Trial state of 29 Oct 2026: ATOMA reader setup, app dashboards, embedding notes

Baseline before the clean-up (PD-13): the PD-11 reader setup and the PD-12 app
dashboards as they ran on the local stack, uncommitted until now. Not deployed,
not independently reviewed.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

stacks/fuel-monitoring/superset/Dockerfile

@@ -11,7 +11,9 @@ USER root
 RUN uv pip install --no-cache --python /app/.venv/bin/python \
       authlib==1.9.1 psycopg2-binary==2.9.13 "trino[sqlalchemy]==0.340.0"
 
-COPY --from=insights --chown=superset:superset superset_config.py petrolyst_security.py /app/pythonpath/
+COPY --from=insights --chown=superset:superset superset_config.py petrolyst_security.py petrolyst_reader.py /app/pythonpath/
+COPY --from=insights --chown=superset:superset templates/ /app/pythonpath/templates/
+COPY --from=insights --chown=superset:superset roles/ /app/petrolyst-roles/
 COPY --from=insights --chown=superset:superset assets/branding/ /app/superset/static/assets/branding/
 COPY --from=insights patches/ /app/patches/petrolyst/
 # Stop at the first patch or verify that fails, so a later success cannot hide

stacks/fuel-monitoring/superset/init.sh

@@ -12,3 +12,5 @@ superset init
 superset set-database-uri \
   --database_name "Fuel (Trino)" \
   --uri "trino://superset@trino:8080/fuel"
+# The role "ATOMA Reader", set to exactly its permissions (petrolyst-insights/roles/).
+/app/.venv/bin/python /app/petrolyst-roles/atoma_reader.py