Phase 1 — Foundation
Ship a credible, privacy-first PR timeline with strong fundamentals.
- Done
Auth & user dashboard
Credentials, secure sessions, and a clean dashboard shell.
- Done
Free PR Assessment v2.3 (API)
Deterministic scoring, months estimate, banding, and driver hints.
- Done
Duplicate protection + cooldown
Identity-based dedupeKey, normalized host, and FREE_COOLDOWN logic.
- Done
Transactional email (Resend SMTP)
Domain verified; welcome email on signup; internal debug route token-protected.
- Done
Admin access guard (middleware)
RBAC gate for /admin and /pro; only ADMIN/STAFF allowed.
- In progress
Public metrics snapshot
Anonymized counts/averages on homepage (assessments, teams, avg score).
ETAOct 2025 - In progress
Health & status
Local /api/healthz live; production status page surfacing uptime & DB checks.
ETAOct 2025
