5 Commits

Include renames

Author	SHA1	Message	Date
ilia	4273162d9e	test: interceptNetworkCall + Zod widening, PROD smoke, NextAuth write gates ... - upload.smoke.spec.ts / gallery.search-filters.spec.ts: replace waitForResponse/text-scrape with typed interceptNetworkCall spies (status + JSON shape) on the real upload POST and the filtered /api/search GET. - api.fastapi-login.spec.ts: Zod-validate the FastAPI TokenResponse and /auth/me UserResponse instead of loose casts. gallery.search-filters.spec.ts gets the same treatment for the Prisma-backed SearchResponse. - prod.smoke.spec.ts: opt-in (PROD_BASE_URL) health + login-page check on a real PROD host; skips as a no-op until the PROD LXC exists (none does yet per `pct list` — see ROADMAP). - viewer.write-gates.spec.ts: NextAuth (browser-session) hasWriteAccess gate on POST /api/faces/{id}/identify — viewer 403s, admin passes through. Provisioned a third, independent auth-DB user (e2e-viewer@levkine.ca, hasWriteAccess=false) for this via ansible's provision-punimtag-e2e-user.py (see that repo for the vault/Infisical/Gitea/Vaultwarden side).	2026-07-14 22:07:30 -04:00
ilia	e78fad692f	test: FastAPI e2e role-permission gates + gallery search filter coverage ... - Wire E2E_API_USERNAME/PASSWORD (admin) + E2E_API_VIEWER_USERNAME/PASSWORD (viewer) into the Gitea Actions e2e job so FastAPI-authed specs run in CI. - Add api.role-permissions.spec.ts: viewer 403 vs admin 200/200/200 on /api/v1/users, /api/v1/role-permissions, and /api/v1/photos/bulk-delete (safe no-op via a non-existent photo id — proves the gate, not deletion). - Add gallery.search-filters.spec.ts: tag_id and person_id filters on the public /api/search route return correct subsets, combined filters narrow results, and the /search UI tag-filter interaction updates the URL/count. - Update ROADMAP/README/.env.example for the new env vars and coverage.	2026-07-14 20:42:47 -04:00
ilia	d9910acdde	Fill e2e gaps: storageState, real upload POST, session smoke ... Add auth setup project, viewer session check, upload that posts a fixture, FastAPI login spec (skips without E2E_API_*), and repo ROADMAP.md.	2026-07-14 19:17:14 -04:00
ilia	47b15049bc	Expand e2e auth coverage, Vitest CI, and shared URL defaults ... Wire viewer-frontend Vitest into Gitea Actions, centralize DEV base URLs in env-defaults.json, expand playkit API catalog specs, and land auth/mail flows plus verify-email public-host redirect and idle-logout e2e hooks.	2026-07-14 18:49:42 -04:00
ilia	0a9223c943	test: add Playwright e2e smoke suite for punimtag dev ... Add an e2e/ Playwright harness (via @levkin/playkit) that smoke-tests the public DEV host: login page loads, sign-out never redirects to a LAN host, FastAPI /health responds, and forgot-password mail lands in Mailtrap with a public reset link (Kolby #56/#57 regressions). Wire it into Gitea Actions as a new `e2e` job (self-hosted runner, Chromium via Playwright), gated behind the existing skip-ci-check. Add npm root scripts (install:e2e, test:e2e) and gitignore e2e build artifacts (node_modules, reports, .env).	2026-07-14 17:11:38 -04:00