Amplify + Salesforce Template

One deployment, split paths.

Interactive users enter through tenant-qualified routes and land in `/app`. Public pages live under `/p/[token]` and `/public/[tenantSlug]`.

Secure entry

Open `/example-tenant` or `/example-tenant/login` to begin SSO or accept a Canvas handoff.

Authenticated app

The working app surface lives at `/app` and uses the signed app session established by Canvas or direct SSO.

Public pages

Use `/p/[token]` for signed links and `/public/[tenantSlug]` for tenant-qualified public pages backed by client credentials.

Local development

Run `npm run setup -- --yes`, configure an org with `npm run setup:org`, then open `/example-tenant` for secure entry or `/public/example-tenant` for the public route starter.

Mock Canvas remains available at `/api/dev/mock-canvas` for local launches into `/app`.