mindtickle-reference-architecture

# MindTickle Reference Architecture ## Overview Design a multi-tenant integration layer for the MindTickle sales enablement platform. Strict tenant data isolation is the primary driver, enforced at the database, cache, and queue levels so training data, quiz scores, and readiness analytics never cross organizational boundaries. ## Instructions 1. Provision the prerequisites below with Row-Level Security enabled in PostgreSQL. 2. Configure SCIM 2.0 webhook endpoints to receive HR system user events. 3. Deploy the enablement service with tenant-scoped database connections. 4. Start the SCIM consumer and analytics aggregator as separate worker processes. 5. Validate tenant isolation by running cross-tenant query tests against RLS policies. ## Prerequisites - Node.js 18+, TypeScript 5, PostgreSQL 15 with RLS, Redis 7, RabbitMQ or SQS - MindTickle API key with `users:read`, `courses:read`, `analytics:read` scopes - SCIM 2.0 endpoint credentials for user provisioning ## Architecture Diagram ``` HR System --> SCIM Webhook Ingester --> User Sync Service --> MindTickle API | Client --> API Gateway --> EnablementService --+--> Analytics Aggregator | Tenant-scoped PostgreSQL (RLS) ``` ## Service Layer ```typescript class EnablementService { constructor( private api: MindTickleApiClient, private db: TenantScopedStore, private events: EventPublisher ) {} async sync...