6 Commits

Author	SHA1	Message	Date
Samir Boulahtit	e3a52f6536	refactor: remove legacy models/schema/auth.py re-export file ... All 84 import sites now use the canonical path app.modules.tenancy.schemas.auth directly — no need for backwards-compatibility re-exports. Update audit validator to check module schemas locations instead of only the legacy models/schema/ path. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-02-26 23:59:46 +01:00
Samir Boulahtit	b382090771	refactor: remove GitLab CI config and docs after full Gitea migration ... - Delete .gitlab-ci.yml (replaced by .gitea/workflows/ci.yml) - Delete docs/deployment/gitlab.md (superseded by gitea.md) - Update audit rules to reference .gitea/workflows/*.yml - Update validate_audit.py to check Gitea CI paths - Clean up GitLab references in gitea.md, mkdocs.yml, .dockerignore - Mark IPv6 AAAA records as completed in hetzner docs Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-02-15 19:28:35 +01:00
Samir Boulahtit	1b8a40f1ff	feat(validators): add noqa suppression support to security and performance validators ... - Add centralized _is_noqa_suppressed() to BaseValidator with normalization (accepts both SEC001 and SEC-001 formats for ruff compatibility) - Wire noqa support into all 21 security and 18 performance check functions - Add ruff external config for SEC/PERF/MOD/EXC codes in pyproject.toml - Convert all 280 Python noqa comments to dashless format (ruff-compatible) - Add site/ to IGNORE_PATTERNS (excludes mkdocs build output) - Suppress 152 false positive findings (test passwords, seed data, validator self-references, Apple Wallet SHA1, etc.) - Security: 79 errors → 0, 60 warnings → 0 - Performance: 80 warnings → 77 (3 test script suppressions) - Add proposal doc with noqa inventory and remaining findings recommendations Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-02-14 22:56:56 +01:00
Samir Boulahtit	688896d856	fix: add .dockerignore and env_file to docker-compose ... Prevents .env from being baked into Docker image (was overriding config defaults). Adds env_file directive so containers load host .env properly. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-02-14 20:01:21 +01:00
Samir Boulahtit	f20266167d	fix(lint): auto-fix ruff violations and tune lint rules ... - Auto-fixed 4,496 lint issues (import sorting, modern syntax, etc.) - Added ignore rules for patterns intentional in this codebase: E402 (late imports), E712 (SQLAlchemy filters), B904 (raise from), SIM108/SIM105/SIM117 (readability preferences) - Added per-file ignores for tests and scripts - Excluded broken scripts/rename_terminology.py (has curly quotes) Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-02-12 23:10:42 +01:00
Samir Boulahtit	7a9dda282d	refactor(scripts): reorganize scripts/ into seed/ and validate/ subfolders ... Move 9 init/seed scripts into scripts/seed/ and 7 validation scripts (+ validators/ subfolder) into scripts/validate/ to reduce clutter in the root scripts/ directory. Update all references across Makefile, CI/CD configs, pre-commit hooks, docs (~40 files), and Python imports. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-02-09 21:35:53 +01:00