Files

T

spencermandClaude Fable 5.1 0b663bb2b2 Phase 0: repo skeleton, image, compose stacks, doctor, migration runner, frontend shell

New repo for the Packet Station rebuild (Python 3.12, FastAPI, PostgreSQL 16,
React, VisualKit, MFilesKit, Docker Compose on docker-1). Nothing is migrated
from the M: install.

- CLAUDE.md with the safety rules, README, CHANGELOG, docs (BRIEF, PLAN,
  SECURITY rewritten for the server with the requirement ID table, DEPLOY,
  stubs for FEED, POLICY, SCHEMA, GO-LIVE, PAPER-FALLBACK).
- packetstation CLI: app, worker (heartbeat stub), migrate, doctor, version,
  healthcheck. Settings from the environment with secret files. Stack guard
  (test never points at VISUAL production). Security headers and CSP.
  Trusted proxy resolved by name. JSON logs with redaction.
- Migration runner and 0001_base: settings, append-only audit_events with
  hash chain, ps_notify, grants for ps_app.
- Multi-stage Dockerfile (ODBC Driver 18, PESCO libraries from the Gitea
  index only), compose base, proxy overlay for npm_default, CI overlay,
  postgres initdb roles, env examples, NPM proxy host notes, Gitea Actions.
- Frontend: Vite, React, TypeScript, the PESCO dark theme ported with
  self-hosted fonts, placeholder sign-in and home.
- Verified on docker-1: image builds, CI stack comes up healthy, doctor
  database checks pass, 77 server tests pass against PostgreSQL.

Co-Authored-By: Claude Fable 5.1 <[email protected]>

2026-10-15 23:08:47 -06:00

811 B

Raw Blame History

Samba AD DC for CI (phase 1)

Placeholder. Phase 1 builds a throwaway Samba Active Directory domain controller here so CI and local end-to-end runs exercise real LDAP over TLS.

Planned contents:

Dockerfile from debian:bookworm-slim with samba, provisioned as PSTEST.LOCAL.
Its generated CA exported to deploy/ci/ci-secrets/ca.pem, which becomes LDAP_CA_BUNDLE.
seed.sh: the OU tree, the 50 PS-* groups from packetstation ad-groups --list (one left out and one extra, to test the reconcile report), and test users per role. Also multi-role, nested, disabled, no-employeeID, duplicate-employeeID and no-role users.

Open question 15: whether the Gitea runner can run this container (overlayfs xattrs, possibly SYS_ADMIN). If not, CI uses a runner with the Docker socket on docker-1.

811 B Raw Blame History

Samba AD DC for CI (phase 1)

811 B

Raw Blame History