Total Supply—Multi-Role Supply-Chain Platform

Role & context

1. 01

   Defence-in-depth RBAC at three layers

   role + status in the NextAuth JWT, enforced at the edge by middleware (strict path-prefix routing), then re-checked inside each route handler

2. 02

   Audit logging on every privileged action (CREATE/UPDATE/DELETE/STATUS_CHANGE/LOGIN/LOGOUT) with actor, IP, user agent and JSON details, plus OrderStatusHistory at the order level

3. 03

   Compliance-by-design

   GDPR export, soft-delete grace window, 30-day anonymisation, 730-day hard purge, and unsubscribe tokens on marketing-eligible email

4. 04

   Database-conscious queries

   explicit Prisma select (no SELECT *), $transaction for multi-row mutations, capped pagination on every list endpoint, and indexes on every foreign key / filter column

5. 05

   Direct-to-storage uploads via 15-minute V4 signed URLs, so binary traffic never touches the serverless functions

6. 06

   Performance budget enforced in next.config.ts: optimizePackageImports tree-shaking, next/dynamic for below-the-fold sections and drawers, and route-scoped heavy CSS

• The landing page shipped with a 3.2 s mobile Lighthouse Total Blocking Time — a 200 KB Swagger stylesheet imported in the root layout (loaded on every route), eagerly-bundled Chakra/Radix/icon libraries, and synchronously-mounted cart and mobile-nav drawers.

  FixScoped the Swagger CSS to /api-docs, expanded optimizePackageImports for finer tree-shaking, converted the cart and mobile-nav drawers to next/dynamic (ssr:false), and code-split below-the-fold landing sections — the production build passes with 100/100 static pages.

• Coordinating six roles (CUSTOMER, ADMIN, SALESMAN, DRIVER, CLEANER, IT_STAFF) through one Next.js codebase without leaking admin endpoints or staff queues, plus a chicken-and-egg first-admin bootstrap.

  FixEncoded role + status as NextAuth JWT claims; edge middleware enforces strict path-prefix RBAC and redirects mismatches; every protected handler re-checks via requireAdmin / requireRole; the first registrant auto-promotes to ADMIN+ACTIVE while later signups enter PENDING_APPROVAL until an admin approves.