Settings
System configuration, roles and demo controls.
Runtime
Demo controls
Reset the document library, uploads, executions, template and knowledge catalogues back to the single seeded SOP (doc-1024, at QA approval with two warnings).
Switch to the Admin role in the sidebar to reset.
Authentication & single sign-on
Loading identity…
Infrastructure backends
Ports & adapters: the app runs fully on zero-dependency built-ins, and switches to real systems when environment variables point at them. A misconfigured real backend safely degrades to the local adapter.
| Backend | Mode | Detail |
|---|
Env: DATABASE_URL (Postgres), REDIS_URL (rate limiting), S3_ENDPOINT/S3_BUCKET/S3_ACCESS_KEY_ID/S3_SECRET_ACCESS_KEY (R2/S3/MinIO). Object-store self-test and vector search are wired under /api/infra.
Role-based access matrix
Without an SSO session, roles are sent via the x-user-role header and selected with the acting-role switcher in the sidebar. After SSO sign-in the role comes from the verified id_token. Production uses enterprise IdP claims and PostgreSQL row-level tenant isolation.
| Capability | operator | engineer | quality | manager | admin |
|---|---|---|---|---|---|
| View / export documents | |||||
| Generate / validate | — | ||||
| Approve / reject | — | — | |||
| Publish to MES / QMS / DMS | — | — | — | ||
| Manage templates / reset demo | — | — | — | — |
Known boundaries of the local demo
- The PDF renderer uses core Helvetica fonts and cannot render CJK glyphs (Chinese shows as “?”); DOCX, XLSX and HTML outputs fully support Chinese.
- Uploaded files are stored on local disk; the mock MCP returns deterministic fixtures rather than parsing real CAD/PDF content.
- State is process-local JSON by default (set DATABASE_URL for PostgreSQL). Without an SSO session the role switcher is a dev fallback; sign in via the built-in Mock IdP or a configured OIDC provider for verified, session-based identity and tenant claims.