generated from coulomb/repo-seed
6.7 KiB
6.7 KiB
title
| title |
|---|
| Tools & Apps |
import {API} from "./components/config.js";
// Probe local services — best-effort, timeout after 2s
async function probe(url) {
try {
const ctrl = new AbortController();
const tid = setTimeout(() => ctrl.abort(), 2000);
const r = await fetch(url, {signal: ctrl.signal, mode: "no-cors"});
clearTimeout(tid);
return true; // no-cors = opaque response, but no throw = reachable
} catch { return false; }
}
// Only probe local services the browser can actually reach
const [apiUp, giteaUp, pgadminUp] = await Promise.all([
probe(`${API}/state/health`),
probe("http://92.205.130.254:32166"),
probe("http://127.0.0.1:5050"),
]);
// Cluster services — mark as "unknown" unless we can check
// (browser can't reach coulomb.social without the cluster being up;
// just show them as static links without a live probe)
function dot(up) {
if (up === null) return html`<span class="app-dot app-dot-unknown" title="status unknown">●</span>`;
return up
? html`<span class="app-dot app-dot-up" title="reachable">●</span>`
: html`<span class="app-dot app-dot-down" title="unreachable">●</span>`;
}
function appCard({name, desc, url, label, status, icon, note}) {
const linkEl = url
? html`<a class="app-link" href="${url}" target="_blank" rel="noopener">${label ?? url}</a>`
: html`<span class="app-link app-link-local">${label ?? "local app"}</span>`;
return html`<div class="app-card">
<div class="app-card-header">
<span class="app-icon">${icon}</span>
<span class="app-name">${name}</span>
${dot(status)}
</div>
<p class="app-desc">${desc}</p>
${linkEl}
${note ? html`<p class="app-note">${note}</p>` : ""}
</div>`;
}
Tools & Apps
Connected applications, services, and local tools used across the Custodian ecosystem.
Local Services
display(html`<div class="app-grid">
${appCard({
icon: "🗄️", name: "State Hub API", status: apiUp,
desc: "FastAPI backend — the source of truth for all workstream, task, and decision data.",
url: "http://127.0.0.1:8000/docs", label: "127.0.0.1:8000 · Swagger UI",
})}
${appCard({
icon: "🔑", name: "KeePassXC", status: null,
desc: "Primary credential store. Holds all service secrets in the FOS group hierarchy. Single root of trust per the Credential Management Standard.",
label: "local desktop app",
note: "Standard: canon/standards/credential-management_v0.1.md",
})}
${appCard({
icon: "🐘", name: "pgAdmin", status: pgadminUp,
desc: "PostgreSQL admin UI for the state-hub database. Start with: make db in state-hub/.",
url: "http://127.0.0.1:5050", label: "127.0.0.1:5050",
note: pgadminUp ? "" : "Start with: cd ~/state-hub && docker compose --profile pgadmin up -d",
})}
${appCard({
icon: "🌉", name: "ops-bridge", status: null,
desc: "SSH reverse tunnel lifecycle manager. Keeps CoulombCore and Railiance nodes connected to the local state hub.",
label: "~/ops-bridge · CLI",
note: "bridge up / bridge status / bridge logs",
})}
</div>`);
Source Control
display(html`<div class="app-grid">
${appCard({
icon: "🦊", name: "Gitea", status: giteaUp,
desc: "Self-hosted git server. All domain repos are mirrored here. Coulomb organisation hosts the primary remotes.",
url: "http://92.205.130.254:32166", label: "92.205.130.254:32166",
note: "Org: coulomb · also accessible as gitea.local on LAN",
})}
</div>`);
Identity & Auth (NetKingdom)
Services deployed on the k3s cluster. Require cluster to be running (ThreePhoenix / CoulombCore).
display(html`<div class="app-grid">
${appCard({
icon: "🪪", name: "KeyCape", status: null,
desc: "Lightweight OIDC orchestration layer. Binds LLDAP, Authelia, and privacyIDEA into a single IAM profile.",
url: "https://id.coulomb.social", label: "id.coulomb.social",
note: "OIDC discovery: /.well-known/openid-configuration",
})}
${appCard({
icon: "🔐", name: "Authelia", status: null,
desc: "Authentication and authorisation server. Handles password auth, session management, and OIDC relying-party flows.",
url: "https://auth.coulomb.social", label: "auth.coulomb.social",
})}
${appCard({
icon: "📱", name: "privacyIDEA", status: null,
desc: "MFA token management. Issues TOTP challenges via trigger-admin API. Backs all second-factor authentication.",
url: "https://pink.coulomb.social", label: "pink.coulomb.social",
note: "Admin portal — credentials in KeePassXC net-kingdom/privacyidea/pi-admin",
})}
${appCard({
icon: "📂", name: "LLDAP", status: null,
desc: "Lightweight LDAP directory. Stores user accounts and group memberships queried by Authelia and KeyCape.",
url: "https://ldap.coulomb.social", label: "ldap.coulomb.social",
note: "Admin UI at :17170 · credentials in KeePassXC net-kingdom/lldap",
})}
</div>`);
Dev Tooling
display(html`<div class="app-grid">
${appCard({
icon: "🤖", name: "Claude Code", status: null,
desc: "Primary AI coding assistant. Registered with the state-hub via MCP SSE server on :8001. The tool you're using right now.",
label: "local CLI · claude",
note: "MCP server: http://127.0.0.1:8001/sse · registered at user scope in ~/.claude.json",
})}
${appCard({
icon: "📦", name: "uv", status: null,
desc: "Python package and project manager. Manages all Python environments across custodian, state-hub, ops-bridge, and domain repos.",
label: "local CLI · uv",
note: "uv sync · uv run · uv add",
})}
</div>`);