API and access control
The NestJS API implements authentication, role-based access control, protected user management, Swagger documentation and health checks. Its session model uses short-lived access tokens with opaque HttpOnly refresh cookies, hashed sessions and rotation.
Workshop domain model
The initial schema covers users, roles, permissions and sessions alongside customers, vehicles, service orders, diagnoses, quotations, repair tasks, inventory, evidence and comments.
Angular application foundation
The Angular 22 client provides standalone architecture, lazy login and dashboard routes, a route guard, bearer interceptor, session restoration, Signals and login, refresh and logout integration.
Roadmap status
RacerLab is in active development. Operational modules and multi-workshop tenancy are planned or in progress; they are not presented here as completed functionality.