jacobh2
671c00d0d8
Build Kvitt images / build (push) Failing after 8m17s
Contract (SPEC §14.8): migration 0004_card_purchases.sql (server schema 4, byte-identical contract and server copies), E-36 to E-44 in contracts/openapi.yaml with the four new error codes and a 502 response, examples for every card body and error code, the match_card_purchase vectors (17 cases) with their Python reference in tools/contracts-check.py (157 checks), web/src/api/schema.d.ts regenerated; web/src/lib/vectors.test.ts lists match_card_purchase as not ported until K3 ports it (orchestrator's allowance). Server: src/cards/ with the provider registry (CP-1), the CardSource trait and its Enable Banking adapter (JWT RS256 kid = application id, /aspsps, /auth, /sessions, transactions with PSU headers for user-present fetches, CP-14 error mapping, CP-7 mapping), the windowed fetch (30-day windows newest first, split at the 100-row cap down to a day, de-duplication by provider_ref, continuation keys, WRONG_TRANSACTIONS_PERIOD ends the walk), CP-8 matching with the secondary rule, the background poller (06:45, 11:45, 16:45, 21:45, 4 per 24 hours, 2-hour skip, no backlog), the bilingual callback page (E-39), E-36 to E-38 and E-40 to E-44, link clearing in sync push step 7, attempt pruning at 04:00, the card_fetch log line with aggregates only, KVITT_EB_* configuration. Tests against a local stub (tests/cards_api/, 34 tests); the real API is never called. Infra: Pi compose mounts secrets/cards read-only and passes the two application ids; .env.example keys; dev stack stages infra/secrets/cards/; NPM block with the /cards/callback gate line and unlogged location (kvitt.conf and README step 4); README "Card purchases". Pre-commit hook bypassed (--no-verify, orchestrator's decision): the Android fast tests fail in :domain VectorFilesTest (and the full check in :data ExampleRoundTripTest) because they pin the contract's vector and example sets; matchCardPurchase and the card DTOs are K2's by design (contract-first landing; K2 lands next). Server, contracts-check and web gates are green. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01TQd3pEP9UeN2uifbHknQ7B
35 lines
1.5 KiB
Bash
35 lines
1.5 KiB
Bash
# Kvitt development stack settings (infra/dev/compose.yaml). No secret values here, ever.
|
|
# Copy to infra/dev/.env (git-ignored) to change anything; the scripts use .env when it exists,
|
|
# otherwise this file. Paths are relative to infra/dev/.
|
|
|
|
# Images built by infra/dev/build.sh.
|
|
KVITT_SERVER_IMAGE=kvitt-server:dev
|
|
KVITT_BACKUP_IMAGE=kvitt-backup:dev
|
|
|
|
# Port published on the Mac (all interfaces, so the phone on the home Wi-Fi can reach it).
|
|
KVITT_DEV_PORT=8080
|
|
|
|
# URL used in invite links. Leave empty: up.sh sets http://<Mac LAN address>:<KVITT_DEV_PORT>.
|
|
# Set it only to pin an address, for example http://192.168.1.20:8080 (private LAN address, plain http).
|
|
KVITT_PUBLIC_URL=
|
|
|
|
# Firebase project for FCM HTTP v1 (SPEC §10.4, §10.7).
|
|
KVITT_FCM_PROJECT_ID=kvitt-1337
|
|
|
|
# Enable Banking application ids for card purchases (SPEC §10.4, D-175). Empty: card features off. The keys are
|
|
# ${KVITT_SECRETS_DIR}/cards/enable-banking.pem (and enable-banking-member.pem), staged by up.sh. The application's
|
|
# registered redirect is the Pi's https address, so the real BankID flow cannot complete against this stack.
|
|
KVITT_EB_APP_ID=
|
|
KVITT_EB_MEMBER_APP_ID=
|
|
|
|
# tracing filter (SPEC §10.4).
|
|
RUST_LOG=info
|
|
|
|
# Bind-mounted folders (git-ignored). Deleting data/ resets the dev server.
|
|
KVITT_DEV_DATA_DIR=./data
|
|
KVITT_DEV_BACKUP_DIR=./backups
|
|
|
|
# Folder holding fcm-service-account.json (git-ignored). Default: infra/secrets of this checkout.
|
|
# In a worktree without copied secrets, point it at the main checkout's infra/secrets.
|
|
KVITT_SECRETS_DIR=../secrets
|