5 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Hermes Agent	f8a04dba1a	fix(ci): add frontend production build step to catch Angular build failures ... - Add 'frontend-build' job that runs 'npx ng build --configuration production' - Wire frontend-build into quality-gate dependencies - Include feature/multi-admin-roles in CI push branches - Build failures now fail the pipeline instead of being silently missed	2026-07-30 23:50:20 +00:00
Hermes Agent	c74d905378	fix(deps): add bcrypt to requirements.txt for CI test collection	2026-07-30 10:36:21 +00:00
Hermes Agent	ffbc19f16f	fix(auth): only block bootstrap login when admin users exist ... The previous check counted ALL users (func.count(User.id)), which incorrectly blocked bootstrap login if any non-admin user (e.g., Google OAuth sign-in) already existed. The fix queries specifically for admin users using the legacy is_admin flag OR the admin role assignment in user_roles. Also add tests for the non-admin-user-only scenario and fix the stale test_non_admin_user_cannot_login_as_admin assertion (401 not 403 — bootstrap path is still active when no admin exists).	2026-07-30 09:44:42 +00:00
Hermes Agent	0eca079f28	feat: add role-based admin support for multiple admin users ... - Add Role model and user_roles association table (many-to-many) - Add password_hash column to User model (nullable, for future bcrypt) - Keep is_admin boolean for backward compatibility - Add is_admin_effective property: true if legacy is_admin OR 'admin' role - Update auth dependency (get_current_admin_user) to use is_admin_effective - Update bootstrap login to auto-create 'admin' role and assign on login - Update Google OAuth login to use is_admin_effective for token creation - Add migrate_roles.py: idempotent migration script to backfill roles - Add unit tests for Role, User, association table, and is_admin_effective	2026-07-30 04:54:30 +00:00
Hermes Agent	501df79e5c	feat: add test framework, unit tests, and GitLab CI pipeline ... - Add pytest config in backend/pyproject.toml with asyncio mode and coverage - Add backend/requirements-test.txt with pytest, pytest-cov, pytest-asyncio, aiosqlite - Write 86 backend unit tests covering auth (JWT tokens), schemas (Pydantic models), config (Settings env overrides), log_parser (log parsing, IP resolution, geo data), models (SQLAlchemy table definitions + column defaults), and theme export - Add Vitest config for Angular frontend (vitest.config.ts, src/test-setup.ts) - Add .gitlab-ci.yml with stages: backend-test, frontend-test, backend-lint, docker-build, and quality-gate - CI enforces 10% minimum coverage threshold for backend	2026-07-29 08:34:42 +00:00