A new developer needs only Docker Desktop — no local Go, Node, or PostgreSQL.
- docker-compose.yml: PostgreSQL + Go API + Angular (nginx) with healthcheck,
migrations auto-applied via docker-entrypoint-initdb.d, data in a volume
- backend/Dockerfile: static Go binary on distroless (nonroot)
- frontend/Dockerfile: Angular prod build served by nginx, which proxies /api
to the api service (same origin, no CORS)
- docker.ps1: setup / start / stop / restart / reset / rebuild / status / logs;
reads DB creds from backend/.env (single source, nothing duplicated)
- .dockerignore keeps .env and local artifacts out of image build contexts
- README: "Run with Docker" quick start
Not yet run end to end here (Docker is not installed on this machine); the
compose and script are validated for syntax and structure.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
A complete loop for defining, generating, running and gating tests:
- qa/: scenario-card template + examples (API/UI/binding), the Claude
generation prompt, and a QA runbook tying it together
- e2e/CLAUDE.md: conventions that keep AI-generated tests consistent
- run-tests.ps1: one runner for every layer (backend/api/web/ui/binding),
logs per run under .testlogs/, JUnit output, evidence report, and a
re-seed guard against stale demo data
- .githooks/ + scripts/install-hooks.ps1: pre-commit secret scan and
pre-push unit tests (shift-left before CI)
- evidence report now captures each API call's request, payload and
response (Authorization redacted); JUnit reporter added for CI
- scripts/db.mjs: db:check freshness guard
Azure DevOps pipeline deferred; the runner already emits JUnit + the
evidence report for any CI to publish.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
A single PowerShell entry point for the local stack:
- refreshes PATH from the registry so it works in stale terminals
- ensures PostgreSQL is up; starts the Go API and Angular dev server
- tracks PIDs in .run/ and also sweeps the ports on stop
- rebuild (-Clean/-Install), status and logs (-Follow) actions
.run/ (pids, logs) is git-ignored.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
It is generated by `go test -coverprofile` and should not be in version
control. Widened the ignore rule to cover both the extension-less profile
and coverage.out.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Angular + Go + PostgreSQL sample with strict per-tenant isolation.
- Backend: Go API (basic auth, tenant-scoped repository layer, pgx pool)
- Frontend: Angular 22 SPA (search, checkout, bookings, dashboard)
- Database: schema, seed data and demo bookings migrations
- Tests: 311 across Go (integration), Angular (unit) and Playwright (e2e),
plus a generated evidence report with PDF export
- Security: whitebox VAPT report under security/
Secrets (.env, tokens, DB credentials) are git-ignored.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
nilesh.p
