Auroranexis

The Operations Command Center for AI Automation Agencies.

Monitor clients. Detect risks. Prove value.

Stack

• Next.js 15 App Router + TypeScript + Tailwind CSS
• Supabase Auth + PostgreSQL multi-tenancy (RLS)
• RBAC + client portal isolation
• Mollie sole active billing PSP (Auroranexis remains the seller; not Mollie MoR)
• Background jobs / queue via /api/cron/run

Prerequisites

• Node.js 22+ / npm 10+
• Supabase project
• Mollie API credentials for billing (MOLLIE_API_KEY; keep MOLLIE_LIVE_CHARGING_ENABLED=false until LIVE approval)

Setup

1. npm install
2. cp .env.example .env.local — fill Supabase + Mollie + CRON_SECRET
3. Apply migrations: supabase db push (or SQL editor) — all files under supabase/migrations/ in timestamp order
4. Configure Supabase Auth Site URL + redirect URLs for your NEXT_PUBLIC_APP_URL
5. npm run dev → open the app URL

Scripts

Command	Description
npm run dev	Development server
npm run lint	ESLint
npm run typecheck	TypeScript
npm run build	Production build
npm run test:enterprise-production-golive	Chapter 20 production go-live playbook gates
npm run test:enterprise-release-approval	Chapter 19 release board Go/No-Go gates
npm run test:enterprise-certification	Chapter 18 enterprise certification gates
npm run test:definition-of-done	Chapter 17 DoD release gates
npm run test:technical-debt	Chapter 16 debt elimination contracts
npm run test:code-quality	Chapter 15 maintainability contracts
npm run test:production-readiness	Chapter 14 deploy readiness contracts
npm run test:enterprise-regression	Chapter 13+ regression catalog
npm run verify:domain-routing	Domain redirect safety checks
npm run test:mollie-billing	Mollie sole-provider + billing lifecycle suites
npm run test:legacy-billing-removal	Legacy Stripe/Paddle/FastSpring active-surface eradication guards
npm run test:technical-seo	Technical SEO integrity guards

Production readiness

Canonical ops docs (Build Bible V2 Chapter 14):

• docs/enterprise-deployment.md
• docs/enterprise-release-checklist.md
• docs/rollback-plan.md
• docs/disaster-recovery.md
• docs/billing.md

Definition of Done: docs/19_BUILD_BIBLE_V2_CHAPTER_17_DEFINITION_OF_DONE.md, docs/enterprise-definition-of-done.md, docs/enterprise-dod-report.md.

Enterprise certification: docs/20_BUILD_BIBLE_V2_CHAPTER_18_ENTERPRISE_CERTIFICATION.md, docs/enterprise-certification-report.md.

Release approval: docs/21_BUILD_BIBLE_V2_CHAPTER_19_RELEASE_APPROVAL.md, docs/enterprise-release-approval-report.md.

Production go-live: docs/22_BUILD_BIBLE_V2_CHAPTER_20_PRODUCTION_GOLIVE.md, docs/enterprise-production-golive-playbook.md.

Code quality & debt: docs/17_BUILD_BIBLE_V2_CHAPTER_15_CODE_QUALITY.md, docs/18_BUILD_BIBLE_V2_CHAPTER_16_TECHNICAL_DEBT.md, docs/technical-debt.md.

Do not enable E2E_DISABLE_RATE_LIMIT in production.
Production deploy / commit / push are owned by Release chapters — not local Chapter 14 prep.

Security model

Layer	Responsibility
PostgreSQL RLS	Organization isolation
Server Actions	Role-based authorization
Middleware	Session refresh + route protection
Mollie webhooks	Classic payment webhook + per-resource webhookUrl + idempotency (/api/mollie/webhook); Dashboard registration not required; legacy /api/fastspring/* returns 410

Legal: /terms, /refund-policy, /privacy, /imprint.