Some checks are pending
offline / test (push) Waiting to run
Match CS/sales/accounting/access-staff to the portal indigo system with dollar amounts, skip links, and empty states. Fleet replica actions move into overflow menus, roles become chips, Docs become cards, and the header copy reflects the 0.0.0.0 bind. Simulator uses the same shell (orange only for faults). Portal API keys are masked; admin customers edit in a drawer. Catalog uses system-ui. New UI-Docs repo holds screenshots, usage notes, and UI-REVIEW.pdf.
1.9 KiB
1.9 KiB
Action log
2026-09-11 — bootstrap
- Created this repo to record decisions while executing cleanup items 1–5 (and a second pass on 2–5).
- Assumption: single developer, lab only; breaking changes allowed.
Step 1 — account-balance is the prepaid source of truth
- Persist books to
BOOKS_PATH(atomic JSON). - Mutations go through
balance.adjust/usage.recorded; edge cachebalanceCentsis updated from the books reply only. - Local cache mutate only when
NATS_URLandACCOUNT_BALANCE_URLare both unset (tests).
Step 2 — identity join
zappier-identitymailbox:verae.identity.bind/verae.identity.lookup.- Portal + middleware tenants store
veraeUserId; JWT never public.
Step 3 — access planes are the public doors
- zappier-edge binds loopback (
127.0.0.1:3000). - Public: access-web
:3021, access-api:3022, access-leaf:3023, access-zapier:3024, access-staff:3025.
Step 4 — leaf hardening
verae-nats-accountsholds nats.conf + subject policy.- Leaf token required; billing subjects denied in policy file and access-leaf.
Step 5 — fleet spawn
- Prefer local machines for HTTP
spawn.commandservices. - Disable lan-134 unless
FLEET_ENABLE_LAN134=1. - SSH spawn timeout 8s; failed hosts skipped.
2026-09-11 — UI design-system pass
- Restyled CS/sales/accounting/access-staff to portal indigo; dollars + names.
- Fleet ⋯ menus, role chips, Docs cards, 0.0.0.0 copy, simulator indigo (orange = faults).
- Portal masked API key; admin customer drawer; empty invoice illustrations.
- Catalog system-ui. New independent repo UI-Docs (walkthrough, screenshots, UI-REVIEW.pdf).
Second pass (2–5)
- Identity used from portal when
IDENTITY_URLset. - Leaf loads allow-list from nats-accounts
policy.json. - Staff plane is a first-class mailbox (
verae-access-staff). - jobs.events mailbox process
verae-jobs-events(passthrough + count).