Marketplace OS Web
The standalone Next.js frontend for Marketplace OS, deployed through Vercel. The backend lives in the separate marketplace-os repository; the two repositories communicate over HTTP and do not share packages or a lockfile.
What lives here
- Cognito authorization-code PKCE sign-in and encrypted, HTTP-only session cookies.
- The authenticated dashboard and tenant-facing workflows.
- Server-side API calls that pass the session access token to the backend. Browser code does not receive the backend token, database credentials, or provider secrets.
- UI-only placeholders for features that are not connected to a backend yet.
Integrations
The authenticated integrations directory at /dashboard/integrations shows the current Google Drive connection status, links to the WholeCell inventory CSV workflow, and provides marketplace setup pages. The Google Drive status uses the existing authenticated tenant API endpoint; the backend checks current membership for that organization read. Amazon setup is a manual guide based on the portal state shared by the user; it does not call Amazon or connect a seller account.
The eBay account summary and Details, Listings, and Listing Opportunities views are at /dashboard/integrations/ebay. An organization owner can start seller OAuth from Details once the backend app is configured. The page then reads the linked eBay username and read-only active listings through the authenticated backend: eBay Trading API (Seller Hub) listings merged with Inventory API item/offer records by listing ID, each row labeled with its source. Listings without a SKU show as Unlinked; the read is bounded and the page says when it is partial. Listing matching uses exact SKU against up to 500 tenant-authorized Marketplace OS catalog records; only units reviewed as available count in the quantity comparison. The opportunities view shows unmatched available Marketplace OS SKUs as candidates, not eligibility decisions. Order import, listing writes, stock synchronization, and automation remain unavailable. Marketplace OS owns internal inventory; WholeCell is an optional reviewed CSV source. Setup is documented in the backend repository's docs/integrations/ebay.md and docs/exec-plans/ebay-seller-connection.md.
The Amazon setup guide and Details, Listings, and Listing Opportunities views are at /dashboard/integrations/amazon. It reports the sandbox client and verification steps shared during onboarding as manual status, makes no Amazon API calls, and shows empty listing states until a public app and tenant seller authorization are available. Seller OAuth, live listing reads, order import, listing writes, and stock synchronization are not implemented.
Best Buy Marketplace and Reebelo partner setup guides are at /dashboard/integrations/bestbuy and /dashboard/integrations/reebelo. Each page includes Details, Listings, and Listing Opportunities views. Access status is explicitly unverified; the pages are static onboarding guides and display no live or sample seller data. Confirm current partner eligibility, documentation, authentication, and permitted reads with each provider before designing an API connection.
Other data boundaries
- Inventory CSV intake shows a local parse, persists a tenant-scoped server preview, and requires a separate approval action before inventory changes.
- The inventory page at
/dashboard/inventory lists the tenant's serialized units joined with their catalog SKUs, and filters them live by product attributes (manufacturer, model, variant, network, capacity, color), functionality, grade, status, location, ESN, and free-text search. Product selects cascade, so choosing a manufacturer narrows the model options to that manufacturer's models, and a child selection that is no longer reachable is dropped. WholeCell filters with no backing column yet (last status change, inventory date, custom field search, battery health, purchase order, sales order, marketplace status) are shown as disabled and labeled as not connected, rather than silently returning no rows. The Download action exports the currently filtered rows to CSV.
- Scan Reports accepts paired WholeCell exports, persists a preview, and saves an approved tenant-scoped report snapshot. It does not mutate inventory.
- The pricing page at
/dashboard/pricing filters the tenant's catalog SKUs by free-text search (SKU, manufacturer, model), by price (all / priced / unpriced), and by inventory state (all / exclude fully sold / fully sold / has an available unit). Filters are held in the URL query string, so a refresh, a shared link, and the browser back button all restore the same view, and the table paginates at 100 rows per page. The inventory filter uses the source status field on inventory units (Sold / Available / Unavailable) rather than the Marketplace OS inventoryState, so the counts line up with the source export. Per-SKU unit counts are computed on the server and never sent to the browser.
- The pricing Save action sits in the top action bar and submits every row in the active filtered result set, not only the rows on the visible page, in batches of 50 through the bulk pricing endpoint. The scope is stated next to the button. The spreadsheet export covers the same filtered rows and says so in its label.
- Product Catalog displays an authenticated read-only Device Mart WholeCell snapshot. Browser-session CSV replacement does not write to the backend; catalog create/edit/delete are not implemented.
- Google Drive photo search and grouping are paused for feature work.
Visual design
The dashboard follows the AutoDoc dashboard design system (light theme only, as in AutoDoc). Tokens are ported from AutoDoc in app/autodoc-tokens.css; the legacy variables in app/globals.css alias them, and the shared shell, buttons, tables, and badges are styled at the end of that file. Inter is loaded with next/font. The AutoDoc logo in public/brand/autodoc-logo.svg is copied from the AutoDoc repository, not hotlinked.
Local commands
pnpm install --frozen-lockfile
pnpm dev
pnpm check
pnpm build
Required Vercel server environment values are COGNITO_MANAGED_LOGIN_DOMAIN, COGNITO_WEB_CLIENT_ID, COGNITO_REDIRECT_URI, MARKETPLACE_API_ORIGIN, and a random SESSION_SECRET. Keep them server-side; do not use NEXT_PUBLIC_ for these values.
For the local eBay sandbox pilot only, pnpm dev permits loopback HTTP values for COGNITO_REDIRECT_URI and MARKETPLACE_API_ORIGIN. Point the API origin at the backend repository's read-only local eBay bridge and use an exact localhost callback registered with Cognito. This exception is disabled in production builds. Never put eBay app credentials or seller tokens in this frontend repository.
Best Buy and Reebelo logos are stored locally under public/integrations to keep the UI independent of third-party image hosts. Best Buy uses the corporate logo download; the Reebelo wordmark is copied from the official homepage.
