ADR-0005: Portfolio App Stack — Next.js + TypeScript
Decision to implement the Portfolio App as a Next.js App Router application using TypeScript, pnpm, and modern UI/tooling aligned to enterprise delivery expectations.
Decision to implement the Portfolio App as a Next.js App Router application using TypeScript, pnpm, and modern UI/tooling aligned to enterprise delivery expectations.
Decision to keep the Portfolio App focused on a polished product experience and use the Docusaurus Documentation App as the enterprise evidence engine.
Decision to deploy the Portfolio App to Vercel using preview deployments for PRs and production promotion gated by imported GitHub checks.
Establishes mandatory CI gates with stable check naming, deterministic installs, baseline CodeQL + Dependabot posture, and main-branch enforcement via GitHub Rulesets.
Decision to enable the experimental React Compiler (React 19) for the Portfolio App to optimize performance and adopt modern React patterns.
Adopt a YAML-backed, Zod-validated project registry with environment-aware URL construction as the single source of truth for portfolio projects.
Adopt React Testing Library with jsdom for component/page tests and add unit coverage for API routes.
Short, canonical examples of rationale-first commentary across code, tests, and workflows.
Completed implementation guide for Phase 1: Next.js app setup, CI/CD governance, Vercel deployment, and production promotion gating with comprehensive evidence artifacts.
Completed implementation guide for Phase 2: smoke tests, gold standard project, CV enhancement, comprehensive evidence artifacts, and operational maturity.
Comprehensive reference for Portfolio App configuration files: Next.js, ESLint, Prettier, PostCSS, and TypeScript compiler options.
Executive compliance audit of the Portfolio App (Next.js) against the STRIDE threat model, mapped to source code, CI/CD controls, and operational procedures.
Field-by-field reference, validation rules, and examples for the data-driven project registry used by the Portfolio App.
Initial public baseline of the Portfolio App including core routes, evidence-first integration, deterministic CI quality gates, supply-chain automation, and branch governance.
Phase 1 completion of the Portfolio App including app skeleton, evidence-first UX, deterministic CI quality gates, Vercel deployment infrastructure, production promotion checks, and branch governance.
Phase 2 completion: comprehensive dossier, smoke tests, threat model, enhanced CV, and gold standard project page with evidence-first engineering discipline.
Procedure to deploy the Portfolio App with PR previews, staging validation, CI quality gates, and production promotion checks.
Deterministic procedure for diagnosing and fixing Portfolio App CI failures: lint, format checks, typecheck, and build failures.
Deterministic procedure for responding to suspected secrets publication or exfiltration in the Portfolio App.
Procedure to rollback a Portfolio App deployment using Git revert and verification steps, with escalation guidance for suspected sensitive publication.
Deep dive guidance for writing, reviewing, and maintaining high-value code commentary.
Comprehensive guide to writing unit tests (Vitest) and E2E tests (Playwright) for the Portfolio App.
STRIDE threat model for the Portfolio App (Next.js): trust boundaries, assets, threats, mitigations, and residual risks aligned to enterprise SDLC controls.