Phase 2: core domain, policy engine, packet API, Clerical screen

Migration 0003: projects, aliases, renumbers, units, packets and every child table,
change orders, assets, documents, ITPs, station limits, department weld flag.
Policy package: Principal, PacketState, Action rules, custody, preconditions,
CO hold, order of checks, can/blocked/holder on reads. docs/POLICY.md with the
tightenings table for Seth. Write pipeline: FOR UPDATE, CAS on status and dept,
If-Match row versions, server-assigned numbers, field CAS, version bump, packet
log, audit, NOTIFY, signatures, IT reasons, filed lock and HMAC seal.
API: /api/packets (header, transitions, work orders, pages, docs, move, remove,
BOM, shorts, welds, heat tags, heat table, stage, checklist, clock, warehouse
stage, Q.C., change orders, log, seal), /api/projects, /api/units, /api/assets,
/_blob. Frontend: Clerical home, projects and units, packet page with pdf.js
and QR codes, hand draft, heat map, send to warehouse, department or Q.C.
Tests: policy matrix, API, concurrency, schema, projects; Playwright Clerical
draft scenario. Verified on docker-1 with the CI stack and the Samba DC.

Co-Authored-By: Claude Fable 5.1 <[email protected]>

tests/server/pshelpers.py

@@ -12,6 +12,7 @@ import pytest
 from packetstation.settings import Settings
 
 TEST_SESSION_KEY = "test-session-key-0123456789abcdef0123456789"
+TEST_SEAL_KEY = "test-seal-key-fedcba9876543210fedcba9876543210"
 ORIGIN_HEADERS = {"Origin": "http://testserver", "X-Requested-With": "PacketStation"}
 
 
@@ -23,6 +24,12 @@ def make_settings(tmp: Path, **over: Any) -> Settings:
             key_file.parent.mkdir(parents=True, exist_ok=True)
             key_file.write_text(TEST_SESSION_KEY + "\n")
         over["session_key_file"] = key_file
+    if "seal_key_file" not in over:
+        seal_file = tmp / "seal_key"
+        if not seal_file.exists():
+            seal_file.parent.mkdir(parents=True, exist_ok=True)
+            seal_file.write_text(TEST_SEAL_KEY + "\n")
+        over["seal_key_file"] = seal_file
     values: dict[str, Any] = {
         "_env_file": None,
         "stack": "ci",