Feature/proper books

.actignore

@@ -0,0 +1,3 @@
+# Postgres data directory created by the dev container – owned by uid 70
+# and not readable by the vscode user, so act can't copy it.
+.devcontainer/test_data

.actrc

@@ -0,0 +1,3 @@
+-P ubuntu-22.04=catthehacker/ubuntu:act-22.04
+--artifact-server-path /tmp/act-artifacts
+--use-gitignore

.devcontainer/Dockerfile

@@ -1,5 +1,22 @@
 FROM mcr.microsoft.com/devcontainers/dotnet:8.0
 
+RUN set -eux; \
+		apt-get update; \
+		apt-get install -y --no-install-recommends ca-certificates curl; \
+		rm -rf /var/lib/apt/lists/*; \
+		arch="$(dpkg --print-architecture)"; \
+		case "$arch" in \
+			amd64) act_arch="x86_64" ;; \
+			arm64) act_arch="arm64" ;; \
+			*) echo "Unsupported architecture: $arch" >&2; exit 1 ;; \
+		esac; \
+		curl --fail --silent --show-error --location \
+			"https://github.com/nektos/act/releases/download/v0.2.88/act_Linux_${act_arch}.tar.gz" \
+			--output /tmp/act.tar.gz; \
+		tar -xzf /tmp/act.tar.gz -C /usr/local/bin act; \
+		chmod +x /usr/local/bin/act; \
+		rm -f /tmp/act.tar.gz
+
 # [Optional] Uncomment this section to install additional OS packages.
 # RUN apt-get update && export DEBIAN_FRONTEND=noninteractive \
 #     && apt-get -y install --no-install-recommends <your-package-list-here>

.devcontainer/compose.yaml

@@ -14,20 +14,51 @@ services:
     volumes:
       - ./test_data:/var/lib/postgresql/data
     environment:
-      - POSTRES_DB=walter_dev_full_generic_db
+      - POSTGRES_DB=walter_dev_full_generic_db
       - POSTGRES_USER=postgres
       - POSTGRES_PASSWORD=postgres
       - PGDATA=/var/lib/postgresql/data
 
+  # MinIO is licensed under AGPL-3.0 (same license as Walter), so bundling it
+  # into the development setup does not create any licensing conflict.
   s3:
     image: minio/minio:RELEASE.2023-02-17T17-52-43Z
+    container_name: walter_dev_s3
     restart: unless-stopped
     volumes:
       - s3-data:/data
+    environment:
+      - MINIO_ROOT_USER=minioadmin
+      - MINIO_ROOT_PASSWORD=minioadmin
     command: server --console-address ":9001" /data
     ports:
+      - 9000:9000
       - 9001:9001
 
+  # One-shot helper that creates the saverwalter bucket and switches it to a
+  # public anonymous policy. The Walter file API talks to MinIO without
+  # signing requests, so the bucket needs to allow unauthenticated PUT/GET.
+  # This is acceptable for development only; production deployments must put
+  # MinIO (or another S3 provider) behind proper credentials.
+  s3-init:
+    image: minio/mc:RELEASE.2023-02-16T19-20-11Z
+    container_name: walter_dev_s3_init
+    depends_on:
+      - s3
+    restart: "no"
+    entrypoint: >
+      /bin/sh -c "
+      until /usr/bin/mc alias set walter http://s3:9000 minioadmin minioadmin >/dev/null 2>&1; do
+        echo 'Waiting for MinIO at s3:9000...';
+        sleep 1;
+      done;
+      /usr/bin/mc mb -p walter/saverwalter >/dev/null 2>&1 || true;
+      /usr/bin/mc anonymous set public walter/saverwalter >/dev/null 2>&1 \
+        || /usr/bin/mc policy set public walter/saverwalter >/dev/null 2>&1 \
+        || true;
+      echo 'MinIO bucket walter/saverwalter ready (public anonymous access for development).';
+      "
+
 volumes:
   postgres-data:
   s3-data:

.devcontainer/devcontainer-lock.json

@@ -0,0 +1,14 @@
+{
+  "features": {
+    "ghcr.io/devcontainers/features/docker-outside-of-docker:1": {
+      "version": "1.9.1",
+      "resolved": "ghcr.io/devcontainers/features/docker-outside-of-docker@sha256:dc89605f01ff2f24252c61f7c8ba2a58ccdbc14f2ebf87a7952d9e2b89834850",
+      "integrity": "sha256:dc89605f01ff2f24252c61f7c8ba2a58ccdbc14f2ebf87a7952d9e2b89834850"
+    },
+    "ghcr.io/devcontainers/features/node:1": {
+      "version": "1.7.1",
+      "resolved": "ghcr.io/devcontainers/features/node@sha256:8c0de46939b61958041700ee89e3493f3b2e4131a06dc46b4d9423427d06e5f6",
+      "integrity": "sha256:8c0de46939b61958041700ee89e3493f3b2e4131a06dc46b4d9423427d06e5f6"
+    }
+  }
+}

.devcontainer/devcontainer.json

@@ -8,9 +8,10 @@
 	"features": {
 		"ghcr.io/devcontainers/features/node:1": {
 			"version": "lts"
-		}
+		},
+		"ghcr.io/devcontainers/features/docker-outside-of-docker:1": {}
 	},
-	"postCreateCommand": "dotnet tool install --global dotnet ef && dotnet restore",
+	"postCreateCommand": "dotnet tool install --global dotnet-ef && dotnet restore",
 	"customizations": {
 		"vscode": {
 			"extensions": [

.dockerignore

@@ -0,0 +1,11 @@
+.git
+.github
+.devcontainer
+**/bin
+**/obj
+**/node_modules
+**/.svelte-kit
+**/coverage
+**/playwright-report
+**/test-results
+**/.DS_Store

.editorconfig

@@ -30,7 +30,7 @@ spelling_exclusion_path = SpellingExclusions.dic
 [*.{cs,csx,vb,vbx}]
 indent_size = 4
 insert_final_newline = true
-charset = utf-8-bom
+charset = utf-8
 
 # XML project files
 [*.{csproj,vbproj,vcxproj,vcxproj.filters,proj,projitems,shproj}]

.github/workflows/feature.yaml

@@ -1,10 +1,17 @@
+name: feature
+
 on:
   push:
     branches:
       - feature/*
 
+permissions:
+  contents: read
+
+concurrency:
+  group: feature-${{ github.ref }}
+  cancel-in-progress: true
+
 jobs:
-  test:
-    uses: ./.github/workflows/reusable_test.yaml
-  build:
-    uses: ./.github/workflows/reusable_build.yaml
+  ci:
+    uses: ./.github/workflows/reusable_ci.yaml

.github/workflows/master.yaml

@@ -1,17 +1,22 @@
+name: master
+
 on:
   push:
     branches:
       - master
   pull_request:
   merge_group:
 
+permissions:
+  contents: read
+
+concurrency:
+  group: master-${{ github.event.pull_request.number || github.ref }}
+  cancel-in-progress: true
+
 jobs:
-  test:
-    uses: ./.github/workflows/reusable_test.yaml
-  build:
-    uses: ./.github/workflows/reusable_build.yaml
+  ci:
+    uses: ./.github/workflows/reusable_ci.yaml
   deploy_latest:
-    needs:
-      - test
-      - build
+    needs: ci
     uses: ./.github/workflows/reusable_deploy_latest.yaml

.github/workflows/release.yaml

@@ -1,17 +1,22 @@
+name: release
+
 on:
   release:
     types:
       - published
 
+permissions:
+  contents: read
+
+concurrency:
+  group: release-${{ github.ref }}
+  cancel-in-progress: false
+
 jobs:
-  test:
-    uses: ./.github/workflows/reusable_test.yaml
-  build:
-    uses: ./.github/workflows/reusable_build.yaml
+  ci:
+    uses: ./.github/workflows/reusable_ci.yaml
   deploy_release:
-    needs:
-      - test
-      - build
+    needs: ci
     uses: ./.github/workflows/reusable_deploy_release.yaml
     with:
       tag: ${{ github.ref_name }}