Rebrand: TeamClaw -> Clawmates (clawmates.work)

Full-depth rename per the approved plan; the 'claw' product vocabulary (claws, /claws routes, clawId, Claw Chat) stays — it is now the brand. - Display brand: Clawmates (manifest, titles, hero, login/rail logo 'clawmates'); default host app.clawmates.work; registry ghcr.io/clawmates - Crates tc-* -> cm-* (16 crates + all imports); binaries clawmates-server/broker/bundler; images clawmates/*; env prefix CLAWMATES_* (+ CM_TEST_DATABASE_URL / CM_LIVE_LLM); config clawmates.toml; helm chart deploy/helm/clawmates with clawmates-* resources; db names clawmates*; sockets /run/clawmates; cookie cm_session; kind cluster clawmates-test; seccomp node profile clawmates-agent-profile.json - All 9 Playwright brand assertions updated in lockstep; historical spec document left untouched as the only remaining 'TeamClaw' - Local env migrated: dev pg clawmates-dev-pg/clawmates_dev, shared test server clawmates-test-pg, kind cluster recreated with image + profile, compose images rebuilt under clawmates/* Verified end to end: 161 Rust + 68 frontend tests, 29 Playwright journeys, 4 live kind tests, helm/install/LOC/placeholder gates, and the clean-room install rehearsal serving the clawmates login page from a signed bundle of the rebuilt images. Co-Authored-By: Claude Fable 5 <[email protected]>
2026-06-10 12:31:25 -05:00
parent 8046853feb
commit add4f79fed
209 changed files with 1429 additions and 1422 deletions
@@ -0,0 +1,61 @@
+use cm_domain::{AgentId, UserId, WorkspaceId};
+use sqlx::PgPool;
+use uuid::Uuid;
+
+use crate::DbError;
+
+/// Who performed an audited action (§15: every decision is attributable).
+#[derive(Debug, Clone, Copy)]
+pub enum Actor {
+    User(UserId),
+    Agent(AgentId),
+    System,
+}
+
+impl Actor {
+    fn kind(&self) -> &'static str {
+        match self {
+            Actor::User(_) => "user",
+            Actor::Agent(_) => "agent",
+            Actor::System => "system",
+        }
+    }
+
+    fn id(&self) -> Option<Uuid> {
+        match self {
+            Actor::User(id) => Some(id.as_uuid()),
+            Actor::Agent(id) => Some(id.as_uuid()),
+            Actor::System => None,
+        }
+    }
+}
+
+/// Appends an audit entry and returns its sequence id. The table rejects
+/// UPDATE/DELETE at the database level (see migration 0001).
+pub async fn append(
+    pool: &PgPool,
+    workspace_id: WorkspaceId,
+    actor: Actor,
+    event_type: &str,
+    subject_type: &str,
+    subject_id: &str,
+    detail: serde_json::Value,
+) -> Result<i64, DbError> {
+    let row = sqlx::query!(
+        "INSERT INTO audit_log
+            (workspace_id, actor_kind, actor_id, event_type, subject_type,
+             subject_id, detail)
+         VALUES ($1, $2, $3, $4, $5, $6, $7)
+         RETURNING id",
+        workspace_id.as_uuid(),
+        actor.kind(),
+        actor.id(),
+        event_type,
+        subject_type,
+        subject_id,
+        detail,
+    )
+    .fetch_one(pool)
+    .await?;
+    Ok(row.id)
+}