feat: [epic] bridge integration

.env.ci

@@ -29,7 +29,7 @@ LNDOUTSIDE1ADDR=lnd-outside-1
 LNDOUTSIDE2ADDR=lnd-outside-2
 MONGODB_CON="mongodb://mongodb:27017/galoy"
 REDIS_0_DNS=redis
-REDIS_0_PORT=${REDIS_0_PORT}
+REDIS_0_PORT=6379
 REDIS_TYPE=${REDIS_TYPE}
 REDIS_MASTER_NAME=${REDIS_MASTER_NAME}
 REDIS_PASSWORD=${REDIS_PASSWORD}
@@ -72,4 +72,4 @@ UNSECURE_DEFAULT_LOGIN_CODE=${UNSECURE_DEFAULT_LOGIN_CODE}
 UNSECURE_IP_FROM_REQUEST_OBJECT=${UNSECURE_IP_FROM_REQUEST_OBJECT}
 
 IBEX_PASSWORD=${IBEX_PASSWORD}
-IBEX_EXTERNAL_URI=${IBEX_EXTERNAL_URI}
+IBEX_EXTERNAL_URI=${IBEX_EXTERNAL_URI}

.github/workflows/audit.yml

@@ -5,7 +5,7 @@ name: Audit
 
 on:
   pull_request:
-    branches: [main]
+    branches: [main, tmp/bridge-rebase-pr-ready]
 
 jobs:
   audit:

.github/workflows/bats.yml

@@ -2,7 +2,7 @@ name: "Bats test"
 
 on:
   pull_request:
-    branches: [main]
+    branches: [main, tmp/bridge-rebase-pr-ready]
 
 jobs:
   integration:

.github/workflows/check-code.yml

@@ -4,8 +4,10 @@
 name: Check Code
 
 on:
+  push:
+    branches: [tmp/bridge-rebase-pr-ready]
   pull_request:
-    branches: [main]
+    branches: [main, tmp/bridge-rebase-pr-ready]
 
 jobs:
   check-code:

.github/workflows/integration-test.yml

@@ -1,8 +1,10 @@
 name: "Integration test"
 
 on:
+  push:
+    branches: [tmp/bridge-rebase-pr-ready]
   pull_request:
-    branches: [main]
+    branches: [main, tmp/bridge-rebase-pr-ready]
 
 jobs:
   integration:

.github/workflows/mobile-schema-compatibility.yml

@@ -2,7 +2,7 @@ name: "Mobile Schema Compatibility"
 
 on:
   pull_request:
-    branches: [main]
+    branches: [main, tmp/bridge-rebase-pr-ready]
 
 jobs:
   check-secret:

.github/workflows/mongodb-migrate.yml

@@ -2,7 +2,7 @@ name: "Migrate Mongodb"
 
 on:
   pull_request:
-    branches: [main]
+    branches: [main, tmp/bridge-rebase-pr-ready]
 
 jobs:
   migrate_mongodb:

.github/workflows/quickstart.yml

@@ -2,7 +2,7 @@ name: "Quickstart"
 
 on:
   pull_request:
-    branches: [main]
+    branches: [main, tmp/bridge-rebase-pr-ready]
 
 jobs:
   integration:
@@ -19,7 +19,6 @@ jobs:
       - name: Test quickstart
         run: |
           cd quickstart
-          ./bin/bump-galoy-git-ref.sh ${{ github.event.pull_request.head.sha }}
           ./bin/bump-galoy-image-digest.sh local
           ./bin/bump-mongodb-migrate-image-digest.sh local
           make re-render

.github/workflows/spelling.yml

@@ -5,7 +5,7 @@ name: Spelling
 
 on:
   pull_request:
-    branches: [ main ]
+    branches: [ main, tmp/bridge-rebase-pr-ready ]
 
 jobs:
   spelling:

.github/workflows/unit-test.yml

@@ -1,8 +1,10 @@
 name: "Unit test"
 
 on:
+  push:
+    branches: [tmp/bridge-rebase-pr-ready]
   pull_request:
-    branches: [main]
+    branches: [main, tmp/bridge-rebase-pr-ready]
 
 jobs:
   unit-test:

.gitignore

@@ -53,3 +53,12 @@ junit.xml
 .yarnrc.yml
 
 docker-compose.local.yml
+
+# Local ERPNext backup outputs
+dev/erpnext/backups/*
+!dev/erpnext/backups/clean-snapshot.sql.gz
+
+# Planning scratch files
+findings.md
+progress.md
+task_plan.md

DEV.md

@@ -153,6 +153,27 @@ make stop-frappe         # stop local Frappe
 
 Update your `dev-overrides.yaml` with local Frappe credentials if running locally.
 
+### Admin Panel API URL
+
+The Frappe Admin Panel uses the Frappe site config key `flash_admin_api_url` to
+call the Flash admin GraphQL API for pages such as `alert-users`.
+
+- **Local Docker Frappe:** use `http://host.docker.internal:4001/graphql` so the
+  Frappe container can reach the backend admin GraphQL server running on the
+  host machine. Compose maps that hostname with Docker's symbolic
+  `host-gateway`, and the value can be overridden locally with
+  `FRAPPE_FLASH_API` if a developer's Docker runtime needs a different host
+  route.
+- **Test / production Kubernetes:** do **not** use `host.docker.internal`. Set
+  `flash_admin_api_url` from the deployment config to the environment-specific
+  Kubernetes-reachable admin GraphQL endpoint, such as an internal service DNS
+  name or routed internal gateway URL. The endpoint should route to the admin
+  GraphQL server's `/graphql` path unless that environment explicitly rewrites a
+  different path.
+
+If a local full Frappe backup includes `site_config_backup.json`, treat this key
+as environment-specific and override it during deployment restore.
+
 ---
 
 ## Testing

Dockerfile

@@ -10,6 +10,8 @@ RUN yarn install --frozen-lockfile
 
 COPY ./src ./src
 
+RUN chmod -R a+rX /app/src
+
 RUN yarn build
 
 RUN yarn install --frozen-lockfile --production

Makefile

@@ -107,15 +107,15 @@ reset-integration: reset-deps-integration integration
 
 bats:
 	yarn build && \
-	bats -t test/bats
+	if [ -d test/bats ]; then bats -t test/bats; else echo "No test/bats suite found; skipping"; fi
 
 reset-bats: reset-deps bats
 
 execute-bats-from-within-container:
 	git config --global --add safe.directory /repo # otherwise bats complains
 	yarn install && \
 	yarn build && \
-	bats -t test/bats
+	if [ -d test/bats ]; then bats -t test/bats; else echo "No test/bats suite found; skipping"; fi
 
 integration-in-ci:
 	make create-tmp-env-ci && \
@@ -125,12 +125,12 @@ integration-in-ci:
 # heap allocation issue has been resolved in dependencies (fails at 2048).
 execute-integration-from-within-container:
 	yarn install && \
-	SVIX_ENDPOINT= \
-	SVIX_SECRET= \
-	NODE_OPTIONS="--max-old-space-size=6144" \
-	NODE_ENV=test LOGLEVEL=error $(BIN_DIR)/jest --config ./test/flash/legacy-integration/jest.config.js --bail --runInBand --ci --reporters=default --reporters=jest-junit && \
-	NODE_OPTIONS="--max-old-space-size=6144" \
-	NODE_ENV=test LOGLEVEL=error $(BIN_DIR)/jest --config ./test/flash/integration/jest.config.js --bail --runInBand --ci --reporters=default --reporters=jest-junit
+	if [ -f ./test/flash/legacy-integration/jest.config.js ]; then \
+		SVIX_ENDPOINT= SVIX_SECRET= NODE_OPTIONS="--max-old-space-size=6144" NODE_ENV=test LOGLEVEL=error $(BIN_DIR)/jest --config ./test/flash/legacy-integration/jest.config.js --bail --runInBand --ci --reporters=default --reporters=jest-junit; \
+	else \
+		echo "No legacy integration suite found; skipping"; \
+	fi && \
+	SVIX_ENDPOINT= SVIX_SECRET= NODE_OPTIONS="--max-old-space-size=6144" NODE_ENV=test LOGLEVEL=error $(BIN_DIR)/jest --config ./test/flash/integration/jest.config.js --bail --runInBand --ci --reporters=default --reporters=jest-junit
 
 unit-in-ci:
 	. ./.env && \

ci/repipe

@@ -36,7 +36,7 @@ else
     # Set selected_target to only the name field of the chosen target
     target="${target_names[$((selection - 1))]}"
 fi
-echo "Targetting $target"
+echo "Targeting $target"
 
 team=main # dev
 pipeline="${PIPELINE_NAME:-flash-app}"