5 Commits

Author	SHA1	Message	Date
Samir Boulahtit	9bceeaac9c	feat(arch): implement soft delete for business-critical models ... Adds SoftDeleteMixin (deleted_at + deleted_by_id) with automatic query filtering via do_orm_execute event. Soft-deleted records are invisible by default; bypass with execution_options={"include_deleted": True}. Models: User, Merchant, Store, StoreUser, Customer, Order, Product, LoyaltyProgram, LoyaltyCard. Infrastructure: - SoftDeleteMixin in models/database/base.py - Auto query filter registered on SessionLocal and test sessions - soft_delete(), restore(), soft_delete_cascade() in app/core/soft_delete.py - Alembic migration adding columns to 9 tables - Partial unique indexes on users.email/username, stores.store_code/subdomain Service changes: - admin_service: delete_user, delete_store → soft_delete/soft_delete_cascade - merchant_service: delete_merchant → soft_delete_cascade (stores→children) - store_team_service: remove_team_member → soft_delete (fixes is_active bug) - product_service: delete_product → soft_delete - program_service: delete_program → soft_delete_cascade Admin API: - include_deleted/only_deleted query params on admin list endpoints - PUT restore endpoints for users, merchants, stores Tests: 9 unit tests for soft-delete infrastructure. Docs: docs/backend/soft-delete.md + follow-up proposals. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-03-28 21:08:07 +01:00
Samir Boulahtit	1b8a40f1ff	feat(validators): add noqa suppression support to security and performance validators ... - Add centralized _is_noqa_suppressed() to BaseValidator with normalization (accepts both SEC001 and SEC-001 formats for ruff compatibility) - Wire noqa support into all 21 security and 18 performance check functions - Add ruff external config for SEC/PERF/MOD/EXC codes in pyproject.toml - Convert all 280 Python noqa comments to dashless format (ruff-compatible) - Add site/ to IGNORE_PATTERNS (excludes mkdocs build output) - Suppress 152 false positive findings (test passwords, seed data, validator self-references, Apple Wallet SHA1, etc.) - Security: 79 errors → 0, 60 warnings → 0 - Performance: 80 warnings → 77 (3 test script suppressions) - Add proposal doc with noqa inventory and remaining findings recommendations Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-02-14 22:56:56 +01:00
Samir Boulahtit	688896d856	fix: add .dockerignore and env_file to docker-compose ... Prevents .env from being baked into Docker image (was overriding config defaults). Adds env_file directive so containers load host .env properly. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-02-14 20:01:21 +01:00
Samir Boulahtit	e9253fbd84	refactor: rename Wizamart to Orion across entire codebase ... Replace all ~1,086 occurrences of Wizamart/wizamart/WIZAMART/WizaMart with Orion/orion/ORION across 184 files. This includes database identifiers, email addresses, domain references, R2 bucket names, DNS prefixes, encryption salt, Celery app name, config defaults, Docker configs, CI configs, documentation, seed data, and templates. Renames homepage-wizamart.html template to homepage-orion.html. Fixes duplicate file_pattern key in api.yaml architecture rule. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-02-14 16:46:56 +01:00
Samir Boulahtit	ecb5309879	refactor(tests): reorganize tests per module with shared root conftest ... Move 42 single-module test files into app/modules/*/tests/ directories while keeping 40 cross-module and infrastructure tests central in tests/. Hub fixtures (engine, db, client, cleanup) moved to root conftest.py so both tests/ and module tests inherit them. Update pyproject.toml testpaths and Makefile TEST_PATHS to discover all test locations. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-02-10 21:42:06 +01:00