Feature
Organizations and roles
Every record is scoped to an Organization, and every caller holds a Role in it.
An Organization owns its data: every user, service account and record belongs to one or more organizations. An Org member holds exactly one Role: org:admin, org:contributor or org:viewer. ci:agent covers automation.
The API checks org membership in the application layer on every request, not with Postgres row-level security. In the clientos routes, reading needs org:viewer or above, writing needs org:contributor, and deleting needs org:admin.
More features
All features →- 01
Typed API with OpenAPI
A Hono API whose routes are OpenAPI definitions, with a generated client for the web.
- 02
Next.js web app
A Next.js 16 App Router app with a login page and a signed-in dashboard shell.
- 03
Auth and service accounts
Supabase Auth for people, PATs for service accounts, audit events for both.