Every feature awaiting UX approval. Each entry is a navigable HTML frame set built in
the fuse-seam design system — the visual contract that implementation and Playwright verification
are measured against. This directory is generated from the folders present in
design/frames/; it is never hand-maintained.
Contract-freeze UX artifacts for the account-security hub: the navigational spine linking password, two-factor, devices & sessions, API tokens, and connected accounts. Approving these frames approves the AccountSecurityHub visual + interaction model and its component/package plan before UI implementation. frontend-test-engineer drives Playwright against these via the data-frame / data-* hooks.
Contract-freeze UX artifacts for the vendor-neutral machine-to-machine service-token surface (create-scoped → reveal-once secret → list → revoke) backed by FuzeFront's Security API. Approving a flow approves its visual + interaction model AND the component/package build inventory before UI implementation. frontend-test-engineer drives Playwright against these via the data-frame / data-* hooks. The reveal-once screen (03) is the most important in the flow.
Contract-freeze UX artifacts for four shell changes and one new backing service: per-app install scope levels (personal / organization / both) with an install-for-me vs install-for-everyone choice; the organization switcher and language switcher moving out of the top bar into the avatar menu; a multi-account switcher bounded at MAX_PARALLEL_ACCOUNTS=5 with a per-account storage-namespace isolation contract; and the notification bell backed by a real notification-service inbox. Approving these frames approves the interaction model AND the build inventory (flows / components / services) before implementation.
Contract-freeze UX artifacts for FuzeFront's complete, professional sign-up & sign-in: inline email-availability, password strength + confirm-match against the real 12+ policy, Cloudflare Turnstile, the email-verification state machine, and the honest no-enumeration password reset. Approving these frames approves the flows, components, packages and contract deltas in `build`. frontend-test-engineer drives Playwright against the data-frame / data-* hooks. Per-flow approval — one approved flow unblocks that flow's implementation.
Contract-freeze UX artifacts for the vendor-neutral tenant/org access-administration surface (members, roles, invite/add, change-role, remove) backed by FuzeFront's Security API. Approving a flow approves its visual + interaction model AND the component/package build inventory before UI implementation. frontend-test-engineer drives Playwright against these via the data-frame / data-* hooks.
Contract-freeze UX artifacts for the vendor-neutral, DB-backed invoice history capability. Approving these frames approves the InvoiceHistoryPanel visual + interaction model before UI implementation. frontend-test-engineer drives Playwright against these via the data-frame / data-* attributes.
Contract-freeze UX artifacts for active-session/device management: list every signed-in device (browser, OS, location, last-seen, this-device flagged), sign out a single session (including the caller's own current session), and sign out everywhere else. Revocation is enforced server-side. Approving a flow approves its component/package plan before UI implementation. frontend-test-engineer drives Playwright against these via the data-frame / data-* hooks. No provider name appears in any consumer surface.
Contract-freeze UX artifacts for the federated-app platform. Approving these frames approves the App Manifest model before UI implementation. frontend-test-engineer drives Playwright against these via the data-frame / data-* attributes.
Contract-freeze UX artifacts for locked app mode (white-label own-domain web + per-product native app). Approving these frames approves the mode:locked + branding + native manifest model before UI implementation. frontend-test-engineer drives Playwright against these via the data-frame / data-* attributes (frontend/tests/locked-app-mode-frames.spec.ts).
Contract-freeze UX artifacts for two-factor authentication management: enrol an authenticator (TOTP) or phone (text message), one-time recovery codes, remove a method, and the step-up challenge shown mid sign-in. Approving a flow approves its component/package plan before UI implementation. frontend-test-engineer drives Playwright against these via the data-frame / data-* hooks. No provider name appears in any consumer surface.
Contract-freeze UX artifacts for three password flows: unauthenticated self-service reset, signed-in change-password, and set-first-password for a social-only account. The 'check your email' screen renders the deliberate no-enumeration 202 honestly. Approving each flow approves its slice of the component/package plan. frontend-test-engineer drives Playwright against these via the data-frame / data-* hooks.
Contract-freeze UX artifacts for the two multi-tenant admin surfaces: a master-admin console to run the portal fleet (list/create/suspend/resume + domain status) and a portal-admin console for a tenant to run its own users, app catalog, and billing (Stripe Connect). Approving a flow approves its visual + interaction model AND its component/package/contract build inventory before UI implementation. frontend-test-engineer drives Playwright against these via the data-frame / data-* hooks. UI-only (FF-EPIC-14) consuming FF-EPIC-09/11/12/15.
Contract-freeze UX artifacts for the FuzeFront white-label tenant portal: one shell (topbar + side panel + app grid) and one login, reskinned to the active portal's name/logo/accent from GET /api/v1/portal/context, applied entirely through design-system token overrides (no raw hex). Covers loading (no-flash), error, and the fail-closed cases (suspended portal, unknown-host root fallback, cross-portal login rejection) plus light/dark theming. Approving these frames approves the flows, components, DS primitive, and package in `build`. frontend-test-engineer drives Playwright against the data-frame / data-* hooks. Per-flow approval — approving portal-shell unblocks that flow independently of portal-login.