dev-workstation

Dev Workstation — radieu (local)

Environment ID: dev-workstation Type: dev Status: active

Purpose

Human developer machine used for code authoring, SSH access to all servers, GitHub operations, and orchestrating VPS-based Claude Code agents. Not for running automated Claude agents directly.

Hardware

Field	Value
OS	Windows 10 Home 10.0.19045
Shell	PowerShell (primary) + Git Bash (POSIX scripts only)
Repo path	C:\code_2026\p24-infra (also d:\code_2026\p24-infra)

Software Stack

Tool	Purpose
PowerShell	Primary shell — mandatory for all git/gh/npm/node/sops commands
Claude Code	Local orchestration — spawns worktree agents only
Git + GitHub CLI (gh)	Version control and GitHub API operations
SOPS + age	Secret decryption (C:\Users\konar\.age\p24-infra-keys.txt)
SSH (C:\Users\konar\.ssh\id_ed25519)	Access to all VPS and BMS servers
Docker Desktop	Local container testing (optional)
Python 3.x	Scripts, SOPS operations, DNS manager

Claude Agent Config

Field	Value
Max parallel agents	1 (orchestrator role only)
Role	Orchestrator — spawns background worktree agents
Pattern	git worktree add → Agent tool (background) → review PR
Direct implementation	Never — always via isolated worktree

Access

• All VPS and BMS servers via ssh root@<ip> using C:\Users\konar\.ssh\id_ed25519
• GitHub: radieu account with full repo access
• Supabase: management API token in .env.local

Constraints

• PowerShell tool mandatory — system may report Shell: bash but this machine runs Windows 10. Never use Bash tool for shell operations.
• SOPS age key: C:\Users\konar\.age\p24-infra-keys.txt — required for all secret decryption
• Windows Python SSL issue: use Invoke-RestMethod for HTTPS calls; certifi bundle needed for Python HTTPS
• Never runs Claude agents autonomously — all agent work delegated to VPS runners

Known Issues

• Python urllib/requests on Windows 10 fail with CERTIFICATE_VERIFY_FAILED for some HTTPS endpoints. Use Invoke-RestMethod instead.
• SOPS files must be written with UTF8Encoding($false) (no BOM) or first key name gets corrupted.

Secrets Access

Secret store	Access method	Can decrypt SOPS?
All secrets/*.env.sops files	age key at C:\Users\konar\.age\p24-infra-keys.txt	Yes � full decrypt access
GitHub Actions secrets	Not accessible from dev workstation directly	N/A

The dev workstation has the primary age key and can decrypt all SOPS files in the repo.