# AppFactory - Current State

## Infrastructure
- Caddy
- Gitea
- Registry
- Portal
- Worker
- Webhook
- Monitor

## Authentication
- Google OAuth functional
- First Google user becomes admin
- Additional users become viewer
- Users stored in portal database

## Roles
- admin
- developer
- viewer

## Security
- Last admin protection
- Admin-only user management

## Gitea
- Registration disabled
- OpenID signup disabled
- Portal is source of truth

## Provisioning
- gitea_user_id
- gitea_sync_status
- gitea_sync_error
- gitea_synced_at