From 5443b910c6770e06364305afb4bad79b5379ebc1 Mon Sep 17 00:00:00 2001
From: Julian Cuni <julian.cuni@microservices.al>
Date: Tue, 7 Jul 2026 10:04:08 +0200
Subject: [PATCH] feat(fleet): add park-lab stack (lab bench, dev tier)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Second [[stack]] block: server park-test (the lab box's Periphery
connect_as), compose files from the dev branch, MOVING TAG=dev (a lab
may float; real booths pin), its own park_lab_* secret refs (per-box
blast radius — never shared with a real booth). park-buzi is untouched
on stage + pinned.

Claude-Session: https://claude.ai/code/session_01Xcm6ikLgGoCxxHrxtjkk5V
---
 komodo/resources.toml | 36 ++++++++++++++++++++++++++++++++++++
 1 file changed, 36 insertions(+)

diff --git a/komodo/resources.toml b/komodo/resources.toml
index 54bac16..82ab4c1 100644
--- a/komodo/resources.toml
+++ b/komodo/resources.toml
@@ -30,6 +30,42 @@
 # new [[stack]] block per site (unique name, its own per-booth secret refs).
 ##############################################################################
 
+##############################################################################
+# park-lab — the LAB bench box (hardware/dev testing, no real traffic). Chases
+# the dev tier: compose files from `dev`, MOVING image tag `dev` (labs may
+# float; real booths pin). Secrets are its own park_lab_* refs — per-box blast
+# radius, never shared with a real booth even in the lab.
+##############################################################################
+
+[[stack]]
+name = "park-lab"
+[stack.config]
+server = "park-test"
+git_provider = "git.infra.msai.al"
+git_account = "komodo"
+repo = "mca/parking_solution"
+branch = "dev"
+file_paths = [
+  "docker-compose.yml",
+  "docker-compose.prod.yml"
+]
+registry_provider = "git.infra.msai.al"
+registry_account = "komodo"
+environment = """
+REGISTRY=git.infra.msai.al/mca/parking_solution
+# Lab tier: the MOVING dev tag — redeploy pulls the latest dev build. Pin to a
+# dev-<sha> only when reproducing a specific state.
+TAG=dev
+COOKIE_SECURE=0
+VISION_ENABLED=1
+WS_ALLOWED_ORIGINS=
+JWT_SECRET=[[park_lab_jwt_secret]]
+EVENT_SIGNING_KEY=[[park_lab_event_signing_key]]
+BACKUP_KEY=[[park_lab_backup_key]]
+"""
+
+##############################################################################
+
 [[stack]]
 name = "park-buzi"
 [stack.config]