# Sea Haven Industries

Internal software engineering organization for Sea Haven Industries. We build and maintain the serverless infrastructure, internal tools, and integrations that keep operations running.

## Tech Stack

- **Cloud:** AWS (us-east-1) — Lambda, API Gateway, DynamoDB, S3, SES, Bedrock, ECS
- **IaC:** SAM (serverless stacks), CDK (complex infrastructure)
- **Runtimes:** Python 3.12, Node.js 22.x — all Lambda on arm64
- **CI/CD:** GitHub Actions with reusable workflows, OIDC deploy to AWS

## Active Projects

### Operations & Automation

| Repo | What it does |
|------|-------------|
| **afterhours-shift-manager** | After-hours on-call shift management with 3CX integration |
| **ring-scheduler-3cx** | Scheduled ring group routing for 3CX phone system |
| **seahaven-door-unlock-api** | Yealink desk phone DSS key unlocks front door via LenelS2 Elements API |
| **workorder-ingest** | SES email pipeline — parses Amazon APM work orders with Claude AI, stores in DynamoDB |

### Finance & Procurement

| Repo | What it does |
|------|-------------|
| **po-ingest** | Coupa PO email ingestion pipeline |
| **amazon-po-parser** | Coupa PO parser + Payee Central scraper for Amazon site code resolution |
| **expense-approval-bot** | Slack bot for expense report approvals via Stampli |
| **payments-dashboard** | Internal payments tracking dashboard |
| **stampli-bulk-editor** | Mac GUI app for bulk-editing Stampli invoice pay dates |

### AI & Communication

| Repo | What it does |
|------|-------------|
| **seahaven-slack-bot** | Internal Slack DM assistant powered by AWS Bedrock |
| **exec-aide** | Personal AI executive assistant — inbox monitoring, classification, Slack alerts |

### IT & Infrastructure

| Repo | What it does |
|------|-------------|
| **afi-backup-monitor** | Afi.ai backup monitoring — auto-protect users, weekly Slack digest |
| **seahaven-site** | Company website — static S3 deployment |
| **.github** | Org-level GitHub config — reusable CI/CD workflows, Claude Code review, compliance audits |
| **engineering-handbook** | Engineering conventions and best practices |

## Conventions

All projects follow the standards in [engineering-handbook](https://github.com/Sea-Haven-Industries/engineering-handbook):

- **Naming:** kebab-case everywhere — repos, stacks, Lambda functions, DynamoDB tables, S3 buckets
- **Branching:** `main` is protected, all changes via PR, feature branches deleted after merge
- **Secrets:** AWS Secrets Manager for all secrets, SSM Parameter Store for non-secret config only
- **Lambda defaults:** Python 3.12 or Node 22.x, arm64, 60-day log retention set explicitly
- **CI/CD:** Every deployable repo has a pipeline — no manual production deploys