Add company/ export snapshot for re-import capability

Exports current CartSnitch company configuration (agents, skills, COMPANY.md, README, .paperclip.yaml) into the company/ directory. This snapshot enables re-import of the full company structure at a future date via the Paperclip import workflow. Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-03-31 17:15:55 +00:00
parent f495ddbb6e
commit 7956bfd8c0
113 changed files with 4575 additions and 0 deletions
@@ -0,0 +1,20 @@
+- id: gh-001
+  fact: "Branch protection on cartsnitch/cartsnitch main requires 2 approving GitHub reviews and dismisses stale reviews on push"
+  source: PR #57 merge attempt, 2026-03-30
+  confidence: 1.0
+  created: "2026-03-30"
+  status: active
+
+- id: gh-002
+  fact: "cartsnitch-cto GitHub App (ID 3140751, Installation 117768296) is the only agent identity that can submit PR review approvals"
+  source: PR #57 review, verified 2026-03-30
+  confidence: 1.0
+  created: "2026-03-30"
+  status: active
+
+- id: gh-003
+  fact: "Checkout Charlie (QA) has no GitHub App — cannot submit GitHub PR reviews. Blocks 2-approval branch protection. Tracked in CAR-144"
+  source: Charlie's comment on CAR-138, 2026-03-30
+  confidence: 1.0
+  created: "2026-03-30"
+  status: active
@@ -0,0 +1,11 @@
+# CartSnitch GitHub Infrastructure
+
+GitHub org: `cartsnitch`. Branch protection on `cartsnitch/cartsnitch` requires 2 approving reviews (CTO + QA) and dismisses stale reviews on push.
+
+## GitHub Apps
+- **cartsnitch-cto** (App ID 3140751, Installation 117768296) — used by CTO (Savannah Savings). Has `pull_requests:write`, `contents:write`. Can submit PR reviews.
+- **cartsnitch-engineer** — used by engineering agents (Betty, Steve). Has `contents:write`. Authors PRs.
+- **cpfarhood-k8s** — used by CI. Has `contents:write` but missing `pull_requests:write`.
+
+## Known Gap (as of 2026-03-30)
+Checkout Charlie (QA) has NO GitHub App. Cannot submit GitHub PR review approvals. This blocks every PR requiring QA approval on GitHub. Tracked in CAR-144.
@@ -0,0 +1,23 @@
+# CartSnitch — Company Summary
+
+Consumer savings and grocery coupon platform. Self-hosted grocery price intelligence and shrinkflation monitoring.
+
+## Services
+- **Frontend**: React 18 + TypeScript + Tailwind + Vite (mobile-first PWA, 375px primary)
+- **Auth**: Node.js + Better-Auth (session mgmt, email/password)
+- **API**: Python + FastAPI (REST gateway)
+- **Common**: Python + SQLAlchemy (shared models, Alembic migrations)
+- **ReceiptWitness**: Python + Playwright (purchase data scraping from Meijer/Kroger/Target)
+- **Infra**: Flux GitOps, Kubernetes, Kustomize overlays
+
+## Key Routes
+Public: /login, /register, /forgot-password
+Protected: /, /purchases, /purchases/:id, /products, /products/:id, /compare/:productId, /coupons, /alerts, /settings, /account-linking
+
+## Auth Flow
+Better-Auth with httpOnly session cookies, 7-day expiry. Session validated via cookie on all API calls.
+
+## Known Fragile Areas
+- Auth registration/login (3 production escapes: CAR-126, CAR-128, CAR-147)
+- Frontend/API contract mismatches (CAR-147)
+- Dev environment availability (CAR-127, CAR-52)