master-zapier-plan-draft/packages/zapier-decisions/TODO.md
George Lambert baaf1c2275
Some checks are pending
offline / test (push) Waiting to run
Add verae-keep: host supervisor with watch+guard on NS1.
Restarts crashed units unless the admin console paused or stopped
them. Fleet writes per-instance intent.json. Tested on 138:
crash-restart, pause-hold, watch respawn of keep.
2026-09-11 19:25:11 -04:00

932 B

Open todos

  • Live api.veraetime.net with MOCK_VERAE=false and admin bind credentials.
  • NATS nkeys/mTLS on a real three-node cluster (accounts file is the lab stand-in).
  • Exclusive JetStream consumer for verae.zapier.jobs.events on verae-jobs-events (JOBS_EVENTS_EXCLUSIVE=1; middleware skips the router).
  • Auth on CS/sales/accounting HTML via verae-staff-session (STAFF_AUTH=1).
  • Staff IAM: named users, roles, permissions (verae-staff-iam :3028).
  • Zapier Platform push of a private app.
  • Move portal static files fully into verae-access-web (/portal/ public door; API proxied to loopback edge).
  • Turn IAM on for the running lab (fleet STAFF_IAM_URL + restart).
  • IAM hardening: JSON sessions, login rate-limit, JSON 401 as well as HTML 302, credit principal = IAM username.
  • Host keep-alive (verae-keep) on NS1 with watch+guard; honors admin pause/stop.