009 - mpc-owner Owner user auth

• Tanggal: 2026-08-08
• Chat/topik: Login mpc-owner hanya role Owner; seed owner.ksr@mail.com

Ringkasan perubahan

• Tabel owner_users di ksrdb; login email+password (bcrypt); session HMAC.
• Hapus shared OWNER_PASSWORD. Hanya role Owner diterima.
• Seed: owner.ksr@mail.com / masukaja123.

Impact bisnis

Akses dashboard owner terikat akun bernama, bukan password bersama.

Epic / User stories

• Epic: Owner dashboard auth
• US: Sebagai Owner, saya ingin login dengan email/password agar akses terkontrol.

User terdampak

Business owner (mpc-owner).

Aplikasi terdampak

• mpc-owner — PERLU (auth + seed + deploy)
• ksr-sync — PERLU minor (mirror Prisma schema saja; tidak sync tabel auth)
• mpc-be / mpc-be-pos / mpc-admin / Android / iOS / web / mpc-pos — TIDAK

Perubahan schema

• ksrdb: owner_users (lihat mpc-dev/docs/schema/migration/004-owner-users.md)

Perubahan kode

• mpc-owner/src/lib/auth.ts, login page, actions, scripts/seed-owner.ts
• Prisma schema mpc-owner + ksr-sync