feat: terminal fullscreen, asyncpg fix, CI improvements #59

Merged

jimmy merged 18 commits from dev into main 2026-05-06 01:30:57 +08:00

Conversation 0 Commits 18 Files Changed 44

+2173 -419

jimmy commented 2026-04-25 18:36:23 +08:00

Owner

Copy Link

Copy Source

Summary

• Add fullscreen toggle to terminal with iPhone landscape support
• Fix asyncpg 0.30.0 compatibility for Python 3.12
• Re-enable test workflow with reliable PR-only triggers
• Add production deployment gate (tests must pass before deploy)
• Improve caching with validation and fallback to fresh install

Test plan

• test.yml should trigger automatically on this PR
• Backend and frontend tests should pass
• After merge, deploy.yml should run tests before deploying

## Summary - Add fullscreen toggle to terminal with iPhone landscape support - Fix asyncpg 0.30.0 compatibility for Python 3.12 - Re-enable test workflow with reliable PR-only triggers - Add production deployment gate (tests must pass before deploy) - Improve caching with validation and fallback to fresh install ## Test plan - [ ] test.yml should trigger automatically on this PR - [ ] Backend and frontend tests should pass - [ ] After merge, deploy.yml should run tests before deploying

jimmy added 2 commits 2026-04-25 18:36:24 +08:00

test: trigger deploy-dev workflow c78c77fc6e

fix: re-enable test workflow with reliable triggers and production gate ... 0338130133

- Re-enable test.yml to run on PRs to main (not every push)
- Add cache validation with fallback to fresh install for both Python/Node
- Add PyPI fallback when mirror fails
- Increase pytest timeout from 30s to 60s
- Add backend+frontend test gate to production deploy workflow

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

jimmy added 1 commit 2026-04-26 16:11:56 +08:00

fix: resolve test failures in CI ... f00b230c5e

- Frontend: Fix Svelte plugin hot module config for vitest
- Backend: Ensure conversation tracker uses mocked database in tests

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

jimmy added 1 commit 2026-04-26 16:40:28 +08:00

fix: update mock database schema to match conversation tracker queries ... 5c7d185953

- Add missing columns: slug, model, conversation_count, total_messages, total_tokens, created_at, project_path
- Fix test data insert to include all required columns

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

jimmy added 4 commits 2026-05-03 17:25:13 +08:00

security: Sprint 00 — critical security fixes (OPC WS auth, Transmission creds, SECRET_KEY, passkey rate limit) ... ddaf3c6cee

- Add JWT token auth to OPC WebSocket (unauthenticated → 403, per-user tracking)
- Externalize Transmission RPC credentials to TRANSMISSION_USER/PASS env vars
- Remove hardcoded SECRET_KEY fallback from dev compose
- Rate-limit passkey register options endpoint at 5/minute
- Add PDD (docs/improvement-plan.md) and sprint specs (specs/)

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

stability: Sprint 01 — production stability (dev runner, test gate, Docker UI, cpu_percent) ... 323ae474a8

- Fix dev deploy runner label (ubuntu-latest → nas)
- Add backend + frontend test gate to dev deploy (tests must pass before deploy)
- Add error handling UI to Docker.svelte (error state with retry button)
- Fix psutil.cpu_percent always returning 0 on first call (interval=0 → 0.1)

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

auth: Sprint 02 — auth hardening (Pydantic models, challenge binding, admin gates) ... 1a37f34401

- Add max_length validation to LoginRequest (username 128, password 1024)
- Replace raw request.json() with Pydantic models in RBAC override/update endpoints
- Replace raw request.json() with Pydantic models in passkey register/login/delete
- Bind passkey challenges to session-bound challenge_id (prevents cross-session replay)
- Gate audit log and security log endpoints behind admin role
- Fix fragile opc_db.json.dumps() → import json directly
- Add COOKIE_SECURE=False startup warning (suppress with ALLOW_INSECURE_COOKIES)

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

ci: Sprint 04 — CI/CD reliability (BuildKit docs, cache-to, version pins, cleanup, compose validation) ... 3e177c703e

- Document DOCKER_BUILDKIT=0 rationale in all deploy workflows
- Add --cache-to type=inline to all docker build commands
- Pin Python 3.12 and Node 20 with version assertions in CI
- Remove dead test-summary job from test.yml
- Reconcile required-tools.txt with Dockerfile.base (bash, ca-certificates, openssh-client)
- Clean up stale artifacts (Dockerfile comment, orphaned .md files)
- Add docker-compose config validation before claude-dev deploy

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

jimmy added 1 commit 2026-05-03 17:32:18 +08:00

fix: remove --cache-to flag from non-BuildKit docker build commands ... 6070a904b7

The --cache-to type=inline flag is only valid with DOCKER_BUILDKIT=1.
With BuildKit disabled, it causes docker build to fail with exit 125.
Keep the documentation comments for when BuildKit is re-enabled.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

jimmy added 1 commit 2026-05-03 17:57:44 +08:00

ci: re-trigger CI with runner proxy fix ... f7cfad30e3

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

jimmy added 1 commit 2026-05-03 17:58:03 +08:00

ci: add socat to required-tools for VPS proxy tunnel support ... f85dc25762

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

jimmy added 1 commit 2026-05-03 18:10:13 +08:00

ci: re-trigger CI after NO_PROXY runner config fix ... 0c3d2f854b

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

jimmy added 1 commit 2026-05-03 18:14:02 +08:00

fix: reconcile required-tools.txt smoke checks (S04.5) ... 59bdcf392c

- Replace openssh-client with ssh (checkable binary name)
- Remove socat (not a claude-dev container dependency)
- Handle ca-certificates as special package check in smoke-tools.sh
- Add SPECIAL_CHECKS array for packages without matching binaries

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

jimmy added 1 commit 2026-05-03 18:28:13 +08:00

dashboard: externalize service URLs and network config (Sprint 03 config externalization) ... 019fddc079

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

jimmy added 1 commit 2026-05-03 18:44:11 +08:00

ci: add workflow_dispatch to deploy-dev for manual triggers ... e8534728ef

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

jimmy added 2 commits 2026-05-03 22:15:23 +08:00

fix: resolve CI test failures — schema, OPC mocking, download auth, router reloads ... 56a8ff28ad

Fix 20 pre-existing test failures:
- Update mock conversation DB schema with missing columns
- Add in-memory OPC database mock to avoid PostgreSQL dependency in CI
- Fix file download endpoint to check auth before revealing file existence
- Reload routers.system and routers.security in test_app for fresh config
- Reset cached Docker client in security router between tests
- Fix websocket auth test to properly check for connection rejection

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

fix: resolve test failures blocking CI pipeline (OPC mock, route ordering, system stats) ... 0a497ca0f1

- Add agent fetchrow to OPC mock to fix "Task or agent not found" errors
- Reorder conversation tracker routes: /search, /stats, /trigger before /{session_id}
- Fix test_task_creator_tracked_in_metadata to expect token username (testuser)
- Mock shutil/psutil in system stats test for non-Synology environments

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

jimmy added 1 commit 2026-05-06 01:25:57 +08:00

feat: Phase 13 — off-site backup with rclone + crypt encryption ... dd64420de1

Adds cloud sync extension to the daily backup script using rclone
with client-side AES-256 encryption. Includes interactive setup
script for configuring OneDrive, Google Drive, or any rclone provider.

- scripts/setup-rclone.sh: interactive NAS rclone installer + config
- scripts/cloud-backup.sh: sourced by backup.sh when CLOUD_ENABLED=true
- backup.sh: cloud sync step runs after local backup

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

jimmy merged commit 53f4427040 into main 2026-05-06 01:30:57 +08:00

Sign in to join this conversation.

Reviewers

No Reviewers

Labels

No items

No Label

Milestone

No items

No Milestone

Projects

Clear projects

No project

Assignees

Clear assignees

jimmy

No Assignees

1 Participants

Notifications

Subscribe

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: jimmy/nas-tools#59