Add authenticated webapp for Discord server management

[Copilot]

• Explore repository structure and understand current setup
• Understand authentication flow (Discord OAuth with session management)
• Update OAuth scope in login route to include 'guilds' permission
• Add access_token field to Session schema with migration
• Create /webapp directory structure with authentication layout
• Create webapp layout with top bar and right-side navigation
• Create API endpoint to fetch user's guilds with admin permission
• Create webapp home page listing mutual guilds
• Update components to link to webapp dashboard instead of profile
• Fix linting issues in new files
• Address code review feedback (hardcoded client ID, env vars)
• Run CodeQL security scan (✅ no vulnerabilities)
• Fix layout inheritance issue using Next.js route groups

🔧 Latest Fix: Route Group Separation

Resolved the issue where the webapp was inheriting the Header and Footer from the root layout.

Changes Made:

• Created (website) route group with its own layout (includes Header & Footer)
• Created (webapp) route group with webapp-specific layout
• Updated root layout to be minimal (only html/head/body + globals)
• Moved all website pages (about, blog, contact, homepage) to (website) group
• Moved webapp to (webapp) group

Structure:

app/
├── layout.tsx (minimal root - no Header/Footer)
├── (website)/
│   ├── layout.tsx (includes Header & Footer)
│   ├── page.tsx (homepage)
│   ├── about/
│   ├── blog/
│   └── contact/
├── (webapp)/
│   └── webapp/
│       ├── layout.tsx (webapp-specific with auth check)
│       └── page.tsx (servers list)
└── api/ (unchanged)

This ensures:

• ✅ Public website has Header/Footer
• ✅ WebApp has its own isolated layout
• ✅ No layout inheritance conflicts
• ✅ Clean separation of concerns

Original prompt

I want you to seperate the main public-facing website and webapp. You should then add a webapp portion, where for now, it lists all the Discord servers where the user has administrator, and AlphaGameBot is in as well. The WebApp UI should have a top bar and navigation on the right of the screen, seperated into pages. Also, make sure the user is logged into a Discord account before accessing the webapp, and if not, redirect them to /api/auth/login. Keep a good and consistant color scheme, and make sure it looks good. Simplistic UI.

---

💬 We'd love your input! Share your thoughts on Copilot coding agent in our 2 minute survey.

[AlphaGameDeveloper]

@copilot It looks like there's an issue where the root layout is including the header and footer in the webapp... this is clearly wrong.

One solution is to spread it into

• /app/(webapp)/webapp/ and
• /app/(website)/(normal posts)

This will prevent the kind of template issues we see here, or you could do something else if you think it's a better idea.

[Copilot]

@copilot It looks like there's an issue where the root layout is including the header and footer in the webapp... this is clearly wrong.

One solution is to spread it into
...

Fixed in commit 05beba4. Implemented Next.js route groups to separate layouts:

• Created (website) group with Header/Footer layout
• Created (webapp) group with isolated webapp layout
• Updated root layout to be minimal (no Header/Footer inheritance)

The webapp now has its own clean layout without the website header/footer.

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

• accounts.google.com
  • Triggering command: /proc/self/exe /proc/self/exe --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=network --no-sandbox --use-angle=swiftshader-webgl --crashpad-handler-pid=3528 --enable-crash-reporter=, --noerrdialogs --user-data-dir=/tmp/.org.chromium.Chromium.scoped_dir.hnOSs6 --change-stack-guard-on-fork=enable --shared-files=network_parent_dirs_pipe:100,v8_context_snapshot_data:101 --field-trial-handle=3,i,86969866688113947,12383718859660116389,262144 --disable-features=PaintHolding --variations-seed-version --trace-process-track-uuid=3190708989122997041 (dns block)
  • Triggering command: /usr/bin/chromium-browser chromium-browser --headless --disable-gpu --no-sandbox --screenshot=/tmp/webapp-fixed.png --window-size=1920,1080 file:///tmp/webapp-fixed.html (dns block)
• clients2.google.com
  • Triggering command: /proc/self/exe /proc/self/exe --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=network --no-sandbox --use-angle=swiftshader-webgl --crashpad-handler-pid=3528 --enable-crash-reporter=, --noerrdialogs --user-data-dir=/tmp/.org.chromium.Chromium.scoped_dir.hnOSs6 --change-stack-guard-on-fork=enable --shared-files=network_parent_dirs_pipe:100,v8_context_snapshot_data:101 --field-trial-handle=3,i,86969866688113947,12383718859660116389,262144 --disable-features=PaintHolding --variations-seed-version --trace-process-track-uuid=3190708989122997041 (dns block)
  • Triggering command: /usr/bin/chromium-browser chromium-browser --headless --disable-gpu --no-sandbox --screenshot=/tmp/webapp-fixed.png --window-size=1920,1080 file:///tmp/webapp-fixed.html (dns block)
• redirector.gvt1.com
  • Triggering command: /proc/self/exe /proc/self/exe --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=network --no-sandbox --use-angle=swiftshader-webgl --crashpad-handler-pid=3528 --enable-crash-reporter=, --noerrdialogs --user-data-dir=/tmp/.org.chromium.Chromium.scoped_dir.hnOSs6 --change-stack-guard-on-fork=enable --shared-files=network_parent_dirs_pipe:100,v8_context_snapshot_data:101 --field-trial-handle=3,i,86969866688113947,12383718859660116389,262144 --disable-features=PaintHolding --variations-seed-version --trace-process-track-uuid=3190708989122997041 (dns block)
  • Triggering command: /usr/bin/chromium-browser chromium-browser --headless --disable-gpu --no-sandbox --screenshot=/tmp/webapp-fixed.png --window-size=1920,1080 file:///tmp/webapp-fixed.html (dns block)
• www.google.com
  • Triggering command: /proc/self/exe /proc/self/exe --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=network --no-sandbox --use-angle=swiftshader-webgl --crashpad-handler-pid=3528 --enable-crash-reporter=, --noerrdialogs --user-data-dir=/tmp/.org.chromium.Chromium.scoped_dir.hnOSs6 --change-stack-guard-on-fork=enable --shared-files=network_parent_dirs_pipe:100,v8_context_snapshot_data:101 --field-trial-handle=3,i,86969866688113947,12383718859660116389,262144 --disable-features=PaintHolding --variations-seed-version --trace-process-track-uuid=3190708989122997041 (dns block)
  • Triggering command: /usr/bin/chromium-browser chromium-browser --headless --disable-gpu --no-sandbox --screenshot=/tmp/webapp-fixed.png --window-size=1920,1080 file:///tmp/webapp-fixed.html (dns block)

If you need me to access, download, or install something from one of these locations, you can either:

• Configure Actions setup steps to set up my environment, which run before the firewall is enabled
• Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)