Changelog

Homepage / features / for-resellers / contact pages ported into the console at /about /features /for-resellers /contact. Sign-in CTA + demo-request flow live.

Reseller-facing template marketplace at /marketplace so a Brand-Owner can preview an agent persona before provisioning it. Lift for the design partner motion.

Matt-authored agent persona instructions checked in under docs/. Drives the system-prompt defaults the agent loader reads on Tenant onboarding.

After ADR-004 alt-auth Phase 5 backfilled all Brands onto the multi-provider columns, the legacy entraOid / entraTenantId / entraClientId User columns were dropped.

Nightly Postgres dump + a quarterly restore drill that exercises the actual restore path against a staging Postgres. Ungated by the Azure-hosting decision.

@sentry/nextjs 8.x → 10.x. Validated against the deploy pipeline before any tenant-touching work landed on top.

Proposes a runtime indirection that lets a Brand register an Agent row that runs on OpenClaw, not Aroovo. Sprint 5 motion; expands the moat beyond per-Brand white-label.

Proposes five role-based agent team presets (marketing-agency, sales-b2b, tech-services, ops-coo, support-only) plus full-stack. Replaces 28 onboarding checkboxes with one preset picker.

Keep platform name "Aroovo", canonical domain aroovo.tech, console subdomain agents.aroovo.tech. Zero rename work — frees Sprint 2.

Locked the order of the 22 pending roadmap items; competitor + gap analysis identifies multi-tenant + Brand layer + BYO identity / LLM / ingress / MCP-native as the defensible wedge.

Cash-conservation call: stay on Hostinger + Caddy + GitHub Actions. ADR-002 marked superseded. Frees Sprint 1 of migration-blocked items.

Five phases (interface + Teams relocation, inbound + signing verify, outbound + dispatcher, admin UI, channel-to-tenant mapping). Per-Brand BYO Slack App mandatory; DM + thread + @mention supported.

Ingress abstraction so Teams + Slack + future Discord share a common dispatch path.

Five phases (schema + interface, Google/Okta/Auth0 OIDC validators, console sign-in dispatch, admin UI, backfill + read-switch). One AuthProvider interface, four implementations; each Brand picks one.

Extends ADR-003 §3.6 to Google Workspace, Okta, and Auth0 as first-class providers. Facebook and GitHub deferred; SAML federated through Okta/Auth0.

Schema (Brand model + brandId FK), Phase 1 read APIs, Phase 2 CRUD + admin UI at /admin/brands. aroovo Brand seeded by boot hook.

Per-Brand themeJson + primaryDomain + DNS-TXT verification; edge middleware attaches x-brand-id; per-Brand CSS injection at SSR.

BrandOwner role; per-Brand entraTenantId + entraClientId; per-Brand Bot Framework app registrations.

30-day soft-delete window with bundle export of every audit row, tenant config, KB file, and secret reference.

providerConfigJson with encrypted secret references for Anthropic / OpenAI / OpenRouter / OpenClaw keys.

Brand-Owner analytics — request count + latency rollups per Brand.

Multi-issuer JWT validator, AUDIT_HMAC_SECRET required in prod, encrypted secrets vault, MCP arg validation, per-tenant rate-limit + spend cap, SSRF protection on MCP bootstrap, BrandOwner tenant carve-out.

Adds a Brand layer above Tenant. Each Brand has its own hostname, theme, IdP, LLM provider config, and Bot Framework / Slack app registrations.

In-process agent loop replacing Managed Agents; MCP as integration layer; provider-pluggable across Anthropic / OpenAI / OpenRouter / OpenClaw; multi-tenant scaffolding; legacy Managed Agents path removed.

Tenant model + tenantId on 13+ tables; per-tenant audit chain, rate-limit, spend cap, vault, standups, broadcast; /admin/tenants/new wizard.