Ship async-ops foundation + 9 major features + local Docker dev harness - #13

Open

alexandre433 wants to merge 199 commits into

crivion:mainfrom

alexandre433:main

Commits on Jun 24, 2026

docs: add local test/dev environment design spec

alexandre433
and
claude
committed
be2ac35
docs: add local test/dev environment implementation plan

alexandre433
and
claude
committed
67e3c47
test: run Pest on SQLite + env-overridable script path for local dev

alexandre433
and
claude
committed
a5ab897
build: systemd-enabled Ubuntu 24.04 image with full Laranode stack

alexandre433
and
claude
committed
91f8d8b
docs: revise tooling-location decision to committed local-dev/

alexandre433
and
claude
committed
15e0c1a

Commits on Jun 25, 2026

build: clean apt lists in Dockerfile layers

alexandre433
and
claude
committed
d422671
feat(local-dev): env config + Pebble-aware SSL manager

alexandre433
and
claude
committed
0acb1aa
feat(local-dev): idempotent runtime provisioning entrypoint

alexandre433
and
claude
committed
5d8a675
fix(local-dev): entrypoint sentinel guard + shell-interp admin seed

alexandre433
and
claude
committed
c21230b
feat(local-dev): compose for systemd box + opt-in Pebble sidecars

alexandre433
and
claude
committed
32fcf4f
feat(local-dev): Makefile task runner + verified full boot

alexandre433
and
claude
committed
cfd8e14
fix(local-dev): single-line Makefile recipes + force .env on provision

alexandre433
and
claude
committed
9d99b60
fix: guard missing notify key + rename-dir test uses local adapter

alexandre433
and
claude
committed
05fbc41
fix(test): mock Process in AccountsTest to avoid sudo dependency

alexandre433
and
claude
committed
7012a3c
docs: document local-dev Docker workflow + Windows PowerShell requirement

alexandre433
and
claude
committed
be679ec
fix(local-dev): static IP for laranode + disable MSYS path conversion

alexandre433
and
claude
committed
5d4d182
docs: complete the Windows/MSYS warning in CLAUDE.md

alexandre433
and
claude
committed
0ccff51
fix(local-dev): address final-review findings

alexandre433
and
claude
committed
069f883
Merge local-dev-env: local Docker systemd test environment
alexandre433
committed
a28ec8f
docs: agreed Laranode feature roadmap (multi-cycle)

alexandre433
and
claude
committed
386c935
docs: design spec for platform-async-progress (sub-project #1)

alexandre433
and
claude
committed
c0c1509
docs(roadmap): add notifications system + user-facing analytics

alexandre433
and
claude
committed
ea766f1
docs: implementation plan for platform-async-progress

alexandre433
and
claude
committed
9136dc7
docs(spec): add front-end testing (Vitest+RTL component/hook + Playwright E2E smokes)
alexandre433
committed
1f4dbbb
docs(plan): add front-end test harnesses (Vitest+Playwright) + Vitest tests for Task 7

alexandre433
and
claude
committed
eb14110
test(frontend): add Vitest + React Testing Library harness

alexandre433
and
claude
committed
febb867
test(e2e): add Playwright harness + login/dashboard/websites smokes
alexandre433
committed
9ebe6d9
test(e2e): assert a concrete websites-page element (not body text)

alexandre433
and
claude
committed
621f847
feat(operations): operations table + model (scopeMine, prunable)
alexandre433
committed
da41f46
feat(operations): OperationUpdated event + channel auth + lifecycle methods
alexandre433
committed
8d1c610
test(operations): assert broadcast dispatch + payload in lifecycle tests

alexandre433
and
claude
committed
af5a2ac
feat(operations): abstract OperationJob base (run/emit + lifecycle + failure)
alexandre433
committed
1bceaf0
feat(ssl): run SSL generate as an async operation with live output
alexandre433
committed
f7434e5
fix(ssl): don't swallow dispatch errors; test job failure directly

alexandre433
and
claude
committed
d1262e8
feat(operations): admin operations audit page
alexandre433
committed
3bfb466
feat(operations): paginate navigation on the audit page

alexandre433
and
claude
committed
d736820
feat(platform): scheduler hook + daily operations prune
alexandre433
committed
6437f08
feat(ui): live operation progress (hook + component) + SSL toggle streaming + Vitest tests
alexandre433
committed
1315a83
fix(ui): onDone via useEffect, assert it, scoped channel cleanup, enable-path error catch

alexandre433
and
claude
committed
dd646cb
fix: final-review items (onDone fire-once, operations nav link, strip path comments)

alexandre433
and
claude
committed
ff018e9
test(operations): assert schedule via schedule:list (fix full-suite isolation failure)

alexandre433
and
claude
committed
73444c9
chore: gitignore Playwright output dirs (test-results, playwright-report)

alexandre433
and
claude
committed
4f95925

Commits on Jun 26, 2026

Merge feature/platform-async-progress: async operations + live progress + audit

alexandre433
and
claude
committed
5d4e743
docs(roadmap): promote 6 deferred features to Phase 6 + capture full stubs

alexandre433
and
claude
committed
82d5ce2
docs(roadmap): reconcile dev-branch features + renumber

alexandre433
and
claude
committed
2129af5
Merge branch 'main' into development
alexandre433
committed
352cb14
docs(plans): draft design specs + implementation plans for 5-feature tranche

alexandre433
and
claude
committed
9a99d12
docs(review): adversarial review findings for the 5-feature tranche

alexandre433
and
claude
committed
707e1cc
docs(plans): revise tranche per review - fixes + defaults + trim

alexandre433
and
claude
committed
87a7a4d
feat(db): add engine column to databases table + backfill

alexandre433
and
claude
committed
86c5a1d
feat(config): add db_engines map + mysql_admin/mariadb_admin/pgsql_admin connections

alexandre433
and
claude
committed
a22d1b9
feat(databases): add DatabaseEngineDriver contract + DTOs (DatabaseSpec, DatabaseStats, EngineCapabilities)

alexandre433
and
claude
committed
59ee19e
feat(database): add MysqlDriver with SQL injection protections

alexandre433
and
claude
committed
389f1a6
feat(db): add MariaDbDriver and PostgresDriver (Task 5)

alexandre433
and
claude
committed
d923ae8
test(task5): fix PostgresDriverTest — assert stdin and verify ordering

alexandre433
and
claude
committed
f35cba9
feat(databases): EngineManager + DatabaseServiceProvider (Task 6)

alexandre433
and
claude
committed
c830cc4
feat(database): Task 7 — Create/Update/Delete/GetStats services + Database factory

alexandre433
and
claude
committed
dc0b25d
fix(task7): add missing GetDatabasesWithStatsException, remove double-encryption, assert password roundtrip

alexandre433
and
claude
committed
5251ea3
feat(db): DatabasesController + engine-aware FormRequests + databases.* routes

alexandre433
and
claude
committed
61811fd
test(routes): add RouteTest for databases.* and mysql.* route registration

alexandre433
and
claude
committed
368460c
feat(ui): Databases pages with engine-aware create/edit forms

alexandre433
and
claude
committed
3efa58d
feat(task11): Postgres system infrastructure + integration tests

alexandre433
and
claude
committed
620883a
fix(task-11): resolve all blocking reviewer issues in postgres infrastructure

alexandre433
and
claude
committed
00184d6
refactor: remove old MySQL namespaces + shim MysqlController + update nav

alexandre433
and
claude
committed
cba6026
fix(security): validate all interpolated identifiers in db drivers + pg script

alexandre433
and
claude
committed
d8c49b9
fix(review): wire postgres encoding/locale + isolate stats cache in tests + drop dead Mysql pages

alexandre433
and
claude
committed
4376de8
Merge feature/db-relational-engines into development

alexandre433
and
claude
committed
f3a5c06
feat(backups): add flysystem-aws-s3-v3 + backups disk in filesystems config

alexandre433
and
claude
committed
2344b3a
feat(backups): Task 1 — migrations, Backup/ScheduledBackup models, factories, tests

alexandre433
and
claude
committed
5de4517
feat(backups): BackupEngineDriver interface + MysqlBackupDriver + BackupEngineManager (Task 2)

alexandre433
and
claude
committed
616e693
fix(tests): Pint brace_position violation in BackupEngineTest

alexandre433
and
claude
committed
88d250b
feat(backups): task 3 — DumpDatabaseAction, TarFilesAction, UploadToStorageAction, RetainBackupsAction + tests

alexandre433
and
claude
committed
9a4cc38
fix(backups): eliminate TOCTOU race in DumpDatabaseAction + fix pint violations

alexandre433
and
claude
committed
bebc720
feat(backups): Task 4 — backup/restore bash scripts + explicit sudoers drop-in

alexandre433
and
claude
committed
b41402c
fix(backups): Task 4 review fixes — script modes, visudo validation, system tests

alexandre433
and
claude
committed
c65fe2b
feat(backups): BackupJob + BackupService with Pest tests (Task 5)

alexandre433
and
claude
committed
5a8098a
fix(backups): S3 disk re-registration, temp leak, missing tests

alexandre433
and
claude
committed
8f535fc
feat(backups): add RestoreJob + RestoreService with validation and tests

alexandre433
and
claude
committed
093683e
test(backups): add S3 disk re-registration test for RestoreJob

alexandre433
and
claude
committed
4b2876e
feat(backups): Task 7 — BackupController, policies, FormRequests, routes, nav link

alexandre433
and
claude
committed
e2976d3
fix(backups): Task 7 review — fix scopeMine static call + add missing controller tests

alexandre433
and
claude
committed
850c33a
feat(backups): Task 8 — RunScheduledBackupsJob, RetainBackupsJob, scheduler hook

alexandre433
and
claude
committed
0f59251
fix(scheduler): dispatch RetainBackupsJob + stamp last_run_at after dispatch

alexandre433
and
claude
committed
2c210b9
feat(backups): React UI — Backups/Index.jsx + Vitest tests (Task 9)

alexandre433
and
claude
committed
1b97a5f
test(system): fix BackupSystemTest to exercise MysqlBackupDriver and RestoreJob

alexandre433
and
claude
committed
2bf08c9
fix(backups): harden privileged scripts + null test broadcaster + guard tests

alexandre433
and
claude
committed
0e4294d
fix(backups): hide S3 secrets from props + register S3 disk for retention/prune

alexandre433
and
claude
committed
ebd14ab
Merge feature/backups into development

alexandre433
and
claude
committed
0508176
feat(cron): cron_jobs migration + CronJob model

alexandre433
and
claude
committed
b1157ab
feat(cron): ValidCronExpression + AllowedCronCommand rules (php-only v1)

alexandre433
and
claude
committed
66b8f74
fix(cron): reject path-traversal (..) in AllowedCronCommand + add tests

alexandre433
and
claude
committed
f745ad3
feat(cron): StoreCronJobRequest + CronJobPolicy

alexandre433
and
claude
committed
b2a8e2e

Commits on Jun 27, 2026

fix(cron): test 50-job cap through real withValidator() pipeline

alexandre433
and
claude
committed
e4b51ae
feat(cron): laranode-cron.sh + sudoers drop-in + Create/DeleteCronJobService

alexandre433
and
claude
committed
e87be49
fix(cron): bash allowlist, trap cleanup, TOCTOU fix, guard tests

alexandre433
and
claude
committed
909e55f
feat(cron): CronJobsController (index/store/destroy/toggleActive) + routes

alexandre433
and
claude
committed
138ed57
fix(cron): Task 5 reviewer findings — markFinished outside tx, guard tests, Vitest

alexandre433
and
claude
committed
5347487
feat(cron): CronJobs UI (Index + CreateCronJobForm) + nav link + Vitest

alexandre433
and
claude
committed
98b5d75
fix(cron): wire onError to surface server validation errors in CreateCronJobForm

alexandre433
and
claude
committed
f2afdd1
test(cron): system test for real crontab create/delete (LARANODE_SYSTEM_TESTS=1)

alexandre433
and
claude
committed
70c66b3
fix(cron): install laranode-cron sudoers drop-in in entrypoint-setup.sh + expand system tests

alexandre433
and
claude
committed
f61a953
fix(cron): harden AllowedCronCommand against control-char + crontab injection

alexandre433
and
claude
committed
a4b20a8
fix(cron): final-review — catch unexpected exceptions + duplicate guard + test sudo

alexandre433
and
claude
committed
4637e8f
Merge feature/cron-tasks into development

alexandre433
and
claude
committed
4e5efac
feat(local-dev): multi-instance parallel lab harness

alexandre433
and
claude
committed
51290d7
feat(notifications): Task 1 - notifications table, webhook_url on users, Website::user() email fix

alexandre433
and
claude
committed
e666fdf
feat(analytics): Task 1 — migrations, models, User::databases() relation

alexandre433
and
claude
committed
12830c2
docs(roadmap): Phase 7 (dashboard-ux-polish, db-service-control, php-runtimes) + drafts

alexandre433
and
claude
committed
5a67869
test(notifications): Task 1 Pest tests for webhook_url cast, hidden, Website email

alexandre433
and
claude
committed
57533dd
test(analytics): add UserSiteStat multi-tenancy isolation test

alexandre433
and
claude
committed
d5d6687
feat: notification_preferences table + NotificationPreference model

alexandre433
and
claude
committed
f54f6c0
feat(analytics): Task 2 — rollup services (UserResourceSnapshotService + UserSiteStatsService)

alexandre433
and
claude
committed
33f5703
feat(analytics): rollup jobs (Task 3)

alexandre433
and
claude
committed
a111b65
feat(analytics): scheduler registration + model:prune extension (Task 4)

alexandre433
and
claude
committed
fa01b77
feat(notifications): Task 3 — NotificationService, WebhookChannel, notification classes + tests

alexandre433
and
claude
committed
db17ac8
fix(analytics): replace duplicate model:prune assertion with extension-coverage test

alexandre433
and
claude
committed
9295912
feat(analytics): UserAnalyticsService + AnalyticsController + route (Task 5)

alexandre433
and
claude
committed
0874e7f
fix(notifications): add Notification::assertSentTo mail channel assertions in Task 3

alexandre433
and
claude
committed
0efaba3
test(analytics): add admin multi-tenant isolation tests for siteStats, sslOverview, quotaSummary

alexandre433
and
claude
committed
01a67a1
feat(analytics): implement Analytics/Index.jsx with Vitest tests (Task 6)

alexandre433
and
claude
committed
d01bdc4
feat(notifications): Task 4 — NotificationCreated event + NotificationsObserver + channel auth

alexandre433
and
claude
committed
7141724
feat(nav): add Analytics link to sidebar after File Manager

alexandre433
and
claude
committed
13ceb60
test(ui): add Vitest tests for SidebarNavi Analytics link

alexandre433
and
claude
committed
e71000c
feat(notifications): OperationJob notification hook + GenerateSslOperationJob wiring

alexandre433
and
claude
committed
8ce43de
fix(notifications): isolate safeNotify so Reverb/queue outage cannot corrupt operation status

alexandre433
and
claude
committed
4f38b6a
fix(analytics): eager-load website url for per-site chart labels

alexandre433
and
claude
committed
2758d6d
Merge feature/user-analytics into development

alexandre433
and
claude
committed
600099e
feat(notifications): Task 6 — SSL-expiry scheduler + Inertia unread-count prop

alexandre433
and
claude
committed
a27a2bf
test(notifications): add HandleInertiaRequests unread count prop tests

alexandre433
and
claude
committed
2c56a91
feat(notifications): Task 7 — controllers + routes

alexandre433
and
claude
committed
80d6661
test(notifications): add cross-user isolation guard for markRead

alexandre433
and
claude
committed
bb60bf1
feat(notifications): useNotifications hook + NotificationBell component

alexandre433
and
claude
committed
2d33ea0
feat(notifications): Task 9 — React pages + TopNavi integration

alexandre433
and
claude
committed
85c99e9
test(ui): Vitest coverage for Notifications/Index and Profile/Notifications pages

alexandre433
and
claude
committed
efb0a87
style(notifications): remove unused imports in ObserverBroadcastTest (pint)
alexandre433
committed
1f5906a
Merge branch 'development' into feature/notifications
alexandre433
committed
9a073d3
Merge feature/notifications into development

alexandre433
and
claude
committed
df5c481
style(cron): pint ValidCronExpressionRuleTest (pre-existing debt)
alexandre433
committed
bf3208d
docs(phase7): review+revise the 3 draft plans (dashboard-ux-polish, db-service-control, php-runtimes)

alexandre433
and
claude
committed
46c6548
feat(db-service): laranode-db-service.sh + sudoers entry

alexandre433
and
claude
committed
115abd6
feat(dashboard): seed liveStats from server-side initialStats prop (D1)

alexandre433
and
claude
committed
0e9324b
feat(runtimes): add runtime + runtime_port columns to websites table

alexandre433
and
claude
committed
93dd2ca
fix(db-service): emit engine key not resolved service name in script output

alexandre433
and
claude
committed
47a0e1b
feat(dashboard): top-processes doughnut chart above table (D2)

alexandre433
and
claude
committed
be4c26d
feat(runtimes): PortAllocatorService (9100-9499, first-gap allocation)

alexandre433
and
claude
committed
331cf8c
feat(db-service): DbServiceRequest (admin gate + engine/action allowlist)

alexandre433
and
claude
committed
d0c3242
fix(runtimes): correct race test — two sites, same DB state, second stays null on failed start

alexandre433
and
claude
committed
5c66256
feat(dashboard): multi-engine DB widget (DbEnginesLive), replace MySQLLive (D3)

alexandre433
and
claude
committed
6e8a7c0
feat(db-service): DbServiceStatusService + DbServiceController + routes

alexandre433
and
claude
committed
e613d28
feat(runtimes): SwitchRuntimeRequest (php-fpm + frankenphp only in v1)

alexandre433
and
claude
committed
95672a9
feat(layout): center main content with mx-auto (D4)

alexandre433
and
claude
committed
f2861af
fix(db-service): emit engine key not service name; add missing tests

alexandre433
and
claude
committed
7805fd5
feat(sidebar): collapsible with localStorage persist + engine-agnostic DB icon (D5, D7)

alexandre433
and
claude
committed
e8e4611
feat(runtimes): privileged scripts (install/manage/unit/vhost-switch) + sudoers drop-in

alexandre433
and
claude
committed
2490d4a
feat(operations): dark-mode styles + max-w-7xl container (D6)

alexandre433
and
claude
committed
4eba35f
feat(filemanager): double-click hint banner (D10) + breadcrumb navigation (D14)

alexandre433
and
claude
committed
809fdbe
fix(task4): correct FrankenPHP URL, add missing leading-dash guards, consecutive-dot check

alexandre433
and
claude
committed
7655126
feat(db-service): DbServiceControl component + Databases/Index admin section + Vitest

alexandre433
and
claude
committed
5670a66
feat(runtimes): Apache proxy (+ ACME exception) + systemd unit templates + config key

alexandre433
and
claude
committed
9f6d521
test(db-service): system integration test + final verification gate

alexandre433
and
claude
committed
c106129
feat(php): block reinstall via 409 guard + disable installed options in form (D11)

alexandre433
and
claude
committed
a831260
fix(db-service): make script executable + drop dead service-name variable
alexandre433
committed
eee877f
test(runtimes): add RuntimeTemplateConfigTest for Task 5 acceptance criteria

alexandre433
and
claude
committed
fde6121
Merge feature/db-service-control into development

alexandre433
and
claude
committed
b0a1ad0
fix(accounts): block self-impersonation + admin-to-admin guard (D13)

alexandre433
and
claude
committed
e1f37ab
fix(layout): truly center main content (px-3 + mx-auto, drop conflicting ml-3) (D4)
alexandre433
committed
efb6d7b
Merge feature/dashboard-ux-polish into development

alexandre433
and
claude
committed
2918b93
feat(runtimes): SwitchRuntimeService + SwitchRuntimeOperationJob + delete/version guards

alexandre433
and
claude
committed
6b5f7b8
fix(runtimes): SSL guard + rollback + domain validation in SwitchRuntimeService

alexandre433
and
claude
committed
41b558e
feat(runtimes): Websites index — runtime column, select, OperationProgress, info banner

alexandre433
and
claude
committed
a765f62
test(runtimes): system integration tests (13) for FrankenPHP install + switch + ACME + security

alexandre433
and
claude
committed
09ec827
test(runtimes): add missing system tests for runtime-unit.sh and consecutive-dot manage.sh

alexandre433
and
claude
committed
1bfe4ff
fix(runtimes): final-review — snake_case runtime_label key + SHA cleanup under set -e
alexandre433
committed
b5b4b89
Merge branch 'development' into feature/php-runtimes
alexandre433
committed
1665bcb
Merge feature/php-runtimes into development

alexandre433
and
claude
committed
2184b3b
fix(local-dev): install cron package in entrypoint provisioning

alexandre433
and
claude
committed
fdedcd7
docs(roadmap): Phase 7 complete; 9 features shipped to main

alexandre433
and
claude
committed
d078753
chore(gitignore): ignore Playwright MCP output and dark-mode sweep screenshots

alexandre433
and
claude
committed
b75ad8f
fix(accounts): stop the edit-account modal showing both scrollbars

alexandre433
and
claude
committed
b90cac0
fix(accounts): prevent an admin from deleting their own account

alexandre433
and
claude
committed
677dd0d
fix(sidebar): keep the collapse toggle reachable when collapsed

alexandre433
and
claude
committed
00637fa
fix(theme): apply the persisted theme before first paint

alexandre433
and
claude
committed
2b29316
fix(filemanager): always show the current path and make Back single-click

alexandre433
and
claude
committed
b7165f8
feat(firewall): prevent lockout when enabling the firewall

alexandre433
and
claude
committed
4944dad
docs(claude): require test + build + Playwright verification after every feature

alexandre433
and
claude
committed
abb4d3b
fix(dashboard): stop the Top Processes doughnut rendering as a tiny dot

alexandre433
and
claude
committed
3221727
fix(firewall): grant www-data NOPASSWD sudo for ufw

alexandre433
and
claude
committed
47b5aee
fix(databases): stop a missing Postgres database crashing the list

alexandre433
and
claude
committed
9638b79
fix(profile): make Notification Preferences readable in dark mode

alexandre433
and
claude
committed
163cf1a
chore(lab): grant ufw sudoers + fix admin-seed lockout on make up

alexandre433
and
claude
committed
c5b1628
feat(dashboard): CPU and RAM usage-by-process doughnuts

alexandre433
and
claude
committed
7b3ca1b
fix(lab): stop `make test` wiping the panel database

alexandre433
and
claude
committed
fdfb891
chore(tests): pin a test APP_KEY in phpunit.xml

alexandre433
and
claude
committed
024a7e7
feat(dashboard): optional GPU detection and usage section

alexandre433
and
claude
committed
1dbc9fe
fix(install): make the installer work on a clean machine

alexandre433
and
claude
committed
91e4cab
test(install): clean-room installer test on vanilla ubuntu:24.04

alexandre433
and
claude
committed
3f742b6
chore(gitignore): ignore .env.local-backup and scratch screenshots

alexandre433
and
claude
committed
f657101

Commits on Jul 1, 2026