Auroranexis
The Operations Command Center for AI Automation Agencies.
Monitor clients. Detect risks. Prove value.
Stack
- Next.js 15 App Router + TypeScript + Tailwind CSS
- Supabase Auth + PostgreSQL multi-tenancy (RLS)
- RBAC + client portal isolation
- Mollie sole active billing PSP (Auroranexis remains the seller; not Mollie MoR)
- Background jobs / queue via
/api/cron/run
Prerequisites
- Node.js 22+ / npm 10+
- Supabase project
- Mollie API credentials for billing (
MOLLIE_API_KEY; keep MOLLIE_LIVE_CHARGING_ENABLED=false until LIVE approval)
Setup
npm installcp .env.example .env.local — fill Supabase + Mollie + CRON_SECRET- Apply migrations:
supabase db push (or SQL editor) — all files under supabase/migrations/ in timestamp order
- Configure Supabase Auth Site URL + redirect URLs for your
NEXT_PUBLIC_APP_URL
npm run dev → open the app URL
Scripts
| Command | Description |
|---|
npm run dev | Development server |
npm run lint | ESLint |
npm run typecheck | TypeScript |
npm run build | Production build |
npm run test:enterprise-production-golive | Chapter 20 production go-live playbook gates |
npm run test:enterprise-release-approval | Chapter 19 release board Go/No-Go gates |
npm run test:enterprise-certification | Chapter 18 enterprise certification gates |
npm run test:definition-of-done | Chapter 17 DoD release gates |
npm run test:technical-debt | Chapter 16 debt elimination contracts |
npm run test:code-quality | Chapter 15 maintainability contracts |
npm run test:production-readiness | Chapter 14 deploy readiness contracts |
npm run test:enterprise-regression | Chapter 13+ regression catalog |
npm run verify:domain-routing | Domain redirect safety checks |
npm run test:mollie-billing | Mollie sole-provider + billing lifecycle suites |
npm run test:legacy-billing-removal | Legacy Stripe/Paddle/FastSpring active-surface eradication guards |
npm run test:technical-seo | Technical SEO integrity guards |
Production readiness
Canonical ops docs (Build Bible V2 Chapter 14):
Definition of Done: docs/19_BUILD_BIBLE_V2_CHAPTER_17_DEFINITION_OF_DONE.md, docs/enterprise-definition-of-done.md, docs/enterprise-dod-report.md.
Enterprise certification: docs/20_BUILD_BIBLE_V2_CHAPTER_18_ENTERPRISE_CERTIFICATION.md, docs/enterprise-certification-report.md.
Release approval: docs/21_BUILD_BIBLE_V2_CHAPTER_19_RELEASE_APPROVAL.md, docs/enterprise-release-approval-report.md.
Production go-live: docs/22_BUILD_BIBLE_V2_CHAPTER_20_PRODUCTION_GOLIVE.md, docs/enterprise-production-golive-playbook.md.
Code quality & debt: docs/17_BUILD_BIBLE_V2_CHAPTER_15_CODE_QUALITY.md, docs/18_BUILD_BIBLE_V2_CHAPTER_16_TECHNICAL_DEBT.md, docs/technical-debt.md.
Do not enable E2E_DISABLE_RATE_LIMIT in production.
Production deploy / commit / push are owned by Release chapters — not local Chapter 14 prep.
Security model
| Layer | Responsibility |
|---|
| PostgreSQL RLS | Organization isolation |
| Server Actions | Role-based authorization |
| Middleware | Session refresh + route protection |
| Mollie webhooks | Classic payment webhook + per-resource webhookUrl + idempotency (/api/mollie/webhook); Dashboard registration not required; legacy /api/fastspring/* returns 410 |
Legal: /terms, /refund-policy, /privacy, /imprint.
