Feature/partner portal

apps/cms/src/api/partner-program/content-types/partner-program/schema.json

@@ -0,0 +1,21 @@
+{
+  "kind": "singleType",
+  "collectionName": "partner_programs",
+  "info": {
+    "singularName": "partner-program",
+    "pluralName": "partner-programs",
+    "displayName": "Partner Program",
+    "description": "Partner portal settings, like the benefits listed per partner level."
+  },
+  "options": {
+    "draftAndPublish": false
+  },
+  "pluginOptions": {},
+  "attributes": {
+    "benefits": {
+      "type": "component",
+      "component": "partner.benefit",
+      "repeatable": true
+    }
+  }
+}

apps/cms/src/api/partner-program/controllers/partner-program.ts

@@ -0,0 +1,5 @@
+import { factories } from "@strapi/strapi";
+
+export default factories.createCoreController(
+  "api::partner-program.partner-program",
+);

apps/cms/src/api/partner-program/routes/partner-program.ts

@@ -0,0 +1,5 @@
+import { factories } from "@strapi/strapi";
+
+export default factories.createCoreRouter(
+  "api::partner-program.partner-program",
+);

apps/cms/src/api/partner-program/services/partner-program.ts

@@ -0,0 +1,5 @@
+import { factories } from "@strapi/strapi";
+
+export default factories.createCoreService(
+  "api::partner-program.partner-program",
+);

apps/cms/src/api/partner-resource/content-types/partner-resource/schema.json

@@ -0,0 +1,63 @@
+{
+  "kind": "collectionType",
+  "collectionName": "partner_resources",
+  "info": {
+    "singularName": "partner-resource",
+    "pluralName": "partner-resources",
+    "displayName": "Partner Resources",
+    "description": "Gated content for the partner portal's Sales enablement, Tech enablement and Reusable content sections."
+  },
+  "options": {
+    "draftAndPublish": true
+  },
+  "pluginOptions": {},
+  "attributes": {
+    "title": {
+      "type": "string",
+      "required": true
+    },
+    "slug": {
+      "type": "uid",
+      "targetField": "title",
+      "required": true
+    },
+    "description": {
+      "type": "text"
+    },
+    "section": {
+      "type": "enumeration",
+      "required": true,
+      "enum": ["sales_enablement", "tech_enablement", "reusable_content"]
+    },
+    "minimum_level": {
+      "type": "enumeration",
+      "required": true,
+      "default": "Community",
+      "enum": ["Unlisted", "Community", "Business", "Enterprise"]
+    },
+    "category": {
+      "type": "string"
+    },
+    "label": {
+      "type": "string"
+    },
+    "icon": {
+      "type": "customField",
+      "customField": "plugin::strapi-lucide-icons.icon"
+    },
+    "content": {
+      "type": "richtext"
+    },
+    "file": {
+      "type": "media",
+      "multiple": false
+    },
+    "link": {
+      "type": "string"
+    },
+    "sort_order": {
+      "type": "integer",
+      "default": 0
+    }
+  }
+}

apps/cms/src/api/partner-resource/controllers/partner-resource.ts

@@ -0,0 +1,5 @@
+import { factories } from "@strapi/strapi";
+
+export default factories.createCoreController(
+  "api::partner-resource.partner-resource",
+);

apps/cms/src/api/partner-resource/routes/partner-resource.ts

@@ -0,0 +1,5 @@
+import { factories } from "@strapi/strapi";
+
+export default factories.createCoreRouter(
+  "api::partner-resource.partner-resource",
+);

apps/cms/src/api/partner-resource/services/partner-resource.ts

@@ -0,0 +1,5 @@
+import { factories } from "@strapi/strapi";
+
+export default factories.createCoreService(
+  "api::partner-resource.partner-resource",
+);

apps/cms/src/components/partner/benefit.json

@@ -0,0 +1,23 @@
+{
+  "collectionName": "components_partner_benefits",
+  "info": {
+    "displayName": "Benefit",
+    "description": "A benefit shown to partners of the given level."
+  },
+  "options": {},
+  "attributes": {
+    "level": {
+      "type": "enumeration",
+      "required": true,
+      "enum": ["Unlisted", "Community", "Business", "Enterprise"]
+    },
+    "title": {
+      "type": "string",
+      "required": true
+    },
+    "description": {
+      "type": "text"
+    }
+  },
+  "config": {}
+}

apps/cms/src/extensions/better-auth/controllers/organization.ts

@@ -66,6 +66,55 @@ export default factories.createCoreController(
       ctx.body = organizations;
     },
 
+    /**
+     * GET /organizations/partners — partner organizations the caller is
+     * an owner/admin of, i.e. whose partner portal they can open. Scoped
+     * to the caller like `mine`, so only `is-authenticated` applies.
+     */
+    async partners(ctx) {
+      const session = ctx.state.betterAuthSession;
+
+      const organizations = await getPluginService(
+        "organization",
+      ).getPartnerPortals({
+        userId: session.user.id,
+      });
+
+      ctx.body = organizations;
+    },
+
+    /**
+     * GET /organizations/:id/partner-portal — the partner portal's gated
+     * content, filtered by the organization's partner level. Gated by
+     * the `is-authenticated` and `is-organization-owner` policies.
+     */
+    async partnerPortal(ctx) {
+      const { id } = ctx.params;
+
+      const portal = await getPluginService("organization").getPartnerPortal({
+        organizationId: id,
+      });
+      if (!portal) return ctx.notFound();
+
+      ctx.body = portal;
+    },
+
+    /**
+     * GET /organizations/:id/partner-portal/resources/:slug — a single
+     * partner resource, including its body. Same policies as
+     * `partnerPortal`.
+     */
+    async partnerResource(ctx) {
+      const { id, slug } = ctx.params;
+
+      const resource = await getPluginService(
+        "organization",
+      ).getPartnerResource({ organizationId: id, slug });
+      if (!resource) return ctx.notFound();
+
+      ctx.body = resource;
+    },
+
     async members(ctx) {
       const { id } = ctx.params;
 

apps/cms/src/extensions/better-auth/routes/organization.ts

@@ -24,6 +24,19 @@ export default {
           prefix: "",
         },
       },
+      {
+        method: "GET",
+        path: "/organizations/partners",
+        handler: "organization.partners",
+        config: {
+          // Same as `/organizations/mine` — must stay registered before
+          // `/organizations/:id`.
+          auth: false,
+          policies: ["plugin::better-auth.is-authenticated"],
+          middlewares: [],
+          prefix: "",
+        },
+      },
       {
         method: "GET",
         path: "/organizations/:id",
@@ -45,6 +58,35 @@ export default {
         handler: "organization.members",
         config: { policies: [], middlewares: [], prefix: "" },
       },
+      {
+        method: "GET",
+        path: "/organizations/:id/partner-portal",
+        handler: "organization.partnerPortal",
+        config: {
+          // Owners/admins only, same as the web app's own portal gating.
+          auth: false,
+          policies: [
+            "plugin::better-auth.is-authenticated",
+            "plugin::better-auth.is-organization-owner",
+          ],
+          middlewares: [],
+          prefix: "",
+        },
+      },
+      {
+        method: "GET",
+        path: "/organizations/:id/partner-portal/resources/:slug",
+        handler: "organization.partnerResource",
+        config: {
+          auth: false,
+          policies: [
+            "plugin::better-auth.is-authenticated",
+            "plugin::better-auth.is-organization-owner",
+          ],
+          middlewares: [],
+          prefix: "",
+        },
+      },
       {
         method: "PUT",
         path: "/organizations/:id/profile",