chore: Halkyon Learn moves into apps/learn

Its server, client, app and curator, and the tools that write its
assets (maps, Anki fixtures, icons), as they are; paths are fixed in
the commits that follow.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Signed-off-by: Tizian 「ティツィアーン」 <raisondetredev@pm.me>

apps/learn/halkyon_learn_server/config/development.yaml

@@ -0,0 +1,76 @@
+# This is the configuration file for your local development environment. By
+# default, it runs a single server on port 8080. To set up your server, you will
+# need to add the name of the database you are connecting to and the user name.
+# The password for the database is stored in the config/passwords.yaml.
+#
+# When running your server locally, the server ports are the same as the public
+# facing ports.
+
+# Configuration for the main API server.
+apiServer:
+  port: 8080
+  publicHost: localhost
+  publicPort: 8080
+  publicScheme: http
+
+# Configuration for the Insights server.
+insightsServer:
+  port: 8081
+  publicHost: localhost
+  publicPort: 8081
+  publicScheme: http
+
+# Configuration for the web server.
+webServer:
+  port: 8082
+  publicHost: localhost
+  publicPort: 8082
+  publicScheme: http
+
+# This is the database setup for your server.
+database:
+  host: localhost
+  port: 8090
+  name: halkyon_learn
+  user: postgres
+  #requireSsl: true # defaults to false
+  #isUnixSocket: true # defaults to false
+  dataPath: .serverpod/development/pgdata
+  #maxConnectionCount: 10 # Defaults to 10, a negative or null value removes the limit
+
+# This is the setup for Redis.
+redis:
+  enabled: false
+  host: localhost
+  port: 8091
+  #user: # defaults to empty
+  #requireSsl: true # defaults to false
+
+maxRequestSize: 524288 # The maximum size of requests allowed in bytes
+
+sessionLogs:
+  persistentEnabled: false
+  consoleEnabled: true
+  consoleLogFormat: text # Defaults to "json", options are "text" or "json"
+
+# futureCallExecutionEnabled: true # Defaults to true
+
+#futureCall:
+#  concurrencyLimit: 1 # Defaults to 1, a negative or null value removes the limit
+#  scanInterval: 5000 # Unit in milliseconds, defaults to 5000
+
+# Recommended when serving web clients: keeps auth tokens in httpOnly
+# cookies. Without this, web tokens live in JavaScript-readable storage,
+# where any XSS can steal them. Web clients opt in with
+# `client.cookieAuth = true`. Requires `allowedOrigins`; browsers from
+# origins not in the list lose cross-origin access, including to public
+# endpoints.
+#authCookie:
+#  secure: false # Cookies require https; relax only for http://localhost
+#  #name: serverpod_auth # Defaults to "serverpod_auth"
+#  #refreshName: serverpod_auth_refresh # Defaults to "<name>_refresh"
+#  #domain: example.com # Defaults to host-only; set to share across subdomains
+#  #path: / # Defaults to "/"
+#  #sameSite: lax # Defaults to "lax", options are "strict" or "none"
+#allowedOrigins:
+#  - http://localhost:8082 # The origin serving your Flutter web app

apps/learn/halkyon_learn_server/config/generator.yaml

@@ -0,0 +1,16 @@
+type: server
+
+client_package_path: ../halkyon_learn_client
+server_test_tools_path: test/integration/test_tools
+
+# Private and shared data sync through serverpod_offline_sync (ADR 0001): its module,
+# and the experimental `database: sync` for the models it syncs.
+modules:
+  serverpod_offline_sync:
+    nickname: offline_sync
+  # What every Halkyon server has (ADR 0014): `client.modules.base` in the app.
+  halkyon_base:
+    nickname: base
+
+experimental_features:
+  databaseSync: true

apps/learn/halkyon_learn_server/config/production.yaml

@@ -0,0 +1,77 @@
+# Configuration for the production instance learn.halkyon.eu.
+# Caddy terminates TLS on 443 and forwards to the API server on 8080, and the
+# assistant connector's paths to the web server on 8082; Insights doesn't run.
+
+# Configuration for the main API server.
+apiServer:
+  port: 8080
+  publicHost: learn.halkyon.eu
+  publicPort: 443
+  publicScheme: https
+
+# No insightsServer: without this block Serverpod doesn't start Insights at all (it
+# would otherwise listen on every interface). To use Insights later, add the block
+# back (port 8081), set `serviceSecret` in the production passwords, and reach the
+# port through an SSH tunnel, never through Caddy.
+
+# The web server serves only the assistant connector (ADR 0006): the MCP endpoint
+# and its OAuth pages and metadata. Caddy forwards those paths alone to it
+# (deploy/Caddyfile); everything else stays on the API server.
+webServer:
+  port: 8082
+  publicHost: learn.halkyon.eu
+  publicPort: 443
+  publicScheme: https
+
+# The database: the `postgres` service of deploy/compose.yaml, reachable only inside
+# the Compose network (it publishes no port), so no TLS between server and database.
+# The password comes from the environment (SERVERPOD_DATABASE_PASSWORD, set in
+# deploy/.env); there is no production passwords.yaml.
+database:
+  host: postgres
+  port: 5432
+  name: halkyon_learn
+  user: halkyon_learn
+  requireSsl: false
+  #isUnixSocket: true # defaults to false
+  #maxConnectionCount: 10 # Defaults to 10, a negative or null value removes the limit
+
+# This is the setup for Redis. The default for the Google Cloud Engine Terraform
+# configuration is to connect on a private IP address.
+# If you are connecting on a public IP (e.g. on AWS or Google Cloud Run), you
+# connect on the public IP of the database e.g. redis.examplepod.com.
+redis:
+  enabled: false
+  host: redis.private-production.examplepod.com
+  port: 6379
+  #user: # defaults to empty
+  #requireSsl: true # defaults to false
+
+maxRequestSize: 524288 # The maximum size of requests allowed in bytes
+
+sessionLogs:
+  consoleEnabled: true
+  persistentEnabled: false
+# consoleLogFormat: json # Defaults to "json", options are "text" or "json"
+
+# futureCallExecutionEnabled: true # Defaults to true
+
+#futureCall:
+#  concurrencyLimit: 1 # Defaults to 1, a negative or null value removes the limit
+#  scanInterval: 5000 # Unit in milliseconds, defaults to 5000
+
+# Recommended when serving web clients: keeps auth tokens in httpOnly
+# cookies. Without this, web tokens live in JavaScript-readable storage,
+# where any XSS can steal them. Web clients opt in with
+# `client.cookieAuth = true`. Requires `allowedOrigins`; browsers from
+# origins not in the list lose cross-origin access, including to public
+# endpoints.
+#authCookie:
+#  sameSite: lax # Defaults to "lax", options are "strict" or "none"
+#  #name: serverpod_auth # Defaults to "serverpod_auth"
+#  #refreshName: serverpod_auth_refresh # Defaults to "<name>_refresh"
+#  #domain: examplepod.com # Defaults to host-only; set to share across subdomains
+#  #path: / # Defaults to "/"
+#  #secure: true # Defaults to true; the cookie is only sent over https
+#allowedOrigins:
+#  - https://app.examplepod.com # The origin serving your Flutter web app

apps/learn/halkyon_learn_server/config/test.yaml

@@ -0,0 +1,57 @@
+# This is the configuration file for your test environment.
+# All ports are set to zero in this file which makes the server find the next available port.
+# This is needed to enable running tests concurrently. To set up your server, you will
+# need to add the name of the database you are connecting to and the user name.
+# The password for the database is stored in the config/passwords.yaml.
+#
+# When running your server locally, the server ports are the same as the public
+# facing ports.
+
+# Configuration for the main API test server.
+apiServer:
+  port: 0
+  publicHost: localhost
+  publicPort: 0
+  publicScheme: http
+
+# Configuration for the Insights test server.
+insightsServer:
+  port: 0
+  publicHost: localhost
+  publicPort: 0
+  publicScheme: http
+
+# Configuration for the web test server.
+webServer:
+  port: 0
+  publicHost: localhost
+  publicPort: 0
+  publicScheme: http
+
+# This is the database setup for your test server.
+database:
+  host: localhost
+  port: 9090
+  name: halkyon_learn_test
+  user: postgres
+  dataPath: .serverpod/test/pgdata
+  #maxConnectionCount: 10 # Defaults to 10, a negative or null value removes the limit
+
+# This is the setup for your Redis test instance.
+redis:
+  enabled: false
+  host: localhost
+  port: 9091
+  #user: # defaults to empty
+  #requireSsl: true # defaults to false
+
+sessionLogs:
+  persistentEnabled: false
+  consoleEnabled: true
+# consoleLogFormat: json # Defaults to "json", options are "text" or "json"
+
+# futureCallExecutionEnabled: true # Defaults to true
+
+#futureCall:
+#  concurrencyLimit: 1 # Defaults to 1, a negative or null value removes the limit
+#  scanInterval: 5000 # Unit in milliseconds, defaults to 5000