Survey engine and data warehouse — see survey-engine-design-doc.md for architecture.

api/        Python API (response collection, withdrawal, PII routing)
frontend/   TypeScript SurveyJS runtime
dbt/        Transformations: raw_responses → stg → marts

# Python (uv)
curl -LsSf https://astral.sh/uv/install.sh | sh    # install uv if needed
cd api && uv sync --all-extras

# Node (pnpm)
corepack enable                                     # ships with Node 16.10+
cd frontend && pnpm install

# dbt
pip install dbt-core dbt-postgres

# Pre-commit hooks
pip install pre-commit && pre-commit install

Railway, via OpenTofu (infra/railway/). Start with infra/README.md for the tofu apply path, the Railway CLI prereq, and credential retrieval. Then docs/verification/m7.6-demo-to-prod.md covers operating a live instance: seeding the admin, analyst DB access, secret rotation, and the demo→production checklist. Deploy-model rationale and the ETL cron live in docs/verification/m7.4-railway.md and m7.5-etl-cron.md.

GitHub Actions runs on every PR (.github/workflows/ci.yml):

• Python: ruff, mypy, pytest with Postgres service container
• TypeScript: eslint, prettier check, tsc, vitest, build
• dbt: parse + compile against a throwaway Postgres

Two additional workflows:

• claude-review.yml — Claude reviews PRs. Requires CLAUDE_CODE_OAUTH_TOKEN secret (generated via claude setup-token, uses your Max subscription).
• codeql.yml — GitHub SAST for Python and TS, on PRs and weekly.

After pushing the initial commit, configure these in GitHub:

1. Secrets (Settings → Secrets and variables → Actions):
   • CLAUDE_CODE_OAUTH_TOKEN — for Claude PR review. Generate with claude setup-token locally and paste the output.
2. Branch protection (Settings → Branches → add rule for main):
   • Require pull request before merging
   • Require status checks to pass: select all CI · * jobs and CodeQL
   • Require conversation resolution before merging
   • Require linear history (optional, but tidier)
3. CODEOWNERS — edit .github/CODEOWNERS to replace @your-username.