semillero-special-hotel/docs/ROADMAP.md

Project Roadmap & Implementation Plan

Variable Remuneration, Compensation, and Commissions System - Hoteles Estelar

---

This plan outlines the step-by-step path to construct, test, and host the platform securely.

Phase 1: Foundation & Database Configuration

• Initialize Next.js app with TypeScript and npx in the repository root.
• Configure Vanilla CSS design tokens (variables, layout standards, light/dark themes).
• Define the PostgreSQL schemas in schema.prisma including:
  • Temporal versioning fields for plans (version, validity_start, validity_end).
  • Idempotency and transaction fields for sales imports.
  • Adjustment and original reference keys for settlements.
• Configure PostgreSQL Row-Level Security (RLS) policies on the schema for user/hotel data isolation.
• Execute initial database migration to seed basic structural tables (Regions, Hotels, Roles).

Phase 2: Authentication & Security Core

• Implement secure JWT session cookie-based auth.
• Develop Prisma transaction middleware binding the active session's user_id, hotel_id, and region_id context to PostgreSQL settings to trigger RLS.
• Build a premium login interface with smooth CSS transition effects.
• Develop route guards and API middleware verifying user roles (RBAC authorization validation).

Phase 3: Compensation Configuration (Feature 1)

• Implement UI forms and API endpoints for Plan Creation (US-COM-001) with mandatory fields validation.
• Enforce Plan Versioning logic: Modifying an active plan marks it inactive and duplicates it with an incremented version ID.
• Implement Calculation Rules config (US-COM-002) allowing tiers, scales, and cap parameters.
• Implement Goal assignment UI (US-COM-003) for monthly/quarterly scopes.
• Write integration tests for plan versioning replication.

Phase 4: Data Import & Integrations (Feature 2)

• Create server-side Excel parser parsing sales sheets (US-COM-004) incorporating header-based Idempotency key checks to prevent duplicate uploads.
• Build file drag-and-drop loading screen featuring progress and validation UI.
• Set up n8n workflows for automated sales integrations (US-COM-005) with retry mechanisms and callback endpoints.

Phase 5: Settlement Engine & Approvals (Features 3 & 4)

• Build the Core Settlement calculation engine (US-COM-006) handling individual/team tiers and caps.
• Integrate Retroactive Clawback/Adjustment logic: Engine runs delta checks against past closed periods and creates adjusting line items for next payout.
• Build n8n Webhook Test Branching: Insert IF nodes checking for /webhook-test path segments to isolate test runs inside TEST_DATABASE_URL.
• Implement Simulation module UI (US-COM-007) displaying side-by-side comparative calculations.
• Build Approvals workflow panel (US-COM-008) for Commercial Leaders (Approve/Reject with mandatory reason).
• Set up email/notification hooks dispatching notifications (US-COM-009).

Phase 6: History, Auditing & Analytics (Features 5 & 6)

• Build Colaborador History dashboard (US-COM-010) showing individual historical progress and PDFs.
• Configure @explita/prisma-audit-log client extension (US-COM-011) to log data modifications with sensitive data masking (passwords, base salaries).
• Set RLS block on the AuditLog table to make it strictly write-only (preventing edit/delete for all roles).
• Build premium Financial Dashboard (US-COM-012) using chart widgets (ranking, variables, trends).
• Implement PDF / Excel exporter service (US-COM-013) consolidating metrics by hotel/region.

Phase 7: Deployment & Security Hardening

• Write docker-compose.yml defining the dual-service configuration (app-prod and app-dev) on different ports.
• Write environment variable validation and graceful exit code 0 script on app-dev startup.
• Add git.yourdomain.com or a sub-subdomain block in the host Caddyfile.
• Configure DNS resolution inside the WireGuard network.
• Implement log-stream redaction rules to prevent personal financial parameters from writing to server output.
• Final end-to-end security audits.