Maintenance Windows

Active windows block every tenant request (except admin-console management) with a 503. Requires a fresh re-auth to schedule or cancel.

<% for (const w of windows) { %> <% const now = new Date(), starts = new Date(w.starts_at), ends = new Date(w.ends_at); %> <% const state = w.is_canceled ? 'canceled' : (now >= starts && now <= ends ? 'active' : (now < starts ? 'scheduled' : 'past')); %> <% } %> <% if (!windows.length) { %><% } %>

Starts	Ends	Message	Status
<%= starts.toLocaleString() %>	<%= ends.toLocaleString() %>	<%= w.message %>	<%= state %>	<% if (state === 'active' \|\| state === 'scheduled') { %> <% } %>
No maintenance windows scheduled.

Platform Kill Switches

ai_assist is wired up as a real, working example — disabling it actually blocks the AI research endpoint platform-wide. Other flag keys are recorded but not yet checked anywhere (documented extension point).

<% for (const s of switches) { %> <% } %> <% if (!switches.length) { %><% } %>

Flag	Status	Reason	Updated
`<%= s.flag_key %>`	<%= s.is_disabled ? 'Disabled' : 'Enabled' %>	<%= s.reason \|\| '—' %>	<%= s.updated_by %>, <%= new Date(s.updated_at).toLocaleDateString() %>
No kill switches configured — everything is enabled by default.

Default Platform Theme

Base template (§28.1) used whenever a firm hasn't made its own choice in Settings, and for every pre-login page (sign-in, etc.) that has no firm context to resolve a per-firm theme from yet. A specific firm's own choice, or an admin-console lock on that firm (see that firm's detail page), still wins over this default.

Auth Page Layout

<% if (defaultPlatformTheme === 'dason') { %>

No choice to make here right now — Dason (the current default platform theme) ships one consistent auth design (a testimonial-carousel side panel) applied uniformly across sign-in/sign-up/forgot-password/ reset-password/lock-screen. This control reappears once the default platform theme above is set back to Phoenix, which is the only theme that offers a split/card/simple choice.

<% } else { %>

Platform-wide, applies to sign-in/sign-up/forgot-password/reset-password/lock-screen on the Staff Frontend and Client Portal, for any firm actually rendering under Phoenix.

<% } %>

OAuth App Credentials (Google / Microsoft / Zoom)

Platform-wide OAuth app registrations (client ID/secret, one per provider for the whole system) — used for calendar sync, meetings, and inbound-email connections across every firm. Moved here from the firm-level Settings > Integrations page since a single firm admin should not be able to view, change, or delete credentials shared by every other firm. Requires a fresh re-auth to save or delete.

<% if (typeof saved !== 'undefined' && saved) { %>

<%= saved %> credential(s) saved and applied immediately.

<% } %> <% for (const group of credGroups) { %>

<%= group.label %>

<% for (const key of group.keys) { %> <% } %>

Key	Status
`<%= key.name %>`	<%= key.set ? 'Set' : 'Not set' %>	<% if (key.set) { %> <% } %>

<% if (group.capabilityStates && group.capabilityStates.length) { %>

<% for (const cap of group.capabilityStates) { %> <% } %>