mirror of
https://github.com/Sea-Haven-Industries/.github-private.git
synced 2026-09-30 06:53:14 +00:00
Adds open-swe, orchestrator, pr-reviewer, sh-mcp (AI & Communication) and security-review, syslog-server, rustdesk-server, seahaven-external-dev-baseline (IT & Infrastructure). Profile went stale within a month of the INFRA-60 refresh; a provisioning-checklist step now guards against recurrence.
4.2 KiB
4.2 KiB
Sea Haven Industries
Internal software engineering organization for Sea Haven Industries. We build and maintain the serverless infrastructure, internal tools, and integrations that keep operations running.
Tech Stack
- Cloud: AWS (us-east-1) — Lambda, API Gateway, DynamoDB, S3, SES, Bedrock, ECS
- IaC: SAM (serverless stacks), CDK (complex infrastructure)
- Runtimes: Python 3.12, Node.js 22.x — all Lambda on arm64
- CI/CD: GitHub Actions with reusable workflows, OIDC deploy to AWS
Active Projects
Operations & Automation
| Repo | What it does |
|---|---|
| afterhours-shift-manager | Slack bot for managing after-hours on-call shifts with 3CX integration |
| seahaven-door-unlock-api | Yealink desk phone DSS key unlocks front door via LenelS2 Elements API |
| meal-order-manager | Automated weekly meal ordering from Redefine Meals — scraper, order form, payroll deductions |
Finance & Procurement
| Repo | What it does |
|---|---|
| procurement-ingest | Coupa PO + work order email ingestion pipeline |
| amazon-po-parser | Coupa PO email parser + Payee Central scraper for Amazon site code resolution |
| payments-dashboard | Internal payments tracking dashboard |
| stampli-bulk-editor | Mac GUI app for bulk-editing Stampli invoice pay dates |
AI & Communication
| Repo | What it does |
|---|---|
| seahaven-slack-bot | Internal Slack DM assistant powered by AWS Bedrock |
| exec-aide | Personal AI executive assistant — inbox monitoring, classification, Slack alerts |
| apm-wo-analysis | Daily APM work order comment classification (S3 + Athena + Lambda + Slack + Grafana) |
| proposal-system | AI-powered proposal generation and management |
| orchestrator | LangGraph + Composio multi-model task router (run.py) — cross-family review, scanning, connectors |
| open-swe | Open SWE autonomous coding agent (private fork) — LangGraph Cloud deployment, agent-team successor |
| pr-reviewer | Local FastAPI + Fireworks dashboard for reviewing org PRs |
| sh-mcp | Slack AI agents + trust-tiered MCP platform |
SHOC Dispatch & Ops
| Repo | What it does |
|---|---|
| shoc-backend | SHOC dispatch/operations platform — .NET 8 backend |
| shoc-frontend-new | SHOC dispatch/operations platform — React frontend |
IT & Infrastructure
| Repo | What it does |
|---|---|
| seahaven-account-baseline | Account-level AWS security baseline — CloudTrail + AWS Backup (CDK) |
| afi-backup-monitor | Afi.ai backup monitoring — auto-protect users, weekly Slack digest |
| front-integrations | Front platform integrations — SLA monitoring + Google Workspace user sync |
| forgejo | Self-hosted Forgejo git server for repo archival and mirroring |
| file-share | Personal file share — Samba + FileBrowser on EC2 |
| seahaven-site | Company website — static S3 deployment |
| security-review | Security review agent — deterministic scanners + agentic review paths (pre-push gate backstop) |
| syslog-server | UniFi syslog → CloudWatch collector on EC2 (VPN-only) |
| rustdesk-server | RustDesk Server Pro remote-desktop relay on EC2 (rustdesk.seahaven.com) |
| seahaven-external-dev-baseline | External-contractor AWS account baseline — OU, SCPs, permission boundary (account 396287094661) |
| .github | Org-level GitHub config — reusable CI/CD workflows, Claude Code review, compliance audits |
| .github-private | Org profile README (this page) — visible to org members |
| engineering-handbook | Engineering conventions and best practices |
Conventions
All projects follow the standards in engineering-handbook:
- Naming: kebab-case everywhere — repos, stacks, Lambda functions, DynamoDB tables, S3 buckets
- Branching:
mainis protected, all changes via PR, feature branches deleted after merge - Secrets: AWS Secrets Manager for all secrets, SSM Parameter Store for non-secret config only
- Lambda defaults: Python 3.12 or Node 22.x, arm64, 60-day log retention set explicitly
- CI/CD: Every deployable repo has a pipeline — no manual production deploys