Settings

Platform notes for the consolidated broker webapp. This route records the auth, CRM, assistant, and deployment assumptions from the guidance folder until the live Oracle VPS services are wired end to end.

Auth Direction

planned

Final broker auth should use the Oracle VPS Supabase stack. Clerk artifacts are not part of the target platform.

CRM Boundary

active

UI routes should read and mutate mortgage records through the CRM API boundary, not direct Twenty database access.

Assistant Surface

active

OpenClaw and Nexus remain internal broker tools, with the webapp using server-side proxy routes for chat calls.

Compliance Guardrails

required

STOP, unsubscribe, reply-pausing, quiet hours, and quote generation must stay in services with tests.

Environment Contract

CRM_API_URL / CRM_API_KEY

QUOTE_API_URL / QUOTE_API_SECRET

OPENCLAW_PUBLIC_BASE_URL / OPENCLAW_GATEWAY_TOKEN

NEXT_PUBLIC_SUPABASE_URL / NEXT_PUBLIC_SUPABASE_ANON_KEY

SUPABASE_SERVICE_ROLE_KEY

NEXT_PUBLIC_NEXUS_UI_URL