# DBAOps Sovereign — Final product snapshot

**Snapshot purpose:** Single buyer-facing “what you get in *this* drop” summary for the **Gold Master** codebase (**customer baseline 1.3.0** per `CHANGELOG.md`; root **`package.json`** / API **`productVersion`** **2.0.0** — version labels are intentionally layered: marketing/GM vs. npm packages).

**Companion planning / risk docs (read next):**

- [Team Instructions — Path to Shippable](TEAM-INSTRUCTIONS-PATH-TO-SHIPPABLE.md)
- [Post-Audit Addendum](TEAM-INSTRUCTIONS-POST-AUDIT-ADDENDUM.md)

---

## 1. What is in this codebase drop

| Layer | Stack (representative) | Location |
|--------|------------------------|----------|
| **API** | Node.js **18+**, Express **4.x**, `mssql` **10.x** (Windows auth via optional `msnodesqlv8`), JWT, Socket.IO | `src/api/` |
| **Web** | React **18**, `react-scripts` **5** (Create React App), React Router **6** | `src/web/` |
| **Data / schema** | SQL Server **2022+** target; migrations and SovereignRepository definitions | `src/database/` |
| **Collectors / ops** | PowerShell **7+** modules (Windows collector hosts) | `src/collectors/` |
| **Automation** | Root npm orchestration, Docker Compose **all-in-one**, PowerShell readiness/audit scripts | `scripts/`, repo root |

**Deliverables index:** `delivery/DELIVERY-MANIFEST.md` — enterprise bundle via **`npm run package:enterprise`** (or **`npm run package:pilot`**).

---

## 2. How to run API + Web + verification

**Repository root** (example: **`K:\RHOYLLE BUSINESS EMPIRE LLC\Business Plans\PRODUCTS\DBAOps-Sovereign`** or any clone of **`DBAOps-Sovereign/`**):

```bash
npm install
npm run setup
npm start
```

- **API:** default **`:3041`** (`SOVEREIGN_API_PORT` in root `package.json` `start:api`).
- **Web:** CRA dev server, typically **`:3000`** (see `src/web` and `.env` examples for `REACT_APP_API_URL`).

**Pre-flight CI-style check (no live SQL required by default):**

```bash
npm run verify:deploy
```

This runs `scripts/verify-deploy.js`: `node --check` on key API entrypoints and the **full API Jest suite** (`cd src/api && npm test`). Optional env toggles are documented in that script (`VERIFY_DEPLOY_MIGRATE_CHECK`, `VERIFY_DEPLOY_LIVE_API`, `VERIFY_DEPLOY_WEB_BUILD`).

**After a production build, with API running:**

```bash
npm run verify:smoke
```

**Docker (same bits on Windows / macOS / Linux):**

```bash
npm run docker:up
```

**Simulator:** Optional air-gapped / sovereign catalog override — set **`SOVEREIGN_SIMULATOR_CATALOG_PATH`** in `.env` (see `.env.example` and `src/api/data/dbaopsSimulator.catalog.json`).

---

## 3. Readiness and discovery tooling

### `Assess-ShipmentReadiness.ps1` and `-SkipSql`

From repo root (Windows PowerShell **5.1+**):

```powershell
.\Assess-ShipmentReadiness.ps1
.\Assess-ShipmentReadiness.ps1 -SqlServer YourInstance -Database SovereignRepository
.\Assess-ShipmentReadiness.ps1 -SkipSql
```

**`-SkipSql` semantics:** Skips **sqlcmd-backed gates** and **does not run** `npm run migrate` against a database. Use on laptops / build agents **without** SQL connectivity. The script still performs static/repo checks and records output under **`_readiness/<timestamp>/`**.

Without `-SkipSql`, expects **`sqlcmd`** on PATH and uses **Windows authentication** (`-E`) to the given server/database by default — adjust parameters for your environment.

### `Discover-Deep.ps1`

Deep static/repo audit; generates a timestamped report under **`_discovery/`** (see script header for usage). `Assess-ShipmentReadiness.ps1` aligns anonymous-route semantics with this discovery pattern where noted in gate commentary.

### `Pull-DbaOpsSovereign-Screenshots.ps1`

Aggregates bundled UI gallery assets from **`docs/screenshots/readme-gallery/`** into a single folder (default **`AppScreenshots`** next to the script). Use for packaging or review bundles; it does not capture new screenshots — see script comment for **`Show-DbaOpsSovereign-UiGallery.ps1 -Live`** for browsing routes against a running dev server.

---

## 4. Deferred work and explicit buyer-risk items

This snapshot is a **shippable engineering baseline**, not a claim that every enterprise control is finished. Treat the following as **known gaps / operational risks** to close before or during paid production rollout:

| Area | Risk / gap |
|------|------------|
| **Backup discipline** | Repository schema includes backup fact tables (e.g. readiness checks reference **`backup.DatabaseBackupFact`**). **Ongoing backup orchestration and verified restore drills** are customer operational responsibilities; an empty or stale fact store does not prove recoverability. |
| **Ingest / collectors in production** | PowerShell collectors and ingest routes are real code paths; **production deployment, secrets, scheduling, and tamper-evident delivery** of collector output must be designed per environment — not fully prescribed in this drop alone. |
| **Signed license manifest** | Entitlement storage exists; **cryptographic signing, portable file format, fingerprint/tenant binding, and strict expiration enforcement** remain hardening items (see Post-Audit Addendum). |
| **Seeded console users** | Default **`ctl.ConsoleUsers`** seeds (admin/operator/auditor `@sovereign.local`) are a **live risk if left active** in a real SQL repository. Disable/rotate after provisioning real operators; verify you retain admin access first. |
| **Empty / sparse fact tables** | Many dashboards assume eventual fleet and telemetry **facts**. A freshly migrated DB can show **empty or sparse** fleet/telemetry/backup views — that is expected until collectors and workloads populate data. |
| **Dual verification story** | **`verify:deploy`** exercises **unit tests + syntax**; **`verify:smoke`** expects a **running API**. Customers should run both in their pipeline appropriate to the stage. |

No item above is “hidden” — it is ordinary pre-pilot technical debt that must be tracked in customer runbooks (`docs/PILOT-RUNBOOK.md`, `docs/CUSTOMER-DEPLOYMENT.md`).

---

## 5. Traceability

- **Install / OS matrix:** `docs/INSTALL-CROSS-PLATFORM.md`
- **Release sign-off:** `docs/RELEASE-GOLD.md`, `CHANGELOG.md` (**1.3.0 Gold Master**)
- **Team execution focus:** [TEAM-INSTRUCTIONS-PATH-TO-SHIPPABLE.md](TEAM-INSTRUCTIONS-PATH-TO-SHIPPABLE.md)
- **Audit deltas after deep review:** [TEAM-INSTRUCTIONS-POST-AUDIT-ADDENDUM.md](TEAM-INSTRUCTIONS-POST-AUDIT-ADDENDUM.md)

---

© 2026 RHOYLLE INNOVATION EMPIRE LLC. DBAOps™ and DBAOps Sovereign™ are trademarks of RHOYLLE INNOVATION EMPIRE LLC.
