mirror of
https://github.com/Sea-Haven-Industries/.github-private.git
synced 2026-09-30 08:03:14 +00:00
Adds open-swe, orchestrator, pr-reviewer, sh-mcp (AI & Communication) and security-review, syslog-server, rustdesk-server, seahaven-external-dev-baseline (IT & Infrastructure). Profile went stale within a month of the INFRA-60 refresh; a provisioning-checklist step now guards against recurrence. |
||
|---|---|---|
| .. | ||
| README.md | ||
Sea Haven Industries
Internal software engineering organization for Sea Haven Industries. We build and maintain the serverless infrastructure, internal tools, and integrations that keep operations running.
Tech Stack
- Cloud: AWS (us-east-1) — Lambda, API Gateway, DynamoDB, S3, SES, Bedrock, ECS
- IaC: SAM (serverless stacks), CDK (complex infrastructure)
- Runtimes: Python 3.12, Node.js 22.x — all Lambda on arm64
- CI/CD: GitHub Actions with reusable workflows, OIDC deploy to AWS
Active Projects
Operations & Automation
| Repo | What it does |
|---|---|
| afterhours-shift-manager | Slack bot for managing after-hours on-call shifts with 3CX integration |
| seahaven-door-unlock-api | Yealink desk phone DSS key unlocks front door via LenelS2 Elements API |
| meal-order-manager | Automated weekly meal ordering from Redefine Meals — scraper, order form, payroll deductions |
Finance & Procurement
| Repo | What it does |
|---|---|
| procurement-ingest | Coupa PO + work order email ingestion pipeline |
| amazon-po-parser | Coupa PO email parser + Payee Central scraper for Amazon site code resolution |
| payments-dashboard | Internal payments tracking dashboard |
| stampli-bulk-editor | Mac GUI app for bulk-editing Stampli invoice pay dates |
AI & Communication
| Repo | What it does |
|---|---|
| seahaven-slack-bot | Internal Slack DM assistant powered by AWS Bedrock |
| exec-aide | Personal AI executive assistant — inbox monitoring, classification, Slack alerts |
| apm-wo-analysis | Daily APM work order comment classification (S3 + Athena + Lambda + Slack + Grafana) |
| proposal-system | AI-powered proposal generation and management |
| orchestrator | LangGraph + Composio multi-model task router (run.py) — cross-family review, scanning, connectors |
| open-swe | Open SWE autonomous coding agent (private fork) — LangGraph Cloud deployment, agent-team successor |
| pr-reviewer | Local FastAPI + Fireworks dashboard for reviewing org PRs |
| sh-mcp | Slack AI agents + trust-tiered MCP platform |
SHOC Dispatch & Ops
| Repo | What it does |
|---|---|
| shoc-backend | SHOC dispatch/operations platform — .NET 8 backend |
| shoc-frontend-new | SHOC dispatch/operations platform — React frontend |
IT & Infrastructure
| Repo | What it does |
|---|---|
| seahaven-account-baseline | Account-level AWS security baseline — CloudTrail + AWS Backup (CDK) |
| afi-backup-monitor | Afi.ai backup monitoring — auto-protect users, weekly Slack digest |
| front-integrations | Front platform integrations — SLA monitoring + Google Workspace user sync |
| forgejo | Self-hosted Forgejo git server for repo archival and mirroring |
| file-share | Personal file share — Samba + FileBrowser on EC2 |
| seahaven-site | Company website — static S3 deployment |
| security-review | Security review agent — deterministic scanners + agentic review paths (pre-push gate backstop) |
| syslog-server | UniFi syslog → CloudWatch collector on EC2 (VPN-only) |
| rustdesk-server | RustDesk Server Pro remote-desktop relay on EC2 (rustdesk.seahaven.com) |
| seahaven-external-dev-baseline | External-contractor AWS account baseline — OU, SCPs, permission boundary (account 396287094661) |
| .github | Org-level GitHub config — reusable CI/CD workflows, Claude Code review, compliance audits |
| .github-private | Org profile README (this page) — visible to org members |
| engineering-handbook | Engineering conventions and best practices |
Conventions
All projects follow the standards in engineering-handbook:
- Naming: kebab-case everywhere — repos, stacks, Lambda functions, DynamoDB tables, S3 buckets
- Branching:
mainis protected, all changes via PR, feature branches deleted after merge - Secrets: AWS Secrets Manager for all secrets, SSM Parameter Store for non-secret config only
- Lambda defaults: Python 3.12 or Node 22.x, arm64, 60-day log retention set explicitly
- CI/CD: Every deployable repo has a pipeline — no manual production deploys