Operations · partner / staff

🌉 Bridge

CLA's per-client file-sharing + ANAF SPV / e-gov submission platform. Canonical entry point for the whole organisation.
Legacy VM ↗
Probing Bridge…

What Bridge does

Per-client file sharing + ANAF SPV submission. The platform Tax Compliance + BPS Accounting + BPS Payroll use to receive monthly fiscal input from clients and to file declarations.

Legacy VM ↗

Recent change · 4-May-2026

Bridge moved from bridge.mirus-group.eu to bridge.cla.com.ro. The old URL is permanently gone (DNS lost at registrar). Clients + bookmarks must be updated. Ctrl+F5 first time you open the new URL — if that's not enough, use the Clear Cache helper below.

🧹 Clear cache & SW (1-click) 📨 Outage triage form

Owners

BI & Automation · Bogdan Buzatu (TL) · Maria Clipa · Alina Artemenko · Hub-side integration + ongoing ownership
Ionuț Zeche · CLA · partner escalation
Legacy VM-side: Bogdan Coșa (RezolvIT, OUT) · Cosmin Stahie (consult, OUT) — VM .68 decommissioning post-cutover 7-Jun.

This week

  • Synthetic E2E monitor live (POST login probe)
  • Source code handover from Cosmin → CLA repo
  • Cloudflare Cache Rule (HTML no-cache, hashed JS long-cache)
  • Angular rebuild w/ environment.prod.ts

Phase 4 roadmap

Migrate Bridge logic into the Hub natively over 4 weeks. Target: eliminate Bridge as a separate VM, reduce attack + ownership surface to one system.

Live probes

How to read this

  • Frontend — bridge.cla.com.ro returns 200. If down, page is unreachable.
  • CORS preflight — OPTIONS on /v1/auth/login returns 204 with Access-Control-Allow-Origin. Required for browser-side login.
  • End-to-end — POST login reaches FastAPI. Pass = JSON response. Fail = nginx text/plain 404 (the exact 4-May failure mode).
View mode:
data live from bridge_legacy · ingested 2026-05-21 16:30 RO · 348 clients · 463 users · 8 certs

Documents

checking your access…
— select a company to begin —
0 selected
Index Name Created Modified By Action
→ Click here to pick a company
then pick a practice · then pick a folder to see files

👥 Client + Staff Onboarding / Offboarding checklist generators with preflight checks · pre-cutover safe · 12-step plans per action

Each button opens a form modal · runs preflight checks against bridge_legacy data · returns step-by-step checklist with owner + deadline per step. Built after Ana Tifigiu audit · scaled the lessons firm-wide. Read-only until cutover 7-Jun · checklists are operational guidance · actual mutations land post-cutover via paired write endpoints.

🔒 Onboarding / offboarding actions are restricted to the BI team + Ionut (2026-05-23 lockdown). Email BI with what you need and they will run the checklist.

🔁 SharePoint sync · Import scan / Export to SP Bridge ↔ CLARomania-Operations · Sites.Selected grant · architectural discipline gate enforced on every write

Import scan = recursive folder inventory read-only · 4-level deep default. Export = write XLSX practice export back to SP at chosen path. Validation gate = check a filename against 8 hard-reject patterns BEFORE upload.

🗂️ Duplicate file scanner firm-wide · 348K files · detects (N) suffix dups + pathological filenames + worst offenders

loading…

Top duplicate clusters (canonical names with most (N) variants)

⚠ Pathological filenames

By practice

By uploader (top 15)

By company (top 15)

🔐 ANAF SPV cert waterfall 8 certs sorted by expiry · operational dependency + backup plan + data integrity flags

loading…

📊 Firm-wide ANAF filings · churn radar last 30d daily volume · top filers · stale-clients alert · all 348 clients in scope

loading…

Daily volume (last 30d)

Top 15 filers (last 90d)

⚠ Stale clients · churn radar (≥5 historic filings · 0 in last 60d)

🏛️ Practice dashboard pick a practice · see your world in one pane · 30-day window

🔍 Search files across all 348K Bridge files min 2 chars · searches name + path · enriched with company + practice

Bridge cutover 7-Jun · sourced from bridge_legacy schema · ingested 2026-05-21 16:30 RO

Live data from the VM Bridge pg_dump (41 tables, 935 MB, 1:1 ingest). The UI here is the read view; full CRUD lands as Phase 4 completes. Source-of-truth still the VM Bridge until cutover; Hub becomes canonical at 7-iun.

Clients
Staff (active)
ANAF Certs
Cert Alerts

Clients · 348 in VM Bridge click client name to see folders + recent ANAF filings

NameCUIContactANAF CertCert StatusCert Expiry
loading…

👤 My Bridge work last 14 days · what files you touched + activity events · per-staff view

loading…

Files I touched

My activity events

Staff · 463 in VM Bridge active + internal CLA users · pwd hashes NOT returned

EmailNameActiveInternalAdmin
loading…

ANAF SPV Certificates only 8 certs across 348 clients · cert reuse pattern

HolderSerialStatusExpiryActive Clients UsingLast ANAF refresh
loading…

👥 Users internal staff · client users · live AD sync · ⋮ row actions to update/archive/create · inactive users live in Archive

Loading…

Bridge clients v1: manual maintenance · v2 (queued): auto-sync from Bridge backend

NameCUIPracticesUsersE-sign tokenSP folderStatusCert expiry

Add / update client partner-level only

SPV · ANAF gateway live · sourced from bridge_legacy.certificate + Latitude

Loading…

e-gov · Latitude integration live · /api/latitude-health

Loading…

SPV inbox · ANAF Lista Mesaje live · /api/anaf-messages

Loading…

Filing actions prepare / submit · partner-level

⚠ Change request protocol

View access is firm-wide — anyone with a CLA Hub login can read Users, Clients, Practices, Health, Manual, Q&A, Audit log.
Edit access is restricted to BI Team only. Operationally only Maria Clipa and Alina Artemenko hold the keys to mutate anything in Bridge — provisioning users, archiving clients, renaming practices, editing the manual, answering Q&A.
Any change must be requested in writing via the Hub Feedback Hub (/feedback/) or by emailing maria.clipa@cla.com.ro + alina.artemenko@cla.com.ro with bogdan.buzatu@cla.com.ro (BI TL) on CC. No verbal or chat-only requests — every mutation must leave a written trail.

Permission model

CapabilityHub levelNotes
Open Bridge (read + use)staff+Anyone with a CLA Hub login
View Users, Clients, Practices, Health, Manual, Q&A, Auditstaff+Read-only · firm-wide
Edit Users / Clients / Practices / Manual / Q&ABI Team · written requestOperational owners: Maria Clipa + Alina Artemenko. All mutations gated server-side. Submit request via /feedback/ or email both + CC Bogdan Buzatu (BI TL).
Architectural escalation / new featureBI TLBogdan Buzatu approves scope before Maria/Alina execute
Cloudflare DNS / cache purgeRezolvITCatalin / Maria · escalate via Suport RezolvIT
SSH VM .68 / nginx / DockerdecommissioningVM .68 retired post-cutover 7-Jun · Bridge runs on Hub (Vercel + Neon)
Backend Bridge codeBI & AutomationOwned by BI team (Bogdan Buzatu TL · Maria Clipa · Alina Artemenko) — Hub-side codebase, all writes go through architectural discipline gate

Hub access by role read-only mirror of /admin/access-matrix/

Bridge is reachable to anyone with a CLA Hub login (staff and above). Edits are restricted to the BI Team (Maria + Alina, with Bogdan as TL). To grant or revoke specific Hub access, go to /admin/access-matrix/.

Technical Manual

Loading…

Q&A · FAQ

Add / update Q&A entry partner-level only

🏛️ Practices all CLA practices · live stats · clients · internal users · client users

Loading…

🧹 Stale clients no upload activity in the last · grouped by practice

Loading…

Bridge audit log last 30 probes · /api/bridge-monitor stores one row per probe in hub_audit_log

WhenVerdictFrontendAPICORSE2EIssuesActor
Loading…