# Web enhancements

Build + product enhancements for `apps/web` (Next.js → Cloudflare). The web app already has
broad UI; the audit shows it's mostly **demo-backed or bypassing contracts**, so most "web
enhancements" are really **live-wiring + the few gaps** the estate-seller flow exposes.
Architecture items first (they unblock the rest), then product gaps.

## Tier 1 — architecture (unblocks everything; mostly Wave 2/4)
- **The P9 gateway (D33).** Route every web write through a trusted server/edge gateway;
  service-role stays server-only; tenant/actor resolved server-side. Retire direct-client +
  `troveSnapApi` write paths.
- **Demo → live, behind a flag.** Swap `*DemoData` for contract-backed data (P5/P6); keep a
  `demo mode` so the marketing/showcase still works.
- **Retire `using(true)` RLS → P6 membership RLS** + public-safe projections for buyer pages.
- **Vision through P2/P3/P8.** Replace `/api/appraise` direct-Gemini with the validated provider
  gateway + cost accounting (no invented comps).

## Tier 2 — close the listing/throughput loop (pain #1, #4)
- **Bulk pricing/tagging/approve** across the review queue + item editor.
- **Channel-shaped export adapters.** Per-channel listing drafts (estatesales.net, eBay item
  specifics, Facebook fields, Shopify) generated from the canonical record — *catalog once, list
  everywhere* (never auto-posted; drafts the seller approves). Gates on Auth + connectors (W4).
- **Own-your-data export.** CSV/API export of the seller's inventory anytime — the anti-lock-in
  wedge vs. incumbents where listing data is trapped. (Cross-platform pain: locked data.)
- **Copy-gen polish.** Description generation that stands out among local sales (the listing skill
  pain), per-item + per-sale.

## Tier 3 — the post-sale + business gaps (pain #5, #6, #2)
- **Client reports & reconciliation.** Per-sale payout report (sold/unsold, fees, taxes), exportable
  for the family — addresses the meticulous Step-8 accounting pain.
- **Disposition / demand-recovery.** Workflows for unsold items (donate / haul / relist / discount
  phases) — the underestimated Step-8 cleanout pain. (DiscountPhaseEditor is a start.)
- **PII / privacy scrubber at ingestion.** Auto-detect faces, addressed mail, documents with
  SSNs, people in reflections → flag/blur before anything publishes. Turns the EstateSales.net
  CCPA / "won't remove interior photos" complaint into a **trust feature** (cross-platform pain).
- **Buyer alerts + saved-search notifications.** Drive demand (pain #2 buyer side) via live events.
- **SEO + shareability** for public sale pages (`/sales/[slug]`, `/go`) — organic buyer traffic.

## Tier 4 — the deliberate gaps (new surfaces, post-core)
These are estate-seller pains the current plan does **not** cover. Capture now, build later:
- **Contracts & scheduling** (Step 3): templates + e-sign + consult/sale calendar.
- **Staffing / SOPs** (pain #3): role-scoped logins, task checklists per role, sale-day rosters.
- **Lead-gen / CRM-lite** (pain #2 company side): inbound inquiry pipeline, referral tracking,
  realtor/attorney/senior-move-manager network.
- **Sale-day ops** (Step 7): cashier/checkout, numbered-entry, theft/security aids.
- *(Out of scope: insurance, sales-tax remittance, cash-flow financing — pains #2/#7 noted for
  completeness, not planned.)*

## Sequencing
Tier 1 is the Wave 2–4 contract work already planned. Tier 2 lands as capture/review go live
(Wave 3/4). Tiers 3–4 are post-core surfaces — tracked here so they're not lost; promote into a
sprint when the core scan→list→sell loop is contract-backed.