Initial scaffold: FastAPI backend + Vue 3 frontend + Docker setup

Backend: config/db/security/logging core, SQLAlchemy models (Server,
Credential, UpdateJob, UpdateLog, AuditLog, User), services (winrm, ssh,
cau, audit, job_runner), REST API (auth, servers, updates, audit),
Socket.io WebSocket layer.
Frontend: Vue 3 + TS + Pinia + Tailwind, Views (Dashboard, Servers,
Updates, Audit, Login), axios + socket.io-client, nginx prod config.

backend/app/schemas/__init__.py

@@ -0,0 +1,18 @@
+"""Pydantic schemas (request/response)."""
+
+from app.schemas.audit import AuditLogRead
+from app.schemas.auth import LoginRequest, TokenResponse
+from app.schemas.server import ServerCreate, ServerRead, ServerUpdate
+from app.schemas.update import JobTriggerRequest, UpdateJobRead, UpdateLogRead
+
+__all__ = [
+    "AuditLogRead",
+    "LoginRequest",
+    "TokenResponse",
+    "ServerCreate",
+    "ServerRead",
+    "ServerUpdate",
+    "JobTriggerRequest",
+    "UpdateJobRead",
+    "UpdateLogRead",
+]

backend/app/schemas/audit.py

@@ -0,0 +1,25 @@
+"""Audit log schemas."""
+
+from datetime import datetime
+
+from pydantic import BaseModel, ConfigDict
+
+
+class AuditLogRead(BaseModel):
+    model_config = ConfigDict(from_attributes=True)
+
+    id: int
+    timestamp: datetime
+    username: str
+    action: str
+    target: str | None
+    result: str
+    details: str | None
+    ip_address: str | None
+
+
+class AuditLogPage(BaseModel):
+    items: list[AuditLogRead]
+    total: int
+    page: int
+    page_size: int

backend/app/schemas/auth.py

@@ -0,0 +1,22 @@
+"""Auth schemas."""
+
+from pydantic import BaseModel, Field
+
+
+class LoginRequest(BaseModel):
+    username: str = Field(min_length=1)
+    password: str = Field(min_length=1)
+
+
+class TokenResponse(BaseModel):
+    access_token: str
+    token_type: str = "bearer"
+    expires_in: int  # seconds
+
+
+class UserRead(BaseModel):
+    id: int
+    username: str
+    email: str | None
+    full_name: str | None
+    is_admin: bool

backend/app/schemas/server.py

@@ -0,0 +1,52 @@
+"""Server schemas."""
+
+from datetime import datetime
+
+from pydantic import BaseModel, ConfigDict, Field
+
+from app.models.server import ServerType
+
+
+class ServerCreate(BaseModel):
+    name: str = Field(min_length=1, max_length=255)
+    hostname: str = Field(min_length=1, max_length=255)
+    port: int = 5985
+    type: ServerType = ServerType.WINDOWS
+    description: str | None = None
+    tags: str | None = None
+    credential_id: int | None = None
+
+
+class ServerUpdate(BaseModel):
+    name: str | None = None
+    hostname: str | None = None
+    port: int | None = None
+    type: ServerType | None = None
+    description: str | None = None
+    tags: str | None = None
+    credential_id: int | None = None
+
+
+class ServerRead(BaseModel):
+    model_config = ConfigDict(from_attributes=True)
+
+    id: int
+    name: str
+    hostname: str
+    port: int
+    type: ServerType
+    description: str | None
+    tags: str | None
+    credential_id: int | None
+    last_health_at: datetime | None
+    last_health_ok: bool | None
+    created_at: datetime
+    updated_at: datetime
+
+
+class HealthCheckResult(BaseModel):
+    server_id: int
+    ok: bool
+    latency_ms: float | None = None
+    message: str
+    checked_at: datetime

backend/app/schemas/update.py

@@ -0,0 +1,42 @@
+"""Update job schemas."""
+
+from datetime import datetime
+
+from pydantic import BaseModel, ConfigDict
+
+from app.models.update_job import JobStatus, JobType
+
+
+class JobTriggerRequest(BaseModel):
+    server_id: int
+    type: JobType
+    # CAU-specific options
+    cluster_name: str | None = None
+    # Linux-specific options
+    reboot_if_required: bool = False
+
+
+class UpdateJobRead(BaseModel):
+    model_config = ConfigDict(from_attributes=True)
+
+    id: int
+    server_id: int
+    type: JobType
+    status: JobStatus
+    progress_percent: int
+    current_phase: str | None
+    started_by: str
+    started_at: datetime | None
+    finished_at: datetime | None
+    error: str | None
+    created_at: datetime
+
+
+class UpdateLogRead(BaseModel):
+    model_config = ConfigDict(from_attributes=True)
+
+    id: int
+    job_id: int
+    timestamp: datetime
+    level: str
+    line: str