Aurora v2 — complete platform overhaul (3-tier rewrite)

.claude/CLAUDE.md

@@ -0,0 +1,166 @@
+# Aurora -- Project Context for Claude Code
+
+## Sudo Usage (CRITICAL)
+
+This system uses `sudo-rs` which does NOT support `-A` (askpass). Interactive sudo prompts block tool execution. When you need elevated privileges (e.g., `systemctl reload php8.4-fpm`), ask the user to run the command manually rather than attempting sudo directly.
+
+## What This Project Is
+
+Aurora is a secure, real-time collaboration platform for multidisciplinary clinical teams to coordinate patient care. It provides synchronous collaboration (video conferencing, whiteboarding), asynchronous communication (threaded discussions, file sharing), clinical decision support, and team management with role-based access control.
+
+## Tech Stack
+
+- **Backend:** Laravel 10, PHP 8.1+, Sanctum auth, Spatie RBAC
+- **Frontend:** React, TypeScript, Vite, Tailwind CSS, Zustand state, TanStack Query
+- **AI Service:** Python, FastAPI
+- **Database:** PostgreSQL 16 (Docker), Redis
+- **Real-time:** Laravel WebSockets
+- **Video:** Agora.io SDK
+- **Infrastructure:** Docker Compose (nginx, php, node, postgres, redis), deploy.sh
+
+## Project Structure
+
+```
+Root files:
+  CLAUDE.md              -- This file (also at .claude/CLAUDE.md)
+  docker-compose.yml     -- All Docker service definitions
+  deploy.sh              -- Production deployment script
+  Makefile               -- Top-level shortcuts
+
+Application code:
+  backend/               -- Laravel PHP application
+    app/
+      Contracts/         -- Interfaces (ClinicalDataAdapter)
+      Http/
+        Controllers/     -- AuthController, PatientController, EventController, CaseDiscussionController
+        Requests/        -- Form Request validation classes
+        Middleware/       -- SecurityHeaders
+        Helpers/         -- ApiResponse helper
+      Models/            -- User, Patient, Event, ClinicalCase, CaseDiscussion
+        Clinical/        -- ClinicalPatient, Visit, Medication, Condition, Measurement, etc.
+      Services/          -- Business logic
+        Adapters/        -- FhirAdapter, OmopAdapter, ManualAdapter
+      Providers/         -- AppServiceProvider, RouteServiceProvider
+    routes/api.php       -- All API routes
+    database/migrations/ -- Schema definitions
+    config/              -- Laravel config
+
+  frontend/              -- React + TypeScript SPA
+    src/
+      features/          -- Feature modules
+        auth/            -- Login, Register, ChangePasswordModal
+        patient-profile/ -- Patient demographics, timeline, labs, notes, visits
+        administration/  -- Admin user management API
+        settings/        -- Profile & notification preferences
+        commons/         -- Shared types
+      components/
+        ui/              -- Reusable UI components (Button, Modal, DataTable, Toast, etc.)
+        layout/          -- Sidebar
+        navigation/      -- TopNavigation
+        layouts/         -- DashboardLayout
+      hooks/             -- useAbbyContext
+      lib/               -- API client (Axios), query client, utils
+      stores/            -- Zustand stores (auth, profile, ui, abby)
+
+  ai/                    -- Python FastAPI AI service
+    app/                 -- FastAPI application
+
+  docker/                -- Dockerfiles and container configs
+  e2e/                   -- Playwright end-to-end tests
+  federation/            -- Federation layer
+
+  docs/
+    plans/               -- Implementation plans (v2 overhaul design & implementation)
+    notes/               -- Market research notes
+```
+
+## Key Patterns
+
+### Backend (Laravel)
+- Use **Form Requests** for validation (StoreDiscussionRequest, StoreEventRequest, etc.)
+- Use **Service classes** for business logic (PatientService, EventService, AuthService)
+- **Adapter pattern** for clinical data: ClinicalDataAdapter interface with FHIR, OMOP, and Manual implementations
+- **ApiResponse helper** for consistent JSON responses
+- Return types on all public controller methods
+
+### Frontend (React)
+- API calls go through **TanStack Query** hooks
+- State management via **Zustand** stores (authStore, profileStore, uiStore, abbyStore)
+- Feature-based directory structure under `src/features/`
+- Shared UI components under `src/components/ui/`
+
+### Authentication
+- Sanctum token-based auth
+- Temp password flow: register with email only, receive temp password via Resend, forced password change on first login
+- See `.claude/rules/auth-system.md` for CRITICAL auth rules -- DO NOT modify auth without reading that file
+
+## Docker Services
+
+```bash
+docker compose up -d                  # Start all services
+docker compose ps                     # Check health
+```
+
+Services: nginx (:8085), php, node (:5177 dev), postgres (:5485), redis
+
+## Key URLs (Development)
+
+- App: http://localhost:8085
+- Vite dev server: http://localhost:5177
+- Database: localhost:5485 (aurora/aurora)
+
+## Project Memory (Aurora Brain)
+
+This project has a persistent knowledge base stored in ChromaDB, accessible via
+the `claude-devbrain` MCP server. It contains project documentation, design plans,
+market research, and source code indexed for semantic search.
+
+### CRITICAL: Always Query Before Working
+
+**Before starting any task**, query the Aurora Brain to recall relevant context:
+
+1. **At the start of every session**, use the Chroma MCP tools to search for
+   context related to the current task. Search the `aurora_docs` collection
+   for documentation and plans, and `aurora_code` for implementation details.
+
+2. **Before making architectural decisions**, search for prior design decisions
+   and plans. The v2 overhaul design and implementation plan contain detailed
+   specifications.
+
+3. **Before writing new code**, check if similar patterns already exist in the
+   codebase via the `aurora_code` collection.
+
+### How to Query
+
+Use the Chroma MCP tools (available as `claude-devbrain` in your MCP server list):
+
+- `chroma_query_documents` -- Semantic search across collections
+  - Collection `aurora_docs`: ~99 chunks from documentation, plans, market notes
+  - Collection `aurora_code`: ~727 chunks from PHP, TypeScript, Python source
+
+- Filter by metadata when narrowing scope:
+  - `doc_type`: documentation, planning, notes
+  - `extension`: .php, .ts, .tsx, .py, .sql
+  - `relative_path`: filter by directory (e.g., "backend/app/Services")
+
+### Example Queries
+
+- "How does Aurora handle clinical data adapters?"
+- "What is the patient profile timeline implementation?"
+- "Authentication flow and password change"
+- "FHIR adapter data mapping"
+- "Admin user management API endpoints"
+- "UI component patterns" (use `aurora_code` collection)
+- "Clinical data models and relationships" (use `aurora_code` collection)
+
+### Brain Updates
+
+For manual updates or to re-index after significant changes:
+
+```bash
+# Incremental docs only (fast -- skips unchanged files)
+python3 ~/.claude-devbrain/ingest.py -s /home/smudoshi/Github/Aurora --collection aurora_docs --code-collection aurora_code -i
+
+# Full re-index with code
+python3 ~/.claude-devbrain/ingest.py -s /home/smudoshi/Github/Aurora --collection aurora_docs --code-collection aurora_code --include-code
+```

.dockerignore

@@ -0,0 +1,14 @@
+frontend/node_modules
+frontend/dist
+ai/venv
+ai/__pycache__
+e2e/test-results
+e2e/playwright-report
+backend/public/build
+backend/public/ohif
+backend/vendor
+backend/storage/logs
+.git
+.superpowers
+dicom
+docs

.env.docker.example

@@ -0,0 +1,27 @@
+# Aurora Docker Production Environment
+# Copy to .env.docker and fill in values before deploying
+
+# Laravel App Key — generate with: php artisan key:generate --show
+APP_KEY=base64:GENERATE_ME
+
+# Application
+APP_ENV=production
+APP_DEBUG=false
+
+# Database
+DB_PASSWORD=secure_password_here
+
+# Email (Resend)
+RESEND_API_KEY=re_xxxx
+
+# AI Services
+AI_SERVICE_URL=http://ai:8100
+CLAUDE_API_KEY=sk-ant-xxxx
+OLLAMA_BASE_URL=http://host.docker.internal:11434
+
+# Federation
+FEDERATION_PORT=8200
+
+# Web ports (optional, defaults shown)
+WEB_HTTP_PORT=80
+WEB_HTTPS_PORT=443

.env.example

@@ -1,32 +1,33 @@
-APP_NAME=Laravel
+# Aurora Docker Dev Environment
+# Copy to backend/.env and fill in real values
+
+APP_NAME=Aurora
 APP_ENV=local
-APP_KEY=
+APP_KEY=base64:GENERATE_WITH_php_artisan_key_generate
 APP_DEBUG=true
 APP_TIMEZONE=UTC
-APP_URL=http://localhost
+APP_URL=https://aurora.acumenus.net
 
 APP_LOCALE=en
 APP_FALLBACK_LOCALE=en
 APP_FAKER_LOCALE=en_US
-
 APP_MAINTENANCE_DRIVER=file
-# APP_MAINTENANCE_STORE=database
 
 PHP_CLI_SERVER_WORKERS=4
-
 BCRYPT_ROUNDS=12
 
 LOG_CHANNEL=stack
 LOG_STACK=single
 LOG_DEPRECATIONS_CHANNEL=null
 LOG_LEVEL=debug
 
-DB_CONNECTION=sqlite
-# DB_HOST=127.0.0.1
-# DB_PORT=3306
-# DB_DATABASE=laravel
-# DB_USERNAME=root
-# DB_PASSWORD=
+# Database — host Postgres (not Docker)
+DB_CONNECTION=pgsql
+DB_HOST=host.docker.internal
+DB_PORT=5432
+DB_DATABASE=aurora
+DB_USERNAME=smudoshi
+DB_PASSWORD=your_password_here
 
 SESSION_DRIVER=database
 SESSION_LIFETIME=120
@@ -41,13 +42,14 @@ QUEUE_CONNECTION=database
 CACHE_STORE=database
 CACHE_PREFIX=
 
-MEMCACHED_HOST=127.0.0.1
-
+# Redis — Docker service
 REDIS_CLIENT=phpredis
-REDIS_HOST=127.0.0.1
+REDIS_HOST=redis
 REDIS_PASSWORD=null
 REDIS_PORT=6379
 
+MEMCACHED_HOST=127.0.0.1
+
 MAIL_MAILER=log
 MAIL_SCHEME=null
 MAIL_HOST=127.0.0.1
@@ -63,5 +65,35 @@ AWS_DEFAULT_REGION=us-east-1
 AWS_BUCKET=
 AWS_USE_PATH_STYLE_ENDPOINT=false
 
+# Resend (email delivery)
+RESEND_API_KEY=re_xxxx
+
+# Authentik OIDC SSO
+LOCAL_AUTH_ENABLED=true
+OIDC_ENABLED=false
+OIDC_DISCOVERY_URL=https://auth.acumenus.net/application/o/aurora-oidc/.well-known/openid-configuration
+OIDC_CLIENT_ID=
+OIDC_CLIENT_SECRET=
+OIDC_REDIRECT_URI=https://aurora.acumenus.net/api/auth/oidc/callback
+OIDC_ALLOWED_GROUPS="Aurora Admins"
+
+# AI Services
+AI_SERVICE_URL=http://ai:8100
+CLAUDE_API_KEY=sk-ant-xxxx
+OLLAMA_BASE_URL=http://host.docker.internal:11434
+
+# Federation
+FEDERATION_PORT=8200
+
+# Frontend
 VITE_APP_NAME="${APP_NAME}"
-VITE_API_URL="http://localhost:8000/api"
+VITE_API_URL="https://aurora.acumenus.net/api"
+
+# Pusher / Broadcasting (using log driver for now)
+PUSHER_APP_ID=
+PUSHER_APP_KEY=
+PUSHER_APP_SECRET=
+PUSHER_HOST=
+PUSHER_PORT=443
+PUSHER_SCHEME=https
+PUSHER_APP_CLUSTER=mt1