# Sandbox Deployment Platform (SDP)

Internal deployment platform for Backend/QA. Lets a developer deploy a feature
branch into an isolated sandbox, with the API Gateway routing selected
services to the sandbox and the rest to OCP. See [REQUIREMENTS.md](REQUIREMENTS.md)
for the full spec.

## Layout

```
.
├── protocol/         # shared wire types (Event, DeployRequest)
├── control-plane/    # Go. HTTP API + WS hub + SQLite/.log persistence
├── agent-micro/      # Go. Runs on 172.18.136.92, deploys Go microservices
├── agent-gateway/    # Go. Runs on 172.18.139.186, deploys the API Gateway
├── dashboard/        # NextJS static export, served by nginx
└── nginx/            # reverse proxy + try_files for the dashboard
```

## End-to-end smoke (manual)

Prereqs: Go 1.22+, Node 18+, Docker on each agent VM, alpine:3.20 loaded
locally (`docker load -i alpine.tar`).

1. Build everything:
   ```bash
   cd protocol && go build ./...
   cd ../control-plane && go build -o bin/control-plane ./cmd/control-plane
   cd ../agent-micro && go build -o bin/agent-micro ./cmd/agent-micro
   cd ../agent-gateway && go build -o bin/agent-gateway ./cmd/agent-gateway
   cd ../dashboard && npm install && npm run build
   ```

2. Start the control plane:
   ```bash
   ./control-plane/bin/control-plane -addr :8080 -data ./data
   ```

3. Start the micro agent on 172.18.136.92:
   ```bash
   SDP_CP_URL=ws://172.18.139.186:8080/ws/agent SDP_NODE_ID=micro \
     ./agent-micro/bin/agent-micro
   ```

4. Start the gateway agent on 172.18.139.186:
   ```bash
   SDP_CP_URL=ws://172.18.139.186:8080/ws/agent SDP_NODE_ID=gateway \
     ./agent-gateway/bin/agent-gateway
   ```

5. Point nginx at the dashboard build (`dashboard/out/`) and the control
   plane (`:8080`). See `nginx/nginx.conf`.

6. Open `http://<nginx-host>/`, sign in with any Bitbucket creds, pick
   `account` → `feature/login-error`, click Deploy. Watch the stage
   checkmarks and the log stream.

## Notes

- Credentials are passed per-operation to the agent and never persisted
  on the agent longer than the operation.
- The runtime model is `alpine:3.20` + bind-mounted repo + exec'd binary.
  No Dockerfile build step on the agent.
- Logs persist to `<data>/logs/<deploymentId>.log`. SQLite holds progress
  snapshots and final state.