": "^22.0.0"
+  },
+  "dependencies": {
+    "playwright": "^1.40.0",
+    "crawlee": "^3.7.0",
+    "axios": "^1.6.0",
+    "cheerio": "^1.0.0-rc.12"
+  }
+}

packages/cloner-library/src/AssetManager.ts

@@ -0,0 +1,93 @@
+import axios from "axios";
+import fs from "node:fs";
+import path from "node:path";
+
+export interface AssetMap {
+    [originalUrl: string]: string;
+}
+
+export class AssetManager {
+    private userAgent: string;
+
+    constructor(userAgent: string = "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36") {
+        this.userAgent = userAgent;
+    }
+
+    public sanitizePath(rawPath: string): string {
+        return rawPath
+            .split("/")
+            .map((p) => p.replace(/[^a-z0-9._-]/gi, "_"))
+            .join("/");
+    }
+
+    public async downloadFile(url: string, assetsDir: string): Promise<string | null> {
+        if (url.startsWith("//")) url = `https:${url}`;
+        if (!url.startsWith("http")) return null;
+
+        try {
+            const u = new URL(url);
+            const relPath = this.sanitizePath(u.hostname + u.pathname);
+            const dest = path.join(assetsDir, relPath);
+
+            if (fs.existsSync(dest)) return `./assets/${relPath}`;
+
+            const res = await axios.get(url, {
+                responseType: "arraybuffer",
+                headers: { "User-Agent": this.userAgent },
+                timeout: 15000,
+                validateStatus: () => true,
+            });
+
+            if (res.status !== 200) return null;
+
+            if (!fs.existsSync(path.dirname(dest)))
+                fs.mkdirSync(path.dirname(dest), { recursive: true });
+            fs.writeFileSync(dest, Buffer.from(res.data));
+            return `./assets/${relPath}`;
+        } catch {
+            return null;
+        }
+    }
+
+    public async processCssRecursively(
+        cssContent: string,
+        cssUrl: string,
+        assetsDir: string,
+        urlMap: AssetMap,
+        depth = 0,
+    ): Promise<string> {
+        if (depth > 5) return cssContent;
+
+        const urlRegex = /(?:url\(["']?|@import\s+["'])([^"'\)]+)["']?\)?/gi;
+        let match;
+        let newContent = cssContent;
+
+        while ((match = urlRegex.exec(cssContent)) !== null) {
+            const originalUrl = match[1];
+            if (originalUrl.startsWith("data:") || originalUrl.startsWith("blob:"))
+                continue;
+
+            try {
+                const absUrl = new URL(originalUrl, cssUrl).href;
+                const local = await this.downloadFile(absUrl, assetsDir);
+
+                if (local) {
+                    const u = new URL(cssUrl);
+                    const cssPath = u.hostname + u.pathname;
+                    const assetPath = new URL(absUrl).hostname + new URL(absUrl).pathname;
+
+                    const rel = path.relative(
+                        path.dirname(this.sanitizePath(cssPath)),
+                        this.sanitizePath(assetPath),
+                    );
+
+                    newContent = newContent.split(originalUrl).join(rel);
+                    urlMap[absUrl] = local;
+                }
+            } catch {
+                // Ignore
+            }
+        }
+        return newContent;
+    }
+}

packages/cloner-library/src/PageCloner.ts

@@ -0,0 +1,184 @@
+import { chromium, Browser, BrowserContext, Page } from "playwright";
+import fs from "node:fs";
+import path from "node:path";
+import axios from "axios";
+import { AssetManager, AssetMap } from "./AssetManager.js";
+
+export interface PageClonerOptions {
+    outputDir: string;
+    userAgent?: string;
+}
+
+export class PageCloner {
+    private options: PageClonerOptions;
+    private assetManager: AssetManager;
+    private userAgent: string;
+
+    constructor(options: PageClonerOptions) {
+        this.options = options;
+        this.userAgent = options.userAgent || "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36";
+        this.assetManager = new AssetManager(this.userAgent);
+    }
+
+    public async clone(targetUrl: string): Promise<string> {
+        const urlObj = new URL(targetUrl);
+        const domainSlug = urlObj.hostname.replace("www.", "");
+        const domainDir = path.resolve(this.options.outputDir, domainSlug);
+        const assetsDir = path.join(domainDir, "assets");
+
+        if (!fs.existsSync(assetsDir)) fs.mkdirSync(assetsDir, { recursive: true });
+
+        let pageSlug = urlObj.pathname.split("/").filter(Boolean).join("-");
+        if (!pageSlug) pageSlug = "index";
+        const htmlFilename = `${pageSlug}.html`;
+
+        console.log(`🚀 INDUSTRIAL CLONE: ${targetUrl}`);
+
+        const browser = await chromium.launch({ headless: true });
+        const context = await browser.newContext({
+            userAgent: this.userAgent,
+            viewport: { width: 1920, height: 1080 },
+        });
+        const page = await context.newPage();
+
+        const urlMap: AssetMap = {};
+        const foundAssets = new Set<string>();
+
+        page.on("response", (response) => {
+            if (response.status() === 200) {
+                const url = response.url();
+                if (url.match(/\.(css|js|png|jpg|jpeg|gif|svg|woff2?|ttf|otf|mp4|webm|webp|ico)/i)) {
+                    foundAssets.add(url);
+                }
+            }
+        });
+
+        try {
+            await page.goto(targetUrl, { waitUntil: "networkidle", timeout: 90000 });
+
+            // Scroll Wave
+            await page.evaluate(async () => {
+                await new Promise((resolve) => {
+                    let totalHeight = 0;
+                    const distance = 400;
+                    const timer = setInterval(() => {
+                        const scrollHeight = document.body.scrollHeight;
+                        window.scrollBy(0, distance);
+                        totalHeight += distance;
+                        if (totalHeight >= scrollHeight) {
+                            clearInterval(timer);
+                            window.scrollTo(0, 0);
+                            resolve(true);
+                        }
+                    }, 100);
+                });
+            });
+
+            const fullHeight = await page.evaluate(() => document.body.scrollHeight);
+            await page.setViewportSize({ width: 1920, height: fullHeight + 1000 });
+            await page.waitForTimeout(3000);
+
+            // Sanitization
+            await page.evaluate(() => {
+                const assetPattern = /\.(jpg|jpeg|png|gif|svg|webp|mp4|webm|woff2?|ttf|otf)/i;
+                document.querySelectorAll("*").forEach((el) => {
+                    if (["META", "LINK", "HEAD", "SCRIPT", "STYLE", "SVG", "PATH"].includes(el.tagName)) return;
+                    const htmlEl = el as HTMLElement;
+                    const style = window.getComputedStyle(htmlEl);
+                    if (style.opacity === "0" || style.visibility === "hidden") {
+                        htmlEl.style.setProperty("opacity", "1", "important");
+                        htmlEl.style.setProperty("visibility", "visible", "important");
+                    }
+                    for (const attr of Array.from(el.attributes)) {
+                        const name = attr.name.toLowerCase();
+                        const val = attr.value;
+                        if (assetPattern.test(val) || name.includes("src") || name.includes("image")) {
+                            if (el.tagName === "IMG") {
+                                const img = el as HTMLImageElement;
+                                if (name.includes("srcset")) img.srcset = val;
+                                else if (!img.src || img.src.includes("data:")) img.src = val;
+                            }
+                            if (el.tagName === "SOURCE") (el as HTMLSourceElement).srcset = val;
+                            if (el.tagName === "VIDEO" || el.tagName === "AUDIO") (el as HTMLMediaElement).src = val;
+                            if (val.match(/^(https?:\/\/|\/\/|\/)/) && !name.includes("href")) {
+                                const bg = htmlEl.style.backgroundImage;
+                                if (!bg || bg === "none") htmlEl.style.backgroundImage = `url('${val}')`;
+                            }
+                        }
+                    }
+                });
+                if (document.body) {
+                    document.body.style.setProperty("opacity", "1", "important");
+                    document.body.style.setProperty("visibility", "visible", "important");
+                }
+            });
+
+            await page.waitForLoadState("networkidle");
+            await page.waitForTimeout(1000);
+
+            let content = await page.content();
+            const regexPatterns = [
+                /(?:src|href|url|data-[a-z-]+|srcset)=["']([^"'<>\s]+?\.(?:css|js|png|jpg|jpeg|gif|svg|woff2?|ttf|otf|mp4|webm|webp|ico)(?:\?[^"']*)?)["']/gi,
+                /url\(["']?([^"'\)]+)["']?\)/gi,
+            ];
+
+            for (const pattern of regexPatterns) {
+                let match;
+                while ((match = pattern.exec(content)) !== null) {
+                    try { foundAssets.add(new URL(match[1], targetUrl).href); } catch { }
+                }
+            }
+
+            for (const url of foundAssets) {
+                const local = await this.assetManager.downloadFile(url, assetsDir);
+                if (local) {
+                    urlMap[url] = local;
+                    const clean = url.split("?")[0];
+                    urlMap[clean] = local;
+                    if (clean.endsWith(".css")) {
+                        try {
+                            const { data } = await axios.get(url, { headers: { "User-Agent": this.userAgent } });
+                            const processedCss = await this.assetManager.processCssRecursively(data, url, assetsDir, urlMap);
+                            const relPath = this.assetManager.sanitizePath(new URL(url).hostname + new URL(url).pathname);
+                            fs.writeFileSync(path.join(assetsDir, relPath), processedCss);
+                        } catch { }
+                    }
+                }
+            }
+
+            let finalContent = content;
+            const sortedUrls = Object.keys(urlMap).sort((a, b) => b.length - a.length);
+            if (sortedUrls.length > 0) {
+                const escaped = sortedUrls.map((u) => u.replace(/[.*+?^${}()|[\]\\]/g, "\\$&"));
+                const masterRegex = new RegExp(`(${escaped.join("|")})`, "g");
+                finalContent = finalContent.replace(masterRegex, (match) => urlMap[match] || match);
+            }
+
+            const commonDirs = ["/wp-content/", "/wp-includes/", "/assets/", "/static/", "/images/"];
+            for (const dir of commonDirs) {
+                const localDir = `./assets/${urlObj.hostname}${dir}`;
+                finalContent = finalContent.split(`"${dir}`).join(`"${localDir}`).split(`'${dir}`).join(`'${localDir}`).split(`(${dir}`).join(`(${localDir}`);
+            }
+
+            const domainPattern = new RegExp(`https?://(www\\.)?${urlObj.hostname.replace(/\./g, "\\.")}[^"']*`, "gi");
+            finalContent = finalContent.replace(domainPattern, () => "./");
+
+            finalContent = finalContent.replace(/<script\b[^>]*>([\s\S]*?)<\/script>/gi, (match, scriptContent) => {
+                const lower = scriptContent.toLowerCase();
+                return (lower.includes("google-analytics") || lower.includes("gtag") || lower.includes("fbq") || lower.includes("lazy") || lower.includes("tracker")) ? "" : match;
+            });
+
+            const headEnd = finalContent.indexOf("</head>");
+            if (headEnd > -1) {
+                const stabilityCss = `\n<style>* { transition: none !important; animation: none !important; scroll-behavior: auto !important; } [data-aos], .reveal, .lazypath, .lazy-load, [data-src] { opacity: 1 !important; visibility: visible !important; transform: none !important; clip-path: none !important; } img, video, iframe { max-width: 100%; display: block; } a { pointer-events: none; cursor: default; } </style>`;
+                finalContent = finalContent.slice(0, headEnd) + stabilityCss + finalContent.slice(headEnd);
+            }
+
+            const finalPath = path.join(domainDir, htmlFilename);
+            fs.writeFileSync(finalPath, finalContent);
+            return finalPath;
+        } finally {
+            await browser.close();
+        }
+    }
+}

packages/cloner-library/src/WebsiteCloner.ts

@@ -0,0 +1,123 @@
+import { PlaywrightCrawler, RequestQueue } from 'crawlee';
+import * as path from 'node:path';
+import * as fs from 'node:fs';
+import { execSync } from 'node:child_process';
+
+export interface WebsiteClonerOptions {
+    baseOutputDir: string;
+    maxRequestsPerCrawl?: number;
+    maxConcurrency?: number;
+}
+
+export class WebsiteCloner {
+    private options: WebsiteClonerOptions;
+
+    constructor(options: WebsiteClonerOptions) {
+        this.options = {
+            maxRequestsPerCrawl: 100,
+            maxConcurrency: 3,
+            ...options
+        };
+    }
+
+    public async clone(targetUrl: string, outputDirName?: string): Promise<string> {
+        const urlObj = new URL(targetUrl);
+        const domain = urlObj.hostname;
+        const finalOutputDirName = outputDirName || domain.replace(/\./g, '-');
+        const baseOutputDir = path.resolve(this.options.baseOutputDir, finalOutputDirName);
+
+        if (fs.existsSync(baseOutputDir)) {
+            fs.rmSync(baseOutputDir, { recursive: true, force: true });
+        }
+        fs.mkdirSync(baseOutputDir, { recursive: true });
+
+        console.log(`🚀 Starting perfect recursive clone of ${targetUrl}...`);
+        console.log(`📂 Output: ${baseOutputDir}`);
+
+        const requestQueue = await RequestQueue.open();
+        await requestQueue.addRequest({ url: targetUrl });
+
+        const crawler = new PlaywrightCrawler({
+            requestQueue,
+            maxRequestsPerCrawl: this.options.maxRequestsPerCrawl,
+            maxConcurrency: this.options.maxConcurrency,
+
+            async requestHandler({ request, enqueueLinks, log }) {
+                const url = request.url;
+                log.info(`Capturing ${url}...`);
+
+                const u = new URL(url);
+                let relPath = u.pathname;
+                if (relPath === '/' || relPath === '') relPath = '/index.html';
+                if (!relPath.endsWith('.html') && !path.extname(relPath)) relPath += '/index.html';
+                if (relPath.startsWith('/')) relPath = relPath.substring(1);
+
+                const fullPath = path.join(baseOutputDir, relPath);
+                fs.mkdirSync(path.dirname(fullPath), { recursive: true });
+
+                try {
+                    // Note: This assumes single-file-cli is available in the environment
+                    execSync(`npx single-file-cli "${url}" "${fullPath}" --browser-headless=true --browser-wait-until=networkidle0`, {
+                        stdio: 'inherit'
+                    });
+                } catch (e) {
+                    log.error(`Failed to capture ${url} with SingleFile`);
+                }
+
+                await enqueueLinks({
+                    strategy: 'same-domain',
+                    transformRequestFunction: (req) => {
+                        if (/\.(download|pdf|zip|gz|exe|png|jpg|jpeg|gif|svg|css|js)$/i.test(req.url)) return false;
+                        return req;
+                    }
+                });
+            },
+        });
+
+        await crawler.run();
+
+        console.log('🔗 Rewriting internal links for offline navigation...');
+        const allFiles = this.getFiles(baseOutputDir).filter(f => f.endsWith('.html'));
+
+        for (const file of allFiles) {
+            let content = fs.readFileSync(file, 'utf8');
+            const fileRelToRoot = path.relative(baseOutputDir, file);
+
+            content = content.replace(/href="([^"]+)"/g, (match, href) => {
+                if (href.startsWith(targetUrl) || href.startsWith('/') || (!href.includes('://') && !href.startsWith('data:'))) {
+                    try {
+                        const linkUrl = new URL(href, targetUrl);
+                        if (linkUrl.hostname === domain) {
+                            let linkPath = linkUrl.pathname;
+                            if (linkPath === '/' || linkPath === '') linkPath = '/index.html';
+                            if (!linkPath.endsWith('.html') && !path.extname(linkPath)) linkPath += '/index.html';
+                            if (linkPath.startsWith('/')) linkPath = linkPath.substring(1);
+
+                            const relativeLink = path.relative(path.dirname(fileRelToRoot), linkPath);
+                            return `href="${relativeLink}"`;
+                        }
+                    } catch (e) { }
+                }
+                return match;
+            });
+
+            fs.writeFileSync(file, content);
+        }
+
+        console.log(`\n✅ Done! Perfect clone complete in: ${baseOutputDir}`);
+        return baseOutputDir;
+    }
+
+    private getFiles(dir: string, fileList: string[] = []) {
+        const files = fs.readdirSync(dir);
+        for (const file of files) {
+            const name = path.join(dir, file);
+            if (fs.statSync(name).isDirectory()) {
+                this.getFiles(name, fileList);
+            } else {
+                fileList.push(name);
+            }
+        }
+        return fileList;
+    }
+}

packages/cloner-library/src/index.ts

@@ -0,0 +1,3 @@
+export * from "./AssetManager.js";
+export * from "./PageCloner.js";
+export * from "./WebsiteCloner.js";

packages/cloner-library/tsconfig.json

@@ -0,0 +1,17 @@
+{
+    "extends": "../tsconfig/base.json",
+    "compilerOptions": {
+        "outDir": "dist",
+        "rootDir": "src",
+        "declaration": true,
+        "emitDeclarationOnly": true,
+        "module": "ESNext",
+        "target": "ESNext",
+        "moduleResolution": "Bundler",
+        "allowImportingTsExtensions": true,
+        "noEmit": false
+    },
+    "include": [
+        "src/**/*"
+    ]
+}

packages/cms-infra/docker-compose.yml

@@ -0,0 +1,39 @@
+services:
+  infra-cms:
+    image: directus/directus:11
+    ports:
+      - "8059:8055"
+    networks:
+      - default
+      - infra
+    environment:
+      KEY: "infra-cms-key"
+      SECRET: "infra-cms-secret"
+      ADMIN_EMAIL: "marc@mintel.me"
+      ADMIN_PASSWORD: "Tim300493."
+      DB_CLIENT: "sqlite3"
+      DB_FILENAME: "/directus/database/data.db"
+      WEBSOCKETS_ENABLED: "true"
+      EMAIL_TRANSPORT: "smtp"
+      EMAIL_SMTP_HOST: "smtp.eu.mailgun.org"
+      EMAIL_SMTP_PORT: "587"
+      EMAIL_SMTP_USER: "postmaster@mg.mintel.me"
+      EMAIL_SMTP_PASSWORD: "4592fcb94599ee1a45b4ac2386fd0a64-102c75d8-ca2870e6"
+      EMAIL_SMTP_SECURE: "false"
+      EMAIL_FROM: "postmaster@mg.mintel.me"
+    volumes:
+      - ./database:/directus/database
+      - ./uploads:/directus/uploads
+      - ./schema:/directus/schema
+      - ./extensions:/directus/extensions
+    labels:
+      - "traefik.enable=true"
+      - "traefik.http.routers.infra-cms.rule=Host(`cms.localhost`)"
+      - "traefik.http.services.infra-cms.loadbalancer.server.port=8055"
+      - "traefik.docker.network=infra"
+
+networks:
+  default:
+    name: mintel-infra-cms-internal
+  infra:
+    external: true

packages/cms-infra/extensions/acquisition-manager/package.json

@@ -0,0 +1,30 @@
+{
+  "name": "acquisition-manager",
+  "description": "Custom High-Fidelity Acquisition Management for Directus",
+  "icon": "account_balance_wallet",
+  "version": "1.7.12",
+  "type": "module",
+  "keywords": [
+    "directus",
+    "directus-extension",
+    "directus-extension-module"
+  ],
+  "files": [
+    "dist"
+  ],
+  "directus:extension": {
+    "type": "module",
+    "path": "index.js",
+    "source": "src/index.ts",
+    "host": "*",
+    "name": "Acquisition Manager"
+  },
+  "scripts": {
+    "build": "directus-extension build && (cp -f dist/index.js index.js 2>/dev/null || true)",
+    "dev": "directus-extension build -w"
+  },
+  "devDependencies": {
+    "@directus/extensions-sdk": "11.0.2",
+    "vue": "^3.4.0"
+  }
+}

packages/cms-infra/extensions/customer-manager/package.json

@@ -0,0 +1,30 @@
+{
+  "name": "customer-manager",
+  "description": "Custom High-Fidelity Customer & Company Management for Directus",
+  "icon": "supervisor_account",
+  "version": "1.7.12",
+  "type": "module",
+  "keywords": [
+    "directus",
+    "directus-extension",
+    "directus-extension-module"
+  ],
+  "files": [
+    "dist"
+  ],
+  "directus:extension": {
+    "type": "module",
+    "path": "index.js",
+    "source": "src/index.ts",
+    "host": "*",
+    "name": "Customer Manager"
+  },
+  "scripts": {
+    "build": "directus-extension build && (cp -f dist/index.js index.js 2>/dev/null || true)",
+    "dev": "directus-extension build -w"
+  },
+  "devDependencies": {
+    "@directus/extensions-sdk": "11.0.2",
+    "vue": "^3.4.0"
+  }
+}

packages/cms-infra/extensions/feedback-commander/package.json

@@ -0,0 +1,30 @@
+{
+  "name": "feedback-commander",
+  "description": "Custom High-Fidelity Feedback Management Extension for Directus",
+  "icon": "view_kanban",
+  "version": "1.7.12",
+  "type": "module",
+  "keywords": [
+    "directus",
+    "directus-extension",
+    "directus-extension-module"
+  ],
+  "files": [
+    "dist"
+  ],
+  "directus:extension": {
+    "type": "module",
+    "path": "index.js",
+    "source": "src/index.ts",
+    "host": "*",
+    "name": "Feedback Commander"
+  },
+  "scripts": {
+    "build": "directus-extension build && (cp -f dist/index.js index.js 2>/dev/null || true)",
+    "dev": "directus-extension build -w"
+  },
+  "devDependencies": {
+    "@directus/extensions-sdk": "11.0.2",
+    "vue": "^3.4.0"
+  }
+}

packages/cms-infra/extensions/people-manager/package.json

@@ -0,0 +1,30 @@
+{
+  "name": "people-manager",
+  "description": "Custom High-Fidelity People Management for Directus",
+  "icon": "person",
+  "version": "1.7.12",
+  "type": "module",
+  "keywords": [
+    "directus",
+    "directus-extension",
+    "directus-extension-module"
+  ],
+  "files": [
+    "dist"
+  ],
+  "directus:extension": {
+    "type": "module",
+    "path": "index.js",
+    "source": "src/index.ts",
+    "host": "*",
+    "name": "People Manager"
+  },
+  "scripts": {
+    "build": "directus-extension build && (cp -f dist/index.js index.js 2>/dev/null || true)",
+    "dev": "directus-extension build -w"
+  },
+  "devDependencies": {
+    "@directus/extensions-sdk": "11.0.2",
+    "vue": "^3.4.0"
+  }
+}

packages/cms-infra/package.json

@@ -0,0 +1,17 @@
+{
+  "name": "@mintel/cms-infra",
+  "version": "1.8.2",
+  "private": true,
+  "type": "module",
+  "scripts": {
+    "up": "npm run build:extensions && docker compose up -d",
+    "down": "docker compose down",
+    "logs": "docker compose logs -f",
+    "build:extensions": "../../scripts/sync-extensions.sh",
+    "schema:apply:local": "../../scripts/cms-apply.sh local",
+    "schema:apply:infra": "../../scripts/cms-apply.sh infra",
+    "snapshot:local": "../../scripts/cms-snapshot.sh",
+    "sync:push": "../../scripts/sync-directus.sh push infra",
+    "sync:pull": "../../scripts/sync-directus.sh pull infra"
+  }
+}

packages/cms-infra/uploads/directus-health-file

@@ -0,0 +1 @@
+xmKX5

packages/company-manager/package.json

@@ -0,0 +1,27 @@
+{
+  "name": "company-manager",
+  "description": "Central Company Management for Directus",
+  "icon": "business",
+  "version": "1.8.2",
+  "type": "module",
+  "keywords": [
+    "directus",
+    "directus-extension",
+    "directus-extension-module"
+  ],
+  "directus:extension": {
+    "type": "module",
+    "path": "index.js",
+    "source": "src/index.ts",
+    "host": "*",
+    "name": "Company Manager"
+  },
+  "scripts": {
+    "build": "directus-extension build && cp -f dist/index.js index.js 2>/dev/null || true",
+    "dev": "directus-extension build -w"
+  },
+  "devDependencies": {
+    "@directus/extensions-sdk": "11.0.2",
+    "vue": "^3.4.0"
+  }
+}

packages/customer-manager/package.json

@@ -0,0 +1,27 @@
+{
+  "name": "customer-manager",
+  "description": "Custom High-Fidelity Customer & Company Management for Directus",
+  "icon": "supervisor_account",
+  "version": "1.8.2",
+  "type": "module",
+  "keywords": [
+    "directus",
+    "directus-extension",
+    "directus-extension-module"
+  ],
+  "directus:extension": {
+    "type": "module",
+    "path": "index.js",
+    "source": "src/index.ts",
+    "host": "*",
+    "name": "Customer Manager"
+  },
+  "scripts": {
+    "build": "directus-extension build && cp -f dist/index.js index.js 2>/dev/null || true",
+    "dev": "directus-extension build -w"
+  },
+  "devDependencies": {
+    "@directus/extensions-sdk": "11.0.2",
+    "vue": "^3.4.0"
+  }
+}

packages/customer-manager/src/index.ts

@@ -0,0 +1,14 @@
+import { defineModule } from '@directus/extensions-sdk';
+import ModuleComponent from './module.vue';
+
+export default defineModule({
+    id: 'customer-manager',
+    name: 'Customer Manager',
+    icon: 'supervisor_account',
+    routes: [
+        {
+            path: '',
+            component: ModuleComponent,
+        },
+    ],
+});

packages/customer-manager/src/module.vue

@@ -0,0 +1,398 @@
+<template>
+	<private-view title="Customer Manager">
+		<template #navigation>
+			<v-list nav>
+				<v-list-item @click="openCreateCompany" clickable>
+					<v-list-item-icon><v-icon name="add" color="var(--theme--primary)" /></v-list-item-icon>
+					<v-list-item-content>
+						<v-text-overflow text="Neue Firma anlegen" />
+					</v-list-item-content>
+				</v-list-item>
+
+				<v-divider />
+
+				<v-list-item
+					v-for="company in companies"
+					:key="company.id"
+					:active="selectedCompany?.id === company.id"
+					class="company-item"
+					clickable
+					@click="selectCompany(company)"
+				>
+					<v-list-item-icon><v-icon name="business" /></v-list-item-icon>
+					<v-list-item-content>
+						<v-text-overflow :text="company.name" />
+					</v-list-item-content>
+				</v-list-item>
+			</v-list>
+		</template>
+
+		<template #title-outer:after>
+			<v-notice v-if="notice" :type="notice.type" @close="notice = null" dismissible>
+				{{ notice.message }}
+			</v-notice>
+		</template>
+
+		<div class="content-wrapper">
+			<div v-if="!selectedCompany" class="empty-state">
+				<v-info title="Firmen auswählen" icon="business" center>
+					Wähle eine Firma in der Navigation aus oder
+					<v-button x-small @click="openCreateCompany">erstelle eine neue Firma</v-button>.
+				</v-info>
+			</div>
+
+			<template v-else>
+				<header class="header">
+					<div class="header-left">
+						<h1 class="title">{{ selectedCompany.name }}</h1>
+						<p class="subtitle">{{ employees.length }} Kunden-Mitarbeiter</p>
+					</div>
+					<div class="header-right">
+						<v-button secondary rounded icon v-tooltip.bottom="'Firma bearbeiten'" @click="openEditCompany">
+							<v-icon name="edit" />
+						</v-button>
+						<v-button primary @click="openCreateEmployee">
+							Mitarbeiter hinzufügen
+						</v-button>
+					</div>
+				</header>
+
+				<v-table
+					:headers="tableHeaders"
+					:items="employees"
+					:loading="loading"
+					class="clickable-table"
+					fixed-header
+					@click:row="onRowClick"
+				>
+					<template #[`item.name`]="{ item }">
+						<div class="user-cell">
+							<v-avatar :name="item.first_name" x-small />
+							<span class="user-name">{{ item.first_name }} {{ item.last_name }}</span>
+						</div>
+					</template>
+
+					<template #[`item.last_invited`]="{ item }">
+						<span v-if="item.last_invited" class="status-date">
+							{{ formatDate(item.last_invited) }}
+						</span>
+						<v-chip v-else x-small>Noch nie</v-chip>
+					</template>
+				</v-table>
+			</template>
+		</div>
+
+		<!-- Drawer: Company Form -->
+		<v-drawer
+			v-model="drawerCompanyActive"
+			:title="isEditingCompany ? 'Firma bearbeiten' : 'Neue Firma anlegen'"
+			icon="business"
+			@cancel="drawerCompanyActive = false"
+		>
+			<div v-if="drawerCompanyActive" class="drawer-content">
+                <div class="form-section">
+                    <div class="field">
+                        <span class="label">Firmenname</span>
+                        <v-input v-model="companyForm.name" placeholder="z.B. KLZ Cables" autofocus />
+                    </div>
+                </div>
+				
+				<div class="drawer-actions">
+					<v-button primary block :loading="saving" @click="saveCompany">Speichern</v-button>
+				</div>
+			</div>
+		</v-drawer>
+
+		<!-- Drawer: Employee Form -->
+		<v-drawer
+			v-model="drawerEmployeeActive"
+			:title="isEditingEmployee ? 'Mitarbeiter bearbeiten' : 'Neuen Mitarbeiter anlegen'"
+			icon="person"
+			@cancel="drawerEmployeeActive = false"
+		>
+			<div v-if="drawerEmployeeActive" class="drawer-content">
+                <div class="form-section">
+                    <div class="field">
+                        <span class="label">Vorname</span>
+                        <v-input v-model="employeeForm.first_name" placeholder="Vorname" autofocus />
+                    </div>
+
+                    <div class="field">
+                        <span class="label">Nachname</span>
+                        <v-input v-model="employeeForm.last_name" placeholder="Nachname" />
+                    </div>
+
+                    <div class="field">
+                        <span class="label">E-Mail</span>
+                        <v-input v-model="employeeForm.email" placeholder="E-Mail Adresse" type="email" />
+                    </div>
+
+                    <div class="field">
+                        <span class="label">Zentrale Person (Verknüpfung)</span>
+                        <v-select
+                            v-model="employeeForm.person"
+                            :items="peopleOptions"
+                            placeholder="Person aus dem People Manager auswählen..."
+                        />
+                    </div>
+
+                    <v-divider v-if="isEditingEmployee" />
+
+                    <div v-if="isEditingEmployee" class="field">
+                        <span class="label">Temporäres Passwort</span>
+                        <v-input v-model="employeeForm.temporary_password" readonly class="password-input" />
+                        <p class="field-note">Wird beim Senden der Zugangsdaten automatisch generiert.</p>
+                    </div>
+                </div>
+
+				<div class="drawer-actions">
+					<v-button primary block :loading="saving" @click="saveEmployee">Daten speichern</v-button>
+					
+					<template v-if="isEditingEmployee">
+						<v-divider />
+						<v-button
+							v-tooltip.bottom="'Generiert PW, speichert es und sendet E-Mail'"
+							secondary
+							block
+							:loading="invitingId === employeeForm.id"
+							@click="inviteUser(employeeForm)"
+						>
+							<v-icon name="send" left /> Zugangsdaten senden
+						</v-button>
+					</template>
+				</div>
+			</div>
+		</v-drawer>
+	</private-view>
+</template>
+
+<script setup lang="ts">
+import { ref, onMounted, nextTick, computed } from 'vue';
+import { useApi } from '@directus/extensions-sdk';
+
+const api = useApi();
+
+const companies = ref<any[]>([]);
+const selectedCompany = ref<any>(null);
+const employees = ref<any[]>([]);
+const loading = ref(false);
+const saving = ref(false);
+const invitingId = ref<string | null>(null);
+const notice = ref<{ type: string; message: string } | null>(null);
+
+// Forms State
+const drawerCompanyActive = ref(false);
+const isEditingCompany = ref(false);
+const companyForm = ref({ id: '', name: '' });
+
+const drawerEmployeeActive = ref(false);
+const isEditingEmployee = ref(false);
+const employeeForm = ref({ 
+    id: '', 
+    first_name: '', 
+    last_name: '', 
+    email: '', 
+    person: null,
+    temporary_password: '' 
+});
+
+const tableHeaders = [
+	{ text: 'Name', value: 'name', sortable: true },
+	{ text: 'E-Mail', value: 'email', sortable: true },
+	{ text: 'Zuletzt eingeladen', value: 'last_invited', sortable: true }
+];
+
+const people = ref<any[]>([]);
+
+const peopleOptions = computed(() => 
+    people.value.map(p => ({
+        text: `${p.first_name} ${p.last_name} (${p.email})`,
+        value: p.id
+    }))
+);
+
+async function fetchData() {
+    const [companiesResp, peopleResp] = await Promise.all([
+        api.get('/items/companies', { params: { sort: 'name', fields: ['id', 'name'] } }),
+        api.get('/items/people', { params: { sort: 'last_name' } })
+    ]);
+    companies.value = companiesResp.data.data;
+    people.value = peopleResp.data.data;
+}
+
+async function selectCompany(company: any) {
+	selectedCompany.value = company;
+	loading.value = true;
+	try {
+		const res = await api.get('/items/client_users', {
+			params: {
+				filter: { company: { _eq: company.id } },
+				fields: ['*', 'person.*'],
+				sort: 'first_name',
+			},
+		});
+		employees.value = res.data.data;
+	} finally {
+		loading.value = false;
+	}
+}
+
+// Company Actions
+function openCreateCompany() {
+	isEditingCompany.value = false;
+	companyForm.value = { id: '', name: '' };
+	drawerCompanyActive.value = true;
+}
+
+async function openEditCompany() {
+	if (!selectedCompany.value) return;
+    companyForm.value = { 
+        id: selectedCompany.value.id, 
+        name: selectedCompany.value.name 
+    };
+	isEditingCompany.value = true;
+    await nextTick();
+	drawerCompanyActive.value = true;
+}
+
+async function saveCompany() {
+	if (!companyForm.value.name) return;
+	saving.value = true;
+	try {
+		if (isEditingCompany.value) {
+			await api.patch(`/items/companies/${companyForm.value.id}`, { name: companyForm.value.name });
+			notice.value = { type: 'success', message: 'Firma aktualisiert!' };
+		} else {
+			await api.post('/items/companies', { name: companyForm.value.name });
+			notice.value = { type: 'success', message: 'Firma angelegt!' };
+		}
+		drawerCompanyActive.value = false;
+		await fetchCompanies();
+		if (selectedCompany.value?.id === companyForm.value.id) {
+			selectedCompany.value.name = companyForm.value.name;
+		}
+	} catch (e: any) {
+		notice.value = { type: 'danger', message: e.message };
+	} finally {
+		saving.value = false;
+	}
+}
+
+// Employee Actions
+function openCreateEmployee() {
+	isEditingEmployee.value = false;
+	employeeForm.value = { id: '', first_name: '', last_name: '', email: '', temporary_password: '' };
+	drawerEmployeeActive.value = true;
+}
+
+async function openEditEmployee(item: any) {
+    employeeForm.value = {
+        id: item.id || '',
+        first_name: item.first_name || '',
+        last_name: item.last_name || '',
+        email: item.email || '',
+        person: item.person?.id || item.person || null,
+        temporary_password: item.temporary_password || ''
+    };
+	isEditingEmployee.value = true;
+    await nextTick();
+	drawerEmployeeActive.value = true;
+}
+
+async function saveEmployee() {
+	if (!employeeForm.value.email || !selectedCompany.value) return;
+	saving.value = true;
+	try {
+		if (isEditingEmployee.value) {
+			await api.patch(`/items/client_users/${employeeForm.value.id}`, {
+				first_name: employeeForm.value.first_name,
+				last_name: employeeForm.value.last_name,
+				email: employeeForm.value.email,
+				person: employeeForm.value.person
+			});
+			notice.value = { type: 'success', message: 'Mitarbeiter aktualisiert!' };
+		} else {
+			await api.post('/items/client_users', {
+				first_name: employeeForm.value.first_name,
+				last_name: employeeForm.value.last_name,
+				email: employeeForm.value.email,
+				company: selectedCompany.value.id,
+				person: employeeForm.value.person
+			});
+			notice.value = { type: 'success', message: 'Mitarbeiter angelegt!' };
+		}
+		drawerEmployeeActive.value = false;
+		await selectCompany(selectedCompany.value);
+	} catch (e: any) {
+		notice.value = { type: 'danger', message: e.message };
+	} finally {
+		saving.value = false;
+	}
+}
+
+async function inviteUser(user: any) {
+	invitingId.value = user.id;
+	try {
+		await api.post(`/flows/trigger/33443f6b-cec7-4668-9607-f33ea674d501`, [user.id]);
+		notice.value = { type: 'success', message: `Zugangsdaten für ${user.first_name} versendet. 📧` };
+		await selectCompany(selectedCompany.value);
+		if (drawerEmployeeActive.value && employeeForm.value.id === user.id) {
+			const updated = employees.value.find(e => e.id === user.id);
+			if (updated) {
+                employeeForm.value.temporary_password = updated.temporary_password;
+            }
+		}
+	} catch (e: any) {
+		notice.value = { type: 'danger', message: `Fehler: ${e.message}` };
+	} finally {
+		invitingId.value = null;
+	}
+}
+
+function onRowClick(event: any) {
+	const item = event?.item || event;
+	if (item && item.id) {
+		openEditEmployee(item);
+	}
+}
+
+function formatDate(dateStr: string) {
+	return new Date(dateStr).toLocaleString('de-DE', {
+		day: '2-digit', month: '2-digit', year: 'numeric',
+		hour: '2-digit', minute: '2-digit'
+	});
+}
+
+onMounted(() => {
+	fetchData();
+});
+</script>
+
+<style scoped>
+.content-wrapper { padding: 32px; height: 100%; display: flex; flex-direction: column; }
+.company-item { cursor: pointer; }
+.header { margin-bottom: 24px; display: flex; justify-content: space-between; align-items: flex-end; }
+.header-right { display: flex; gap: 12px; }
+.title { font-size: 24px; font-weight: 800; margin-bottom: 4px; }
+.subtitle { color: var(--theme--foreground-subdued); font-size: 14px; }
+.empty-state { height: 100%; display: flex; align-items: center; justify-content: center; }
+.user-cell { display: flex; align-items: center; gap: 12px; }
+.user-name { font-weight: 600; }
+.status-date { font-size: 12px; color: var(--theme--foreground-subdued); }
+.drawer-content { padding: 24px; display: flex; flex-direction: column; gap: 32px; }
+.form-section { display: flex; flex-direction: column; gap: 20px; }
+.field { display: flex; flex-direction: column; gap: 8px; }
+.label { font-size: 12px; font-weight: 700; text-transform: uppercase; color: var(--theme--foreground-subdued); letter-spacing: 0.5px; }
+.field-note { font-size: 11px; color: var(--theme--foreground-subdued); margin-top: 4px; }
+.drawer-actions { margin-top: 24px; display: flex; flex-direction: column; gap: 12px; }
+.password-input :deep(textarea) {
+	font-family: var(--family-monospace);
+	font-weight: 800;
+	color: var(--theme--primary) !important;
+	background: var(--theme--background-subdued) !important;
+}
+
+.clickable-table :deep(tbody tr) { cursor: pointer; transition: background-color 0.2s ease; }
+.clickable-table :deep(tbody tr:hover) { background-color: var(--theme--background-subdued) !important; }
+:deep(.v-list-item) { cursor: pointer !important; }
+</style>

packages/directus-extension-toolkit/package.json

@@ -0,0 +1,31 @@
+{
+  "name": "@mintel/directus-extension-toolkit",
+  "version": "1.8.2",
+  "description": "Shared toolkit for Directus extensions in the Mintel ecosystem",
+  "type": "module",
+  "main": "./dist/index.js",
+  "module": "./dist/index.js",
+  "files": [
+    "dist"
+  ],
+  "exports": {
+    ".": {
+      "import": "./dist/index.js"
+    }
+  },
+  "scripts": {
+    "build": "vite build",
+    "dev": "vite build --watch"
+  },
+  "devDependencies": {
+    "@directus/extensions-sdk": "11.0.2",
+    "@vitejs/plugin-vue": "^6.0.4",
+    "typescript": "^5.0.0",
+    "vite": "^5.0.0",
+    "vue": "^3.4.0"
+  },
+  "peerDependencies": {
+    "@directus/extensions-sdk": "*",
+    "vue": "^3.4.0"
+  }
+}

packages/directus-extension-toolkit/src/MintelManagerLayout.vue

@@ -0,0 +1,102 @@
+<template>
+	<private-view :title="title">
+		<template #navigation>
+			<slot name="navigation" />
+		</template>
+
+		<template #title-outer:after>
+			<v-notice v-if="notice" :type="notice.type" @close="$emit('close-notice')" dismissible>
+				{{ notice.message }}
+			</v-notice>
+		</template>
+
+		<div class="mintel-manager-layout">
+			<div v-if="isEmpty" class="empty-state">
+				<v-info :title="emptyTitle" :icon="emptyIcon" center>
+					<slot name="empty-state" />
+				</v-info>
+			</div>
+
+			<template v-else>
+				<header class="mintel-header">
+					<div class="header-left">
+						<h1 class="mintel-title">{{ itemTitle }}</h1>
+						<p class="mintel-subtitle">
+							<slot name="subtitle" />
+						</p>
+					</div>
+					<div class="header-right">
+						<slot name="actions" />
+					</div>
+				</header>
+
+				<v-divider />
+
+				<div class="mintel-content">
+					<slot />
+				</div>
+			</template>
+		</div>
+	</private-view>
+</template>
+
+<script setup lang="ts">
+defineProps<{
+	title: string;
+	itemTitle?: string;
+	isEmpty?: boolean;
+	emptyTitle?: string;
+	emptyIcon?: string;
+	notice?: { type: string; message: string } | null;
+}>();
+
+defineEmits(['close-notice']);
+</script>
+
+<style scoped>
+.mintel-manager-layout {
+	padding: 32px;
+	height: 100%;
+	display: flex;
+	flex-direction: column;
+	overflow-y: auto;
+}
+
+.mintel-header {
+	margin-bottom: 24px;
+	display: flex;
+	justify-content: space-between;
+	align-items: flex-end;
+}
+
+.mintel-title {
+	font-size: 24px;
+	font-weight: 800;
+	margin-bottom: 4px;
+	color: var(--theme--foreground);
+}
+
+.mintel-subtitle {
+	color: var(--theme--foreground-subdued);
+	font-size: 14px;
+	display: flex;
+	align-items: center;
+	gap: 8px;
+}
+
+.header-right {
+	display: flex;
+	gap: 12px;
+}
+
+.empty-state {
+	height: 100%;
+	display: flex;
+	align-items: center;
+	justify-content: center;
+}
+
+.mintel-content {
+	margin-top: 32px;
+}
+</style>

packages/directus-extension-toolkit/src/MintelSelect.vue

@@ -0,0 +1,62 @@
+<template>
+	<div class="mintel-select">
+		<v-select
+			:model-value="modelValue"
+			:items="items"
+			:placeholder="placeholder"
+			:searchable="searchable"
+			:show-deselect="showDeselect"
+			@update:model-value="$emit('update:modelValue', $event)"
+		/>
+		<v-button v-if="allowAdd" secondary rounded icon x-small class="add-button" @click="$emit('add')">
+			<v-icon name="add" />
+		</v-button>
+	</div>
+</template>
+
+<script setup lang="ts">
+const props = defineProps({
+	modelValue: {
+		type: [String, Number],
+		default: null
+	},
+	items: {
+		type: Array as () => Array<{ text: string; value: string | number }>,
+		required: true
+	},
+	placeholder: {
+		type: String,
+		default: 'Auswählen...'
+	},
+	searchable: {
+		type: Boolean,
+		default: true
+	},
+	showDeselect: {
+		type: Boolean,
+		default: true
+	},
+	allowAdd: {
+		type: Boolean,
+		default: false
+	}
+});
+
+defineEmits(['update:modelValue', 'add']);
+</script>
+
+<style scoped>
+.mintel-select {
+	display: flex;
+	align-items: center;
+	gap: 8px;
+}
+
+.mintel-select :deep(.v-select) {
+	flex: 1;
+}
+
+.add-button {
+	flex-shrink: 0;
+}
+</style>

packages/directus-extension-toolkit/src/MintelStatCard.vue

@@ -0,0 +1,84 @@
+<template>
+	<div class="mintel-stat-card" @click="$emit('click')">
+		<div class="stat-icon">
+			<v-icon :name="icon" large />
+		</div>
+		<div class="stat-content">
+			<span class="stat-label">{{ label }}</span>
+			<span class="stat-value">{{ value }}</span>
+		</div>
+		<v-icon name="chevron_right" class="arrow" />
+	</div>
+</template>
+
+<script setup lang="ts">
+defineProps<{
+	label: string;
+	value: string | number;
+	icon: string;
+}>();
+
+defineEmits(['click']);
+</script>
+
+<style scoped>
+.mintel-stat-card {
+	background: var(--theme--background-normal);
+	border: 1px solid var(--theme--border);
+	padding: 24px;
+	border-radius: 12px;
+	display: flex;
+	align-items: center;
+	gap: 20px;
+	cursor: pointer;
+	transition: all 0.2s ease;
+	position: relative;
+}
+
+.mintel-stat-card:hover {
+	border-color: var(--theme--primary);
+	transform: translateY(-2px);
+	box-shadow: 0 8px 16px rgba(0,0,0,0.1);
+}
+
+.stat-icon {
+	width: 56px;
+	height: 56px;
+	background: var(--theme--background-subdued);
+	border-radius: 12px;
+	display: flex;
+	align-items: center;
+	justify-content: center;
+	color: var(--theme--primary);
+}
+
+.stat-content {
+	display: flex;
+	flex-direction: column;
+}
+
+.stat-label {
+	font-size: 12px;
+	font-weight: 700;
+	text-transform: uppercase;
+	color: var(--theme--foreground-subdued);
+	letter-spacing: 0.5px;
+}
+
+.stat-value {
+	font-size: 28px;
+	font-weight: 800;
+	color: var(--theme--foreground);
+}
+
+.arrow {
+	position: absolute;
+	right: 24px;
+	opacity: 0.2;
+}
+
+.mintel-stat-card:hover .arrow {
+	opacity: 1;
+	color: var(--theme--primary);
+}
+</style>

packages/directus-extension-toolkit/src/index.ts

@@ -0,0 +1,3 @@
+export { default as MintelSelect } from './MintelSelect.vue';
+export { default as MintelManagerLayout } from './MintelManagerLayout.vue';
+export { default as MintelStatCard } from './MintelStatCard.vue';

packages/directus-extension-toolkit/vite.config.ts

@@ -0,0 +1,24 @@
+import { defineConfig } from 'vite';
+import vue from '@vitejs/plugin-vue';
+import { resolve } from 'path';
+
+export default defineConfig({
+    plugins: [vue()],
+    build: {
+        lib: {
+            entry: resolve('src/index.ts'),
+            name: 'MintelDirectusToolkit',
+            fileName: 'index',
+            formats: ['es']
+        },
+        rollupOptions: {
+            external: ['vue', '@directus/extensions-sdk'],
+            output: {
+                globals: {
+                    vue: 'Vue',
+                    '@directus/extensions-sdk': 'DirectusExtensionsSDK'
+                }
+            }
+        }
+    }
+});

packages/eslint-config/index.js

@@ -3,13 +3,21 @@ import tseslint from "typescript-eslint";
 
 export default tseslint.config(
   {
-    ignores: ["**/dist/**", "**/node_modules/**", "**/.next/**"],
+    ignores: ["**/dist/**", "**/node_modules/**", "**/.next/**", "**/build/**"],
   },
   js.configs.recommended,
   ...tseslint.configs.recommended,
   {
     rules: {
-      "no-unused-vars": "warn",
+      "no-unused-vars": "off",
+      "@typescript-eslint/no-unused-vars": [
+        "warn",
+        {
+          argsIgnorePattern: "^_",
+          varsIgnorePattern: "^_",
+          caughtErrorsIgnorePattern: "^_",
+        },
+      ],
       "no-console": "off",
       "@typescript-eslint/no-explicit-any": "off",
     },

packages/eslint-config/next.js

@@ -1,40 +1,41 @@
-import { dirname } from "path";
-import { fileURLToPath } from "url";
-import { FlatCompat } from "@eslint/eslintrc";
+import nextPlugin from "@next/eslint-plugin-next";
+import reactPlugin from "eslint-plugin-react";
+import hooksPlugin from "eslint-plugin-react-hooks";
+import tseslint from "typescript-eslint";
+import js from "@eslint/js";
 
-const __filename = fileURLToPath(import.meta.url);
-const __dirname = dirname(__filename);
-
-const compat = new FlatCompat({
-  baseDirectory: __dirname,
-});
-
-export const nextConfig = [
-  {
-    ignores: [
-      "**/dist/**",
-      "**/build/**",
-      "**/out/**",
-      "**/coverage/**",
-      "**/.next/**",
-      "**/node_modules/**",
-      "**/.gitea/**",
-      "**/.changeset/**",
-      "**/.vercel/**",
-    ],
-  },
-  ...compat.extends("next/core-web-vitals", "next/typescript"),
+/**
+ * Mintel Next.js ESLint Configuration (Flat Config)
+ * 
+ * This configuration replaces the legacy 'eslint-config-next' which
+ * relies on @rushstack/eslint-patch and causes issues in ESLint 9.
+ */
+export const nextConfig = tseslint.config(
   {
+    plugins: {
+      "react": reactPlugin,
+      "react-hooks": hooksPlugin,
+      "@next/next": nextPlugin,
+    },
+    languageOptions: {
+      globals: {
+        // Add common browser/node globals if needed, 
+        // though usually handled by base configs
+      },
+    },
     rules: {
-      "@typescript-eslint/no-explicit-any": "off",
-      "@typescript-eslint/no-unused-vars": [
-        "warn",
-        { argsIgnorePattern: "^_" },
-      ],
-      "@typescript-eslint/no-require-imports": "off",
-      "prefer-const": "warn",
+      ...reactPlugin.configs.recommended.rules,
+      ...hooksPlugin.configs.recommended.rules,
+      ...nextPlugin.configs.recommended.rules,
+      ...nextPlugin.configs["core-web-vitals"].rules,
+      "react/react-in-jsx-scope": "off",
       "react/no-unescaped-entities": "off",
       "@next/next/no-img-element": "warn",
     },
-  },
-];
+    settings: {
+      react: {
+        version: "detect",
+      },
+    },
+  }
+);

packages/eslint-config/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mintel/eslint-config",
-  "version": "1.0.1",
+  "version": "1.8.2",
   "publishConfig": {
     "access": "public",
     "registry": "https://npm.infra.mintel.me"
@@ -20,7 +20,10 @@
   "dependencies": {
     "@eslint/eslintrc": "^3.0.0",
     "@eslint/js": "^9.39.2",
-    "eslint-config-next": "15.1.6",
+    "@next/eslint-plugin-next": "16.1.6",
+    "eslint-config-next": "16.1.6",
+    "eslint-plugin-react": "^7.37.5",
+    "eslint-plugin-react-hooks": "^7.0.1",
     "typescript-eslint": "^8.54.0"
   }
 }

packages/feedback-commander/package.json

@@ -0,0 +1,27 @@
+{
+  "name": "feedback-commander",
+  "description": "Custom High-Fidelity Feedback Management Extension for Directus",
+  "icon": "view_kanban",
+  "version": "1.8.2",
+  "type": "module",
+  "keywords": [
+    "directus",
+    "directus-extension",
+    "directus-extension-module"
+  ],
+  "directus:extension": {
+    "type": "module",
+    "path": "index.js",
+    "source": "src/index.ts",
+    "host": "*",
+    "name": "Feedback Commander"
+  },
+  "scripts": {
+    "build": "directus-extension build && cp -f dist/index.js index.js 2>/dev/null || true",
+    "dev": "directus-extension build -w"
+  },
+  "devDependencies": {
+    "@directus/extensions-sdk": "11.0.2",
+    "vue": "^3.4.0"
+  }
+}

packages/feedback-commander/src/index.ts

@@ -0,0 +1,14 @@
+import { defineModule } from '@directus/extensions-sdk';
+import ModuleComponent from './module.vue';
+
+export default defineModule({
+    id: 'feedback-commander',
+    name: 'Feedback Commander',
+    icon: 'view_kanban',
+    routes: [
+        {
+            path: '',
+            component: ModuleComponent,
+        },
+    ],
+});

packages/feedback-commander/src/module.vue

@@ -0,0 +1,731 @@
+<template>
+	<private-view title="Feedback Commander">
+		<template #headline>
+			<v-breadcrumb :items="[{ name: 'Feedback', to: '/feedback-commander' }]" />
+		</template>
+
+		<template #title-outer:after>
+			<v-chip v-if="loading" label color="blue" small>Loading...</v-chip>
+			<v-chip v-else-if="fetchError" label color="red" small>Fetch Error</v-chip>
+			<v-chip v-else label color="green" small>{{ items.length }} Items</v-chip>
+		</template>
+
+		<template #navigation>
+			<div class="sidebar-header">
+				<v-text-overflow text="Websites" class="header-text" />
+			</div>
+			<v-list nav>
+				<v-list-item 
+					:active="currentProject === 'all'"
+					@click="currentProject = 'all'"
+					clickable
+				>
+					<v-list-item-icon><v-icon name="language" /></v-list-item-icon>
+					<v-list-item-content><v-text-overflow text="All Projects" /></v-list-item-content>
+				</v-list-item>
+
+				<v-list-item 
+					v-for="project in projects" 
+					:key="project"
+					:active="currentProject === project"
+					@click="currentProject = project"
+					clickable
+				>
+					<v-list-item-icon><v-icon name="public" color="var(--primary)" /></v-list-item-icon>
+					<v-list-item-content><v-text-overflow :text="project || 'Unknown'" /></v-list-item-content>
+				</v-list-item>
+			</v-list>
+		</template>
+
+		<div class="feedback-container">
+			<div v-if="!items.length && !loading && !fetchError" class="empty-state">
+				<v-info icon="inbox" title="Clean Inbox" center>
+					All feedback has been processed. Great job!
+				</v-info>
+			</div>
+
+			<div v-if="fetchError" class="empty-state">
+				<v-info icon="error" title="Fetch Failed" :description="fetchError" center />
+				<v-button @click="fetchData" secondary small>Retry</v-button>
+			</div>
+
+			<div class="operational-layout" v-else-if="items.length">
+				<!-- Detailed Triage Lane -->
+				<aside class="triage-lane">
+					<div class="lane-header">
+						<v-select 
+							v-model="currentStatusFilter" 
+							:items="statusOptions" 
+							small 
+							placeholder="Status Filter"
+						/>
+					</div>
+					<div class="lane-content scrollbar">
+						<TransitionGroup name="list">
+							<div 
+								v-for="item in filteredItems" 
+								:key="item.id" 
+								class="feedback-card"
+								:class="{ active: selectedItem?.id === item.id }"
+								@click="selectItem(item)"
+							>
+								<div class="card-status-bar" :style="{ background: getStatusColor(item.status || 'open') }"></div>
+								<div class="card-body">
+									<header class="card-header">
+										<span class="card-user">{{ item.user_name }}</span>
+										<span class="card-date">{{ formatDate(item.date_created || item.id) }}</span>
+									</header>
+									<div class="card-text">{{ item.text }}</div>
+									<footer class="card-footer">
+										<div class="meta-tags">
+											<v-chip x-small outline>{{ item.company?.name || item.project }}</v-chip>
+											<v-icon :name="item.type === 'bug' ? 'bug_report' : 'lightbulb'" :color="item.type === 'bug' ? '#E91E63' : '#FFC107'" small />
+										</div>
+										<v-icon v-if="selectedItem?.id === item.id" name="chevron_right" small />
+									</footer>
+								</div>
+							</div>
+						</TransitionGroup>
+					</div>
+				</aside>
+
+				<!-- Elaborated Master-Detail Desk -->
+				<main class="processing-desk scrollbar">
+					<Transition name="fade" mode="out-in">
+						<div v-if="selectedItem" :key="selectedItem.id" class="desk-content">
+							<header class="desk-header">
+								<div class="headline-group">
+									<div class="status-indicator">
+										<div class="status-dot" :style="{ background: getStatusColor(selectedItem.status || 'open') }"></div>
+										<span class="status-text">{{ capitalize(selectedItem.status || 'open') }}</span>
+									</div>
+									<h2>{{ selectedItem.user_name }}'s Submission</h2>
+								</div>
+								<div class="header-actions">
+									<v-button primary @click="openDeepLink(selectedItem)">
+										<v-icon name="open_in_new" left /> Open & Highlight
+									</v-button>
+									<v-select 
+										v-model="selectedItem.status" 
+										:items="statuses" 
+										inline
+										@update:model-value="updateStatus"
+									/>
+								</div>
+							</header>
+
+							<div class="desk-grid">
+								<!-- Message Container -->
+								<div class="main-column">
+									<v-card class="content-card">
+										<v-card-title>
+											<v-icon name="format_quote" left />
+											Feedback Content
+										</v-card-title>
+										<v-card-text class="feedback-body">
+											<div v-if="selectedItem.screenshot" class="visual-proof">
+												<label class="proof-label"><v-icon name="photo" x-small /> Element Snapshot</label>
+												<img :src="getAssetUrl(selectedItem.screenshot)" class="screenshot-img" />
+											</div>
+											<div class="main-text">{{ selectedItem.text }}</div>
+										</v-card-text>
+									</v-card>
+
+									<section class="reply-section">
+										<div class="section-divider">
+											<v-divider />
+											<span class="divider-label">Internal Communication</span>
+											<v-divider />
+										</div>
+
+										<div class="thread">
+											<TransitionGroup name="thread-list">
+												<div v-for="reply in comments" :key="reply.id" class="reply-bubble">
+													<header class="reply-header">
+														<span class="reply-user">{{ reply.user_name || 'System' }}</span>
+														<span v-if="reply.person" class="reply-person">({{ reply.person.first_name }} {{ reply.person.last_name }})</span>
+														<span class="reply-date">{{ formatDate(reply.date_created || reply.id) }}</span>
+													</header>
+													<div class="reply-text">{{ reply.text }}</div>
+												</div>
+											</TransitionGroup>
+											<div v-if="!comments.length" class="empty-state-mini">
+												<v-icon name="auto_awesome" small /> No replies yet. Start the thread.
+											</div>
+										</div>
+
+										<div class="composer">
+											<v-textarea v-model="replyText" placeholder="Compose internal response..." auto-grow />
+											<div class="composer-actions">
+												<v-button secondary :loading="sending" @click="sendReply">Post Reply</v-button>
+											</div>
+										</div>
+									</section>
+								</div>
+
+								<!-- Technical Sidebar -->
+								<aside class="meta-column">
+									<v-card class="meta-card">
+										<v-card-title>Context</v-card-title>
+										<v-card-text class="meta-list">
+											<div class="meta-item">
+												<label><v-icon name="business" x-small /> Organisation / Firma</label>
+												<strong>{{ selectedItem.company?.name || selectedItem.project }}</strong>
+											</div>
+											<div v-if="selectedItem.person" class="meta-item">
+												<label><v-icon name="person" x-small /> Zentrale Person</label>
+												<strong>{{ selectedItem.person.first_name }} {{ selectedItem.person.last_name }}</strong>
+											</div>
+											<div class="meta-item">
+												<label><v-icon name="link" x-small /> Source Path</label>
+												<span class="truncate-path" :title="selectedItem.url">{{ formatUrl(selectedItem.url) }}</span>
+												<v-button icon small @click="openExternal(selectedItem.url)"><v-icon name="launch" /></v-button>
+											</div>
+											<v-divider />
+											<div class="meta-item">
+												<label><v-icon name="layers" x-small /> Element Trace</label>
+												<code class="trace-code">{{ selectedItem.selector || 'Body' }}</code>
+											</div>
+											<div class="meta-item">
+												<label><v-icon name="location_searching" x-small /> Precise Mark</label>
+												<span class="coords">X: {{ Math.round(selectedItem.x) }}px / Y: {{ Math.round(selectedItem.y) }}px</span>
+											</div>
+											<div class="meta-item">
+												<label><v-icon name="fingerprint" x-small /> Reference ID</label>
+												<code class="id-code">{{ selectedItem.id }}</code>
+											</div>
+										</v-card-text>
+									</v-card>
+
+									<div class="help-box">
+										<v-icon name="help_outline" x-small />
+										<span>Click "Open & Highlight" to jump directly to this element on the live site.</span>
+									</div>
+								</aside>
+							</div>
+						</div>
+						<div v-else class="no-selection-desk">
+							<v-info icon="touch_app" title="Select Feedback" center>
+								Choose an entry from the triage list to view details and process.
+							</v-info>
+						</div>
+					</Transition>
+				</main>
+			</div>
+		</div>
+	</private-view>
+</template>
+
+<script setup lang="ts">
+import { ref, computed, onMounted } from 'vue';
+import { useApi } from '@directus/extensions-sdk';
+
+const api = useApi();
+const items = ref([]);
+const comments = ref([]);
+const loading = ref(true);
+const fetchError = ref(null);
+const sending = ref(false);
+const selectedItem = ref(null);
+const currentProject = ref('all');
+const currentStatusFilter = ref('open');
+const replyText = ref('');
+
+const statuses = [
+	{ text: 'Open', value: 'open', icon: 'warning', color: '#E91E63' },
+	{ text: 'In Progress', value: 'in_progress', icon: 'play_arrow', color: '#2196F3' },
+	{ text: 'Resolved', value: 'resolved', icon: 'check_circle', color: '#4CAF50' }
+];
+
+const statusOptions = [
+	{ text: 'All Statuses', value: 'all' },
+	...statuses
+];
+
+const projects = computed(() => {
+	const projSet = new Set(items.value.map(i => i.company?.name || i.project).filter(Boolean));
+	return Array.from(projSet).sort();
+});
+
+const filteredItems = computed(() => {
+	return items.value.filter(item => {
+		const projectName = item.company?.name || item.project;
+		const matchProject = currentProject.value === 'all' || projectName === currentProject.value;
+		const status = item.status || 'open';
+		const matchStatus = currentStatusFilter.value === 'all' || status === currentStatusFilter.value;
+		return matchProject && matchStatus;
+	});
+});
+
+async function fetchData() {
+	loading.value = true;
+	fetchError.value = null;
+	try {
+		const response = await api.get('/items/visual_feedback', {
+			params: {
+				sort: '-date_created,-id',
+				limit: 300,
+				fields: ['*', 'company.*', 'person.*']
+			}
+		});
+		items.value = response.data.data;
+	} catch (e: any) {
+		fetchError.value = e.message;
+	} finally {
+		loading.value = false;
+	}
+}
+
+async function selectItem(item) {
+	selectedItem.value = null; 
+	setTimeout(async () => {
+		selectedItem.value = item;
+		comments.value = [];
+		try {
+			const response = await api.get('/items/visual_feedback_comments', {
+				params: {
+					filter: { feedback_id: { _eq: item.id } },
+					sort: '-date_created,-id',
+					fields: ['*', 'person.*']
+				}
+			});
+			comments.value = response.data.data;
+		} catch (e) {
+			console.error(e);
+		}
+	}, 10);
+}
+
+async function updateStatus(val) {
+	if (!selectedItem.value) return;
+	try {
+		await api.patch(`/items/visual_feedback/${selectedItem.value.id}`, {
+			status: val
+		});
+		fetchData();
+	} catch (e) {
+		console.error(e);
+	}
+}
+
+async function sendReply() {
+	if (!replyText.value.trim() || !selectedItem.value) return;
+	sending.value = true;
+	try {
+		const response = await api.post('/items/visual_feedback_comments', {
+			feedback_id: selectedItem.value.id,
+			user_name: 'Operator',
+			text: replyText.value
+		});
+		comments.value.unshift(response.data.data);
+		replyText.value = '';
+	} catch (e) {
+		console.error(e);
+	} finally {
+		sending.value = false;
+	}
+}
+
+function formatDate(dateStr) {
+	if (!dateStr || typeof dateStr === 'number') return 'Legacy';
+	return new Date(dateStr).toLocaleDateString() + ' ' + new Date(dateStr).toLocaleTimeString([], { hour: '2-digit', minute: '2-digit' });
+}
+
+function formatUrl(url) {
+	if (!url) return '';
+	return url.replace(/^https?:\/\//, '');
+}
+
+function capitalize(s) {
+	return s.charAt(0).toUpperCase() + s.slice(1).replace('_', ' ');
+}
+
+function getDeepLinkUrl(item) {
+	if (!item || !item.url) return '';
+	try {
+		const url = new URL(item.url);
+		url.searchParams.set('fb_id', item.id);
+		return url.toString();
+	} catch (e) {
+		return item.url + '?fb_id=' + item.id;
+	}
+}
+
+function openDeepLink(item) {
+	const url = getDeepLinkUrl(item);
+	if (url) window.open(url, '_blank');
+}
+
+function openExternal(url) {
+	if (url) window.open(url, '_blank');
+}
+
+function getAssetUrl(id) {
+	if (!id) return '';
+	return `/assets/${id}`;
+}
+
+function getStatusColor(status) {
+	const s = statuses.find(st => st.value === status);
+	return s ? s.color : 'var(--foreground-subdued)';
+}
+
+onMounted(() => {
+	fetchData();
+});
+</script>
+
+<style scoped>
+.feedback-container {
+	height: calc(100vh - 64px);
+	display: flex;
+	flex-direction: column;
+	background: var(--background-subdued);
+}
+
+.operational-layout {
+	display: flex;
+	height: 100%;
+}
+
+/* Triage Lane Polish */
+.triage-lane {
+	width: 360px;
+	height: 100%;
+	display: flex;
+	flex-direction: column;
+	background: var(--background-normal);
+	border-right: 1px solid var(--border-normal);
+	box-shadow: 2px 0 8px rgba(0,0,0,0.02);
+}
+
+.lane-header {
+	padding: 16px;
+	background: var(--background-normal);
+	border-bottom: 1px solid var(--border-normal);
+}
+
+.lane-content {
+	flex: 1;
+	overflow-y: auto;
+	padding: 12px;
+	display: flex;
+	flex-direction: column;
+	gap: 12px;
+}
+
+.feedback-card {
+	background: var(--background-normal);
+	border: 1px solid var(--border-subdued);
+	border-radius: 8px;
+	display: flex;
+	overflow: hidden;
+	cursor: pointer;
+	transition: all var(--transition);
+}
+
+.feedback-card:hover {
+	border-color: var(--border-normal);
+	background: var(--background-subdued);
+	transform: translateY(-1px);
+	box-shadow: 0 4px 8px rgba(0,0,0,0.04);
+}
+
+.feedback-card.active {
+	border-color: var(--primary);
+	background: var(--background-accent);
+	box-shadow: 0 4px 12px rgba(var(--primary-rgb), 0.1);
+}
+
+.card-status-bar {
+	width: 4px;
+}
+
+.card-body {
+	flex: 1;
+	padding: 12px;
+	display: flex;
+	flex-direction: column;
+	gap: 8px;
+}
+
+.card-header {
+	display: flex;
+	justify-content: space-between;
+	font-size: 11px;
+}
+
+.card-user { font-weight: bold; color: var(--foreground-normal); }
+.card-date { color: var(--foreground-subdued); }
+
+.card-text {
+	font-size: 13px;
+	line-height: 1.5;
+	color: var(--foreground-normal);
+	display: -webkit-box;
+	-webkit-line-clamp: 2;
+	-webkit-box-orient: vertical;
+	overflow: hidden;
+}
+
+.card-footer {
+	display: flex;
+	justify-content: space-between;
+	align-items: center;
+}
+
+.meta-tags {
+	display: flex;
+	gap: 8px;
+	align-items: center;
+}
+
+/* Processing Desk Refinement */
+.processing-desk {
+	flex: 1;
+	height: 100%;
+	overflow-y: auto;
+	padding: 32px;
+}
+
+.desk-content {
+	max-width: 1100px;
+	margin: 0 auto;
+}
+
+.desk-header {
+	display: flex;
+	justify-content: space-between;
+	align-items: flex-end;
+	margin-bottom: 32px;
+	border-bottom: 2px solid var(--border-normal);
+	padding-bottom: 20px;
+}
+
+.headline-group {
+	display: flex;
+	flex-direction: column;
+	gap: 8px;
+}
+
+.status-indicator {
+	display: flex;
+	align-items: center;
+	gap: 8px;
+	font-size: 12px;
+	font-weight: bold;
+	text-transform: uppercase;
+	color: var(--foreground-subdued);
+}
+
+.status-dot {
+	width: 8px;
+	height: 8px;
+	border-radius: 50%;
+}
+
+.status-text { letter-spacing: 0.5px; }
+
+.header-actions {
+	display: flex;
+	gap: 16px;
+	align-items: center;
+}
+
+.desk-grid {
+	display: grid;
+	grid-template-columns: 1fr 300px;
+	gap: 24px;
+	align-items: start;
+}
+
+.content-card {
+	border-radius: 12px;
+	overflow: hidden;
+}
+
+.feedback-body {
+	font-size: 18px;
+	line-height: 1.6;
+	padding: 24px;
+	color: var(--foreground-normal);
+	display: flex;
+	flex-direction: column;
+	gap: 20px;
+}
+
+.visual-proof {
+	display: flex;
+	flex-direction: column;
+	gap: 8px;
+}
+
+.proof-label {
+	font-size: 10px;
+	text-transform: uppercase;
+	font-weight: 800;
+	color: var(--foreground-subdued);
+	letter-spacing: 0.5px;
+}
+
+.screenshot-img {
+	width: 100%;
+	border-radius: 8px;
+	border: 1px solid var(--border-normal);
+	box-shadow: 0 4px 12px rgba(0,0,0,0.1);
+	background: var(--background-subdued);
+}
+
+.main-text {
+	white-space: pre-wrap;
+}
+
+.reply-section {
+	margin-top: 40px;
+}
+
+.section-divider {
+	display: flex;
+	align-items: center;
+	gap: 16px;
+	margin-bottom: 24px;
+}
+
+.divider-label {
+	font-size: 11px;
+	text-transform: uppercase;
+	font-weight: 800;
+	color: var(--foreground-subdued);
+	white-space: nowrap;
+	letter-spacing: 1px;
+}
+
+.thread {
+	display: flex;
+	flex-direction: column;
+	gap: 16px;
+	margin-bottom: 32px;
+}
+
+.reply-bubble {
+	padding: 16px;
+	border-radius: 12px;
+	background: var(--background-normal);
+	border: 1px solid var(--border-subdued);
+}
+
+.reply-header {
+	display: flex;
+	justify-content: space-between;
+	font-size: 11px;
+	margin-bottom: 8px;
+}
+
+.reply-user { font-weight: 800; color: var(--primary); }
+.reply-date { color: var(--foreground-subdued); }
+
+.reply-text { font-size: 14px; line-height: 1.5; }
+
+.composer {
+	background: var(--background-normal);
+	border: 1px solid var(--border-normal);
+	border-radius: 12px;
+	padding: 16px;
+}
+
+.composer-actions {
+	display: flex;
+	justify-content: flex-end;
+	margin-top: 12px;
+}
+
+.meta-card {
+	border-radius: 12px;
+}
+
+.meta-list {
+	display: flex;
+	flex-direction: column;
+	gap: 16px;
+	padding: 16px;
+}
+
+.meta-item {
+	display: flex;
+	flex-direction: column;
+	gap: 4px;
+	font-size: 13px;
+}
+
+.meta-item label {
+	font-size: 10px;
+	text-transform: uppercase;
+	font-weight: bold;
+	color: var(--foreground-subdued);
+	display: flex;
+	align-items: center;
+	gap: 4px;
+}
+
+.truncate-path {
+	color: var(--primary);
+	overflow: hidden;
+	text-overflow: ellipsis;
+	white-space: nowrap;
+}
+
+.trace-code, .id-code {
+	background: var(--background-subdued);
+	padding: 4px 8px;
+	border-radius: 4px;
+	font-size: 11px;
+	word-break: break-all;
+}
+
+.coords { font-weight: bold; font-family: var(--family-monospace); }
+
+.help-box {
+	margin-top: 20px;
+	padding: 16px;
+	background: rgba(var(--primary-rgb), 0.05);
+	border-radius: 12px;
+	font-size: 12px;
+	color: var(--primary);
+	display: flex;
+	gap: 8px;
+	line-height: 1.4;
+}
+
+.no-selection-desk {
+	height: 100%;
+	display: flex;
+	align-items: center;
+	justify-content: center;
+}
+
+.empty-state-mini {
+	text-align: center;
+	padding: 24px;
+	font-size: 12px;
+	color: var(--foreground-subdued);
+	background: var(--background-subdued);
+	border-radius: 12px;
+	border: 1px dashed var(--border-normal);
+}
+
+/* Animations */
+.list-enter-active, .list-leave-active { transition: all 0.3s ease; }
+.list-enter-from, .list-leave-to { opacity: 0; transform: translateX(-20px); }
+
+.fade-enter-active, .fade-leave-active { transition: opacity 0.2s ease, transform 0.2s ease; }
+.fade-enter-from { opacity: 0; transform: translateY(10px); }
+.fade-leave-to { opacity: 0; transform: translateY(-10px); }
+
+.thread-list-enter-active { transition: all 0.4s ease; transform-origin: top; }
+.thread-list-enter-from { opacity: 0; transform: scaleY(0.9); }
+
+.scrollbar::-webkit-scrollbar { width: 6px; }
+.scrollbar::-webkit-scrollbar-track { background: transparent; }
+.scrollbar::-webkit-scrollbar-thumb { background: var(--border-subdued); border-radius: 3px; }
+.scrollbar::-webkit-scrollbar-thumb:hover { background: var(--border-normal); }
+</style>

packages/gatekeeper/dev-output.log

@@ -0,0 +1,15 @@
+
+> @mintel/gatekeeper@1.0.0 dev
+> next dev
+
+ ⚠ Port 3000 is in use, trying 3001 instead.
+   ▲ Next.js 15.1.6
+   - Local:        http://localhost:3001
+   - Network:      http://192.168.1.126:3001
+   - Experiments (use with caution):
+     · clientTraceMetadata
+
+ ✓ Starting...
+warn  - It seems like you don't have a global error handler set up. It is recommended that you add a global-error.js file with Sentry instrumentation so that React rendering errors are reported to Sentry. Read more: https://docs.sentry.io/platforms/javascript/guides/nextjs/manual-setup/#react-render-errors-in-app-router (you can suppress this warning by setting SENTRY_SUPPRESS_GLOBAL_ERROR_HANDLER_FILE_WARNING=1 as environment variable)
+ ✓ Ready in 2.7s
+[?25h

packages/gatekeeper/next.config.ts

@@ -2,7 +2,7 @@ import mintelNextConfig from "@mintel/next-config";
 import { NextConfig } from "next";
 
 const nextConfig: NextConfig = {
-  // Gatekeeper specific overrides
+  basePath: '/gatekeeper',
 };
 
 export default mintelNextConfig(nextConfig);

packages/gatekeeper/package.json

@@ -1,20 +1,20 @@
 {
   "name": "@mintel/gatekeeper",
-  "version": "1.0.0",
+  "version": "1.8.2",
   "private": true,
   "type": "module",
   "scripts": {
     "dev": "next dev",
     "build": "next build",
     "start": "next start",
-    "lint": "next lint",
+    "lint": "eslint src/",
     "test": "vitest run"
   },
   "dependencies": {
     "@mintel/next-utils": "workspace:*",
     "clsx": "^2.1.1",
     "lucide-react": "^0.474.0",
-    "next": "15.1.6",
+    "next": "16.1.6",
     "next-intl": "^4.8.2",
     "react": "^19.0.0",
     "react-dom": "^19.0.0",
@@ -24,6 +24,7 @@
     "@mintel/eslint-config": "workspace:*",
     "@mintel/next-config": "workspace:*",
     "@mintel/tsconfig": "workspace:*",
+    "@tailwindcss/typography": "^0.5.19",
     "@types/node": "^20.0.0",
     "@types/react": "^19.0.0",
     "@types/react-dom": "^19.0.0",

packages/gatekeeper/postcss.config.cjs

@@ -0,0 +1,7 @@
+/* global module */
+module.exports = {
+    plugins: {
+        tailwindcss: {},
+        autoprefixer: {},
+    },
+};

packages/gatekeeper/src/app/api/verify/route.ts

@@ -9,17 +9,83 @@ export async function GET(req: NextRequest) {
 
   const session = cookieStore.get(authCookieName);
 
-  if (session?.value === password) {
-    return new NextResponse("OK", { status: 200 });
-  }
-
-  // Traefik ForwardAuth headers
+  // 1. URL Parameter Bypass (for automated tests/staging)
   const originalUrl = req.headers.get("x-forwarded-uri") || "/";
+
+  console.log(`[Verify] Check: ${originalUrl} | Cookie: ${session ? "Found" : "Missing"}`);
   const host =
     req.headers.get("x-forwarded-host") || req.headers.get("host") || "";
   const proto = req.headers.get("x-forwarded-proto") || "https";
 
-  const loginUrl = `${proto}://${host}/gatekeeper/login?redirect=${encodeURIComponent(originalUrl)}`;
+  try {
+    const url = new URL(originalUrl, `${proto}://${host}`);
+    if (url.searchParams.get("gk_bypass") === password) {
+      // Remove the bypass parameter from the redirect URL
+      url.searchParams.delete("gk_bypass");
+      const cleanUrl = url.pathname + url.search;
+      const absoluteCleanUrl = `${proto}://${host}${cleanUrl}`;
+
+      const response = NextResponse.redirect(absoluteCleanUrl);
+
+      // Set the session cookie so the bypass is persistent
+      const isDev = process.env.NODE_ENV === "development";
+      const cookieDomain = process.env.COOKIE_DOMAIN;
+      const sessionValue = JSON.stringify({
+        identity: "Bypass",
+        timestamp: Date.now(),
+      });
+
+      response.cookies.set(authCookieName, sessionValue, {
+        httpOnly: true,
+        secure: !isDev,
+        path: "/",
+        maxAge: 30 * 24 * 60 * 60, // 30 days
+        sameSite: "lax",
+        ...(cookieDomain ? { domain: cookieDomain } : {}),
+      });
+
+      return response;
+    }
+  } catch (_e) {
+    // URL parsing failed, proceed with normal logic
+  }
+
+  let isAuthenticated = false;
+  let identity = "Guest";
+
+  if (session?.value) {
+    if (session.value === password) {
+      isAuthenticated = true;
+      console.log(`[Verify] Legacy password match`);
+    } else {
+      try {
+        const payload = JSON.parse(session.value);
+        if (payload.identity) {
+          isAuthenticated = true;
+          identity = payload.identity;
+          console.log(`[Verify] Identity verified: ${identity}`);
+        }
+      } catch (_e) {
+        console.log(`[Verify] JSON Parse failed for cookie: ${session.value.substring(0, 10)}...`);
+      }
+    }
+  }
+
+  if (isAuthenticated) {
+    return new NextResponse("OK", {
+      status: 200,
+      headers: {
+        "X-Auth-User": identity,
+      },
+    });
+  }
+
+  // Traefik ForwardAuth headers
+  const gatekeeperUrl =
+    process.env.NEXT_PUBLIC_BASE_URL || `${proto}://gatekeeper.${host}`;
+  const absoluteOriginalUrl = `${proto}://${host}${originalUrl}`;
+
+  const loginUrl = `${gatekeeperUrl}/login?redirect=${encodeURIComponent(absoluteOriginalUrl)}`;
 
   return NextResponse.redirect(loginUrl);
 }

packages/gatekeeper/src/app/api/whoami/route.ts

@@ -0,0 +1,29 @@
+import { NextRequest, NextResponse } from "next/server";
+import { cookies } from "next/headers";
+
+export async function GET(_req: NextRequest) {
+  const cookieStore = await cookies();
+  const authCookieName =
+    process.env.AUTH_COOKIE_NAME || "mintel_gatekeeper_session";
+  const session = cookieStore.get(authCookieName);
+
+  if (!session?.value) {
+    return NextResponse.json({ authenticated: false }, { status: 401 });
+  }
+
+  let identity = "Guest";
+  let company = null;
+  try {
+    const payload = JSON.parse(session.value);
+    identity = payload.identity || "Guest";
+    company = payload.company || null;
+  } catch (_e) {
+    // Old format probably just the password
+  }
+
+  return NextResponse.json({
+    authenticated: true,
+    identity: identity,
+    company: company,
+  });
+}

packages/gatekeeper/src/app/gatekeeper/login/page.tsx

@@ -1,132 +0,0 @@
-import { cookies } from "next/headers";
-import { redirect } from "next/navigation";
-import { Lock, ShieldCheck, ArrowRight } from "lucide-react";
-
-interface LoginPageProps {
-  searchParams: Promise<{ [key: string]: string | string[] | undefined }>;
-}
-
-export default async function LoginPage({ searchParams }: LoginPageProps) {
-  const params = await searchParams;
-  const redirectUrl = (params.redirect as string) || "/";
-  const error = params.error === "1";
-
-  const projectName = process.env.PROJECT_NAME || "Mintel";
-  const projectColor = process.env.PROJECT_COLOR || "#82ed20";
-
-  async function login(formData: FormData) {
-    "use server";
-
-    const password = formData.get("password");
-    const expectedPassword = process.env.GATEKEEPER_PASSWORD || "mintel";
-    const authCookieName =
-      process.env.AUTH_COOKIE_NAME || "mintel_gatekeeper_session";
-    const targetRedirect = formData.get("redirect") as string;
-
-    if (password === expectedPassword) {
-      const cookieStore = await cookies();
-      cookieStore.set(authCookieName, expectedPassword, {
-        httpOnly: true,
-        secure: true,
-        path: "/",
-        maxAge: 30 * 24 * 60 * 60, // 30 days
-        sameSite: "lax",
-      });
-      redirect(targetRedirect);
-    } else {
-      redirect(
-        `/gatekeeper/login?error=1&redirect=${encodeURIComponent(targetRedirect)}`,
-      );
-    }
-  }
-
-  return (
-    <div className="min-h-screen flex items-center justify-center relative overflow-hidden bg-mintel-dark">
-      {/* Background Decor */}
-      <div className="absolute inset-0 bg-grid pointer-events-none opacity-20" />
-      <div
-        className="absolute inset-0 pointer-events-none opacity-30"
-        style={{
-          background: `radial-gradient(circle at center, ${projectColor}11 0%, transparent 70%)`,
-        }}
-      />
-
-      <div className="relative z-10 w-full max-w-md px-6 animate-in fade-in zoom-in duration-700">
-        {/* Logo / Icon */}
-        <div className="flex justify-center mb-12">
-          <div
-            className="w-48 h-24 rounded-3xl flex items-center justify-center border border-white/10 bg-white/5 backdrop-blur-xl shadow-2xl p-6"
-            style={{ borderBottom: `2px solid ${projectColor}44` }}
-          >
-            <img
-              src="/logo-white.svg"
-              alt={projectName}
-              className="w-full h-auto opacity-90"
-            />
-          </div>
-        </div>
-
-        <div className="bg-white/[0.03] backdrop-blur-3xl border border-white/10 p-10 rounded-[48px] shadow-2xl relative overflow-hidden group">
-          {/* Subtle accent line */}
-          <div
-            className="absolute top-0 left-0 w-full h-1 opacity-50"
-            style={{
-              background: `linear-gradient(to right, transparent, ${projectColor}, transparent)`,
-            }}
-          />
-
-          <div className="mb-10 text-center">
-            <h1 className="text-3xl font-black mb-3 tracking-tighter uppercase italic flex items-center justify-center gap-2">
-              {projectName.split(" ")[0]}
-              <span style={{ color: projectColor }}>GATEKEEPER</span>
-            </h1>
-            <p className="text-white/40 text-sm font-medium">
-              Restricted Infrastructure Access
-            </p>
-          </div>
-
-          {error && (
-            <div className="bg-red-500/10 border border-red-500/20 text-red-200 p-4 rounded-2xl mb-8 text-sm flex items-center gap-3 animate-pulse">
-              <Lock className="w-5 h-5 flex-shrink-0" />
-              <span>Invalid access password. Please try again.</span>
-            </div>
-          )}
-
-          <form action={login} className="space-y-8">
-            <input type="hidden" name="redirect" value={redirectUrl} />
-
-            <div className="space-y-3">
-              <label className="block text-[10px] font-black uppercase tracking-[0.3em] text-white/20 ml-5">
-                Authentication Code
-              </label>
-              <input
-                type="password"
-                name="password"
-                required
-                autoFocus
-                className="w-full bg-white/5 border border-white/10 rounded-3xl px-8 py-6 focus:outline-none focus:ring-2 transition-all text-xl tracking-[0.5em] text-center placeholder:tracking-normal placeholder:text-white/10"
-                style={{ "--tw-ring-color": `${projectColor}33` } as any}
-                placeholder="••••••••"
-              />
-            </div>
-
-            <button
-              type="submit"
-              className="w-full font-black uppercase tracking-[0.2em] py-6 rounded-3xl transition-all active:scale-[0.98] flex items-center justify-center gap-3 shadow-lg hover:shadow-mintel-green/10"
-              style={{ backgroundColor: projectColor, color: "#000" }}
-            >
-              Verify Identity
-              <ArrowRight className="w-5 h-5" />
-            </button>
-          </form>
-        </div>
-
-        <div className="mt-12 text-center">
-          <p className="text-[10px] font-bold text-white/10 uppercase tracking-[0.5em]">
-            &copy; 2026 {projectName} Infrastructure
-          </p>
-        </div>
-      </div>
-    </div>
-  );
-}

packages/gatekeeper/src/app/globals.css

@@ -2,20 +2,83 @@
 @tailwind components;
 @tailwind utilities;
 
-:root {
-  --background: #000c1f;
-  --foreground: #ffffff;
+@layer base {
+  html {
+    scroll-behavior: smooth;
+  }
+
+  body {
+    @apply bg-white text-slate-800 font-serif antialiased selection:bg-slate-900 selection:text-white;
+    line-height: 1.6;
+  }
+
+  h1,
+  h2,
+  h3,
+  h4,
+  h5,
+  h6 {
+    @apply font-sans font-bold text-slate-900 tracking-tighter;
+  }
+
+  p {
+    @apply mb-4 text-base leading-relaxed text-slate-700;
+  }
+
+  a {
+    @apply text-slate-900 hover:text-slate-700 transition-colors no-underline;
+  }
 }
 
-body {
-  color: var(--foreground);
-  background: var(--background);
-  min-height: 100vh;
+@layer components {
+  .narrow-container {
+    @apply max-w-4xl mx-auto px-6 py-10;
+  }
+
+  .btn {
+    @apply inline-flex items-center justify-center px-6 py-3 border border-slate-200 bg-white text-slate-600 font-sans font-bold text-sm uppercase tracking-widest rounded-full transition-all duration-500 ease-industrial hover:border-slate-400 hover:text-slate-900 hover:bg-slate-50 hover:-translate-y-0.5 hover:shadow-xl hover:shadow-slate-100 active:translate-y-0 active:shadow-sm;
+  }
+
+  .btn-primary {
+    @apply border-slate-900 text-slate-900 hover:bg-slate-900 hover:text-white;
+  }
 }
 
-.bg-grid {
-  background-image:
-    linear-gradient(to right, rgba(255, 255, 255, 0.03) 1px, transparent 1px),
-    linear-gradient(to bottom, rgba(255, 255, 255, 0.03) 1px, transparent 1px);
-  background-size: 40px 40px;
+/* Custom scrollbar */
+::-webkit-scrollbar {
+  width: 8px;
+  height: 8px;
+}
+
+::-webkit-scrollbar-track {
+  background: #f1f5f9;
+}
+
+::-webkit-scrollbar-thumb {
+  background: #cbd5e1;
+  border-radius: 4px;
+}
+
+::-webkit-scrollbar-thumb:hover {
+  background: #94a3b8;
+}
+
+/* Animations */
+@keyframes shake {
+  0%,
+  100% {
+    transform: translateX(0);
+  }
+
+  25% {
+    transform: translateX(-4px);
+  }
+
+  75% {
+    transform: translateX(4px);
+  }
+}
+
+.animate-shake {
+  animation: shake 0.2s ease-in-out 0s 2;
 }

packages/gatekeeper/src/app/layout.tsx

@@ -1,6 +1,15 @@
 import type { Metadata } from "next";
+import { Inter, Newsreader } from "next/font/google";
 import "./globals.css";
 
+const inter = Inter({ subsets: ["latin"], variable: "--font-inter" });
+const newsreader = Newsreader({
+  subsets: ["latin"],
+  variable: "--font-newsreader",
+  style: "italic",
+  display: "swap",
+});
+
 export const metadata: Metadata = {
   title: "Gatekeeper | Access Control",
   description: "Mintel Infrastructure Protection",
@@ -12,7 +21,7 @@ export default function RootLayout({
   children: React.ReactNode;
 }) {
   return (
-    <html lang="en">
+    <html lang="en" className={`${inter.variable} ${newsreader.variable}`}>
       <body className="antialiased">{children}</body>
     </html>
   );

packages/gatekeeper/src/app/login/page.tsx

@@ -0,0 +1,248 @@
+import { cookies } from "next/headers";
+import { redirect } from "next/navigation";
+import { ArrowRight, ShieldCheck } from "lucide-react";
+import Image from "next/image";
+
+interface LoginPageProps {
+  searchParams: Promise<{ [key: string]: string | string[] | undefined }>;
+}
+
+export default async function LoginPage({ searchParams }: LoginPageProps) {
+  const params = await searchParams;
+  const redirectUrl = (params.redirect as string) || "/";
+  const error = params.error === "1";
+
+  const projectName = process.env.PROJECT_NAME || "Mintel";
+
+  async function login(formData: FormData) {
+    "use server";
+
+    const email = (formData.get("email") as string || "").trim();
+    const password = (formData.get("password") as string || "").trim();
+
+    const expectedCode = process.env.GATEKEEPER_PASSWORD || "mintel";
+    const adminEmail = process.env.DIRECTUS_ADMIN_EMAIL;
+    const adminPassword = process.env.DIRECTUS_ADMIN_PASSWORD;
+    const authCookieName =
+      process.env.AUTH_COOKIE_NAME || "mintel_gatekeeper_session";
+    const targetRedirect = formData.get("redirect") as string;
+    const cookieDomain = process.env.COOKIE_DOMAIN;
+
+    let userIdentity = "";
+    let userCompany: any = null;
+
+    // 1. Check Generic Code (Guest) - High Priority to prevent autofill traps
+    if (password === expectedCode) {
+      userIdentity = "Guest";
+    }
+    // 2. Check Global Admin (from ENV)
+    else if (
+      adminEmail &&
+      adminPassword &&
+      email === adminEmail.trim() &&
+      password === adminPassword.trim()
+    ) {
+      userIdentity = "Admin";
+    }
+    // 3. Check Lightweight Client Users (dedicated collection)
+    if (email && password && process.env.INFRA_DIRECTUS_URL) {
+      try {
+        const clientUsersRes = await fetch(
+          `${process.env.INFRA_DIRECTUS_URL}/items/client_users?filter[email][_eq]=${encodeURIComponent(
+            email,
+          )}&fields=*,company.*`,
+          {
+            headers: {
+              Authorization: `Bearer ${process.env.INFRA_DIRECTUS_TOKEN}`,
+            },
+          },
+        );
+
+        if (clientUsersRes.ok) {
+          const { data: users } = await clientUsersRes.json();
+          const clientUser = users[0];
+
+          // ⚠️ NOTE: Plain text check for demo/dev, should use argon2 in production
+          if (
+            clientUser &&
+            (clientUser.password === password ||
+              clientUser.temporary_password === password)
+          ) {
+            userIdentity = clientUser.first_name || clientUser.email;
+            userCompany = {
+              id: clientUser.company?.id,
+              name: clientUser.company?.name,
+            };
+          }
+        }
+      } catch (e) {
+        console.error("Client User Auth Error:", e);
+      }
+    }
+
+    // 4. Fallback to Directus Staff Auth if still not identified
+    if (!userIdentity && email && password && process.env.DIRECTUS_URL) {
+      try {
+        const loginRes = await fetch(`${process.env.DIRECTUS_URL}/auth/login`, {
+          method: "POST",
+          headers: { "Content-Type": "application/json" },
+          body: JSON.stringify({ email, password }),
+        });
+
+        if (loginRes.ok) {
+          const { data } = await loginRes.json();
+          const accessToken = data.access_token;
+
+          // Fetch user info with company depth
+          const userRes = await fetch(
+            `${process.env.DIRECTUS_URL}/users/me?fields=*,company.*`,
+            {
+              headers: { Authorization: `Bearer ${accessToken}` },
+            },
+          );
+
+          if (userRes.ok) {
+            const { data: user } = await userRes.json();
+            userIdentity = user.first_name || user.email;
+            userCompany = {
+              id: user.company?.id,
+              name: user.company?.name,
+            };
+          }
+        }
+      } catch (e) {
+        console.error("Directus Auth Error:", e);
+      }
+    }
+
+    if (userIdentity) {
+      console.log(`[Login] Success: ${userIdentity} | Redirect: ${targetRedirect}`);
+      const cookieStore = await cookies();
+      // Store identity in the cookie (simplified for now, ideally signed)
+      const sessionValue = JSON.stringify({
+        identity: userIdentity,
+        company: userCompany,
+        timestamp: Date.now(),
+      });
+
+      const isDev = process.env.NODE_ENV === "development";
+
+      console.log(`[Login] Setting Cookie: ${authCookieName} | Domain: ${cookieDomain || "Default"}`);
+
+      cookieStore.set(authCookieName, sessionValue, {
+        httpOnly: true,
+        secure: !isDev,
+        path: "/",
+        maxAge: 30 * 24 * 60 * 60, // 30 days
+        sameSite: "lax",
+        ...(cookieDomain ? { domain: cookieDomain } : {}),
+      });
+      redirect(targetRedirect);
+    } else {
+      console.log(`[Login] Failed for inputs. Redirecting back with error.`);
+      redirect(`/login?error=1&redirect=${encodeURIComponent(targetRedirect)}`);
+    }
+  }
+
+  return (
+    <div className="min-h-screen flex items-center justify-center relative bg-white font-serif antialiased overflow-hidden">
+      {/* Background Decor - Signature mintel.me style */}
+      <div
+        className="absolute inset-0 pointer-events-none opacity-[0.03] scale-[1.01]"
+        style={{
+          backgroundImage: `linear-gradient(to right, #000 1px, transparent 1px), linear-gradient(to bottom, #000 1px, transparent 1px)`,
+          backgroundSize: "clamp(30px, 8vw, 40px) clamp(30px, 8vw, 40px)",
+        }}
+      />
+
+      <main className="relative z-10 w-full max-w-sm px-8 sm:px-6">
+        <div className="space-y-12 sm:space-y-16 animate-fade-in">
+          {/* Top Icon Box - Signature mintel.me Black Square */}
+          <div className="flex justify-center">
+            <div className="w-16 h-16 bg-black rounded-xl flex items-center justify-center shadow-xl shadow-slate-100 hover:scale-105 transition-all duration-500 ease-[cubic-bezier(0.23,1,0.32,1)] rotate-2 hover:rotate-0">
+              <Image
+                src="/icon-white.svg"
+                alt="Mintel"
+                width={32}
+                height={32}
+                className="w-8 h-8"
+              />
+            </div>
+          </div>
+
+          <div className="space-y-12 animate-slide-up">
+            <div className="text-center space-y-4">
+              <h1 className="text-xs font-sans font-bold uppercase tracking-[0.4em] text-slate-900 border-b border-slate-50 pb-4 inline-block mx-auto min-w-[200px]">
+                {projectName} <span className="text-slate-300">Gatekeeper</span>
+              </h1>
+              <p className="text-[10px] text-slate-400 font-sans uppercase tracking-widest italic flex items-center justify-center gap-2">
+                <span className="w-1 h-1 bg-slate-200 rounded-full" />
+                Infrastructure Protection
+                <span className="w-1 h-1 bg-slate-200 rounded-full" />
+              </p>
+            </div>
+
+            {error && (
+              <div className="bg-red-50 text-red-600 px-5 py-3 rounded-2xl text-[9px] font-sans font-bold uppercase tracking-widest flex items-center gap-3 border border-red-100 animate-shake">
+                <ShieldCheck className="w-4 h-4" />
+                <span>Access Denied. Try Again.</span>
+              </div>
+            )}
+
+            <form action={login} className="space-y-4">
+              <input type="hidden" name="redirect" value={redirectUrl} />
+
+              <div className="space-y-2">
+                <div className="relative group">
+                  <input
+                    type="email"
+                    name="email"
+                    placeholder="EMAIL (OPTIONAL)"
+                    className="w-full bg-slate-50/50 border border-slate-200 rounded-2xl px-6 py-4 focus:outline-none focus:border-slate-900 focus:bg-white transition-all text-[10px] font-sans font-bold tracking-[0.2em] uppercase placeholder:text-slate-300 shadow-sm shadow-slate-50"
+                  />
+                </div>
+
+                <div className="relative group">
+                  <input
+                    type="password"
+                    name="password"
+                    required
+                    autoFocus
+                    autoComplete="current-password"
+                    placeholder="ACCESS CODE"
+                    className="w-full bg-slate-50/50 border border-slate-200 rounded-2xl px-6 py-4 focus:outline-none focus:border-slate-900 focus:bg-white transition-all text-sm font-sans font-bold tracking-[0.3em] uppercase placeholder:text-slate-300 placeholder:tracking-widest shadow-sm shadow-slate-50"
+                  />
+                </div>
+              </div>
+
+              <button
+                type="submit"
+                className="btn btn-primary w-full py-5 rounded-2xl text-[10px] shadow-lg shadow-slate-100 flex items-center justify-center"
+              >
+                Unlock Access
+                <ArrowRight className="ml-3 w-3 h-3 group-hover:translate-x-1 transition-transform" />
+              </button>
+            </form>
+
+            {/* Bottom Section - Full Branding Parity */}
+            <div className="pt-12 sm:pt-20 flex flex-col items-center gap-6 sm:gap-8">
+              <div className="h-px w-8 bg-slate-100" />
+              <div className="opacity-80 transition-opacity hover:opacity-100">
+                <Image
+                  src="/logo-black.svg"
+                  alt={projectName}
+                  width={140}
+                  height={40}
+                  className="h-7 sm:h-auto grayscale contrast-125 w-auto"
+                />
+              </div>
+              <p className="text-[8px] font-sans font-bold text-slate-300 uppercase tracking-[0.4em] sm:tracking-[0.5em] text-center">
+                &copy; 2026 MINTEL
+              </p>
+            </div>
+          </div>
+        </div>
+      </main>
+    </div>
+  );
+}

packages/gatekeeper/src/app/page.tsx

@@ -0,0 +1,5 @@
+import { redirect } from "next/navigation";
+
+export default function RootPage() {
+  redirect("/login");
+}

packages/gatekeeper/tailwind.config.cjs

@@ -0,0 +1,61 @@
+/* global module, require */
+/** @type {import('tailwindcss').Config} */
+module.exports = {
+    content: [
+        "./src/pages/**/*.{js,ts,jsx,tsx,mdx}",
+        "./src/components/**/*.{js,ts,jsx,tsx,mdx}",
+        "./src/app/**/*.{js,ts,jsx,tsx,mdx}",
+    ],
+    theme: {
+        extend: {
+            borderRadius: {
+                xl: "1rem",
+                "2xl": "1.5rem",
+                "3xl": "2rem",
+                full: "9999px",
+            },
+            colors: {
+                slate: {
+                    850: "#1e293b",
+                    900: "#0f172a",
+                    950: "#020617",
+                },
+            },
+            fontFamily: {
+                sans: ["var(--font-inter)", "Inter", "system-ui", "sans-serif"],
+                serif: ["var(--font-newsreader)", "Georgia", "serif"],
+                mono: ["JetBrains Mono", "monospace"],
+            },
+            animation: {
+                "fade-in": "fadeIn 0.5s ease-in-out",
+                "slide-up": "slideUp 0.6s ease-out",
+                "slide-down": "slideDown 0.6s ease-out",
+                shake: "shake 0.2s ease-in-out 0s 2",
+            },
+            keyframes: {
+                fadeIn: {
+                    "0%": { opacity: "0" },
+                    "100%": { opacity: "1" },
+                },
+                slideUp: {
+                    "0%": { transform: "translateY(20px)", opacity: "0" },
+                    "100%": { transform: "translateY(0)", opacity: "1" },
+                },
+                slideDown: {
+                    "0%": { transform: "translateY(-20px)", opacity: "0" },
+                    "100%": { transform: "translateY(0)", opacity: "1" },
+                },
+                shake: {
+                    "0%, 100%": { transform: "translateX(0)" },
+                    "25%": { transform: "translateX(-4px)" },
+                    "75%": { transform: "translateX(4px)" },
+                },
+            },
+            transitionTimingFunction: {
+                industrial: "cubic-bezier(0.23, 1, 0.32, 1)",
+            },
+        },
+    },
+    // eslint-disable-next-line @typescript-eslint/no-require-imports
+    plugins: [require("@tailwindcss/typography")],
+};

packages/gatekeeper/tailwind.config.js

@@ -1,23 +0,0 @@
-/** @type {import('tailwindcss').Config} */
-module.exports = {
-  content: [
-    "./src/pages/**/*.{js,ts,jsx,tsx,mdx}",
-    "./src/components/**/*.{js,ts,jsx,tsx,mdx}",
-    "./src/app/**/*.{js,ts,jsx,tsx,mdx}",
-  ],
-  theme: {
-    extend: {
-      colors: {
-        mintel: {
-          green: "#82ed20",
-          blue: "#001a4d",
-          dark: "#000c1f",
-        },
-      },
-      backgroundImage: {
-        "gradient-radial": "radial-gradient(var(--tw-gradient-stops))",
-      },
-    },
-  },
-  plugins: [],
-};

packages/husky-config/lint-staged.js

@@ -1,4 +1,5 @@
-import path from "path";
+/* global process */
+import path from "node:path";
 
 const buildLintCommand = (filenames) => {
   const isNext =
@@ -11,7 +12,7 @@ const buildLintCommand = (filenames) => {
       .join(" --file ")}`;
   }
 
-  return "eslint --fix";
+  return "eslint --fix --no-warn-ignored";
 };
 
 const config = {

packages/husky-config/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mintel/husky-config",
-  "version": "1.0.0",
+  "version": "1.8.2",
   "publishConfig": {
     "access": "public",
     "registry": "https://npm.infra.mintel.me"

packages/infra/docker/Dockerfile.gatekeeper

@@ -3,18 +3,36 @@ FROM node:20-alpine AS builder
 RUN apk add --no-cache libc6-compat curl
 WORKDIR /app
 RUN corepack enable pnpm
+ENV CI=true
 
-# Copy source (honoring .dockerignore)
-COPY . .
+# Copy manifest files specifically for better layer caching
+COPY pnpm-lock.yaml pnpm-workspace.yaml package.json .npmrc ./
+COPY packages/gatekeeper/package.json ./packages/gatekeeper/package.json
+COPY packages/next-utils/package.json ./packages/next-utils/package.json
+COPY packages/eslint-config/package.json ./packages/eslint-config/package.json
+COPY packages/next-config/package.json ./packages/next-config/package.json
+COPY packages/tsconfig/package.json ./packages/tsconfig/package.json
+COPY packages/infra/package.json ./packages/infra/package.json
+COPY packages/cms-infra/package.json ./packages/cms-infra/package.json
+COPY packages/mail/package.json ./packages/mail/package.json
+COPY packages/cli/package.json ./packages/cli/package.json
+COPY packages/observability/package.json ./packages/observability/package.json
+COPY packages/next-observability/package.json ./packages/next-observability/package.json
+COPY packages/husky-config/package.json ./packages/husky-config/package.json
 
-# Use a secret for NPM_TOKEN to authenticate with private registry
-RUN --mount=type=cache,target=/root/.local/share/pnpm/store/v3 \
+# Use a secret for NPM_TOKEN and a cache mount for the pnpm store
+RUN --mount=type=cache,id=pnpm,target=/pnpm/store \
     --mount=type=secret,id=NPM_TOKEN \
     export NPM_TOKEN=$(cat /run/secrets/NPM_TOKEN) && \
+    pnpm config set store-dir /pnpm/store && \
     pnpm i --frozen-lockfile
 
+# Copy the rest of the source
+COPY . .
+
 # Build Gatekeeper and its dependencies
-RUN pnpm --filter @mintel/gatekeeper... build
+RUN --mount=type=cache,target=/app/packages/gatekeeper/.next/cache \
+    pnpm --filter @mintel/gatekeeper... build
 RUN mkdir -p packages/gatekeeper/public
 
 # Step 2: Runner stage
@@ -25,9 +43,12 @@ ENV NODE_ENV=production
 RUN addgroup --system --gid 1001 nodejs
 RUN adduser --system --uid 1001 nextjs
 
-COPY --from=builder /app/packages/gatekeeper/public ./packages/gatekeeper/public
-COPY --from=builder /app/packages/gatekeeper/.next/standalone ./
-COPY --from=builder /app/packages/gatekeeper/.next/static ./packages/gatekeeper/.next/static
+# Set the correct permission for prerender cache
+RUN mkdir -p packages/gatekeeper/.next && chown nextjs:nodejs packages/gatekeeper/.next
+
+COPY --from=builder --chown=nextjs:nodejs /app/packages/gatekeeper/public ./packages/gatekeeper/public
+COPY --from=builder --chown=nextjs:nodejs /app/packages/gatekeeper/.next/standalone ./
+COPY --from=builder --chown=nextjs:nodejs /app/packages/gatekeeper/.next/static ./packages/gatekeeper/.next/static
 
 USER nextjs
 EXPOSE 3000