3 Commits

Include renames

Author	SHA1	Message	Date
Lucas Berger	1f94dc5eb7	feat(19-05): global-setup local_credentials seed + login.spec.ts + CI harness env ... - global-setup.ts: TRUNCATE local_credentials + seed devuser/devpass (PHC scrypt inline) - Create login.spec.ts: real-login-form e2e (gate redirect, wrong-password error, correct login) - ci.yml: add LOCAL_SESSION_SECRET dev value + local_credentials seed step in harness job - Fix all test mocks: add devSessionCookieMiddleware no-op to vi.mock(devBypass.js) blocks in admin/setup/push/lists/localAuth/authMode/requireAdmin tests (Rule 1 - Bug: missing export) - Full API suite: 446/446 tests pass; pnpm typecheck: exit 0	2026-06-17 17:21:05 -04:00
Lucas Berger	79fe3e0e04	fix(10-04): prettier format + remove unnecessary type assertions ... - Run prettier on all new/modified PWA files (CredentialSheet, SetupBanner, AdminPage, admin.spec.ts) - Remove unnecessary 'as React.RefObject<HTMLElement | null>' casts flagged by @typescript-eslint/no-unnecessary-type-assertion - Format pre-existing API files from Plans 02/03 (me.ts, user.test.ts, requireAdmin.test.ts, me.test.ts) - All 270 API tests + 191 PWA vitest tests pass; lint/typecheck/build clean	2026-06-13 15:22:50 -04:00
Lucas Berger	92179302a2	test(10-02): add failing requireAdmin middleware tests (RED) ... - 403 for non-admin user (is_admin=false in DB) - next() called for admin user (is_admin=true in DB) - 403 when no user on context (no DB query) - 403 when context user spoofs isAdmin=true but DB has is_admin=false (T-10-04)	2026-06-13 14:30:28 -04:00