Daniel Roth c482f2d6e8 fix(ara-projects): require user onboarding before /projects ... Code review: /onboarding is *user* onboarding, not Portfolio onboarding. It captures the user's details and their required privacy-policy acceptance (plus marketing opt-in) and touches no Portfolio at all — confirmed by the form schema in src/app/onboarding/page.tsx, which has no portfolio coupling and makes acceptedPrivacy mandatory. The exemption added in e34f166f was therefore wrong: it let contractor users into the app without the consent we are required to capture. A contractor can complete onboarding perfectly well, so nobody needs the bypass. Removes the /projects exemption and isProjectsPath(). /projects stays in the matcher, so the tree is still auth-guarded. Unit and Cypress tests inverted to assert the corrected behaviour, plus a new case covering an onboarded contractor reaching /projects. Refs #406 Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>		2026-07-21 16:08:47 +00:00
..
e2e	fix(ara-projects): require user onboarding before /projects	2026-07-21 16:08:47 +00:00
fixtures	full login automated testing still not working - will come back to this and probably run in docker	2023-07-11 15:00:19 +01:00
plugins	Creating automated testing - blocked until we have a test account	2023-07-11 12:14:48 +01:00
support	save	2025-08-21 11:30:23 +01:00
videos	Creating automated testing - blocked until we have a test account	2023-07-11 12:14:48 +01:00