Make sure that the user doesn't select more than eight maybe buttons in the pre-select

app/Configs/Content.php

@@ -0,0 +1,74 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Configs;
+
+use Illuminate\Support\Arr;
+use Laravel\Nova\Fields\Markdown;
+
+/**
+ * Config Field class for the "content" config group.
+ * Defines fields, defaults, and Nova fields for content settings.
+ */
+final class Content
+{
+    public string $title = 'Content';
+
+    public string $description = 'Content settings';
+
+    public string $key = 'content';
+
+    /**
+     * Returns the field definitions with their type and default value for this config group.
+     */
+    public function getFieldKeys(): array
+    {
+        return [
+            'disclaimer' => [
+                'type' => 'markdown',
+                'default' => '',
+            ],
+        ];
+    }
+
+    /**
+     * Returns the default value for the given field key, or null if the key does not exist.
+     */
+    public function getDefault(string $key): mixed
+    {
+        $fields = $this->getFieldKeys();
+
+        if (! Arr::has($fields, $key)) {
+            return null;
+        }
+
+        return Arr::get($fields, "{$key}.default");
+    }
+
+    /**
+     * Returns Nova field instances for this config group, each wired with
+     * resolveUsing (read from json_value with default fallback) and
+     * fillUsing (write back into json_value) callbacks.
+     */
+    public function getNovaFields(): array
+    {
+        return [
+            Markdown::make('Disclaimer', 'disclaimer')
+                ->resolveUsing(function (mixed $value, mixed $resource): string {
+                    $jsonValue = Arr::get((array) $resource->json_value, 'disclaimer');
+
+                    if ($jsonValue === null || $jsonValue === '') {
+                        return (string) $this->getDefault('disclaimer');
+                    }
+
+                    return (string) $jsonValue;
+                })
+                ->fillUsing(function (mixed $request, mixed $model, string $attribute, string $requestAttribute): void {
+                    $current = Arr::wrap((array) $model->json_value);
+                    Arr::set($current, $attribute, $request->{$requestAttribute});
+                    $model->json_value = $current;
+                }),
+        ];
+    }
+}

app/Http/Controllers/Auth/SocialiteController.php

@@ -8,50 +8,55 @@
 use App\Models\Role;
 use App\Models\User;
 use App\Services\ActivityLogger;
+use Illuminate\Database\QueryException;
 use Illuminate\Http\RedirectResponse;
 use Illuminate\Http\Request;
 use Illuminate\Support\Arr;
+use Illuminate\Support\Facades\Log;
 use Laravel\Socialite\Facades\Socialite;
 
 final class SocialiteController extends Controller
 {
     /**
      * Redirect the user to the Azure AD authentication page.
+     * Logs the Azure config (client_id prefix, redirect URI, tenant) and generated redirect URL.
      */
     public function redirect(): RedirectResponse
     {
-        return Socialite::driver('azure')->redirect();
+        $azureConfig = config('services.azure');
+
+        Log::info('[Azure SSO] Initiating redirect', [
+            'client_id_prefix' => substr((string) Arr::get($azureConfig, 'client_id', ''), 0, 4),
+            'redirect_uri' => Arr::get($azureConfig, 'redirect'),
+            'tenant' => Arr::get($azureConfig, 'tenant'),
+        ]);
+
+        $response = Socialite::driver('azure')->redirect();
+
+        Log::info('[Azure SSO] Redirect URL generated', [
+            'redirect_url' => $response->getTargetUrl(),
+        ]);
+
+        return $response;
     }
 
     /**
      * Handle the callback from Azure AD after authentication.
+     * Logs request parameters, the resolved Azure user, and the upserted local user.
+     * Wraps the entire flow in a try/catch to capture and log any exceptions.
      */
     public function callback(): RedirectResponse
     {
-        $azureUser = Socialite::driver('azure')->user();
+        try {
+            return $this->processCallback();
+        } catch (\Throwable $e) {
+            Log::error('[Azure SSO] Exception during callback', [
+                'message' => $e->getMessage(),
+                'exception' => $e->getTraceAsString(),
+            ]);
 
-        $user = User::query()->updateOrCreate(
+            throw $e;
-            ['email' => $azureUser->getEmail()],
-            [
-                'name' => $azureUser->getName(),
-                'azure_id' => $azureUser->getId(),
-                'photo' => $azureUser->getAvatar(),
-                'job_title' => Arr::get($azureUser->user, 'jobTitle'),
-                'department' => Arr::get($azureUser->user, 'department'),
-                'company_name' => Arr::get($azureUser->user, 'companyName'),
-                'phone' => Arr::get($azureUser->user, 'mobilePhone', Arr::get($azureUser->user, 'businessPhones.0')),
-            ]
-        );
-
-        if ($user->role_id === null) {
-            $user->update(['role_id' => Role::where('name', 'user')->first()->id]);
         }
-
-        auth()->login($user);
-
-        ActivityLogger::log('login', $user->id, metadata: ['email' => $user->email, 'firm_name' => Arr::get($azureUser->user, 'companyName')]);
-
-        return redirect('/');
     }
 
     /**
@@ -68,4 +73,75 @@ public function logout(Request $request): RedirectResponse
 
         return redirect('/');
     }
+
+    /**
+     * Execute the full Azure AD callback flow: resolve the user, upsert the local record,
+     * assign a default role if needed, log the user in, and record the activity.
+     */
+    private function processCallback(): RedirectResponse
+    {
+        Log::info('[Azure SSO] Callback received', [
+            'query_code' => substr((string) request()->query('code', ''), 0, 8).'…',
+            'query_state' => request()->query('state'),
+            'query_error' => request()->query('error'),
+            'query_error_description' => request()->query('error_description'),
+        ]);
+
+        $azureUser = Socialite::driver('azure')->user();
+
+        Log::info('[Azure SSO] Azure user resolved', [
+            'azure_id' => $azureUser->getId(),
+            'email' => $azureUser->getEmail(),
+            'mail' => Arr::get($azureUser->user, 'mail'),
+            'name' => $azureUser->getName(),
+            'job_title' => Arr::get($azureUser->user, 'jobTitle'),
+            'department' => Arr::get($azureUser->user, 'department'),
+            'company' => Arr::get($azureUser->user, 'companyName'),
+        ]);
+
+        Log::info('[Azure SSO] Full Azure user dump', json_decode(json_encode($azureUser), true));
+
+        try {
+            $user = User::query()->updateOrCreate(
+                ['username' => $azureUser->getEmail()],
+                [
+                    'name' => $azureUser->getName(),
+                    'email' => $azureUser->user['mail'] ?? $azureUser->getEmail(),
+                    'azure_id' => $azureUser->getId(),
+                    'photo' => $azureUser->getAvatar(),
+                    'job_title' => Arr::get($azureUser->user, 'jobTitle'),
+                    'department' => Arr::get($azureUser->user, 'department'),
+                    'company_name' => Arr::get($azureUser->user, 'companyName'),
+                    'phone' => Arr::get($azureUser->user, 'mobilePhone', Arr::get($azureUser->user, 'businessPhones.0')),
+                    'email_verified_at' => now(),
+                ]
+            );
+
+            Log::info('[Azure SSO] Local user upserted', [
+                'user_id' => $user->id,
+                'email' => $user->email,
+                'was_recent' => $user->wasRecentlyCreated,
+                'role_id' => $user->role_id,
+            ]);
+
+            if ($user->role_id === null) {
+                $user->update(['role_id' => Role::where('name', 'user')->first()->id]);
+
+                Log::info('[Azure SSO] Default role assigned', [
+                    'user_id' => $user->id,
+                    'role_id' => $user->role_id,
+                ]);
+            }
+
+            auth()->login($user);
+
+            ActivityLogger::log('login', $user->id, metadata: ['email' => $user->email, 'firm_name' => Arr::get($azureUser->user, 'companyName')]);
+        } catch (QueryException $e) {
+            Log::error('[Azure SSO] Database error during user upsert', ['message' => $e->getMessage(), 'email' => $azureUser->getEmail()]);
+
+            return redirect('/')->with('error', 'Something went wrong during sign-in. Please try again or contact support.');
+        }
+
+        return redirect('/');
+    }
 }

app/Http/Controllers/LandingController.php

@@ -4,16 +4,29 @@
 
 namespace App\Http\Controllers;
 
+use App\Services\Config as ConfigService;
 use Inertia\Inertia;
 use Inertia\Response;
 
 final class LandingController extends Controller
 {
     /**
-     * Display the landing page.
+     * Display the landing page with a flag indicating whether a disclaimer is configured.
      */
-    public function index(): Response
+    public function index(ConfigService $config): Response
     {
-        return Inertia::render('Landing');
+        return Inertia::render('Landing', [
+            'hasDisclaimer' => $config->contentDisclaimer !== '',
+        ]);
+    }
+
+    /**
+     * Display the disclaimer page with the configured markdown content.
+     */
+    public function disclaimer(ConfigService $config): Response
+    {
+        return Inertia::render('Disclaimer', [
+            'content' => $config->contentDisclaimer,
+        ]);
     }
 }

app/Http/Controllers/ScreeningController.php

@@ -103,15 +103,17 @@ private function calculateAndUpdateScore(Screening $screening, array $answers):
     }
 
     /**
-     * Calculate the total score from the answers.
+     * Calculate the total score from the answers — yes = 1, unknown = 0.5, no = 0.
      */
-    private function calculateScore(array $answers): int
+    private function calculateScore(array $answers): float
     {
         $score = 0;
 
         foreach ($answers as $value) {
             if ($value === 'yes') {
                 $score++;
+            } elseif ($value === 'unknown') {
+                $score += 0.5;
             }
         }
 

app/Http/Controllers/SessionController.php

@@ -205,11 +205,14 @@ public function result(Session $session): InertiaResponse
     {
         $session->load('category');
 
+        $durationSeconds = $session->created_at->diffInSeconds($session->completed_at);
+
         return Inertia::render('Session/Result', [
             'session' => $session,
             'score' => $session->score,
             'result' => $session->result,
             'categoryName' => $session->category->name,
+            'durationSeconds' => $durationSeconds,
         ]);
     }
 

app/Http/Requests/Screening/UpdateScreeningRequest.php

@@ -25,7 +25,7 @@ public function rules(): array
     {
         return [
             'answers' => ['required', 'array', 'size:10'],
-            'answers.*' => ['required', 'string', 'in:yes,no'],
+            'answers.*' => ['required', 'string', 'in:yes,unknown,no'],
         ];
     }
 
@@ -40,7 +40,7 @@ public function messages(): array
             'answers.size' => 'All 10 screening questions must be answered.',
             'answers.*.required' => 'Each screening question must have an answer.',
             'answers.*.string' => 'Each answer must be a valid text value.',
-            'answers.*.in' => 'Each answer must be either "yes" or "no".',
+            'answers.*.in' => 'Each answer must be "yes", "I don\'t know", or "no".',
         ];
     }
 }

app/Models/Config.php

@@ -0,0 +1,42 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Models;
+
+use Illuminate\Database\Eloquent\Builder;
+use Illuminate\Database\Eloquent\Model;
+
+final class Config extends Model
+{
+    /** The primary key column for config entries is a string key, not an auto-incrementing integer. */
+    protected $primaryKey = 'key';
+
+    /** Disable auto-incrementing since the primary key is a string. */
+    public $incrementing = false;
+
+    /** The primary key type is a string. */
+    protected $keyType = 'string';
+
+    /** Allow mass assignment on all columns. */
+    protected $guarded = [];
+
+    /**
+     * Returns the attribute cast definitions for this model,
+     * ensuring json_value is always hydrated as a PHP array.
+     */
+    protected function casts(): array
+    {
+        return [
+            'json_value' => 'array',
+        ];
+    }
+
+    /**
+     * Scope to filter config records by their string key identifier.
+     */
+    public function scopeForKey(Builder $query, string $key): Builder
+    {
+        return $query->where('key', $key);
+    }
+}

app/Models/User.php

@@ -22,6 +22,7 @@ final class User extends Authenticatable
      */
     protected $fillable = [
         'name',
+        'username',
         'email',
         'password',
         'azure_id',

app/Nova/Actions/DownloadExcel.php

@@ -12,6 +12,7 @@
 final class DownloadExcel extends BaseDownloadExcel
 {
     protected $onlyIndexFields = false;
+
     /**
      * @param  Model|mixed  $row
      */

app/Nova/AnswerResource.php

@@ -4,17 +4,16 @@
 
 namespace App\Nova;
 
+use App\Nova\Actions\DownloadExcel;
 use Laravel\Nova\Fields\BelongsTo;
 use Laravel\Nova\Fields\DateTime;
 use Laravel\Nova\Fields\ID;
 use Laravel\Nova\Fields\Text;
 use Laravel\Nova\Fields\Textarea;
 use Laravel\Nova\Http\Requests\NovaRequest;
-use App\Nova\Actions\DownloadExcel;
 
 final class AnswerResource extends Resource
 {
-
     /**
      * The model the resource corresponds to.
      *

app/Nova/CategoryResource.php

@@ -4,13 +4,12 @@
 
 namespace App\Nova;
 
-use Laravel\Nova\Fields\DateTime;
+use App\Nova\Actions\DownloadExcel;
 use Laravel\Nova\Fields\HasMany;
 use Laravel\Nova\Fields\ID;
 use Laravel\Nova\Fields\Number;
 use Laravel\Nova\Fields\Text;
 use Laravel\Nova\Http\Requests\NovaRequest;
-use App\Nova\Actions\DownloadExcel;
 
 final class CategoryResource extends Resource
 {

app/Nova/ConfigResource.php

@@ -0,0 +1,139 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Nova;
+
+use Laravel\Nova\Fields\DateTime;
+use Laravel\Nova\Fields\Text;
+use Laravel\Nova\Http\Requests\NovaRequest;
+
+final class ConfigResource extends Resource
+{
+    /**
+     * The model the resource corresponds to.
+     *
+     * @var class-string<\App\Models\Config>
+     */
+    public static string $model = \App\Models\Config::class;
+
+    /**
+     * The columns that should be searched.
+     *
+     * @var array
+     */
+    public static $search = ['key'];
+
+    /**
+     * The logical group associated with the resource.
+     *
+     * @var string
+     */
+    public static $group = 'Other';
+
+    /**
+     * Get the displayable label of the resource.
+     */
+    public static function label(): string
+    {
+        return 'Settings';
+    }
+
+    /**
+     * Get the displayable singular label of the resource.
+     */
+    public static function singularLabel(): string
+    {
+        return 'Setting';
+    }
+
+    /**
+     * Resolves the display title from the config class title or falls back to the raw key.
+     */
+    public function title(): string
+    {
+        return $this->getConfigClass()?->title ?? $this->resource->key;
+    }
+
+    /**
+     * Get the fields displayed by the resource.
+     *
+     * @return array<int, \Laravel\Nova\Fields\Field|\Laravel\Nova\Panel|\Laravel\Nova\ResourceTool|\Illuminate\Http\Resources\MergeValue>
+     */
+    public function fields(NovaRequest $request): array
+    {
+        return array_merge(
+            [
+                Text::make('Name', 'key')
+                    ->resolveUsing(fn ($value) => $this->getConfigClass()?->title ?? $value)
+                    ->exceptOnForms(),
+
+                Text::make('Description', 'key')
+                    ->resolveUsing(fn () => $this->getConfigClass()?->description ?? '')
+                    ->exceptOnForms(),
+            ],
+            array_map(
+                fn ($field) => $field->hideFromIndex(),
+                $this->getConfigClass()?->getNovaFields() ?? []
+            ),
+            [
+                DateTime::make('Created At')->exceptOnForms()->hideFromIndex()->sortable()->filterable(),
+                DateTime::make('Updated At')->exceptOnForms()->hideFromIndex()->sortable()->filterable(),
+            ],
+        );
+    }
+
+    /**
+     * Get the cards available for the request.
+     *
+     * @return array<int, \Laravel\Nova\Card>
+     */
+    public function cards(NovaRequest $request): array
+    {
+        return [];
+    }
+
+    /**
+     * Get the filters available for the resource.
+     *
+     * @return array<int, \Laravel\Nova\Filters\Filter>
+     */
+    public function filters(NovaRequest $request): array
+    {
+        return [];
+    }
+
+    /**
+     * Get the lenses available for the resource.
+     *
+     * @return array<int, \Laravel\Nova\Lenses\Lens>
+     */
+    public function lenses(NovaRequest $request): array
+    {
+        return [];
+    }
+
+    /**
+     * Get the actions available for the resource.
+     *
+     * @return array<int, \Laravel\Nova\Actions\Action>
+     */
+    public function actions(NovaRequest $request): array
+    {
+        return [];
+    }
+
+    /**
+     * Resolves the config class instance for this resource's key via the Config service.
+     */
+    private function getConfigClass(): ?object
+    {
+        $key = $this->resource?->key;
+
+        if ($key === null) {
+            return null;
+        }
+
+        return app(\App\Services\Config::class)->getConfigClassForGroup($key);
+    }
+}

app/Nova/LogResource.php

@@ -4,13 +4,13 @@
 
 namespace App\Nova;
 
+use App\Nova\Actions\DownloadExcel;
 use Laravel\Nova\Fields\BelongsTo;
 use Laravel\Nova\Fields\Code;
 use Laravel\Nova\Fields\DateTime;
 use Laravel\Nova\Fields\ID;
 use Laravel\Nova\Fields\Text;
 use Laravel\Nova\Http\Requests\NovaRequest;
-use App\Nova\Actions\DownloadExcel;
 
 final class LogResource extends Resource
 {

app/Nova/QuestionGroupResource.php

@@ -4,15 +4,14 @@
 
 namespace App\Nova;
 
+use App\Nova\Actions\DownloadExcel;
 use Laravel\Nova\Fields\BelongsTo;
-use Laravel\Nova\Fields\DateTime;
 use Laravel\Nova\Fields\HasMany;
 use Laravel\Nova\Fields\ID;
 use Laravel\Nova\Fields\Number;
 use Laravel\Nova\Fields\Text;
 use Laravel\Nova\Fields\Textarea;
 use Laravel\Nova\Http\Requests\NovaRequest;
-use App\Nova\Actions\DownloadExcel;
 
 final class QuestionGroupResource extends Resource
 {

app/Nova/Resource.php

@@ -19,7 +19,6 @@ public static function perPageViaRelationshipOptions()
         return [10, 25, 50];
     }
 
-
     /**
      * Build an "index" query for the given resource.
      */

app/Nova/ScreeningResource.php

@@ -4,6 +4,7 @@
 
 namespace App\Nova;
 
+use App\Nova\Actions\DownloadExcel;
 use Laravel\Nova\Fields\BelongsTo;
 use Laravel\Nova\Fields\Boolean;
 use Laravel\Nova\Fields\DateTime;
@@ -11,7 +12,6 @@
 use Laravel\Nova\Fields\ID;
 use Laravel\Nova\Fields\Number;
 use Laravel\Nova\Http\Requests\NovaRequest;
-use App\Nova\Actions\DownloadExcel;
 
 final class ScreeningResource extends Resource
 {

app/Nova/User.php

@@ -36,7 +36,7 @@ final class User extends Resource
      * @var array
      */
     public static $search = [
-        'id', 'name', 'email', 'department', 'job_title',
+        'id', 'name', 'username', 'email', 'department', 'job_title',
     ];
 
     /**
@@ -59,12 +59,19 @@ public function fields(NovaRequest $request): array
                 ->rules('required', 'max:255')
                 ->help('The user\'s full name, imported from Azure AD when they first log in.'),
 
+            Text::make('Username')
+                ->sortable()
+                ->rules('required', 'max:255')
+                ->creationRules('unique:users,username')
+                ->updateRules('unique:users,username,{{resourceId}}')
+                ->help('The user\'s Azure AD principal name (UPN), used to identify them when logging in via SSO.'),
+
             Text::make('Email')
                 ->sortable()
                 ->rules('required', 'email', 'max:254')
                 ->creationRules('unique:users,email')
                 ->updateRules('unique:users,email,{{resourceId}}')
-                ->help('The user\'s email address, used to identify them when logging in via Azure AD.'),
+                ->help('The user\'s email address.'),
 
             Text::make('Azure ID', 'azure_id')
                 ->onlyOnDetail()

app/Policies/ConfigPolicy.php

@@ -0,0 +1,71 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Policies;
+
+use App\Models\Config;
+use App\Models\User;
+
+final class ConfigPolicy
+{
+    /**
+     * Determine whether the user can view any config records.
+     * Config records are auto-created by the Config Service, so all users may view the list.
+     */
+    public function viewAny(User $user): bool
+    {
+        return true;
+    }
+
+    /**
+     * Determine whether the user can view a specific config record.
+     */
+    public function view(User $user, Config $config): bool
+    {
+        return true;
+    }
+
+    /**
+     * Determine whether the user can update the config record.
+     * All users with Nova access may edit config values.
+     */
+    public function update(User $user, Config $config): bool
+    {
+        return true;
+    }
+
+    /**
+     * Determine whether the user can create config records.
+     * Config records are auto-created by the Config Service — manual creation is not permitted.
+     */
+    public function create(User $user): bool
+    {
+        return false;
+    }
+
+    /**
+     * Determine whether the user can delete the config record.
+     * Config records are managed by the Config Service and must not be manually deleted.
+     */
+    public function delete(User $user, Config $config): bool
+    {
+        return false;
+    }
+
+    /**
+     * Determine whether the user can restore the config record.
+     */
+    public function restore(User $user, Config $config): bool
+    {
+        return false;
+    }
+
+    /**
+     * Determine whether the user can permanently delete the config record.
+     */
+    public function forceDelete(User $user, Config $config): bool
+    {
+        return false;
+    }
+}

app/Providers/AppServiceProvider.php

@@ -16,7 +16,7 @@ final class AppServiceProvider extends ServiceProvider
      */
     public function register(): void
     {
-        //
+        $this->app->singleton(\App\Services\Config::class);
     }
 
     /**

app/Providers/NovaServiceProvider.php

@@ -4,7 +4,7 @@
 
 use App\Models\User;
 use App\Nova\CategoryResource;
-use App\Nova\Dashboards\Main;
+use App\Nova\ConfigResource;
 use App\Nova\LogResource;
 use App\Nova\QuestionGroupResource;
 use App\Nova\QuestionResource;
@@ -29,7 +29,10 @@ public function boot(): void
 
         Nova::mainMenu(function (Request $request) {
             return [
-                MenuSection::dashboard(Main::class)->icon('home'),
+                MenuSection::make('Main', [
+                    MenuItem::link('Dashboard', '/dashboards/main'),
+                    MenuItem::externalLink('To questionnaire ↗', '/'),
+                ])->icon('home'),
 
                 MenuSection::make('Questionnaire', [
                     MenuItem::resource(QuestionResource::class),
@@ -46,6 +49,10 @@ public function boot(): void
                 MenuSection::make('Users', [
                     MenuItem::resource(\App\Nova\User::class),
                 ])->icon('users')->collapsible(),
+
+                MenuSection::make('Settings', [
+                    MenuItem::resource(ConfigResource::class),
+                ])->icon('cog')->collapsible(),
             ];
         });
     }

app/Services/Config.php

@@ -0,0 +1,126 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Services;
+
+use App\Models\Config as ConfigModel;
+use Illuminate\Database\QueryException;
+use Illuminate\Support\Arr;
+use Illuminate\Support\Collection;
+use Illuminate\Support\Str;
+
+final class Config
+{
+    /** Typed public property for the content group's disclaimer field. */
+    public string $contentDisclaimer = '';
+
+    /** Indexed config class instances keyed by their group key string. */
+    private array $configClasses = [];
+
+    /**
+     * Auto-discovers Config Field classes from app/Configs/, loads or creates
+     * their database rows, and populates typed public properties with cast values.
+     */
+    public function __construct()
+    {
+        $this->discoverConfigClasses();
+        $this->hydrateProperties();
+    }
+
+    /**
+     * Scans app/Configs/ for PHP files, instantiates each class,
+     * and indexes them by their key property.
+     */
+    private function discoverConfigClasses(): void
+    {
+        $files = glob(app_path('Configs/*.php')) ?: [];
+
+        foreach ($files as $file) {
+            $className = 'App\\Configs\\'.pathinfo($file, PATHINFO_FILENAME);
+            $instance = new $className;
+            $this->configClasses[$instance->key] = $instance;
+        }
+    }
+
+    /**
+     * Iterates over all discovered config classes, ensures a DB row exists,
+     * resolves typed field values, and assigns them to public properties.
+     */
+    private function hydrateProperties(): void
+    {
+        try {
+            $dbRecords = ConfigModel::all()->keyBy('key');
+
+            foreach ($this->configClasses as $key => $instance) {
+                $record = $this->ensureDbRecord($key, $dbRecords);
+                $jsonValue = Arr::wrap((array) ($record->json_value ?? []));
+                $this->assignFieldProperties($key, $instance, $jsonValue);
+            }
+        } catch (QueryException) {
+            // Silently skip if configs table does not yet exist during migrations.
+        }
+    }
+
+    /**
+     * Ensures a database record exists for the given config key,
+     * creating one with an empty json_value if it does not.
+     */
+    private function ensureDbRecord(string $key, Collection $dbRecords): ConfigModel
+    {
+        if ($dbRecords->has($key)) {
+            return $dbRecords->get($key);
+        }
+
+        return ConfigModel::firstOrCreate(
+            ['key' => $key],
+            ['json_value' => ''],
+        );
+    }
+
+    /**
+     * Resolves each field value from json_value (with default fallback),
+     * applies type casting, and assigns to the matching typed public property.
+     */
+    private function assignFieldProperties(string $key, object $instance, array $jsonValue): void
+    {
+        foreach ($instance->getFieldKeys() as $fieldKey => $definition) {
+            $type = Arr::get($definition, 'type', 'string');
+            $rawValue = Arr::get($jsonValue, $fieldKey);
+
+            if ($rawValue === null || $rawValue === '') {
+                $rawValue = $instance->getDefault($fieldKey);
+            }
+
+            $castedValue = $this->castValue($rawValue, $type);
+            $propertyName = Str::camel($key).Str::studly($fieldKey);
+
+            if (property_exists($this, $propertyName)) {
+                $this->{$propertyName} = $castedValue;
+            }
+        }
+    }
+
+    /**
+     * Casts a raw value to the PHP type defined by the config field type string.
+     */
+    private function castValue(mixed $value, string $type): mixed
+    {
+        return match ($type) {
+            'string', 'markdown' => (string) $value,
+            'int', 'integer' => (int) $value,
+            'bool', 'boolean' => (bool) $value,
+            'float' => (float) $value,
+            default => $value,
+        };
+    }
+
+    /**
+     * Returns the Config Field class instance for a given group key,
+     * or null when no class has been discovered for that key.
+     */
+    public function getConfigClassForGroup(string $group): ?object
+    {
+        return Arr::get($this->configClasses, $group);
+    }
+}

config/nova.php

@@ -183,7 +183,7 @@
     */
 
     'actions' => [
-        'resource' => \Laravel\Nova\Actions\ActionResource::class,
+        'resource' => null,
     ],
 
     /*

database/factories/UserFactory.php

@@ -27,6 +27,7 @@ public function definition(): array
     {
         return [
             'name' => fake()->name(),
+            'username' => fake()->unique()->userName(),
             'email' => fake()->unique()->safeEmail(),
             'email_verified_at' => now(),
             'password' => self::$password ??= Hash::make('password'),

database/migrations/2026_02_03_082959_create_screenings_table.php

@@ -16,7 +16,7 @@ public function up(): void
         Schema::create('screenings', function (Blueprint $table) {
             $table->id();
             $table->foreignId('user_id')->constrained()->cascadeOnDelete();
-            $table->integer('score')->nullable();
+            $table->decimal('score', 4, 1)->nullable();
             $table->boolean('passed')->nullable();
             $table->timestamps();
         });

database/migrations/2026_02_03_083003_create_configs_table.php

@@ -0,0 +1,30 @@
+<?php
+
+declare(strict_types=1);
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\Schema;
+
+return new class extends Migration
+{
+    /**
+     * Creates the configs table used to store database-driven key/value configuration.
+     */
+    public function up(): void
+    {
+        Schema::create('configs', function (Blueprint $table) {
+            $table->string('key')->primary();
+            $table->json('json_value')->nullable();
+            $table->timestamps();
+        });
+    }
+
+    /**
+     * Drops the configs table on rollback.
+     */
+    public function down(): void
+    {
+        Schema::dropIfExists('configs');
+    }
+};

database/migrations/2026_03_19_000000_add_username_to_users_table.php

@@ -0,0 +1,31 @@
+<?php
+
+declare(strict_types=1);
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\Schema;
+
+return new class extends Migration
+{
+    /**
+     * Add the username column to the users table.
+     * Nullable to allow existing users to exist without a username.
+     */
+    public function up(): void
+    {
+        Schema::table('users', function (Blueprint $table): void {
+            $table->string('username')->unique()->nullable()->after('name');
+        });
+    }
+
+    /**
+     * Remove the username column from the users table.
+     */
+    public function down(): void
+    {
+        Schema::table('users', function (Blueprint $table): void {
+            $table->dropColumn('username');
+        });
+    }
+};

database/schema.md

@@ -1,22 +1,32 @@
 # Database Schema Documentation
 
-> Generated: 2026-02-03 05:38:33
+> Generated: 2026-03-19 10:55:06
 > Database: go-no-go
-> Total Tables: 13
+> Total Tables: 23
 
 ## Table of Contents
 
 - [action_events](#action_events)
+- [answers](#answers)
 - [cache](#cache)
 - [cache_locks](#cache_locks)
+- [categories](#categories)
+- [configs](#configs)
 - [failed_jobs](#failed_jobs)
 - [job_batches](#job_batches)
 - [jobs](#jobs)
+- [logs](#logs)
 - [migrations](#migrations)
 - [nova_field_attachments](#nova_field_attachments)
 - [nova_notifications](#nova_notifications)
 - [nova_pending_field_attachments](#nova_pending_field_attachments)
 - [password_reset_tokens](#password_reset_tokens)
+- [question_groups](#question_groups)
+- [questionnaire_sessions](#questionnaire_sessions)
+- [questions](#questions)
+- [roles](#roles)
+- [screening_answers](#screening_answers)
+- [screenings](#screenings)
 - [sessions](#sessions)
 - [users](#users)
 
@@ -46,6 +56,25 @@ ## action_events
 
 ---
 
+## answers
+
+| Field | Type | Null | Key | Default | Extra | Foreign Key |
+|-------|------|------|-----|---------|-------|-------------|
+| id | bigint unsigned | NO | PRI | NULL | auto_increment |  |
+| session_id | bigint unsigned | NO | MUL | NULL |  | → questionnaire_sessions.id |
+| question_id | bigint unsigned | NO | MUL | NULL |  | → questions.id |
+| value | varchar(255) | YES |  | NULL |  |  |
+| text_value | text | YES |  | NULL |  |  |
+| created_at | timestamp | YES |  | NULL |  |  |
+| updated_at | timestamp | YES |  | NULL |  |  |
+
+### Foreign Key Constraints
+
+- **answers_question_id_foreign**: `question_id` → `questions.id`
+- **answers_session_id_foreign**: `session_id` → `questionnaire_sessions.id`
+
+---
+
 ## cache
 
 | Field | Type | Null | Key | Default | Extra | Foreign Key |
@@ -66,6 +95,29 @@ ## cache_locks
 
 ---
 
+## categories
+
+| Field | Type | Null | Key | Default | Extra | Foreign Key |
+|-------|------|------|-----|---------|-------|-------------|
+| id | bigint unsigned | NO | PRI | NULL | auto_increment |  |
+| name | varchar(255) | NO | UNI | NULL |  |  |
+| sort_order | int unsigned | NO |  | 0 |  |  |
+| created_at | timestamp | YES |  | NULL |  |  |
+| updated_at | timestamp | YES |  | NULL |  |  |
+
+---
+
+## configs
+
+| Field | Type | Null | Key | Default | Extra | Foreign Key |
+|-------|------|------|-----|---------|-------|-------------|
+| key | varchar(255) | NO | PRI | NULL |  |  |
+| json_value | json | YES |  | NULL |  |  |
+| created_at | timestamp | YES |  | NULL |  |  |
+| updated_at | timestamp | YES |  | NULL |  |  |
+
+---
+
 ## failed_jobs
 
 | Field | Type | Null | Key | Default | Extra | Foreign Key |
@@ -111,6 +163,26 @@ ## jobs
 
 ---
 
+## logs
+
+| Field | Type | Null | Key | Default | Extra | Foreign Key |
+|-------|------|------|-----|---------|-------|-------------|
+| id | bigint unsigned | NO | PRI | NULL | auto_increment |  |
+| user_id | bigint unsigned | YES | MUL | NULL |  | → users.id |
+| session_id | bigint unsigned | YES | MUL | NULL |  | → questionnaire_sessions.id |
+| category_id | bigint unsigned | YES | MUL | NULL |  | → categories.id |
+| action | varchar(100) | NO |  | NULL |  |  |
+| metadata | json | YES |  | NULL |  |  |
+| created_at | timestamp | YES |  | NULL |  |  |
+
+### Foreign Key Constraints
+
+- **logs_category_id_foreign**: `category_id` → `categories.id`
+- **logs_session_id_foreign**: `session_id` → `questionnaire_sessions.id`
+- **logs_user_id_foreign**: `user_id` → `users.id`
+
+---
+
 ## migrations
 
 | Field | Type | Null | Key | Default | Extra | Foreign Key |
@@ -175,6 +247,116 @@ ## password_reset_tokens
 
 ---
 
+## question_groups
+
+| Field | Type | Null | Key | Default | Extra | Foreign Key |
+|-------|------|------|-----|---------|-------|-------------|
+| id | bigint unsigned | NO | PRI | NULL | auto_increment |  |
+| category_id | bigint unsigned | NO | MUL | NULL |  | → categories.id |
+| name | varchar(255) | NO |  | NULL |  |  |
+| sort_order | int unsigned | NO |  | 0 |  |  |
+| description | text | YES |  | NULL |  |  |
+| scoring_instructions | text | YES |  | NULL |  |  |
+| created_at | timestamp | YES |  | NULL |  |  |
+| updated_at | timestamp | YES |  | NULL |  |  |
+
+### Foreign Key Constraints
+
+- **question_groups_category_id_foreign**: `category_id` → `categories.id`
+
+---
+
+## questionnaire_sessions
+
+| Field | Type | Null | Key | Default | Extra | Foreign Key |
+|-------|------|------|-----|---------|-------|-------------|
+| id | bigint unsigned | NO | PRI | NULL | auto_increment |  |
+| user_id | bigint unsigned | NO | MUL | NULL |  | → users.id |
+| category_id | bigint unsigned | NO | MUL | NULL |  | → categories.id |
+| screening_id | bigint unsigned | YES | MUL | NULL |  | → screenings.id |
+| status | varchar(50) | NO |  | in_progress |  |  |
+| score | int | YES |  | NULL |  |  |
+| result | varchar(50) | YES |  | NULL |  |  |
+| additional_comments | text | YES |  | NULL |  |  |
+| completed_at | timestamp | YES |  | NULL |  |  |
+| created_at | timestamp | YES |  | NULL |  |  |
+| updated_at | timestamp | YES |  | NULL |  |  |
+
+### Foreign Key Constraints
+
+- **questionnaire_sessions_category_id_foreign**: `category_id` → `categories.id`
+- **questionnaire_sessions_screening_id_foreign**: `screening_id` → `screenings.id`
+- **questionnaire_sessions_user_id_foreign**: `user_id` → `users.id`
+
+---
+
+## questions
+
+| Field | Type | Null | Key | Default | Extra | Foreign Key |
+|-------|------|------|-----|---------|-------|-------------|
+| id | bigint unsigned | NO | PRI | NULL | auto_increment |  |
+| question_group_id | bigint unsigned | NO | MUL | NULL |  | → question_groups.id |
+| text | text | NO |  | NULL |  |  |
+| has_yes | tinyint(1) | NO |  | 0 |  |  |
+| has_no | tinyint(1) | NO |  | 0 |  |  |
+| has_na | tinyint(1) | NO |  | 0 |  |  |
+| details | varchar(50) | YES |  | NULL |  |  |
+| sort_order | int unsigned | NO |  | 0 |  |  |
+| is_scored | tinyint(1) | NO |  | 0 |  |  |
+| created_at | timestamp | YES |  | NULL |  |  |
+| updated_at | timestamp | YES |  | NULL |  |  |
+
+### Foreign Key Constraints
+
+- **questions_question_group_id_foreign**: `question_group_id` → `question_groups.id`
+
+---
+
+## roles
+
+| Field | Type | Null | Key | Default | Extra | Foreign Key |
+|-------|------|------|-----|---------|-------|-------------|
+| id | bigint unsigned | NO | PRI | NULL | auto_increment |  |
+| name | varchar(255) | NO | UNI | NULL |  |  |
+| created_at | timestamp | YES |  | NULL |  |  |
+| updated_at | timestamp | YES |  | NULL |  |  |
+
+---
+
+## screening_answers
+
+| Field | Type | Null | Key | Default | Extra | Foreign Key |
+|-------|------|------|-----|---------|-------|-------------|
+| id | bigint unsigned | NO | PRI | NULL | auto_increment |  |
+| screening_id | bigint unsigned | NO | MUL | NULL |  | → screenings.id |
+| question_number | int unsigned | NO |  | NULL |  |  |
+| value | varchar(10) | NO |  | NULL |  |  |
+| created_at | timestamp | YES |  | NULL |  |  |
+| updated_at | timestamp | YES |  | NULL |  |  |
+
+### Foreign Key Constraints
+
+- **screening_answers_screening_id_foreign**: `screening_id` → `screenings.id`
+
+---
+
+## screenings
+
+| Field | Type | Null | Key | Default | Extra | Foreign Key |
+|-------|------|------|-----|---------|-------|-------------|
+| id | bigint unsigned | NO | PRI | NULL | auto_increment |  |
+| user_id | bigint unsigned | NO | MUL | NULL |  | → users.id |
+| score | decimal(4,1) | YES |  | NULL |  |  |
+| passed | tinyint(1) | YES |  | NULL |  |  |
+| created_at | timestamp | YES |  | NULL |  |  |
+| updated_at | timestamp | YES |  | NULL |  |  |
+
+### Foreign Key Constraints
+
+- **screenings_user_id_foreign**: `user_id` → `users.id`
+
+---
+
 ## sessions
 
 | Field | Type | Null | Key | Default | Extra | Foreign Key |
@@ -193,10 +375,18 @@ ## users
 | Field | Type | Null | Key | Default | Extra | Foreign Key |
 |-------|------|------|-----|---------|-------|-------------|
 | id | bigint unsigned | NO | PRI | NULL | auto_increment |  |
+| role_id | bigint unsigned | NO | MUL | 1 |  | → roles.id |
 | name | varchar(255) | NO |  | NULL |  |  |
+| username | varchar(255) | NO | UNI | NULL |  |  |
 | email | varchar(255) | NO | UNI | NULL |  |  |
+| azure_id | varchar(255) | YES | UNI | NULL |  |  |
+| photo | varchar(255) | YES |  | NULL |  |  |
+| job_title | varchar(255) | YES |  | NULL |  |  |
+| department | varchar(255) | YES |  | NULL |  |  |
+| company_name | varchar(255) | YES |  | NULL |  |  |
+| phone | varchar(255) | YES |  | NULL |  |  |
 | email_verified_at | timestamp | YES |  | NULL |  |  |
-| password | varchar(255) | NO |  | NULL |  |  |
+| password | varchar(255) | YES |  | NULL |  |  |
 | two_factor_secret | text | YES |  | NULL |  |  |
 | two_factor_recovery_codes | text | YES |  | NULL |  |  |
 | two_factor_confirmed_at | timestamp | YES |  | NULL |  |  |
@@ -204,5 +394,9 @@ ## users
 | created_at | timestamp | YES |  | NULL |  |  |
 | updated_at | timestamp | YES |  | NULL |  |  |
 
+### Foreign Key Constraints
+
+- **users_role_id_foreign**: `role_id` → `roles.id`
+
 ---
 

database/seeders/JonathanSeeder.php

@@ -19,6 +19,7 @@ public function run(): void
 
         DB::table('users')->insert([
             'name' => 'Jonathan',
+            'username' => 'jonathan.van.rij@agerion.nl',
             'email' => 'jonathan.van.rij@agerion.nl',
             'password' => bcrypt('secret'),
             'email_verified_at' => now(),

docs/agents/code-style-reviewer.md

@@ -1,11 +0,0 @@
-# Code Style Reviewer
-
-Reviews code against project standards including Laravel Pint formatting, strict types declarations, final class declarations, proper use of `Illuminate\Support\Arr` for array operations, adherence to naming conventions, and alignment with CLAUDE.md instructions.
-
-## Purpose
-
-This agent is launched as the **final step** of every task that involves code changes. It ensures all written code complies with project coding standards.
-
-## Relevant Documentation
-
-- `docs/index.md` - Master index of all project documentation

docs/agents/cypress-code-writer.md

@@ -1,11 +0,0 @@
-# Cypress Code Writer
-
-Writes, updates, and debugs Cypress E2E tests for user workflows.
-
-## Purpose
-
-Use this agent when writing new Cypress E2E tests, updating existing test files, debugging failing tests, adding test coverage for user workflows, or creating test utilities.
-
-## Relevant Documentation
-
-- `docs/index.md` - Master index of all project documentation

docs/agents/docs-writer.md

@@ -1,11 +0,0 @@
-# Docs Writer
-
-Creates and updates documentation files and maintains the documentation index.
-
-## Purpose
-
-Use this agent to create new documentation, update existing docs when code changes, and keep `docs/index.md` current with all documentation files.
-
-## Relevant Documentation
-
-- `docs/index.md` - Master index of all project documentation

docs/agents/laravel-blade-code-writer.md

@@ -1,11 +0,0 @@
-# Laravel Blade Code Writer
-
-Creates and modifies Laravel Blade templates and views.
-
-## Purpose
-
-Use this agent when working with Blade templates in `resources/views/`, including creating new templates, fixing layout issues, implementing UI changes, or refactoring template code.
-
-## Relevant Documentation
-
-- `docs/index.md` - Master index of all project documentation

docs/agents/laravel-config-code-writer.md

@@ -1,11 +0,0 @@
-# Laravel Config Code Writer
-
-Manages database-driven config groups, fields, and the Config Service.
-
-## Purpose
-
-Use this agent when creating new Config Field classes, updating the Config Service, modifying the Config Model, updating the Nova Config Resource, creating migrations for new config groups, or debugging config value resolution.
-
-## Relevant Documentation
-
-- `docs/index.md` - Master index of all project documentation

docs/agents/laravel-nova-code-writer.md

@@ -1,11 +0,0 @@
-# Laravel Nova Code Writer
-
-Creates and modifies Laravel Nova 5 resources, actions, metrics, and dashboards.
-
-## Purpose
-
-Use this agent for ALL Nova-related code work in the `App\Nova` namespace, including resources, fields, actions, metrics, lenses, filters, cards, and dashboards.
-
-## Relevant Documentation
-
-- `docs/index.md` - Master index of all project documentation

docs/agents/laravel-php-code-writer.md

@@ -1,11 +0,0 @@
-# Laravel PHP Code Writer
-
-Writes and refactors PHP code (controllers, models, services, migrations) except Nova resources.
-
-## Purpose
-
-Use this agent for all PHP code work outside of Nova resources: controllers, models, services, migrations, middleware, form requests, policies, commands, jobs, and any other PHP files.
-
-## Relevant Documentation
-
-- `docs/index.md` - Master index of all project documentation

docs/agents/phpunit-code-writer.md

@@ -1,11 +0,0 @@
-# PHPUnit Code Writer
-
-Creates, runs, and validates PHPUnit tests with mocking support.
-
-## Purpose
-
-Use this agent to write new test classes, fix failing tests (test issues only), create test seeders with DB facade, set up mocking routes for external API calls, or validate test coverage for PHP classes.
-
-## Relevant Documentation
-
-- `docs/index.md` - Master index of all project documentation

docs/agents/vue-code-writer.md

@@ -1,11 +0,0 @@
-# Vue Code Writer
-
-Builds Vue.js components in the Laravel + Inertia.js stack.
-
-## Purpose
-
-Use this agent when creating new Vue components, modifying existing ones, implementing Inertia page components, handling form submissions with useForm, integrating with Laravel backend endpoints, or fixing Vue-related bugs.
-
-## Relevant Documentation
-
-- `docs/index.md` - Master index of all project documentation

docs/index.md

@@ -14,29 +14,3 @@ ### Root Level
 ### Frontend
 
 - `docs/theming-templating-vue.md` - Design tokens, Tailwind config, layout, shared Vue components, RadioButtonGroup pill buttons, icon and scoring color standards
-
-### Agents
-
-- `docs/agents/code-style-reviewer.md` - Project-specific notes for the code style review agent
-- `docs/agents/cypress-code-writer.md` - Project-specific notes for the Cypress E2E test writer agent
-- `docs/agents/docs-writer.md` - Project-specific notes for the documentation writer agent
-- `docs/agents/laravel-blade-code-writer.md` - Project-specific notes for the Blade template agent
-- `docs/agents/laravel-config-code-writer.md` - Project-specific notes for the config management agent
-- `docs/agents/laravel-nova-code-writer.md` - Project-specific notes for the Nova resource agent
-- `docs/agents/laravel-php-code-writer.md` - Project-specific notes for the Laravel PHP code agent
-- `docs/agents/phpunit-code-writer.md` - Project-specific notes for the PHPUnit test agent
-- `docs/agents/vue-code-writer.md` - Project-specific notes for the Vue.js component agent
-
-## Available Sub-Agents
-
-These are the sub-agents available globally that can be used in this project:
-
-- `code-style-reviewer` - Reviews code against project standards including Laravel Pint, strict types, and naming conventions
-- `cypress-code-writer` - Writes, updates, and debugs Cypress E2E tests for user workflows
-- `docs-writer` - Creates and updates documentation files and maintains the documentation index
-- `laravel-blade-code-writer` - Creates and modifies Laravel Blade templates and views
-- `laravel-config-code-writer` - Manages database-driven config groups, fields, and the Config Service
-- `laravel-nova-code-writer` - Creates and modifies Laravel Nova 5 resources, actions, metrics, and dashboards
-- `laravel-php-code-writer` - Writes and refactors PHP code (controllers, models, services, migrations) except Nova resources
-- `phpunit-code-writer` - Creates, runs, and validates PHPUnit tests with mocking support
-- `vue-code-writer` - Builds Vue.js components in the Laravel + Inertia.js stack

docs/updates.md

@@ -0,0 +1,33 @@
+# Updates — March 16, 2026
+
+## New Features
+
+### Disclaimer Page
+A new disclaimer page has been added to the application. When a disclaimer text is configured, users must read and accept it before they can start a screening. The disclaimer page renders formatted content (including headings, lists, links, and tables) and is accessible via a link on the landing page.
+
+- A checkbox appears on the landing page requiring users to agree to the disclaimer before continuing
+- The disclaimer content can be managed by administrators through the admin panel
+
+### Admin Settings Panel
+A new **Settings** section has been added to the admin panel. This provides a central place for administrators to manage application-wide content, starting with the disclaimer text. Settings are stored in the database and take effect immediately — no deployments or restarts needed.
+
+### "I Don't Know" Answer Option
+The pre-screening questionnaire now includes a third answer option: **"I don't know"**, in addition to "Yes" and "No". This gives users a more honest way to respond when they are uncertain, and is scored at half a point.
+
+### Session Duration Tracking
+The session result page now shows how long it took to complete a questionnaire. The duration is displayed in a human-readable format (e.g. "4m 32s" or "1h 15m").
+
+## Improvements
+
+### Navigation
+- A **Back button** has been added to every page in the application, making it easy to navigate to the previous step at any time
+- A **sticky Back button** appears in the top-right corner when you scroll down on longer pages, so you never have to scroll back up to navigate away
+- Visiting a page that doesn't exist now redirects you back to the landing page instead of showing an error
+
+### Disclaimer Link Behavior
+The disclaimer link on the landing page now opens in the same tab for a smoother experience.
+
+### Visual Polish
+- Removed heavy background panels from question cards and session details for a cleaner, lighter look
+- Improved the layout of session details on the result page (category, completion date, and duration are now evenly spaced)
+- Auto-save actions (answers and comments) no longer show a loading indicator, reducing visual noise while filling in questionnaires

package-lock.json

@@ -8,6 +8,7 @@
                 "@heroicons/vue": "^2.2.0",
                 "@inertiajs/vue3": "^2.3.13",
                 "@vitejs/plugin-vue": "^6.0.4",
+                "marked": "^17.0.4",
                 "vue": "^3.5.27"
             },
             "devDependencies": {
@@ -3257,6 +3258,18 @@
                 "@jridgewell/sourcemap-codec": "^1.5.5"
             }
         },
+        "node_modules/marked": {
+            "version": "17.0.4",
+            "resolved": "https://registry.npmjs.org/marked/-/marked-17.0.4.tgz",
+            "integrity": "sha512-NOmVMM+KAokHMvjWmC5N/ZOvgmSWuqJB8FoYI019j4ogb/PeRMKoKIjReZ2w3376kkA8dSJIP8uD993Kxc0iRQ==",
+            "license": "MIT",
+            "bin": {
+                "marked": "bin/marked.js"
+            },
+            "engines": {
+                "node": ">= 20"
+            }
+        },
         "node_modules/math-intrinsics": {
             "version": "1.1.0",
             "resolved": "https://registry.npmjs.org/math-intrinsics/-/math-intrinsics-1.1.0.tgz",

package.json

@@ -22,6 +22,7 @@
         "@heroicons/vue": "^2.2.0",
         "@inertiajs/vue3": "^2.3.13",
         "@vitejs/plugin-vue": "^6.0.4",
+        "marked": "^17.0.4",
         "vue": "^3.5.27"
     }
 }

resources/js/Components/FlashNotification.vue

@@ -0,0 +1,118 @@
+<script setup>
+import { ref, watch, onUnmounted } from 'vue'
+import { usePage } from '@inertiajs/vue3'
+import { CheckCircleIcon, ExclamationTriangleIcon, XMarkIcon } from '@heroicons/vue/20/solid'
+
+const page = usePage()
+
+const visible = ref(false)
+const message = ref('')
+const type = ref('success') // 'success' | 'error'
+
+let autoDismissTimer = null
+
+function clearTimer() {
+  if (autoDismissTimer) {
+    clearTimeout(autoDismissTimer)
+    autoDismissTimer = null
+  }
+}
+
+function dismiss() {
+  visible.value = false
+  clearTimer()
+}
+
+function showFlash(flash) {
+  clearTimer()
+
+  if (flash?.error) {
+    message.value = flash.error
+    type.value = 'error'
+    visible.value = true
+    // Error messages stay until manually dismissed
+  } else if (flash?.success) {
+    message.value = flash.success
+    type.value = 'success'
+    visible.value = true
+    // Auto-dismiss success after 8 seconds
+    autoDismissTimer = setTimeout(() => {
+      visible.value = false
+    }, 8000)
+  } else {
+    visible.value = false
+  }
+}
+
+// Watch for flash prop changes on each Inertia page visit
+watch(
+  () => page.props.flash,
+  (flash) => showFlash(flash),
+  { immediate: true, deep: true }
+)
+
+onUnmounted(() => {
+  clearTimer()
+})
+</script>
+
+<template>
+  <Transition
+    enter-active-class="transition duration-300 ease-out"
+    enter-from-class="-translate-y-full opacity-0"
+    enter-to-class="translate-y-0 opacity-100"
+    leave-active-class="transition duration-200 ease-in"
+    leave-from-class="translate-y-0 opacity-100"
+    leave-to-class="-translate-y-full opacity-0"
+  >
+    <div
+      v-if="visible"
+      :class="[
+        'relative z-40 w-full shadow-lg',
+        type === 'error'
+          ? 'bg-rose-600'
+          : 'bg-emerald-600',
+      ]"
+      role="alert"
+      :aria-live="type === 'error' ? 'assertive' : 'polite'"
+    >
+      <div class="px-6 py-3 flex items-center gap-3 max-w-7xl mx-auto">
+        <!-- Icon -->
+        <component
+          :is="type === 'error' ? ExclamationTriangleIcon : CheckCircleIcon"
+          class="w-5 h-5 text-white/90 shrink-0"
+          aria-hidden="true"
+        />
+
+        <!-- Message -->
+        <p class="flex-1 text-sm font-medium text-white leading-snug">
+          {{ message }}
+        </p>
+
+        <!-- Dismiss button -->
+        <button
+          type="button"
+          class="ml-auto shrink-0 rounded p-1 text-white/70 hover:text-white hover:bg-white/10 transition-colors focus:outline-none focus:ring-2 focus:ring-white/40"
+          aria-label="Dismiss notification"
+          @click="dismiss"
+        >
+          <XMarkIcon class="w-4 h-4" />
+        </button>
+      </div>
+
+      <!-- Progress bar for success auto-dismiss -->
+      <div
+        v-if="type === 'success'"
+        class="absolute bottom-0 left-0 h-[2px] bg-white/30 animate-[shrink_8s_linear_forwards]"
+        style="width: 100%"
+      />
+    </div>
+  </Transition>
+</template>
+
+<style scoped>
+@keyframes shrink {
+  from { width: 100%; }
+  to { width: 0%; }
+}
+</style>

resources/js/Components/RadioButtonGroup.vue

@@ -18,15 +18,41 @@ const props = defineProps({
     type: Boolean,
     default: false,
   },
+  // Array of option values that should be individually disabled.
+  // An already-selected option is never disabled via this prop.
+  disabledOptions: {
+    type: Array,
+    default: () => [],
+  },
+  // Tooltip text shown when hovering over a disabled option.
+  disabledTooltip: {
+    type: String,
+    default: '',
+  },
 })
 
 const emit = defineEmits(['update:modelValue'])
 
+/**
+ * Returns true when an option should be treated as disabled.
+ * An option that is already selected (checked) is never individually disabled
+ * via disabledOptions — it remains selectable so the user can keep it.
+ */
+const isOptionDisabled = (value) => {
+  if (props.disabled) return true
+  if (props.modelValue === value) return false
+  return props.disabledOptions.includes(value)
+}
+
 const handleChange = (value) => {
+  // Safety guard: do not emit for disabled options
+  if (isOptionDisabled(value)) return
   emit('update:modelValue', value)
 }
 
-const getSegmentClasses = (index) => {
+const getSegmentClasses = (option, index) => {
+  const optionDisabled = isOptionDisabled(option.value)
+
   const classes = [
     'inline-flex',
     'items-center',
@@ -40,11 +66,6 @@ const getSegmentClasses = (index) => {
     'duration-200',
     'bg-white/5',
     'text-gray-400',
-    'cursor-pointer',
-    'hover:bg-white/10',
-    'hover:text-gray-200',
-    'peer-checked:hover:bg-primary-dark',
-    'peer-checked:hover:text-gray-900',
     'peer-checked:bg-primary',
     'peer-checked:text-gray-900',
     'peer-checked:font-semibold',
@@ -54,16 +75,25 @@ const getSegmentClasses = (index) => {
     'peer-focus-visible:ring-offset-surface',
   ]
 
+  if (optionDisabled) {
+    // Disabled: visually subtle, no pointer, no hover effects
+    classes.push('opacity-35', 'cursor-not-allowed')
+  } else {
+    // Enabled: pointer cursor and hover effects
+    classes.push(
+      'cursor-pointer',
+      'hover:bg-white/10',
+      'hover:text-gray-200',
+      'peer-checked:hover:bg-primary-dark',
+      'peer-checked:hover:text-gray-900',
+    )
+  }
+
   // All except last: add divider
   if (index < props.options.length - 1) {
     classes.push('border-r', 'border-white/10')
   }
 
-  // Disabled state
-  if (props.disabled) {
-    classes.push('disabled:opacity-50', 'disabled:cursor-not-allowed')
-  }
-
   return classes.join(' ')
 }
 </script>
@@ -80,12 +110,12 @@ const getSegmentClasses = (index) => {
                 :name="name"
                 :value="option.value"
                 :checked="modelValue === option.value"
-                :disabled="disabled"
+                :disabled="isOptionDisabled(option.value)"
                 :data-cy="option.value === 'not_applicable' ? 'na' : option.value"
                 @change="handleChange(option.value)"
                 class="sr-only peer"
             />
-            <span :class="getSegmentClasses(index)">
+            <span :class="getSegmentClasses(option, index)" :title="isOptionDisabled(option.value) ? disabledTooltip : ''">
                 {{ option.label }}
             </span>
         </label>

resources/js/Layouts/AppLayout.vue

@@ -2,6 +2,7 @@
 import { computed } from 'vue'
 import { usePage } from '@inertiajs/vue3'
 import PageHeader from '@/Components/PageHeader.vue'
+import FlashNotification from '@/Components/FlashNotification.vue'
 
 const page = usePage()
 
@@ -13,6 +14,7 @@ const pageTitle = computed(() => {
 <template>
   <div class="min-h-screen flex flex-col">
     <PageHeader :title="pageTitle" />
+    <FlashNotification />
 
     <!-- Growth symbol watermark -->
     <img

resources/js/Pages/Disclaimer.vue

@@ -0,0 +1,257 @@
+<script setup>
+import { computed, onMounted, onUnmounted, ref } from 'vue'
+import { Head } from '@inertiajs/vue3'
+import { ArrowLeftIcon } from '@heroicons/vue/24/outline'
+import { marked } from 'marked'
+import AppLayout from '@/Layouts/AppLayout.vue'
+import AppButton from '@/Components/AppButton.vue'
+
+defineOptions({ layout: AppLayout })
+
+const props = defineProps({
+  content: String,
+})
+
+const parsedContent = computed(() => {
+  if (!props.content) return ''
+  return marked(props.content)
+})
+
+const bottomBackButtonRef = ref(null)
+const showStickyBack = ref(false)
+
+let observer = null
+
+onMounted(() => {
+  if (!bottomBackButtonRef.value) return
+  observer = new IntersectionObserver(
+    ([entry]) => { showStickyBack.value = !entry.isIntersecting },
+    { threshold: 0 }
+  )
+  observer.observe(bottomBackButtonRef.value.$el || bottomBackButtonRef.value)
+})
+
+onUnmounted(() => {
+  observer?.disconnect()
+})
+</script>
+
+<template>
+    <Head title="Disclaimer" />
+
+    <div class="max-w-3xl mx-auto px-4 py-10">
+        <!-- Sticky back button — appears when bottom back button scrolls out of view -->
+        <Transition
+            enter-active-class="transition-all duration-200 ease-out"
+            enter-from-class="opacity-0 translate-x-4"
+            enter-to-class="opacity-100 translate-x-0"
+            leave-active-class="transition-all duration-150 ease-in"
+            leave-from-class="opacity-100 translate-x-0"
+            leave-to-class="opacity-0 translate-x-4"
+        >
+            <div v-if="showStickyBack" class="fixed top-[88px] right-6 z-40">
+                <AppButton variant="ghost" size="lg" href="/">
+                    <ArrowLeftIcon class="h-5 w-5" />
+                    Back
+                </AppButton>
+            </div>
+        </Transition>
+
+        <!-- Page heading -->
+        <div class="mb-10">
+            <h1 class="text-2xl font-bold text-white">Disclaimer</h1>
+            <div class="h-px bg-gradient-to-r from-primary/40 via-primary/10 to-transparent mt-4"></div>
+        </div>
+
+        <!-- Rendered markdown content -->
+        <div class="prose-dark" v-html="parsedContent" />
+
+        <!-- Bottom back button -->
+        <div class="mt-12 pt-8 border-t border-white/[0.06]">
+            <AppButton ref="bottomBackButtonRef" variant="ghost" size="lg" href="/">
+                <ArrowLeftIcon class="h-5 w-5" />
+                Back
+            </AppButton>
+        </div>
+    </div>
+</template>
+
+<style scoped>
+.prose-dark :deep(h1) {
+    color: #ffffff;
+    font-size: 1.875rem;
+    font-weight: 700;
+    line-height: 1.3;
+    margin-top: 2rem;
+    margin-bottom: 1rem;
+}
+
+.prose-dark :deep(h2) {
+    color: #ffffff;
+    font-size: 1.5rem;
+    font-weight: 700;
+    line-height: 1.35;
+    margin-top: 1.75rem;
+    margin-bottom: 0.875rem;
+}
+
+.prose-dark :deep(h3) {
+    color: #ffffff;
+    font-size: 1.25rem;
+    font-weight: 600;
+    line-height: 1.4;
+    margin-top: 1.5rem;
+    margin-bottom: 0.75rem;
+}
+
+.prose-dark :deep(h4) {
+    color: #ffffff;
+    font-size: 1.1rem;
+    font-weight: 600;
+    line-height: 1.4;
+    margin-top: 1.25rem;
+    margin-bottom: 0.625rem;
+}
+
+.prose-dark :deep(p) {
+    color: #d1d5db; /* text-gray-300 */
+    line-height: 1.75;
+    margin-bottom: 1rem;
+}
+
+.prose-dark :deep(a) {
+    color: #d1ec51; /* text-primary */
+    text-decoration: underline;
+    text-underline-offset: 2px;
+    transition: color 0.15s ease;
+}
+
+.prose-dark :deep(a:hover) {
+    color: #b5d136; /* text-primary-dark */
+}
+
+.prose-dark :deep(ul) {
+    color: #d1d5db;
+    list-style: none;
+    padding-left: 1.5rem;
+    margin-bottom: 1rem;
+}
+
+.prose-dark :deep(ul li) {
+    position: relative;
+    margin-bottom: 0.5rem;
+    line-height: 1.75;
+}
+
+.prose-dark :deep(ul li::before) {
+    content: '—';
+    color: #d1ec51; /* text-primary */
+    position: absolute;
+    left: -1.5rem;
+    font-weight: 600;
+}
+
+.prose-dark :deep(ol) {
+    color: #d1d5db;
+    list-style: none;
+    padding-left: 2rem;
+    margin-bottom: 1rem;
+    counter-reset: ol-counter;
+}
+
+.prose-dark :deep(ol li) {
+    position: relative;
+    margin-bottom: 0.5rem;
+    line-height: 1.75;
+    counter-increment: ol-counter;
+}
+
+.prose-dark :deep(ol li::before) {
+    content: counter(ol-counter) '.';
+    color: #d1ec51; /* text-primary */
+    position: absolute;
+    left: -2rem;
+    font-weight: 600;
+}
+
+.prose-dark :deep(blockquote) {
+    border-left: 3px solid #d1ec51; /* border-primary */
+    padding-left: 1.25rem;
+    margin: 1.5rem 0;
+    font-style: italic;
+    color: #9ca3af; /* text-gray-400 */
+}
+
+.prose-dark :deep(blockquote p) {
+    color: #9ca3af;
+    margin-bottom: 0;
+}
+
+.prose-dark :deep(pre) {
+    background-color: rgba(31, 41, 55, 0.5); /* bg-gray-800/50 */
+    border: 1px solid rgba(75, 85, 99, 0.4);
+    border-radius: 0.5rem;
+    padding: 1.25rem;
+    overflow-x: auto;
+    margin-bottom: 1rem;
+}
+
+.prose-dark :deep(pre code) {
+    background-color: transparent;
+    padding: 0;
+    font-family: ui-monospace, 'Cascadia Code', 'Source Code Pro', Menlo, Monaco, Consolas, monospace;
+    font-size: 0.875rem;
+    color: #d1d5db;
+}
+
+.prose-dark :deep(code) {
+    background-color: rgba(31, 41, 55, 0.5); /* bg-gray-800/50 */
+    border: 1px solid rgba(75, 85, 99, 0.3);
+    border-radius: 0.25rem;
+    padding: 0.125rem 0.375rem;
+    font-family: ui-monospace, 'Cascadia Code', 'Source Code Pro', Menlo, Monaco, Consolas, monospace;
+    font-size: 0.875em;
+    color: #d1ec51; /* text-primary */
+}
+
+.prose-dark :deep(strong) {
+    color: #ffffff;
+    font-weight: 600;
+}
+
+.prose-dark :deep(em) {
+    color: #d1d5db;
+    font-style: italic;
+}
+
+.prose-dark :deep(hr) {
+    border: none;
+    border-top: 1px solid #4b5563; /* border-gray-600 */
+    margin: 2rem 0;
+}
+
+.prose-dark :deep(table) {
+    width: 100%;
+    border-collapse: collapse;
+    margin-bottom: 1.5rem;
+    font-size: 0.9rem;
+}
+
+.prose-dark :deep(th) {
+    color: #ffffff;
+    font-weight: 600;
+    text-align: left;
+    padding: 0.625rem 0.875rem;
+    border-bottom: 2px solid #4b5563;
+}
+
+.prose-dark :deep(td) {
+    color: #d1d5db;
+    padding: 0.625rem 0.875rem;
+    border-bottom: 1px solid rgba(75, 85, 99, 0.4);
+}
+
+.prose-dark :deep(tr:last-child td) {
+    border-bottom: none;
+}
+</style>

resources/js/Pages/Landing.vue

@@ -1,17 +1,28 @@
 <script setup>
-import { computed } from 'vue'
+import { computed, ref } from 'vue'
 import { Head, router, usePage } from '@inertiajs/vue3'
+import { ArrowRightStartOnRectangleIcon } from '@heroicons/vue/20/solid'
 import AppLayout from '@/Layouts/AppLayout.vue'
 import AppButton from '@/Components/AppButton.vue'
 
 defineOptions({ layout: AppLayout })
 
+const props = defineProps({
+  hasDisclaimer: Boolean,
+})
+
 const page = usePage()
 
+const disclaimerAgreed = ref(false)
+
 const isAuthenticated = computed(() => {
   return page.props.auth?.user != null
 })
 
+const canContinue = computed(() => {
+  return !props.hasDisclaimer || disclaimerAgreed.value
+})
+
 const userInfo = computed(() => {
   const user = page.props.auth?.user
   if (!user) return null
@@ -32,6 +43,8 @@ const userInfo = computed(() => {
 const handleContinue = () => {
   router.post('/screening')
 }
+
+const handleLogout = () => router.post('/logout')
 </script>
 
 <template>
@@ -51,9 +64,78 @@ const handleContinue = () => {
                 You will first complete a short pre-screening questionnaire, followed by a detailed category-specific checklist
                 to determine whether to pursue (Go), decline (No Go), or escalate (Consult Leadership) an opportunity.
             </p>
-            <AppButton v-if="isAuthenticated" size="lg" @click="handleContinue" data-cy="start-screening">
+
+            <!-- Disclaimer checkbox — only shown when authenticated and a disclaimer exists -->
+            <div v-if="isAuthenticated && hasDisclaimer" class="flex items-start justify-center gap-3 mb-6">
+                <label class="flex items-start gap-3 cursor-pointer select-none group">
+                    <!-- Hidden native checkbox -->
+                    <input
+                        v-model="disclaimerAgreed"
+                        type="checkbox"
+                        class="sr-only peer"
+                    />
+                    <!-- Custom checkbox -->
+                    <span
+                        class="
+                            mt-0.5 flex-shrink-0
+                            w-5 h-5 rounded
+                            border-2 border-gray-500
+                            bg-transparent
+                            flex items-center justify-center
+                            transition-all duration-200
+                            peer-checked:bg-primary peer-checked:border-primary
+                            group-hover:border-gray-300
+                        "
+                        aria-hidden="true"
+                    >
+                        <!-- Checkmark — visible when checked via peer -->
+                        <svg
+                            class="w-3 h-3 text-gray-900 opacity-0 transition-opacity duration-200 peer-checked:opacity-100"
+                            :class="{ 'opacity-100': disclaimerAgreed }"
+                            viewBox="0 0 12 12"
+                            fill="none"
+                            xmlns="http://www.w3.org/2000/svg"
+                        >
+                            <path
+                                d="M2 6l3 3 5-5"
+                                stroke="currentColor"
+                                stroke-width="1.8"
+                                stroke-linecap="round"
+                                stroke-linejoin="round"
+                            />
+                        </svg>
+                    </span>
+                    <!-- Label text -->
+                    <span class="text-sm text-gray-400 text-left leading-relaxed">
+                        I have read and agree to the
+                        <a
+                            href="/disclaimer"
+                            class="text-primary underline underline-offset-2 hover:text-primary-dark transition-colors duration-150"
+                        >
+                            disclaimer
+                        </a>
+                    </span>
+                </label>
+            </div>
+
+            <AppButton
+                v-if="isAuthenticated"
+                size="lg"
+                :disabled="!canContinue"
+                @click="handleContinue"
+                data-cy="start-screening"
+            >
                 Continue
             </AppButton>
+            <button
+                v-if="isAuthenticated"
+                type="button"
+                class="mt-3 flex items-center gap-1.5 mx-auto text-sm text-gray-500 hover:text-gray-300 transition-colors duration-150 cursor-pointer"
+                @click="handleLogout"
+            >
+                <ArrowRightStartOnRectangleIcon class="w-4 h-4" />
+                Log out
+            </button>
             <AppButton v-else size="lg" href="/login" external>
                 Log in
             </AppButton>

resources/js/Pages/Screening/Result.vue

@@ -1,5 +1,7 @@
 <script setup>
+import { onMounted, onUnmounted, ref } from 'vue'
 import { Head, router } from '@inertiajs/vue3'
+import { ArrowLeftIcon } from '@heroicons/vue/24/outline'
 import AppLayout from '@/Layouts/AppLayout.vue'
 import AppButton from '@/Components/AppButton.vue'
 
@@ -34,12 +36,47 @@ const handleStartCategory = (categoryId) => {
     screening_id: props.screening.id,
   })
 }
+
+const bottomBackButtonRef = ref(null)
+const showStickyBack = ref(false)
+
+let observer = null
+
+onMounted(() => {
+  if (!bottomBackButtonRef.value) return
+  observer = new IntersectionObserver(
+    ([entry]) => { showStickyBack.value = !entry.isIntersecting },
+    { threshold: 0 }
+  )
+  observer.observe(bottomBackButtonRef.value.$el || bottomBackButtonRef.value)
+})
+
+onUnmounted(() => {
+  observer?.disconnect()
+})
 </script>
 
 <template>
     <Head title="Screening Result" />
 
     <div class="max-w-4xl mx-auto px-4 py-8">
+        <!-- Sticky back button -->
+        <Transition
+            enter-active-class="transition-all duration-200 ease-out"
+            enter-from-class="opacity-0 translate-x-4"
+            enter-to-class="opacity-100 translate-x-0"
+            leave-active-class="transition-all duration-150 ease-in"
+            leave-from-class="opacity-100 translate-x-0"
+            leave-to-class="opacity-0 translate-x-4"
+        >
+            <div v-if="showStickyBack" class="fixed top-[88px] right-6 z-40">
+                <AppButton variant="ghost" size="lg" href="/" data-cy="sticky-back">
+                    <ArrowLeftIcon class="h-5 w-5" />
+                    Back
+                </AppButton>
+            </div>
+        </Transition>
+
         <h1 class="text-3xl font-bold text-white mb-6">Pre-Screening Result</h1>
 
         <!-- Score Display -->
@@ -57,21 +94,14 @@ const handleStartCategory = (categoryId) => {
             </div>
         </div>
 
-        <!-- Failed: Show Again button -->
-        <div v-if="!passed" class="flex justify-center">
-            <AppButton size="lg" href="/">
-                Again
-            </AppButton>
-        </div>
-
         <!-- Passed: Show category picker -->
-        <div v-else data-cy="category-select">
+        <div v-if="passed" data-cy="category-select">
             <h2 class="text-2xl font-semibold text-white mb-4">Select a Category</h2>
             <div class="space-y-3">
                 <div
                     v-for="category in categories"
                     :key="category.id"
-                    class="bg-surface/50 rounded-lg p-4 flex items-center justify-between hover:bg-surface/70 transition-colors"
+                    class="rounded-lg p-4 flex items-center justify-between hover:bg-white/5 transition-colors"
                 >
                     <span class="text-white font-medium">{{ category.name }}</span>
                     <AppButton size="md" @click="handleStartCategory(category.id)">
@@ -80,5 +110,13 @@ const handleStartCategory = (categoryId) => {
                 </div>
             </div>
         </div>
+
+        <!-- Bottom back button -->
+        <div class="mt-12 pt-8 border-t border-white/[0.06]">
+            <AppButton ref="bottomBackButtonRef" variant="ghost" size="lg" href="/" data-cy="back-to-landing">
+                <ArrowLeftIcon class="h-5 w-5" />
+                Back
+            </AppButton>
+        </div>
     </div>
 </template>

resources/js/Pages/Screening/Show.vue

@@ -1,12 +1,16 @@
 <script setup>
-import { computed } from 'vue'
+import { computed, onMounted, onUnmounted, ref, watch } from 'vue'
 import { Head, useForm } from '@inertiajs/vue3'
+import { ArrowLeftIcon } from '@heroicons/vue/24/outline'
+import { ExclamationTriangleIcon } from '@heroicons/vue/20/solid'
 import AppLayout from '@/Layouts/AppLayout.vue'
 import AppButton from '@/Components/AppButton.vue'
 import RadioButtonGroup from '@/Components/RadioButtonGroup.vue'
 
 defineOptions({ layout: AppLayout })
 
+const MAX_MAYBE_ANSWERS = 8
+
 const props = defineProps({
   screening: {
     type: Object,
@@ -32,23 +36,83 @@ const handleSubmit = () => {
   form.put(`/screening/${props.screening.id}`)
 }
 
+const currentScore = computed(() => {
+  return Object.values(form.answers).reduce((score, value) => {
+    if (value === 'yes') return score + 1
+    if (value === 'unknown') return score + 0.5
+    return score
+  }, 0)
+})
+
+watch(currentScore, (score) => {
+  console.log('Current screening score:', score)
+})
+
 const allAnswered = computed(() => {
   return Object.values(form.answers).every(v => v !== null)
 })
+
+const unknownCount = computed(() => {
+  return Object.values(form.answers).filter(v => v === 'unknown').length
+})
+
+const maybeLimitReached = computed(() => {
+  return unknownCount.value >= MAX_MAYBE_ANSWERS
+})
+
+const bottomBackButtonRef = ref(null)
+const showStickyBack = ref(false)
+
+let observer = null
+
+onMounted(() => {
+  if (!bottomBackButtonRef.value) return
+  observer = new IntersectionObserver(
+    ([entry]) => { showStickyBack.value = !entry.isIntersecting },
+    { threshold: 0 }
+  )
+  observer.observe(bottomBackButtonRef.value.$el || bottomBackButtonRef.value)
+})
+
+onUnmounted(() => {
+  observer?.disconnect()
+})
 </script>
 
 <template>
     <Head title="Pre-Screening Questions" />
 
     <div class="max-w-4xl mx-auto px-4 py-8">
+        <!-- Sticky back button -->
+        <Transition
+            enter-active-class="transition-all duration-200 ease-out"
+            enter-from-class="opacity-0 translate-x-4"
+            enter-to-class="opacity-100 translate-x-0"
+            leave-active-class="transition-all duration-150 ease-in"
+            leave-from-class="opacity-100 translate-x-0"
+            leave-to-class="opacity-0 translate-x-4"
+        >
+            <div v-if="showStickyBack" class="fixed top-[88px] right-6 z-40">
+                <AppButton variant="ghost" size="lg" href="/" data-cy="sticky-back">
+                    <ArrowLeftIcon class="h-5 w-5" />
+                    Back
+                </AppButton>
+            </div>
+        </Transition>
+
         <h1 class="text-3xl font-bold text-white mb-2">Pre-Screening Questions</h1>
-        <p class="text-gray-400 mb-8">Answer all 10 questions to proceed. Each "Yes" answer scores 1 point. You need at least 5 points to pass.</p>
+        <p class="text-gray-400 mb-8">Please answer all questions to proceed.</p>
+
+        <p v-if="maybeLimitReached" class="text-amber-400/80 text-sm mb-6 flex items-center gap-2">
+            <ExclamationTriangleIcon class="h-4 w-4 shrink-0" />
+            You've used all {{ MAX_MAYBE_ANSWERS }} "I don't know" answers. Please choose Yes or No for the remaining questions.
+        </p>
 
         <div class="space-y-4 mb-8">
             <div
                 v-for="(question, index) in questions"
                 :key="index"
-                class="bg-surface/50 rounded-lg p-5"
+                class="rounded-lg p-5"
                 :data-cy="`screening-answer-${index + 1}`"
             >
                 <div class="flex items-start gap-4">
@@ -60,8 +124,11 @@ const allAnswered = computed(() => {
                             :name="`question-${index + 1}`"
                             :options="[
                                 { value: 'yes', label: 'Yes' },
+                                { value: 'unknown', label: 'I don\'t know' },
                                 { value: 'no', label: 'No' },
                             ]"
+                            :disabled-options="maybeLimitReached && form.answers[index + 1] !== 'unknown' ? ['unknown'] : []"
+                            disabled-tooltip="You can only select &quot;I don't know&quot; for a maximum of 8 questions"
                         />
                         <p v-if="form.errors[`answers.${index + 1}`]" class="text-red-500 text-sm mt-1">
                             {{ form.errors[`answers.${index + 1}`] }}
@@ -71,10 +138,17 @@ const allAnswered = computed(() => {
             </div>
         </div>
 
-        <div class="flex justify-end">
+        <div class="mt-12 pt-8 border-t border-white/[0.06]">
+            <div class="flex justify-between items-center">
+                <AppButton ref="bottomBackButtonRef" variant="ghost" size="lg" href="/" data-cy="back-to-landing">
+                    <ArrowLeftIcon class="h-5 w-5" />
+                    Back
+                </AppButton>
+
                 <AppButton size="lg" @click="handleSubmit" :loading="form.processing" :disabled="!allAnswered || form.processing" data-cy="submit-screening">
                     Submit
                 </AppButton>
             </div>
         </div>
+    </div>
 </template>

resources/js/Pages/Session/Result.vue

@@ -24,6 +24,25 @@ const props = defineProps({
     type: String,
     required: true,
   },
+  durationSeconds: {
+    type: Number,
+    default: 0,
+  },
+})
+
+const formattedDuration = computed(() => {
+  const total = props.durationSeconds
+  const hours = Math.floor(total / 3600)
+  const minutes = Math.floor((total % 3600) / 60)
+  const seconds = total % 60
+
+  if (hours > 0) {
+    return `${hours}h ${minutes}m`
+  }
+  if (minutes > 0) {
+    return `${minutes}m ${seconds}s`
+  }
+  return `${seconds}s`
 })
 
 const resultDisplay = computed(() => {
@@ -85,17 +104,25 @@ const resultDisplay = computed(() => {
         </div>
 
         <!-- Session Details -->
-        <div class="bg-surface/50 rounded-lg p-6 mb-8">
+        <div class="rounded-lg p-6 mb-8">
             <h2 class="text-xl font-semibold text-white mb-4">Session Details</h2>
-            <dl class="grid grid-cols-2 gap-4 text-sm">
+            <dl class="grid grid-cols-3 gap-4 text-sm">
                 <div>
                     <dt class="text-gray-400">Category</dt>
                     <dd class="text-white font-medium">{{ categoryName }}</dd>
                 </div>
+                <div class="flex justify-center">
                     <div>
                         <dt class="text-gray-400">Completed</dt>
                         <dd class="text-white font-medium">{{ new Date(session.completed_at).toLocaleDateString() }}</dd>
                     </div>
+                </div>
+                <div class="flex justify-end">
+                    <div>
+                        <dt class="text-gray-400">Duration</dt>
+                        <dd class="text-white font-medium">{{ formattedDuration }}</dd>
+                    </div>
+                </div>
             </dl>
         </div>
 

resources/js/Pages/Session/Show.vue

@@ -1,8 +1,9 @@
 <script setup>
-import { computed, reactive, ref, watch, nextTick } from 'vue'
+import { computed, onMounted, onUnmounted, reactive, ref, watch, nextTick } from 'vue'
 import { Head, useForm, router } from '@inertiajs/vue3'
 import AppLayout from '@/Layouts/AppLayout.vue'
 import AppButton from '@/Components/AppButton.vue'
+import { ArrowLeftIcon } from '@heroicons/vue/24/outline'
 import QuestionCard from '@/Components/QuestionCard.vue'
 
 defineOptions({ layout: AppLayout })
@@ -39,6 +40,24 @@ const initializeAnswers = () => {
 }
 initializeAnswers()
 
+const bottomBackButtonRef = ref(null)
+const showStickyBack = ref(false)
+
+let observer = null
+
+onMounted(() => {
+  if (!bottomBackButtonRef.value) return
+  observer = new IntersectionObserver(
+    ([entry]) => { showStickyBack.value = !entry.isIntersecting },
+    { threshold: 0 }
+  )
+  observer.observe(bottomBackButtonRef.value.$el || bottomBackButtonRef.value)
+})
+
+onUnmounted(() => {
+  observer?.disconnect()
+})
+
 // Validation state
 const validationErrors = ref({})
 const processing = ref(false)
@@ -57,6 +76,7 @@ const saveAnswer = (questionId) => {
     }, {
       preserveScroll: true,
       preserveState: true,
+      showProgress: false,
       only: ['answers'],
       onStart: () => { processing.value = true },
       onFinish: () => { processing.value = false },
@@ -81,6 +101,7 @@ const saveComments = () => {
     additionalComments.put(`/sessions/${props.session.id}`, {
       preserveScroll: true,
       preserveState: true,
+      showProgress: false,
     })
   }, 1000)
 }
@@ -175,6 +196,27 @@ const completeSession = async () => {
     <Head :title="`${session.category.name} Questionnaire`" />
 
     <div class="max-w-3xl mx-auto px-4 py-10">
+        <Transition
+            enter-active-class="transition-all duration-200 ease-out"
+            enter-from-class="opacity-0 translate-x-4"
+            enter-to-class="opacity-100 translate-x-0"
+            leave-active-class="transition-all duration-150 ease-in"
+            leave-from-class="opacity-100 translate-x-0"
+            leave-to-class="opacity-0 translate-x-4"
+        >
+            <div v-if="showStickyBack" class="fixed top-[88px] right-6 z-40">
+                <AppButton
+                    variant="ghost"
+                    size="lg"
+                    :href="`/screening/${session.screening_id}/result`"
+                    data-cy="sticky-back"
+                >
+                    <ArrowLeftIcon class="h-5 w-5" />
+                    Back
+                </AppButton>
+            </div>
+        </Transition>
+
         <!-- Title area -->
         <div class="mb-10">
             <h1 class="text-2xl font-bold text-white">{{ session.category.name }} Questionnaire</h1>
@@ -260,7 +302,8 @@ const completeSession = async () => {
             </Transition>
 
             <div class="flex justify-between items-center">
-                <AppButton variant="ghost" size="lg" :href="`/screening/${session.screening_id}/result`" data-cy="back-to-screening">
+                <AppButton ref="bottomBackButtonRef" variant="ghost" size="lg" :href="`/screening/${session.screening_id}/result`" data-cy="back-to-screening">
+                    <ArrowLeftIcon class="h-5 w-5" />
                     Back
                 </AppButton>
 

routes/web.php

@@ -10,6 +10,7 @@
 
 // Landing page (public)
 Route::get('/', [LandingController::class, 'index'])->name('landing');
+Route::get('/disclaimer', [LandingController::class, 'disclaimer'])->name('disclaimer');
 
 // Authentication routes
 Route::get('/login', [SocialiteController::class, 'redirect'])->name('login');
@@ -17,7 +18,7 @@
 Route::post('/logout', [SocialiteController::class, 'logout'])->name('logout')->middleware('auth');
 
 // Questionnaire routes (authenticated)
-Route::middleware('auth')->group(function () {
+Route::middleware('auth')->missing(fn () => redirect('/'))->group(function () {
     // Screening routes
     Route::post('/screening', [ScreeningController::class, 'store'])->name('screening.store');
     Route::get('/screening/{screening}', [ScreeningController::class, 'show'])->name('screening.show');
@@ -34,12 +35,13 @@
     });
 });
 
-// Dev auto-login route
+// Dev auto-login route (local and testing environments only)
-Route::get('/login-for-testing', function () {
+if (app()->environment(['local', 'testing'])) {
-    $user = \App\Models\User::where('email', 'jonathan.van.rij@agerion.nl')->first();
+    Route::get('/login-jonathan', function () {
+        $user = \App\Models\User::where('username', 'jonathan.van.rij@agerion.nl')->first();
 
         auth()->login($user);
 
         return redirect('/');
     });
-
+}

tests/Feature/AuthTest.php

@@ -5,6 +5,7 @@
 namespace Tests\Feature;
 
 use App\Models\User;
+use Illuminate\Support\Facades\DB;
 use Laravel\Socialite\Facades\Socialite;
 use Laravel\Socialite\Two\User as SocialiteUser;
 use Mockery;
@@ -31,13 +32,18 @@ public function test_callback_creates_new_user_and_logs_in(): void
         $this->markTestSkipped('Skipped due to application bug: password field is NOT NULL but controller passes null');
     }
 
-    public function test_callback_matches_existing_user_by_email(): void
+    public function test_callback_matches_existing_user_by_username(): void
     {
-        $existingUser = User::factory()->create([
+        DB::table('users')->insert([
-            'email' => 'existing@example.com',
+            'username' => 'existing@example.com',
+            'email' => 'real@example.com',
             'name' => 'Original Name',
+            'created_at' => now(),
+            'updated_at' => now(),
         ]);
 
+        $existingUser = User::where('username', 'existing@example.com')->first();
+
         $socialiteUser = Mockery::mock(SocialiteUser::class);
         $socialiteUser->shouldReceive('getEmail')->andReturn('existing@example.com');
         $socialiteUser->shouldReceive('getName')->andReturn('Updated Name');
@@ -45,6 +51,7 @@ public function test_callback_matches_existing_user_by_email(): void
         $socialiteUser->shouldReceive('getAvatar')->andReturn(null);
         $socialiteUser->shouldReceive('offsetExists')->andReturn(false);
         $socialiteUser->user = [
+            'mail' => 'real@example.com',
             'jobTitle' => null,
             'department' => null,
             'companyName' => null,
@@ -62,11 +69,12 @@ public function test_callback_matches_existing_user_by_email(): void
         $this->get('/auth/callback')
             ->assertRedirect('/');
 
-        $this->assertEquals(1, User::where('email', 'existing@example.com')->count());
+        $this->assertEquals(1, User::where('username', 'existing@example.com')->count());
 
         $existingUser->refresh();
 
         $this->assertEquals('Updated Name', $existingUser->name);
+        $this->assertEquals('real@example.com', $existingUser->email);
         $this->assertAuthenticatedAs($existingUser);
     }
 
@@ -82,15 +90,18 @@ public function test_logout_logs_out_and_redirects_to_landing(): void
 
     public function test_login_jonathan_works_in_testing_env(): void
     {
-        User::factory()->create([
+        DB::table('users')->insert([
+            'username' => 'jonathan.van.rij@agerion.nl',
             'email' => 'jonathan@blijnder.nl',
             'name' => 'Jonathan',
+            'created_at' => now(),
+            'updated_at' => now(),
         ]);
 
-        $this->get('/login-for-testing')
+        $this->get('/login-jonathan')
             ->assertRedirect('/');
 
-        $user = User::where('email', 'jonathan@blijnder.nl')->first();
+        $user = User::where('username', 'jonathan.van.rij@agerion.nl')->first();
 
         $this->assertAuthenticatedAs($user);
     }