homeos

Commit Graph

Author	SHA1	Message	Date
HomeOS Bootstrap	2a39f1cc4e	Fix R15: require prod hardening in docs; drop N+1 in warnings - Document that production must set APP_ENV=production + APP_DEBUG=false (else exceptions leak and the demo household seeds); note it in .env.example too. - HomeStatus::warnings now iterates devices → entities using the already-loaded device, instead of $entity->device, removing an N+1 on dashboard render. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-07-17 22:03:20 +02:00
HomeOS Bootstrap	1b69c39a93	Fix R15 findings: fresh-clone bootstrap + never seed a blank admin password - Document the first-run path (deps/assets/key/migrate aren't auto-installed because vendor/node_modules/public-build are gitignored): add docker/app/bootstrap.sh and a README with the exact sequence to run before `docker compose up`. - Seeder: fall back with `?:` so a present-but-empty HOMEOS_ADMIN_PASSWORD can never create a blank-password admin; .env.example ships a non-empty dev value. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-07-17 21:24:10 +02:00
HomeOS Bootstrap	beac04ec51	Phase 1: bootstrap — Docker stack, Laravel 13, design system, auth Foundation for HomeOS (handoff §13.1). Verified in a real browser (R12): HTTP 200, zero console errors, zero failed requests, breakpoints 1280/768/375, no leaked template/lang literals. Feature test suite green (7 passing). Stack (locked, handoff §12): Laravel 13, Livewire v3 (class-based, no Volt), Tailwind v4 (@theme, no config), PostgreSQL 17 + TimescaleDB, Redis + Horizon, Reverb (private channels, proxied same-origin via nginx), Vite. Everything runs in containers (R8); one app image shared by app/horizon/scheduler/reverb. - docker: app (php-fpm 8.4 + nginx + supervisor), db (timescale pg17), redis, reverb, horizon, scheduler; env-driven ports; HOST_UID/GID from id nexxo - design system ported verbatim from design-mockup.html into @theme (§8); self-hosted Plus Jakarta Sans + IBM Plex Mono woff2 (R14) - Blade component kit: icon, panel, kpi, status-dot/pill, badge, toggle, room-card, device-chip, sidebar, topbar; app + guest layouts (mobile drawer) - auth: class-based Livewire Login (throttled) + Dashboard; English routes, German UI; full DE/EN localization (R16) - rules.md + CLAUDE.md; admin user seeded from gitignored .env Deferred by design: php-mqtt/laravel-client (Phase 3), mosquitto/mqtt-listener (Phase 3), discovery sidecar (Phase 4). R15 (Codex review) pending user `codex login`. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-07-17 21:06:20 +02:00

Author

SHA1

Message

Date

HomeOS Bootstrap

2a39f1cc4e

Fix R15: require prod hardening in docs; drop N+1 in warnings

- Document that production must set APP_ENV=production + APP_DEBUG=false (else
  exceptions leak and the demo household seeds); note it in .env.example too.
- HomeStatus::warnings now iterates devices → entities using the already-loaded
  device, instead of $entity->device, removing an N+1 on dashboard render.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-07-17 22:03:20 +02:00

HomeOS Bootstrap

1b69c39a93

Fix R15 findings: fresh-clone bootstrap + never seed a blank admin password

- Document the first-run path (deps/assets/key/migrate aren't auto-installed
  because vendor/node_modules/public-build are gitignored): add
  docker/app/bootstrap.sh and a README with the exact sequence to run before
  `docker compose up`.
- Seeder: fall back with `?:` so a present-but-empty HOMEOS_ADMIN_PASSWORD can
  never create a blank-password admin; .env.example ships a non-empty dev value.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-07-17 21:24:10 +02:00

HomeOS Bootstrap

beac04ec51

Phase 1: bootstrap — Docker stack, Laravel 13, design system, auth

Foundation for HomeOS (handoff §13.1). Verified in a real browser (R12):
HTTP 200, zero console errors, zero failed requests, breakpoints 1280/768/375,
no leaked template/lang literals. Feature test suite green (7 passing).

Stack (locked, handoff §12): Laravel 13, Livewire v3 (class-based, no Volt),
Tailwind v4 (@theme, no config), PostgreSQL 17 + TimescaleDB, Redis + Horizon,
Reverb (private channels, proxied same-origin via nginx), Vite. Everything runs
in containers (R8); one app image shared by app/horizon/scheduler/reverb.

- docker: app (php-fpm 8.4 + nginx + supervisor), db (timescale pg17), redis,
  reverb, horizon, scheduler; env-driven ports; HOST_UID/GID from id nexxo
- design system ported verbatim from design-mockup.html into @theme (§8);
  self-hosted Plus Jakarta Sans + IBM Plex Mono woff2 (R14)
- Blade component kit: icon, panel, kpi, status-dot/pill, badge, toggle,
  room-card, device-chip, sidebar, topbar; app + guest layouts (mobile drawer)
- auth: class-based Livewire Login (throttled) + Dashboard; English routes,
  German UI; full DE/EN localization (R16)
- rules.md + CLAUDE.md; admin user seeded from gitignored .env

Deferred by design: php-mqtt/laravel-client (Phase 3), mosquitto/mqtt-listener
(Phase 3), discovery sidecar (Phase 4).

R15 (Codex review) pending user `codex login`.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-07-17 21:06:20 +02:00

3 Commits (2a39f1cc4ea76ca73ce94eb2c0d08356c0831945)