seedproject-web/api
Carlos Arias e57856173a Phase 1: console runner service + nginx gate + systemd
- agents/console/server.mjs: Node runner (as carlos-arias-agent, 127.0.0.1:3011).
  run/stream(SSE)/publish/discard/ping/auth. Agent edits files (no Bash); the
  runner builds isolated previews and git-commits on publish. Git ops scoped to
  content paths (app, brand, api/db, api/cli) — never infra or secrets.
- adminauth check() — nginx auth_request target (204 admin / 401 not).
- nginx: /devconsole + /_preview gated by auth_request, runner proxied,
  previews admin-only. Runner never exposed directly.
- systemd unit (hardened: NoNewPrivileges, ProtectSystem, scoped ReadWritePaths).

Verified end to end: admin login -> agent edits about.astro -> isolated preview
(admin-gated) -> discard reverts. Unauthenticated access is 401 throughout.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01DoFYZY9gkGPNDqZ7NuEa9a
2026-07-23 20:53:32 +00:00
..
.memory chore: scaffold SeedProject base (Phase 1) 2026-07-04 22:53:10 +00:00
app Baseline: full site build (brand, pages, DB, agent-editable) 2026-07-23 20:21:28 +00:00
cli Phase 0: admin console foundation 2026-07-23 20:23:48 +00:00
commands feat(api): Foundation — installer, migrations, two-tier auth, health round-trip 2026-07-04 23:23:51 +00:00
core chore: scaffold SeedProject base (Phase 1) 2026-07-04 22:53:10 +00:00
db Phase 0: admin console foundation 2026-07-23 20:23:48 +00:00
install fix: repair the fresh-clone flow — track api/public + app/public, fix installer schema 2026-07-05 00:15:55 +00:00
public Phase 1: console runner service + nginx gate + systemd 2026-07-23 20:53:32 +00:00
system Baseline: full site build (brand, pages, DB, agent-editable) 2026-07-23 20:21:28 +00:00
templates/emails feat: user auth (email + Google OAuth), Mailer, and CLI bridges 2026-07-11 09:14:25 -05:00
.htaccess chore: scaffold SeedProject base (Phase 1) 2026-07-04 22:53:10 +00:00
composer.json feat: user auth (email + Google OAuth), Mailer, and CLI bridges 2026-07-11 09:14:25 -05:00
composer.lock chore: scaffold SeedProject base (Phase 1) 2026-07-04 22:53:10 +00:00
console feat(api): Foundation — installer, migrations, two-tier auth, health round-trip 2026-07-04 23:23:51 +00:00
index.php chore: scaffold SeedProject base (Phase 1) 2026-07-04 22:53:10 +00:00
manifest.json chore: scaffold SeedProject base (Phase 1) 2026-07-04 22:53:10 +00:00
sw.js chore: scaffold SeedProject base (Phase 1) 2026-07-04 22:53:10 +00:00