Chad's Tools OS / ServerAdmin Legacy Record

Legacy seed record retained for history. Current active record is ctos-serveradmin.

Decisions

Platform identity

The platform is called Chad's Tools OS. apps.chadmgagnon.com is the OS/home portal/app launcher.

ServerAdmin role

adm.chadmgagnon.com is ServerAdmin only. ServerAdmin is a default installed app/control panel, not the parent platform.

App visibility

Users only see apps enabled for them. User edit pages control app access with simple on/off checkboxes.

Permission complexity

No app grouping yet and no complex permission levels yet. App access is currently on/off.

Shared login direction

Long-term auth model is shared login/SSO: log into the app portal once, then direct app URLs authenticate from that prior login and return to the requested app.

InfoKeeper role

InfoKeeper should remain a separate app under Chad's Tools OS and serve as project memory/session continuity, not be merged into ServerAdmin.

InfraKeeper role

InfraKeeper should remain a separate app under Chad's Tools OS and serve as infrastructure inventory, while ServerAdmin manages and summarizes it.

Patch History

InfoKeeper Foundation current

Seeded from Chad's Tools OS project history.

Script Runner installed

Seeded from Chad's Tools OS project history.

User edit app access installed

Seeded from Chad's Tools OS project history.

Portal nav fix installed

Seeded from Chad's Tools OS project history.

Chad's Tools OS identity installed

Seeded from Chad's Tools OS project history.

Frontend/layout cleanup installed

Seeded from Chad's Tools OS project history.

Refactor Phase 2 route extraction installed

Seeded from Chad's Tools OS project history.

Refactor Phase 1 installed

Seeded from Chad's Tools OS project history.

Session revoke fix installed

Seeded from Chad's Tools OS project history.

Security dashboard installed

Seeded from Chad's Tools OS project history.

2FA QR setup installed

Seeded from Chad's Tools OS project history.

CSRF protection installed

Seeded from Chad's Tools OS project history.

Auth hardening installed

Seeded from Chad's Tools OS project history.

Next Steps

Finish ServerAdmin refactor into cleaner route/service modules high open

Continue shared frontend cleanup using base.html and shared CSS high open

Stabilize Script Runner as operational maintenance layer medium open

Build shared login/SSO across Chad's Tools OS apps high open

Add session management improvements: stale cleanup, device fingerprints, last_seen_at medium open

Add vault re-authentication before revealing secrets high open

Add ntfy authentication integration medium open

Connect ServerAdmin summary cards to InfoKeeper and InfraKeeper later medium open

Known Issues

ServerAdmin still has some monolithic app/__init__.py logic medium

Continue controlled refactor before stacking major new features.

Portal/app/shared-login architecture is not fully implemented yet high

Current login/session model is started but not yet true shared SSO for every app.

Some UI pages still need shared layout cleanup medium

Continue moving templates toward base.html and shared CSS.

Sessions

2026-05-28 — InfoKeeper Foundation Seed

Created the initial InfoKeeper foundation for Chad's Tools OS project memory, decisions, patches, next steps, and known issues.