Merge branch 'develop'

Author: d4v3-rm

CHANGELOG.md

@@ -3,12 +3,24 @@
 Generated by `npm run set:version`.
 The local changelog is rebuilt from the available `v*` release tags and the current `HEAD` range.
 The script does not create tags locally.
-## v0.48.1 - 2026-04-20
+## v0.48.1 - 2026-04-22
 
 - Release source: local versioning run
+- Base ref: `v0.48.1`
+- Range: `v0.48.1..HEAD`
+- Included commits: 2
+
+### Other (2)
+
+- Refactor CLI layout and polish Atlas dashboard UX (`9dac4ef`)
+- Simplify project scaffolding layout (`5b998ff`)
+
+## v0.48.1 - 2026-04-21
+
+- Release tag: `v0.48.1`
 - Base ref: `v0.45.2`
-- Range: `v0.45.2..HEAD`
-- Included commits: 7
+- Range: `v0.45.2..v0.48.1`
+- Included commits: 8
 
 ### Features (3)
 
@@ -24,10 +36,11 @@ The script does not create tags locally.
 
 - [atlas-dashboard] add layered dashboard foundations (`90b6e58`)
 
-### CI / Maintenance (2)
+### CI / Maintenance (3)
 
 - [atlas-dashboard] harden local vite dashboard runtime (`a890979`)
 - [release] split build and publish workflows (`7e42f8e`)
+- [release] v0.48.1 (`0f4343c`)
 
 ## v0.45.2 - 2026-04-20
 

README.md

@@ -11,7 +11,7 @@
 ![Persistence](https://img.shields.io/badge/Persistence-Docker%20Volumes-CA8A04)
 
 > 🧭 **Atlas Lab** is a localhost-first self-hosted platform made of a Node.js/TypeScript CLI, a layered Docker Compose stack, and an operational React dashboard served by the gateway.
-> It is designed to provide Git hosting, project and design collaboration, internal documentation, collaborative markdown notes, optional local AI services with Open WebUI, Ollama, and n8n, browser-based development workbenches, and structured image/volume backup workflows on a single machine.
+> It is designed to provide Git hosting, project and design collaboration, internal documentation, collaborative markdown notes, browser-delivered Obsidian vaults, optional local AI services with Open WebUI, Ollama, and n8n, browser-based development workbenches, and structured image/volume backup workflows on a single machine.
 
 ---
 
@@ -21,7 +21,7 @@ Atlas Lab is built for a practical goal: run a repeatable local engineering plat
 
 ### What it gives you
 
-- 🧱 An always-on **core layer** with Atlas Dashboard, Gitea, Plane, Penpot, BookStack, and HedgeDoc
+- 🧱 An always-on **core layer** with Atlas Dashboard, Gitea, Plane, Penpot, BookStack, HedgeDoc, and Obsidian
 - 🧠 An optional **AI LLM layer** with Open WebUI, Ollama, and n8n
 - 🛠️ An optional **workbench layer** with browser-based Node and Python environments plus shared PostgreSQL
 - 🔐 HTTPS-only ingress on `localhost`
@@ -66,7 +66,7 @@ Atlas Lab is split into **three explicit layers**:
 
 | Layer | Status | Includes | Purpose |
 | --- | --- | --- | --- |
-| `core` | always on | gateway, Atlas Dashboard, Gitea, Plane, Penpot, BookStack, HedgeDoc, and their backing data services | baseline platform |
+| `core` | always on | gateway, Atlas Dashboard, Gitea, Plane, Penpot, BookStack, HedgeDoc, Obsidian, and their backing data services | baseline platform |
 | `ai-llm` | optional | Open WebUI, Ollama, n8n, AI gateway | local AI workflows and automation |
 | `workbench` | optional | Node Forge, Python Grid, shared PostgreSQL, workbench gateway | browser-based development |
 
@@ -121,6 +121,7 @@ The only host-level TCP service exposed directly is PostgreSQL from the workbenc
 | Python Grid | `workbench` | `https://localhost:8451/` | Python workspace |
 | HedgeDoc | `core` | `https://localhost:8452/` | collaborative markdown notes |
 | n8n | `ai-llm` | `https://localhost:8453/` | workflow automation and agent orchestration |
+| Obsidian | `core` | `https://localhost:8454/` | browser knowledge vault |
 | PostgreSQL | `workbench` | `localhost:15432` | host-side desktop access |
 
 ### Operational rules
@@ -136,7 +137,7 @@ The only host-level TCP service exposed directly is PostgreSQL from the workbenc
 | Network | Type | Purpose |
 | --- | --- | --- |
 | `edge-net` | exposed | published ingress ports |
-| `apps-net` | internal | Gitea, BookStack, HedgeDoc, and shared browser-facing core services |
+| `apps-net` | internal | Gitea, BookStack, HedgeDoc, Obsidian, and shared browser-facing core services |
 | `ai-llm-net` | internal | Open WebUI, Ollama, and n8n |
 | `data-net` | internal | data services and infrastructure databases |
 | `workbench-net` | internal | workbenches and PostgreSQL |
@@ -168,6 +169,7 @@ Key volumes include:
 - `bookstack-db`
 - `hedgedoc-db`
 - `hedgedoc-uploads`
+- `obsidian-config`
 - `ollama-data`
 - `n8n-data`
 - `open-webui-data`
@@ -214,6 +216,7 @@ The AI LLM layer requires:
 - `8451`
 - `8452`
 - `8453`
+- `8454`
 - `15432` when `workbench` is enabled
 
 ### Windows PowerShell note
@@ -392,10 +395,10 @@ The dashboard frontend lives in:
 
 - [`apps/atlas-dashboard`](./apps/atlas-dashboard)
 
-Its toolchain config lives in:
+Its toolchain config now lives alongside the app:
 
-- [`config/atlas-dashboard/vite.config.ts`](./config/atlas-dashboard/vite.config.ts)
-- [`config/atlas-dashboard/tsconfig.json`](./config/atlas-dashboard/tsconfig.json)
+- [`apps/atlas-dashboard/vite.config.ts`](./apps/atlas-dashboard/vite.config.ts)
+- [`apps/atlas-dashboard/tsconfig.json`](./apps/atlas-dashboard/tsconfig.json)
 
 ### Responsibilities
 
@@ -460,6 +463,7 @@ Bootstrap is idempotent and reconciles Gitea, BookStack, Plane, Penpot, and, whe
 | BookStack | `https://localhost:8449/` | `root@bookstack.local / RootBookStack!2026` |
 | HedgeDoc | `https://localhost:8452/` | local email accounts enabled; create the first account in-app |
 | n8n | `https://localhost:8453/` | owner bootstrap `root@n8n.local / RootN8NApp!2026` |
+| Obsidian | `https://localhost:8454/` | basic auth `atlas / RootObsidian!2026` |
 | PostgreSQL host-side | `localhost:15432` | `postgres / RootPostgresDev!2026` |
 
 For DBeaver and other desktop PostgreSQL clients:
@@ -476,13 +480,32 @@ For DBeaver and other desktop PostgreSQL clients:
 
 | Area | Purpose | Paths |
 | --- | --- | --- |
-| CLI | application logic and commands | `src/`, `bin/` |
-| dashboard | React frontend | `apps/atlas-dashboard`, `config/atlas-dashboard/` |
-| Compose | layer orchestration | `infra/docker/compose*.yml` |
-| images | Dockerfiles and startup scripts | `infra/docker/images/` |
-| gateway | runtime templates and briefings | `config/gateway/templates/` |
-| env | operational configuration | `env/lab.env` |
-| repo scripts | versioning and support tooling | `scripts/` |
+| CLI shell | entrypoint, command registration, terminal rendering | `src/cli/`, `bin/` |
+| domain services | runtime orchestration, diagnostics, integrations, archive workflows | `src/services/` |
+| shared contracts | config schemas, Docker helpers, utilities, shared types | `src/config/`, `src/lib/`, `src/types/`, `src/utils/` |
+| dashboard | React frontend plus local Vite and TS config | `apps/atlas-dashboard/` |
+| runtime assets | packaged env files and gateway templates | `env/`, `config/gateway/templates/` |
+| infrastructure | Compose layers, Dockerfiles, startup scripts | `infra/docker/` |
+| verification and tooling | unit tests, release helpers, CI support | `tests/`, `scripts/`, `.github/` |
+
+Source tree:
+
+```text
+src/
+  cli/
+    commands/
+    ui/
+  config/
+  lib/
+  services/
+    archive/
+    diagnostics/
+    integrations/
+    orchestration/
+    runtime/
+  types/
+  utils/
+```
 
 Key files:
 
@@ -492,9 +515,11 @@ Key files:
 - [`infra/docker/compose.yml`](./infra/docker/compose.yml)
 - [`infra/docker/compose.ai-llm.yml`](./infra/docker/compose.ai-llm.yml)
 - [`infra/docker/compose.workbench.yml`](./infra/docker/compose.workbench.yml)
-- [`src/bin/atlas-lab.ts`](./src/bin/atlas-lab.ts)
-- [`src/app/create-cli-app.ts`](./src/app/create-cli-app.ts)
-- [`src/services/`](./src/services)
+- [`src/cli/atlas-lab.ts`](./src/cli/atlas-lab.ts)
+- [`src/cli/create-cli-app.ts`](./src/cli/create-cli-app.ts)
+- [`src/services/orchestration/stack.service.ts`](./src/services/orchestration/stack.service.ts)
+- [`src/services/runtime/project.service.ts`](./src/services/runtime/project.service.ts)
+- [`src/lib/compose.ts`](./src/lib/compose.ts)
 - [`config/gateway/templates/Caddyfile.template`](./config/gateway/templates/Caddyfile.template)
 - [`config/gateway/templates/runtime/lab-config.json.template`](./config/gateway/templates/runtime/lab-config.json.template)
 - [`infra/docker/images/gateway/bootstrap-gateway.sh`](./infra/docker/images/gateway/bootstrap-gateway.sh)
@@ -509,7 +534,7 @@ Expected behavior. The lab uses a self-signed certificate.
 
 ### `atlas-lab up` fails during port preflight
 
-One of the configured lab ports (`8443-8449`, `8450-8453`, or `15432`) is occupied or excluded by the system.
+One of the configured lab ports (`8443-8454` or `15432`) is occupied or excluded by the system.
 
 ```powershell
 atlas-lab status
@@ -609,6 +634,11 @@ This project is distributed under the **MIT** license.
 - Docker image: https://docs.hedgedoc.org/setup/docker/
 - Configuration: https://docs.hedgedoc.org/configuration/
 
+### Obsidian
+
+- Docker Hub image: https://hub.docker.com/r/linuxserver/obsidian
+- Source repository: https://github.com/linuxserver/docker-obsidian
+
 ### Open WebUI
 
 - Environment configuration: https://docs.openwebui.com/getting-started/env-configuration/

apps/atlas-dashboard/src/entities/dashboard/model/builders/dashboard-ai.builder.ts

@@ -66,11 +66,13 @@ export function createAiServices(
         },
         {
           label: labels.rootEmail,
-          value: config.services.openWebUi.rootEmail
+          value: config.services.openWebUi.rootEmail,
+          concealed: true
         },
         {
           label: labels.password,
-          value: config.services.openWebUi.rootPassword
+          value: config.services.openWebUi.rootPassword,
+          concealed: true
         }
       ],
       description: t('dashboard.aiServices.openWebUi.description'),
@@ -92,11 +94,13 @@ export function createAiServices(
         },
         {
           label: labels.gatewayUser,
-          value: config.services.ollama.gatewayUser
+          value: config.services.ollama.gatewayUser,
+          concealed: true
         },
         {
           label: labels.gatewayPassword,
-          value: config.services.ollama.gatewayPassword
+          value: config.services.ollama.gatewayPassword,
+          concealed: true
         },
         {
           label: labels.usage,
@@ -130,11 +134,13 @@ export function createAiServices(
         },
         {
           label: labels.ownerEmail,
-          value: config.services.n8n.ownerEmail
+          value: config.services.n8n.ownerEmail,
+          concealed: true
         },
         {
           label: labels.ownerPassword,
-          value: config.services.n8n.ownerPassword
+          value: config.services.n8n.ownerPassword,
+          concealed: true
         }
       ],
       description: t('dashboard.aiServices.n8n.description'),

apps/atlas-dashboard/src/entities/dashboard/model/builders/dashboard-core.builder.ts

@@ -34,15 +34,18 @@ export function createCoreServices(
         },
         {
           label: labels.rootUser,
-          value: config.services.gitea.rootUsername
+          value: config.services.gitea.rootUsername,
+          concealed: true
         },
         {
           label: labels.password,
-          value: config.services.gitea.rootPassword
+          value: config.services.gitea.rootPassword,
+          concealed: true
         },
         {
           label: labels.email,
-          value: config.services.gitea.rootEmail
+          value: config.services.gitea.rootEmail,
+          concealed: true
         }
       ],
       description: t('dashboard.services.gitea.description'),
@@ -68,11 +71,13 @@ export function createCoreServices(
         },
         {
           label: labels.rootEmail,
-          value: config.services.bookStack.rootEmail
+          value: config.services.bookStack.rootEmail,
+          concealed: true
         },
         {
           label: labels.password,
-          value: config.services.bookStack.rootPassword
+          value: config.services.bookStack.rootPassword,
+          concealed: true
         },
         {
           label: labels.accessMode,
@@ -102,11 +107,13 @@ export function createCoreServices(
         },
         {
           label: labels.rootEmail,
-          value: config.services.plane.rootEmail
+          value: config.services.plane.rootEmail,
+          concealed: true
         },
         {
           label: labels.password,
-          value: config.services.plane.rootPassword
+          value: config.services.plane.rootPassword,
+          concealed: true
         },
         {
           label: labels.accessMode,
@@ -136,11 +143,13 @@ export function createCoreServices(
         },
         {
           label: labels.rootEmail,
-          value: config.services.penpot.rootEmail
+          value: config.services.penpot.rootEmail,
+          concealed: true
         },
         {
           label: labels.password,
-          value: config.services.penpot.rootPassword
+          value: config.services.penpot.rootPassword,
+          concealed: true
         },
         {
           label: labels.accessMode,
@@ -164,10 +173,6 @@ export function createCoreServices(
           label: labels.endpoint,
           value: config.services.hedgeDoc.url
         },
-        {
-          label: labels.accessMode,
-          value: t('values.directAppOnboarding')
-        },
         {
           label: labels.usage,
           value: t('values.collaborativeMarkdown')
@@ -180,6 +185,43 @@ export function createCoreServices(
       status: t('values.collaborativeNotes'),
       title: t('dashboard.services.hedgeDoc.title'),
       tone: 'core'
+    },
+    {
+      action: {
+        href: config.services.obsidian.url,
+        label: t('dashboard.services.obsidian.action')
+      },
+      credentials: [
+        {
+          label: labels.endpoint,
+          value: config.services.obsidian.url
+        },
+        {
+          label: labels.username,
+          value: config.services.obsidian.username,
+          concealed: true
+        },
+        {
+          label: labels.password,
+          value: config.services.obsidian.password,
+          concealed: true
+        },
+        {
+          label: labels.authMode,
+          value: t('values.basicAuth')
+        },
+        {
+          label: labels.usage,
+          value: t('values.knowledgeVault')
+        }
+      ],
+      description: t('dashboard.services.obsidian.description'),
+      icon: 'host',
+      id: 'obsidian',
+      note: t('dashboard.services.obsidian.note'),
+      status: t('values.knowledgeVault'),
+      title: t('dashboard.services.obsidian.title'),
+      tone: 'core'
     }
   ];
 }

apps/atlas-dashboard/src/entities/dashboard/model/builders/dashboard-credential-labels.builder.ts

@@ -21,6 +21,7 @@ export interface DashboardCredentialLabels {
   rootPassword: string;
   rootUser: string;
   superuser: string;
+  username: string;
   usage: string;
 }
 
@@ -48,6 +49,7 @@ export function createCredentialLabels(
     rootPassword: t('credentials.rootPassword'),
     rootUser: t('credentials.rootUser'),
     superuser: t('credentials.superuser'),
+    username: t('credentials.username'),
     usage: t('credentials.usage')
   };
 }