Frontend Phase 13: ApiHost, route decorators, build fixes across 15 projects

.claude/settings.json

@@ -1,42 +1,108 @@
 {
+  "_comment": "Consolidated 2026-03 — platform-agnostic, repo-agnostic. Hooks preserved from project-specific config.",
+  "effortLevel": "high",
+  "autoUpdatesChannel": "latest",
   "env": {
     "DOTNET_CLI_TELEMETRY_OPTOUT": "1",
     "DOTNET_NOLOGO": "1"
   },
   "permissions": {
     "allow": [
-      "Bash(dotnet build *)",
-      "Bash(dotnet test *)",
-      "Bash(dotnet restore *)",
-      "Bash(dotnet format *)",
-      "Bash(dotnet clean *)",
-      "Bash(git status*)",
-      "Bash(git diff*)",
-      "Bash(git log*)",
-      "Bash(git branch*)",
-      "Bash(git add *)",
-      "Bash(git commit *)",
-      "Bash(gh api repos/JustAGhosT/* --jq *)",
-      "Bash(gh api repos/phoenixvc/* --jq *)",
-      "Bash(curl -s https://raw.githubusercontent.com/phoenixvc/*)",
-      "Bash(curl -s https://raw.githubusercontent.com/JustAGhosT/*)",
-      "Bash(/tmp/issue-265-body.md:*)"
+      "Bash(git *)",
+      "Bash(gh api *)",
+      "Bash(gh repo *)",
+      "Bash(gh issue *)",
+      "Bash(gh pr *)",
+      "Bash(gh label *)",
+      "Bash(gh run *)",
+      "Bash(gh run list *)",
+      "Bash(gh run view *)",
+      "Bash(gh run watch *)",
+      "Bash(gh workflow *)",
+      "Bash(gh variable *)",
+      "Bash(az *)",
+      "Bash(node *)",
+      "Bash(pnpm *)",
+      "Bash(npm *)",
+      "Bash(npx *)",
+      "Bash(turbo *)",
+      "Bash(python *)",
+      "Bash(python3 *)",
+      "Bash(pip *)",
+      "Bash(dotnet *)",
+      "Bash(grep *)",
+      "Bash(find *)",
+      "Bash(ls *)",
+      "Bash(cat *)",
+      "Bash(wc *)",
+      "Bash(jq *)",
+      "Bash(xargs *)",
+      "Bash(sort *)",
+      "Bash(echo *)",
+      "Bash(sed *)",
+      "Bash(perl *)",
+      "Bash(curl *)",
+      "Bash(head *)",
+      "Bash(tail *)",
+      "Bash(mkdir *)",
+      "Bash(cp *)",
+      "Bash(mv *)",
+      "Bash(rm *)",
+      "Bash(chmod *)",
+      "Bash(powershell *)",
+      "Bash(powershell.exe *)",
+      "Read(//c/**)",
+      "Read(//tmp/**)",
+      "Read(//mnt/**)",
+      "mcp__filesystem__*",
+      "mcp__nuget__*",
+      "mcp__context7__*",
+      "WebSearch",
+      "WebFetch(domain:raw.githubusercontent.com)",
+      "WebFetch(domain:github.com)",
+      "WebFetch(domain:github.blog)",
+      "WebFetch(domain:githubnext.com)",
+      "WebFetch(domain:microsoft.github.io)",
+      "WebFetch(domain:en.wikipedia.org)",
+      "WebFetch(domain:arxiv.org)",
+      "WebFetch(domain:developers.openai.com)",
+      "WebFetch(domain:code.visualstudio.com)",
+      "WebFetch(domain:codeql.github.com)"
     ],
     "deny": [
-      "Bash(rm -rf /)",
-      "Bash(rm -rf ~*)",
-      "Bash(dotnet nuget push *)",
-      "Bash(: > *)",
       "Bash(git push --force*)",
       "Bash(git push -f *)",
       "Bash(git reset --hard*)",
       "Bash(git clean -f*)",
+      "Bash(git clean -d*)",
       "Bash(git checkout -- .)",
       "Bash(git checkout .)",
       "Bash(git restore .)",
-      "Bash(git branch -D *)"
+      "Bash(git branch -D *)",
+      "Bash(git commit --no-verify*)",
+      "Bash(git push --no-verify*)",
+      "Bash(gh repo delete*)",
+      "Bash(gh repo transfer*)",
+      "Bash(gh secret delete*)",
+      "Bash(gh secret set*)",
+      "Bash(gh gpg-key delete*)",
+      "Bash(az group delete*)",
+      "Bash(az vm delete*)",
+      "Bash(az keyvault delete*)",
+      "Bash(az keyvault secret delete*)",
+      "Bash(az keyvault secret set*)",
+      "Bash(az storage account delete*)",
+      "Bash(az ad app delete*)",
+      "Bash(az role assignment delete*)",
+      "Bash(rm -rf /c/Users/smitj*)",
+      "Bash(rm -rf /c/Windows*)",
+      "Bash(rm -rf /)",
+      "Bash(rm -rf ~*)",
+      "Bash(dotnet nuget push *)",
+      "Bash(: > *)"
     ],
     "additionalDirectories": [
+      "C:\\Users\\smitj\\AppData\\Local\\Temp",
       "\\tmp"
     ]
   },

.dockerignore

@@ -0,0 +1,52 @@
+# Git
+.git
+.gitignore
+
+# IDE
+.vs
+.vscode
+.idea
+*.user
+*.suo
+
+# Build output
+**/bin
+**/obj
+
+# Node
+**/node_modules
+
+# Claude Code
+.claude/projects
+.claude/state
+
+# Documentation & planning (not needed in image)
+docs/planning
+docs/prds
+
+# Infrastructure (not needed in app image)
+infra
+k8s
+
+# Test artifacts
+**/TestResults
+**/coverage
+
+# OS files
+Thumbs.db
+.DS_Store
+
+# Environment / secrets
+.env*
+**/.env
+**/.env.*
+!.env.example
+!.env.sample
+!.env.template
+!**/.env.example
+!**/.env.sample
+!**/.env.template
+
+# Temp files
+*.tmp
+*.log

.github/workflows/build.yml

@@ -101,6 +101,45 @@ jobs:
         working-directory: docs
         run: npm run test:unit
 
+  frontend:
+    name: Frontend build, lint and test
+    runs-on: ubuntu-latest
+
+    defaults:
+      run:
+        working-directory: src/UILayer/web
+
+    steps:
+      - uses: actions/checkout@v6
+
+      - name: Set up Node.js
+        uses: actions/setup-node@v6
+        with:
+          node-version: '22'
+          cache: 'npm'
+          cache-dependency-path: src/UILayer/web/package-lock.json
+
+      - name: Install dependencies
+        run: npm ci --legacy-peer-deps
+
+      - name: Lint
+        run: npm run lint
+
+      - name: Type check
+        run: npx tsc --noEmit --skipLibCheck
+        continue-on-error: true
+
+      - name: Test
+        run: npm test -- --ci --coverage --passWithNoTests
+
+      - name: Upload coverage
+        if: always()
+        uses: actions/upload-artifact@v4
+        with:
+          name: frontend-coverage
+          path: src/UILayer/web/coverage/
+          retention-days: 7
+
   # Uncomment when Rust sources are added to the repository
   # rust:
   #   name: Rust build and test

.github/workflows/codeql.yml

@@ -2,7 +2,7 @@ name: CodeQL Security Scanning
 
 on:
   pull_request:
-    branches: [main]
+    branches: [main, dev]
   schedule:
     # Run every Monday at 06:00 UTC
     - cron: '0 6 * * 1'
@@ -33,7 +33,9 @@ jobs:
       - name: Set up .NET
         uses: actions/setup-dotnet@v5
         with:
-          dotnet-version: '9.0.x'
+          dotnet-version: |
+            9.0.x
+            10.0.x
 
       - name: Initialize CodeQL
         uses: github/codeql-action/init@v4

.gitignore

@@ -38,6 +38,7 @@ orleans.codegen.cs
 node_modules/
 npm-debug.log
 package-lock.json
+!src/UILayer/web/package-lock.json
 
 # Next.js
 .next/