marchon/master-zapier-plan-draft
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1

Add internal staff IAM: named users, roles, and management permissions.
Some checks are pending
offline / test (push) Waiting to run
Details

Browse source 
verae-staff-iam (:3028) is the people directory — owner, billing-admin,
cs, sales, accounting, operator, viewer — with scrypt passwords, sessions,
and an audit log. Admin console login uses it when STAFF_IAM_URL is set
and hides tabs the account cannot use. CS/sales/accounting/staff/fleet
check permissions such as cs.credit and fleet.operate. Shared staff key
remains only as a fallback when IAM is unset.
This commit is contained in:
George Lambert 2026-09-11 18:36:12 -04:00
parent 2740d51446
commit d299d245e8
41 changed files with 1337 additions and 52 deletions
Download patch file Download diff file Expand all files Collapse all files

3
packages/verae-fleet/services/access-staff.json
View file

@ -16,7 +16,8 @@
"env": {
"PORT": "3025",
"AUTHZ_URL": "http://127.0.0.1:3020",
"ACCOUNT_BALANCE_URL": "http://127.0.0.1:3010"
"ACCOUNT_BALANCE_URL": "http://127.0.0.1:3010",
"STAFF_IAM_URL": "http://127.0.0.1:3028"
},
"nats": { "in": [], "out": ["verae.access.authz.check"] }
}

3
packages/verae-fleet/services/accounting-export.json
View file

@ -17,7 +17,8 @@
"PORT": "3013",
"ZAPPIER_ADMIN_URL": "http://127.0.0.1:3000",
"ACCOUNT_BALANCE_URL": "http://127.0.0.1:3010",
"NATS_URL": "nats://127.0.0.1:4222"
"NATS_URL": "nats://127.0.0.1:4222",
"STAFF_IAM_URL": "http://127.0.0.1:3028"
},
"nats": { "in": [], "out": ["verae.billing.statement.get"] }
}

3
packages/verae-fleet/services/customer-service.json
View file

@ -18,7 +18,8 @@
"ZAPPIER_ADMIN_URL": "http://127.0.0.1:3000",
"ACCOUNT_BALANCE_URL": "http://127.0.0.1:3010",
"NATS_URL": "nats://127.0.0.1:4222",
"AUTHZ_URL": "http://127.0.0.1:3020"
"AUTHZ_URL": "http://127.0.0.1:3020",
"STAFF_IAM_URL": "http://127.0.0.1:3028"
},
"nats": {
"in": [],

3
packages/verae-fleet/services/sales-pricing.json
View file

@ -18,7 +18,8 @@
"ZAPPIER_ADMIN_URL": "http://127.0.0.1:3000",
"ACCOUNT_BALANCE_URL": "http://127.0.0.1:3010",
"NATS_URL": "nats://127.0.0.1:4222",
"AUTHZ_URL": "http://127.0.0.1:3020"
"AUTHZ_URL": "http://127.0.0.1:3020",
"STAFF_IAM_URL": "http://127.0.0.1:3028"
},
"nats": { "in": [], "out": ["verae.billing.statement.get"] }
}

20
packages/verae-fleet/services/staff-iam.json Normal file
View file

@ -0,0 +1,20 @@
{
"id": "staff-iam",
"title": "Internal staff IAM (users, roles, permissions)",
"kind": "http",
"package": "verae-staff-iam",
"role": "staff-iam",
"managed": true,
"runtime": "HTTP :3028",
"health": { "type": "http", "path": "/health", "timeoutMs": 2000 },
"ports": { "healthBase": 3028 },
"spawn": {
"cwd": "../verae-staff-iam",
"command": "node",
"args": ["src/server.js"]
},
"env": {
"PORT": "3028"
},
"nats": { "in": [], "out": [] }
}

1
packages/verae-fleet/services/zappier-edge.json
View file

@ -15,6 +15,7 @@
},
"env": {
"PORT": "3000",
"STAFF_IAM_URL": "http://127.0.0.1:3028",
"BIND": "127.0.0.1",
"ZAPPIER_UPSTREAM": "http://127.0.0.1:3100",
"CS_SERVICE_URL": "http://127.0.0.1:3011",