feat: complete fullstack investment manager challenge

.env.example

@@ -0,0 +1,18 @@
+# Root env — ONLY values that docker-compose interpolates (ports + DB creds).
+# The API and SPA keep their own env files (api/.env, web/.env).
+# Copy to .env:  cp .env.example .env   (handled automatically by `make up`)
+
+COMPOSE_PROJECT_NAME=coderockr
+
+# Postgres (shared by the `postgres` service and injected into the API container)
+DB_DATABASE=investments
+DB_USERNAME=investments
+DB_PASSWORD=secret
+DB_PORT=5432
+
+# Host ports
+API_HTTP_PORT=8080
+WEB_HTTP_PORT=5173
+
+# API base URL the SPA container is built/served with
+VITE_API_URL=http://localhost:8080/api

.gitignore

@@ -0,0 +1,20 @@
+# Root-level ignores (each app also has its own .gitignore)
+
+# OS / editor
+.DS_Store
+Thumbs.db
+*.swp
+.idea/
+.vscode/
+/.claude/
+*.log
+
+# Root env used by docker-compose interpolation
+/.env
+
+# Local docker volumes / dumps
+/data/
+*.sql.gz
+
+# Local planning notes
+/plan.md

LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Vinicius Castro
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

Makefile

@@ -0,0 +1,97 @@
+
+# ============================================================================
+#  Investment Manager — developer entrypoints
+#  `make up` builds, starts, migrates and seeds the whole stack in one command.
+# ============================================================================
+
+DC        := docker compose
+APP       := $(DC) exec -T app
+WEB       := $(DC) exec -T web
+
+.DEFAULT_GOAL := help
+.PHONY: help up down destroy build install migrate seed fresh key test e2e lint fix docs logs shell psql wait-db env
+
+help: ## Show this help
+	@grep -E '^[a-zA-Z0-9_-]+:.*?## .*$$' $(MAKEFILE_LIST) | \
+		awk 'BEGIN {FS = ":.*?## "}; {printf "  \033[36m%-10s\033[0m %s\n", $$1, $$2}'
+
+env: ## Create .env files from examples if missing
+	@[ -f .env ] || cp .env.example .env
+	@[ -f api/.env ] || cp api/.env.example api/.env
+	@[ -f web/.env ] || cp web/.env.example web/.env
+	@echo "env files ready"
+
+up: env ## Build + start everything, then migrate & seed (first-run friendly)
+	$(DC) up -d --build
+	$(MAKE) wait-db
+	$(APP) composer install
+	$(APP) php artisan key:generate --force
+	$(APP) php artisan migrate --seed --force
+	@echo ""
+	@echo "  API   -> http://localhost:$${API_HTTP_PORT:-8080}"
+	@echo "  Docs  -> http://localhost:$${API_HTTP_PORT:-8080}/docs/api"
+	@echo "  SPA   -> http://localhost:$${WEB_HTTP_PORT:-5173}"
+	@echo "  Mail  -> http://localhost:8025"
+
+down: ## Stop and remove containers
+	$(DC) down
+
+destroy: ## Stop and remove containers + volumes (DB wiped)
+	$(DC) down -v
+
+build: ## Rebuild images
+	$(DC) build
+
+install: ## Install PHP + JS dependencies
+	$(APP) composer install
+	$(WEB) npm ci
+
+migrate: ## Run database migrations
+	$(APP) php artisan migrate
+
+seed: ## Seed the database
+	$(APP) php artisan db:seed
+
+fresh: ## Drop, re-migrate and re-seed the database
+	$(APP) php artisan migrate:fresh --seed
+
+key: ## Generate the Laravel app key
+	$(APP) php artisan key:generate --force
+
+test: ## Run backend + frontend test suites
+	$(APP) php artisan test
+	$(WEB) npm run test -- --run
+
+e2e: ## Run the critical user journeys in Chromium
+	@status=0; \
+		$(DC) --profile e2e run --rm e2e || status=$$?; \
+		$(DC) --profile e2e rm -sf e2e-api-proxy >/dev/null; \
+		exit $$status
+
+lint: ## Style + static analysis + type-check
+	$(APP) ./vendor/bin/pint --test
+	$(APP) ./vendor/bin/phpstan analyse --memory-limit=1G
+	$(WEB) npm run lint
+	$(WEB) npm run type-check
+
+fix: ## Auto-fix code style
+	$(APP) ./vendor/bin/pint
+	$(WEB) npm run lint -- --fix
+
+docs: ## Export the OpenAPI spec to docs/openapi.json
+	$(APP) php artisan scramble:export --path=docs/openapi.json
+
+logs: ## Tail all container logs
+	$(DC) logs -f
+
+shell: ## Open a shell in the API container
+	$(DC) exec app sh
+
+psql: ## Open a psql session
+	$(DC) exec postgres psql -U $${DB_USERNAME:-investments} -d $${DB_DATABASE:-investments}
+
+wait-db: ## Block until Postgres is accepting connections
+	@until $(DC) exec -T postgres pg_isready -U $${DB_USERNAME:-investments} >/dev/null 2>&1; do \
+		echo "waiting for postgres..."; sleep 1; \
+	done
+	@echo "postgres ready"