Files
tatlock-ui/docs/ARCHITECTURE.md
T
Jeroen SchweitzerandClaude Opus 4.5 f1b2b0430f feat(auth): implement dual-flow authentication (web + mobile)
Add complete authentication system supporting both web (NPM forward auth)
and mobile (OIDC) authentication flows.

Web flow:
- Check /auth/me on startup to detect NPM forward auth session
- Cookies handled by proxy, no Bearer tokens needed

Mobile flow:
- flutter_appauth for OIDC Authorization Code + PKCE
- POST /auth/sync to get user profile and roles
- Token storage in SharedPreferences

Shared:
- Permission system with Domain/Action enums and Role class
- PermissionGate and AdminGate widgets for UI permission checks
- Route guards redirecting unauthenticated users to login
- Login page with platform-specific messaging

Platform config:
- iOS: CFBundleURLTypes for net.schweitz.tatlock://
- Android: appAuthRedirectScheme, minSdk 23

Docs:
- Added Freezed 3.x sealed class documentation

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-03 21:56:11 +01:00

512 lines
15 KiB
Markdown

# Architecture Guide
This document defines the Clean Architecture patterns and conventions used in Tatlock UI.
## Overview
Tatlock UI follows **Clean Architecture** with feature-based organization. This separation ensures testability, maintainability, and clear boundaries between concerns.
## Project Structure
The directory structure mirrors the "Rooms of the Estate" UI navigation (see [UI_LAYOUT.md](./UI_LAYOUT.md)).
```
lib/
├── main.dart # Entry point
├── version.g.dart # Generated version info
├── app.dart # MaterialApp.router setup
├── core/ # Shared infrastructure
│ ├── api/ # HTTP client, interceptors, SSE
│ ├── auth/ # Authentik OIDC integration
│ ├── config/ # Environment configuration
│ ├── error/ # Error types and handling
│ └── theme/ # Material 3 theming
├── routing/ # go_router configuration
├── shared/ # Reusable components
│ ├── components/ # DataGrid, common widgets
│ └── layouts/ # App scaffold, navigation
├── features/ # Feature modules (rooms)
│ ├── front_hall/ # Dashboard - estate overview
│ ├── control_room/ # Infrastructure
│ │ ├── containers/ # Container management
│ │ ├── stacks/ # Stack management
│ │ ├── networks/ # Network management
│ │ └── volumes/ # Volume management
│ ├── parlor/ # Housekeeping - home automation
│ ├── library/ # Knowledge management (future)
│ └── study/ # Secretarial tasks (future)
└── chat/ # Tatlock chat - omnipresent, NOT a room
```
### Room-to-Directory Mapping
| UI Room | Directory | Purpose |
|---------|-----------|---------|
| Front Hall | `features/front_hall/` | Dashboard, overview, quick access |
| Control Room | `features/control_room/` | Infrastructure management |
| Parlor | `features/parlor/` | Home automation |
| Library | `features/library/` | Knowledge, docs, bookmarks |
| Study | `features/study/` | Email, calendar (hidden for now) |
| *(omnipresent)* | `chat/` | Tatlock assistant dock |
Note: `chat/` lives at the top level of `lib/` (not under `features/`) because it's not a navigable room - it's an omnipresent dock injected at the layout level.
## Feature Structure
Each feature follows a three-layer architecture:
```
features/{feature}/
├── presentation/ # UI Layer
│ ├── pages/ # Full-screen route widgets
│ ├── widgets/ # Feature-specific widgets
│ └── providers/ # Riverpod providers/notifiers
├── domain/ # Business Logic Layer
│ ├── entities/ # Immutable business objects
│ ├── repositories/ # Abstract repository interfaces
│ └── usecases/ # Single-purpose business operations
└── data/ # Data Layer
├── models/ # JSON-serializable DTOs
├── datasources/ # API clients, local storage
└── repositories/ # Repository implementations
```
## Layer Rules
### Domain Layer (Pure Dart)
The domain layer is the core of each feature. It has **no dependencies** on Flutter, external packages, or other layers.
**Entities** - Immutable business objects:
```dart
// domain/entities/container.dart
class Container {
const Container({
required this.id,
required this.name,
required this.status,
required this.image,
});
final String id;
final String name;
final ContainerStatus status;
final String image;
}
enum ContainerStatus { running, stopped, paused, restarting }
```
**Repository Interfaces** - Abstract contracts:
```dart
// domain/repositories/container_repository.dart
abstract class ContainerRepository {
Future<List<Container>> getContainers();
Future<Container> getContainer(String id);
Future<void> startContainer(String id);
Future<void> stopContainer(String id);
}
```
**Use Cases** - Single-purpose operations (optional, for complex logic):
```dart
// domain/usecases/restart_unhealthy_containers.dart
class RestartUnhealthyContainers {
RestartUnhealthyContainers(this._repository);
final ContainerRepository _repository;
Future<int> call() async {
final containers = await _repository.getContainers();
final unhealthy = containers.where((c) => c.status == ContainerStatus.stopped);
for (final container in unhealthy) {
await _repository.startContainer(container.id);
}
return unhealthy.length;
}
}
```
### Data Layer (External Dependencies)
The data layer implements domain interfaces and handles external communication.
**Models** - JSON-serializable DTOs:
```dart
// data/models/container_model.dart
import 'package:freezed_annotation/freezed_annotation.dart';
part 'container_model.freezed.dart';
part 'container_model.g.dart';
@freezed
sealed class ContainerModel with _$ContainerModel {
const factory ContainerModel({
required String id,
required String name,
required String status,
required String image,
}) = _ContainerModel;
factory ContainerModel.fromJson(Map<String, dynamic> json) =>
_$ContainerModelFromJson(json);
}
extension ContainerModelX on ContainerModel {
Container toEntity() => Container(
id: id,
name: name,
status: ContainerStatus.values.byName(status),
image: image,
);
}
```
**Data Sources** - API clients:
```dart
// data/datasources/containers_datasource.dart
class ContainersDatasource {
ContainersDatasource(this._client);
final ApiClient _client;
Future<List<ContainerModel>> getContainers() async {
final response = await _client.get('/infrastructure/containers');
return (response.data as List)
.map((json) => ContainerModel.fromJson(json))
.toList();
}
}
```
**Repository Implementations**:
```dart
// data/repositories/container_repository_impl.dart
class ContainerRepositoryImpl implements ContainerRepository {
ContainerRepositoryImpl(this._datasource);
final ContainersDatasource _datasource;
@override
Future<List<Container>> getContainers() async {
final models = await _datasource.getContainers();
return models.map((m) => m.toEntity()).toList();
}
}
```
## Data Model Patterns
Models handle conversion between API JSON and domain entities. The pattern depends on whether the feature is **read-only** or **CRUD**.
### Read-Only Models
For data fetched from external systems (Docker, NPM, Portainer) where Flutter doesn't create/update records:
```dart
@freezed
sealed class ContainerModel with _$ContainerModel {
const factory ContainerModel({
required String id,
required String name,
required String status,
}) = _ContainerModel;
const ContainerModel._();
factory ContainerModel.fromJson(Map<String, dynamic> json) =>
_$ContainerModelFromJson(json);
/// Converts API response to domain entity.
Container toEntity() => Container(
id: id,
name: name,
status: ContainerStatus.values.byName(status),
);
}
```
**Only `toEntity()` is needed** - no `fromEntity()` or `toJson()` required.
### CRUD Models (Bidirectional)
For data that Flutter creates, updates, and deletes:
```dart
@freezed
sealed class QuickLinkModel with _$QuickLinkModel {
const factory QuickLinkModel({
@Default(0) int id,
required String title,
required String url,
String? icon,
String? category,
@Default(0) int position,
@JsonKey(name: 'is_visible') @Default(true) bool isVisible,
}) = _QuickLinkModel;
const QuickLinkModel._();
factory QuickLinkModel.fromJson(Map<String, dynamic> json) =>
_$QuickLinkModelFromJson(json);
/// Converts API response to domain entity.
QuickLink toEntity() => QuickLink(
id: id.toString(),
name: title,
url: url,
iconName: icon ?? 'link',
category: category,
sortOrder: position,
isActive: isVisible,
);
/// Creates model from domain entity for API requests.
factory QuickLinkModel.fromEntity(QuickLink entity) => QuickLinkModel(
id: int.tryParse(entity.id) ?? 0,
title: entity.name,
url: entity.url,
icon: entity.iconName,
category: entity.category,
position: entity.sortOrder,
isVisible: entity.isActive,
);
}
```
**Critical rules for CRUD models:**
1. **Always use generated `toJson()`** - Never write custom JSON methods that selectively include fields. The generated `toJson()` from freezed/json_serializable always includes ALL fields, which is the correct behavior.
2. **Never create custom `toCreateJson()` or similar** - This leads to bugs where fields are silently dropped.
3. **Use `fromEntity()` factory** - Maps domain entity fields to API field names.
### Form Update Pattern
When updating existing entities in forms, **always use `copyWith()`** to preserve existing data:
```dart
// ✅ Correct - preserves all existing fields
final updatedLink = existingLink.copyWith(
name: _nameController.text.trim(),
url: _urlController.text.trim(),
category: category.isEmpty ? null : category,
);
await actions.update(updatedLink);
// ❌ Wrong - loses existing data not in form
final newLink = QuickLink(
id: existingLink.id,
name: _nameController.text.trim(),
url: _urlController.text.trim(),
// Missing: sortOrder, other fields...
);
```
### Datasource Usage
```dart
// Create - convert entity to model, use toJson()
Future<QuickLink> createQuickLink(QuickLink link) async {
final model = QuickLinkModel.fromEntity(link);
final response = await _dio.post<Map<String, dynamic>>(
_basePath,
data: model.toJson(), // Always use generated toJson()
);
return QuickLinkModel.fromJson(response.data!).toEntity();
}
// Update - same pattern
Future<QuickLink> updateQuickLink(QuickLink link) async {
final model = QuickLinkModel.fromEntity(link);
final response = await _dio.put<Map<String, dynamic>>(
'$_basePath/${link.id}',
data: model.toJson(), // Always use generated toJson()
);
return QuickLinkModel.fromJson(response.data!).toEntity();
}
```
### Presentation Layer (Flutter + Riverpod)
The presentation layer contains UI code and state management.
**Providers** - Riverpod state management:
```dart
// presentation/providers/containers_provider.dart
import 'package:riverpod_annotation/riverpod_annotation.dart';
part 'containers_provider.g.dart';
@riverpod
class ContainersNotifier extends _$ContainersNotifier {
@override
Future<List<Container>> build() async {
final repository = ref.watch(containerRepositoryProvider);
return repository.getContainers();
}
Future<void> refresh() async {
state = const AsyncLoading();
state = await AsyncValue.guard(() => ref.read(containerRepositoryProvider).getContainers());
}
}
```
**Pages** - Full-screen routes:
```dart
// presentation/pages/containers_page.dart
class ContainersPage extends ConsumerWidget {
const ContainersPage({super.key});
@override
Widget build(BuildContext context, WidgetRef ref) {
final containersAsync = ref.watch(containersNotifierProvider);
return containersAsync.when(
data: (containers) => ContainersList(containers: containers),
loading: () => const Center(child: CircularProgressIndicator()),
error: (error, stack) => ErrorDisplay(error: error),
);
}
}
```
**Widgets** - Feature-specific UI components:
```dart
// presentation/widgets/container_card.dart
class ContainerCard extends StatelessWidget {
const ContainerCard({super.key, required this.container});
final Container container;
@override
Widget build(BuildContext context) {
// Widget implementation
}
}
```
## Dependency Flow
```
Presentation → Domain ← Data
↓ ↑ ↓
Riverpod Interfaces Dio/API
```
- Presentation depends on Domain (uses entities, calls repository interfaces)
- Data depends on Domain (implements repository interfaces)
- Domain depends on nothing (pure Dart)
## Dependency Injection
Use Riverpod for all dependency injection:
```dart
// Datasource provider
@riverpod
ContainersDatasource containersDatasource(Ref ref) {
return ContainersDatasource(ref.watch(apiClientProvider));
}
// Repository provider (returns interface type)
@riverpod
ContainerRepository containerRepository(Ref ref) {
return ContainerRepositoryImpl(ref.watch(containersDatasourceProvider));
}
```
## File Naming Conventions
| Type | Convention | Example |
|------|------------|---------|
| Pages | `{name}_page.dart` | `containers_page.dart` |
| Widgets | `{name}_{type}.dart` | `container_card.dart` |
| Providers | `{name}_provider.dart` | `containers_provider.dart` |
| Entities | `{name}.dart` | `container.dart` |
| Models | `{name}_model.dart` | `container_model.dart` |
| Repositories | `{name}_repository.dart` | `container_repository.dart` |
| Datasources | `{name}_datasource.dart` | `containers_datasource.dart` |
| Use Cases | `{action}_{noun}.dart` | `restart_container.dart` |
## Testing Requirements
Each layer has specific testing requirements:
### Domain Layer
- **Unit tests** for all entities and use cases
- No mocking needed (pure Dart)
- 100% coverage expected
### Data Layer
- **Unit tests** for model serialization
- **Integration tests** for datasources (mock HTTP)
- Test entity conversions
### Presentation Layer
- **Widget tests** for all pages and complex widgets
- **Provider tests** for state management logic
- Mock repositories using `mocktail`
## Code Generation
Run after modifying annotated code:
```bash
dart run build_runner build --delete-conflicting-outputs
```
Generated files:
- `*.freezed.dart` - Immutable classes
- `*.g.dart` - JSON serialization, Riverpod providers
### Freezed 3.x: Required `sealed class`
**Freezed 3.x requires the `sealed` keyword** on all classes with generated mixins. Without it, the generated code will fail to compile with errors about missing concrete implementations.
```dart
// ✅ Correct - Freezed 3.x
@freezed
sealed class UserModel with _$UserModel {
const factory UserModel({
required String id,
required String name,
}) = _UserModel;
factory UserModel.fromJson(Map<String, dynamic> json) =>
_$UserModelFromJson(json);
}
// ❌ Wrong - will fail to compile
@freezed
class UserModel with _$UserModel { // Missing `sealed`
const factory UserModel({...}) = _UserModel;
}
```
The `sealed` keyword was introduced in Dart 3.0 and allows the generated mixin `_$UserModel` to have abstract members that are implemented by the private `_UserModel` class.
**Always use `sealed class` with `@freezed`** - this applies to all models, entities, and state classes using Freezed.
## Import Rules
1. Never import from `data/` in `domain/`
2. Never import from `presentation/` in `domain/` or `data/`
3. Import entities from `domain/`, not models from `data/`
4. Use relative imports within a feature, package imports across features
```dart
// Good - within feature
import '../domain/entities/container.dart';
// Good - across features
import 'package:tatlock_ui/features/containers/domain/entities/container.dart';
// Bad - importing model in presentation
import '../data/models/container_model.dart'; // Don't do this
```