Ecosystem identity · Strategy reference
One identity. One billing record. Many maritime products.
MapleMarine Nexus is the public marketing and ecosystem website. The Secure Workspace at app.maplemarine.ai owns every authenticated experience — login, Stripe billing, SSO, dashboards, saved reports, alerts, exports, and AI assistant personalization. ShipyardMaster.ai and WeldMaster+ may federate into the same identity in the future.
Paired reference · Standards
Ecosystem Governance
Design system, naming, CTAs, navigation and SEO standards every property must mirror.
Paired reference · Directory
Corporate + Ecosystem Portal
Executive overview of MapleMarine surfaces and the public directory of every destination on Nexus.
Public Interest → Nexus → Launch Workspace → app.maplemarine.ai
Every gated experience on Nexus follows this exact handoff. The Secure Workspace owns identity from the moment the visitor authenticates.
Step 1
Public Interest
Visitor discovers MapleMarine via search, referral, social, or industry intelligence preview.
Step 2
MapleMarine Nexus
Public website at maplemarine.ai — solutions, intelligence previews, governance, lead capture.
Step 3
Launch Workspace
Canonical CTA across every Nexus page hands off to the secured workspace.
Destination
app.maplemarine.ai
Authenticated workspace — login, Stripe billing, SSO, dashboards, alerts, exports, AI memory.
app.maplemarine.ai
Public Interest → Nexus → Launch Workspace → app.maplemarine.ai
What lives where
A clean line between the public website and the secured workspace. No exceptions.
MapleMarine Nexus · maplemarine.ai
Public, lightweight, SEO-focused. Fast first paint, server-rendered, no auth state.
- Public marketing pages
- Solutions and product overviews
- Industry intelligence previews
- Lead generation forms
- SEO, sitemap, structured data
- Brand and ecosystem positioning
Nexus does not store user sessions, accept passwords, or process payments at this stage.
Secure Workspace · app.maplemarine.ai
Authenticated, role-based, billed. The single source of truth for user identity and entitlements.
Authentication
Email, password, magic link, and social sign-in. Single identity issued once.
Stripe billing
Subscriptions, invoices, customer portal, dunning, tax — all centralized here.
SSO (future)
OIDC / SAML for enterprise customers; Microsoft Entra and Okta connectors planned.
User accounts & roles
Viewer, analyst, admin, enterprise. Role-based access to briefings and exports.
Saved reports & alerts
Personal libraries, watchlists, scheduled briefings, email and webhook alerts.
AI assistant memory
Personalized recommendations and conversation history scoped to the user's organization.
Every gated CTA on Nexus points to the Secure Workspace
Use the canonical labels. Always open the workspace in a new tab. Never wire authentication into Nexus.
| CTA label | Redirects to | Purpose |
|---|---|---|
| Launch Workspace | app.maplemarine.ai | Top-level entry to the authenticated workspace. |
| Open Secure Workspace | app.maplemarine.ai | Card-level CTA on intelligence previews and gated content. |
| Premium Access | app.maplemarine.ai | Upsell to paid features; sign-in then Stripe checkout in-workspace. |
| Save / Alert / Export | app.maplemarine.ai | Any personalization action redirects to the workspace, never executed on Nexus. |
Implementation: use the <LaunchWorkspaceButton /> component and the URLs exported from src/lib/ecosystem.ts. Never hard-code workspace URLs in new components.
ShipyardMaster.ai and WeldMaster+ federate later
Sister platforms remain independently deployed today and may federate into the Secure Workspace's identity, billing and access governance once SSO is enabled.
ShipyardMaster.ai
Flagship enterprise platform — may federate identity and billing through the Secure Workspace.
WeldMaster+
Welding / NDT / compliance — same shared identity & billing record once federation is enabled.
Nexus stays public, fast, and lightweight.
The following will not be implemented in this repo. They live exclusively in the Secure Workspace.
- Authentication / login / password reset
- Stripe billing, checkout, customer portal
- SSO (OIDC, SAML, Entra, Okta)
- User accounts, profiles, organizations
- Saved reports, libraries, watchlists
- Alerts (email, webhook, in-app)
- Exports (PDF, CSV, briefing decks)
- AI assistant memory and personalization
- Lovable Cloud / Supabase auth on Nexus
- Any user-specific or org-specific data storage
Workspace URL: https://app.maplemarine.ai/