rename(phase 1): CapaKraken → Nexus across code, UI, docs, CI #61

Merged

Hartmut merged 3 commits from rename/nexus-code into main 2026-05-21 16:28:42 +02:00

Conversation 0 Commits 3 Files Changed 943

+24548 -16832

Hartmut commented 2026-05-21 15:13:08 +02:00

Owner

Copy Link

Copy Source

Summary

First PR of a 4-phase rename. Touches 941 files: package scopes, source identifiers, brand strings, docs, CI workflow content. Does NOT touch the running infrastructure (DB name, compose project/volumes, db-guard default, env-var name) — that comes in Phase 3.

What changed

• @capakraken/* → @nexus/* across 12 packages (root + 11 workspaces), 1551 import lines migrated
• User-visible brand strings renamed: emails (password reset, invite, weekly digest, vacation), page titles, PWA manifest, mobile header, MFA backup-codes header, sign-in page, invite page, tooltips
• TOTP issuer "CapaKraken" → "Nexus" in apps/web/src/server/auth.ts + packages/api/src/router/user-self-service-procedure-support.ts (3 sites). Existing secrets still work; re-enrollment relabels them in users' authenticator apps
• Function rename: assertCapaKrakenDbTarget → assertNexusDbTarget (7 files)
• localStorage migration shim in apps/web/src/app/layout.tsx copies capakraken_* → nexus_* on first load, guarded by nexus_migrated_v1 sentinel. Also delegates caches.delete('capakraken-v2') for the SW cache. Removable in Phase 4.
• Email-domain fixtures @capakraken.{dev,app} → @nexus.{dev,app} in seed data, e2e specs, SMTP default fallback
• Dockerfile.dev / Dockerfile.prod / all .github/workflows/*.yml updated pnpm --filter @capakraken/* paths
• README, CLAUDE.md, LEARNINGS.md, all docs/*.md, .env.example, tooling/deploy/.env.production.example brand sweep

What's intentionally left for Phase 3

• PostgreSQL DB name capakraken + POSTGRES_USER capakraken
• Compose project name + volume names (capakraken_pgdata etc.)
• db-target-guard.mjs default expectedDatabase (still "capakraken")
• env-var CAPAKRAKEN_EXPECTED_DB_NAME
• Container DNS names in docker-compose.ci.yml
• tooling/deploy/deploy.env.example image refs (capakraken-app / capakraken-migrator)

Quality gates (all green locally)

• pnpm typecheck — 7/7 packages
• pnpm test:unit — 7/7 packages
• pnpm lint — 0 errors
• pnpm check:exports, check:imports, check:architecture — all pass

Test plan

• CI green on all jobs (Architecture, Lint, Typecheck, Unit Tests, Assistant Split, Build, E2E, Docker Deploy)
• docker compose --profile full up -d boots cleanly (DB still named capakraken — verify auth/login works)
• Mailhog inbox shows password-reset email subject "Nexus — reset your password"
• MFA enrollment QR code shows issuer "Nexus" in authenticator app
• Returning browser with old capakraken_* localStorage: page loads, keys silently migrated, sentinel set

Related plan

/home/hartmut/.claude/plans/expressive-tickling-feigenbaum.md — full 4-phase rename design.

🤖 Generated with Claude Code

## Summary First PR of a 4-phase rename. Touches **941 files**: package scopes, source identifiers, brand strings, docs, CI workflow content. **Does NOT touch** the running infrastructure (DB name, compose project/volumes, db-guard default, env-var name) — that comes in Phase 3. ## What changed - `@capakraken/*` → `@nexus/*` across 12 packages (root + 11 workspaces), 1551 import lines migrated - User-visible brand strings renamed: emails (password reset, invite, weekly digest, vacation), page titles, PWA manifest, mobile header, MFA backup-codes header, sign-in page, invite page, tooltips - TOTP issuer `"CapaKraken"` → `"Nexus"` in `apps/web/src/server/auth.ts` + `packages/api/src/router/user-self-service-procedure-support.ts` (3 sites). Existing secrets still work; re-enrollment relabels them in users' authenticator apps - Function rename: `assertCapaKrakenDbTarget` → `assertNexusDbTarget` (7 files) - **localStorage migration shim** in `apps/web/src/app/layout.tsx` copies `capakraken_*` → `nexus_*` on first load, guarded by `nexus_migrated_v1` sentinel. Also delegates `caches.delete('capakraken-v2')` for the SW cache. Removable in Phase 4. - Email-domain fixtures `@capakraken.{dev,app}` → `@nexus.{dev,app}` in seed data, e2e specs, SMTP default fallback - `Dockerfile.dev` / `Dockerfile.prod` / all `.github/workflows/*.yml` updated `pnpm --filter @capakraken/*` paths - README, CLAUDE.md, LEARNINGS.md, all `docs/*.md`, `.env.example`, `tooling/deploy/.env.production.example` brand sweep ## What's intentionally left for Phase 3 - PostgreSQL DB name `capakraken` + POSTGRES_USER `capakraken` - Compose project name + volume names (`capakraken_pgdata` etc.) - `db-target-guard.mjs` default `expectedDatabase` (still `"capakraken"`) - env-var `CAPAKRAKEN_EXPECTED_DB_NAME` - Container DNS names in `docker-compose.ci.yml` - `tooling/deploy/deploy.env.example` image refs (`capakraken-app` / `capakraken-migrator`) ## Quality gates (all green locally) - `pnpm typecheck` — 7/7 packages - `pnpm test:unit` — 7/7 packages - `pnpm lint` — 0 errors - `pnpm check:exports`, `check:imports`, `check:architecture` — all pass ## Test plan - [ ] CI green on all jobs (Architecture, Lint, Typecheck, Unit Tests, Assistant Split, Build, E2E, Docker Deploy) - [ ] `docker compose --profile full up -d` boots cleanly (DB still named `capakraken` — verify auth/login works) - [ ] Mailhog inbox shows password-reset email subject "Nexus — reset your password" - [ ] MFA enrollment QR code shows issuer "Nexus" in authenticator app - [ ] Returning browser with old `capakraken_*` localStorage: page loads, keys silently migrated, sentinel set ## Related plan `/home/hartmut/.claude/plans/expressive-tickling-feigenbaum.md` — full 4-phase rename design. 🤖 Generated with [Claude Code](https://claude.com/claude-code)

Hartmut added 1 commit 2026-05-21 15:13:08 +02:00

rename(phase 1): CapaKraken → Nexus across code, UI, docs, CI ... 4a5edeef3e

- @capakraken/* → @nexus/* across 12 packages (root + 11 workspaces),
  1551 import lines migrated via codemod
- User-visible brand strings renamed (emails, page titles, PWA
  manifest, mobile header, MFA backup-codes header, tooltips, signin
  page, invite page, weekly digest, install prompt)
- TOTP issuer "CapaKraken" → "Nexus" (existing secrets still valid;
  re-enrollment relabels them in users' authenticator apps)
- Function rename: assertCapaKrakenDbTarget → assertNexusDbTarget
- LocalStorage migration shim in apps/web/src/app/layout.tsx copies
  capakraken_* → nexus_* on first load (guarded by nexus_migrated_v1
  sentinel; runs once per browser, then never again)
- Service-worker cache name capakraken-v2 → nexus-v2 with one-time
  caches.delete('capakraken-v2') from the same shim
- Email-domain fixtures @capakraken.{dev,app} → @nexus.{dev,app} in
  seed data, e2e specs, SMTP default fallback
- Dockerfile.dev / Dockerfile.prod / all .github/workflows/*.yml
  pnpm --filter @capakraken/* → @nexus/*
- README, CLAUDE.md, LEARNINGS.md, all docs/*.md, .env.example,
  tooling/deploy/.env.production.example brand sweep

Phase 1 deliberately leaves untouched (handled in Phase 3 cutover):
- PostgreSQL DB name "capakraken" and POSTGRES_USER "capakraken"
- Volume names capakraken_pgdata etc.
- Compose project name "capakraken" / "capakraken-prod"
- db-target-guard default expectedDatabase
- env-var CAPAKRAKEN_EXPECTED_DB_NAME
- Container DNS names in docker-compose.ci.yml

Quality gates green: pnpm typecheck (7/7), pnpm test:unit (7/7),
pnpm lint (0 errors), check:exports/imports/architecture all pass.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

Hartmut referenced this issue from a commit 2026-05-21 15:31:15 +02:00

fix(ci): clear PR #61 lint error + bump fast-uri/next over high-sev advisories

Hartmut added 1 commit 2026-05-21 15:31:15 +02:00

fix(ci): clear PR #61 lint error + bump fast-uri/next over high-sev advisories ... 2c2f4417c6

CI on PR #61 surfaced three issues. Two are real and fixed here; the
third was an act-runner flake (actions/setup-node container cleanup
race) that resolves on retrigger.

1. Lint error in apps/web/src/components/allocations/AllocationModal.tsx
   The `// eslint-disable-next-line @typescript-eslint/no-explicit-any`
   sat one line above the `as any` cast, so it suppressed nothing and
   eslint flagged it as an unused directive. Moved the comment to the
   line immediately above the cast.

2. pnpm audit --audit-level=high reported 9 high-severity findings,
   all transitive through two packages:
   - fast-uri <=3.1.1 (GHSA-q3j6-qgpj-74h6, host confusion via
     percent-encoded authority delimiters) — pinned to >=3.1.2 via
     pnpm.overrides since it's only reachable through @sentry/webpack-
     plugin > webpack > schema-utils > ajv > fast-uri
   - next 15.5.15 — bumped to ^15.5.16 (patched range starts here)

Quality gates green: typecheck (7/7), test:unit (7/7), lint (0 errors).

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

Hartmut added 1 commit 2026-05-21 16:11:22 +02:00

rename(phase 1): cover .sh files missed by initial codemod ... 29235e3208

The Phase 1 codemod only scanned .ts/.tsx/.js/.mjs/.cjs/.json, so two
shell scripts that reference workspace packages stayed pointing at the
old `@capakraken/*` names. The dev container's entrypoint then printed
"No projects matched the filters in /app" on every pnpm --filter call,
the app never bound to port 3100, and Fresh-Linux Docker Deploy red on
run 154.

- tooling/docker/app-dev-start.sh: pnpm --filter @capakraken/{db,web}
  → @nexus/{db,web} (5 occurrences); /tmp/capakraken-dev-home → /tmp/
  nexus-dev-home
- scripts/stop.sh: /tmp/capakraken-dev.pid → /tmp/nexus-dev.pid

Deferred to Phase 3 (these reference live infrastructure, not package
names): scripts/harden-postgres.sh DB_USER/DB_NAME defaults, restart.sh
volume names capakraken_node_modules/_next, scripts/start.sh
pg_isready -U capakraken -d capakraken.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

Hartmut merged commit b41c1d2501 into main 2026-05-21 16:28:42 +02:00

Sign in to join this conversation.

Reviewers

No Reviewers

Labels

Clear labels

cdp

CDP (Client Data Protection) compliance

epic

Parent/umbrella ticket

not-applicable

Control does not apply to CapaKraken scope

security

Security / compliance work

No Label

Milestone

No items

No Milestone

Projects

Clear projects

No project

Assignees

Clear assignees

Hartmut

No Assignees

1 Participants

Notifications

Subscribe

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: Hartmut/Nexus#61