8 Commits

Author	SHA1	Message	Date
copilotcoder	bb526cde80	feat(ci): enforce runtime-validation image separation ... Add Dockerfile boundary checks and deployable image purity validation for backend/frontend runtime artifacts. Wire enforcement into CI workflows and document runtime-vs-validation ownership.	2026-06-19 17:30:04 -04:00
Cliff Hill	d02039a22e	Backend runtime upgraded to Python 3.14 with exact dependency pinning (#57) ... Signed-off-by: Cliff Hill <xlorep@darkhelm.org> ## Summary Upgrades backend runtime baseline and dependency management for issue #10. ### Changes 1. **Python Baseline**: Updated from 3.13 to 3.14 - Updated `backend/pyproject.toml` requires-python constraint - Updated `backend/pyrightconfig.json` pythonVersion - Updated all Dockerfile and CI references 2. **Dependency Pinning**: Switched to exact version pins in `backend/pyproject.toml` - All dev and runtime dependencies now use `==` instead of `>=` - `fastapi==0.120.2`, `uvicorn==0.38.0` - ruff, pyright, pytest suite pinned to current resolved versions - Regenerated `backend/uv.lock` under Python 3.14 3. **Startup Compatibility Guard** (TDD via RED→GREEN) - New `compatibility_status()` function evaluates runtime and pinned deps - Startup raises `RuntimeError` if policy fails - Implemented via FastAPI lifespan (non-deprecated) handler 4. **Compatibility Status Endpoint** - New `GET /compatibility` returns policy status, runtime version, and package checks - Shares single source of truth with startup validation 5. **Integration Tests** - Added failing-then-passing tests for startup guard and endpoint behavior - 100% coverage maintained 6. **Direnv Configuration** - Added `UV_PYTHON="3.14"` pin to repo `.envrc` - Ensures direnv creates/recreates venv with correct Python version ### Validation - ✅ ruff format/check - ✅ pyright strict (0 errors) - ✅ pytest: 8 passed, 100% coverage (>=95 gate) - ✅ pydoclint: pass - ✅ xdoctest: pass ### Notes - SQLAlchemy/SQLModel introduction deferred to next pass per scope - Compatibility logic currently validates fastapi/uvicorn pins (runtime deps) - Ready for container build validation and Renovate bot testing Co-authored-by: copilotcoder <copilotcoder@darkhelm.org> Reviewed-on: #57 Co-authored-by: Cliff Hill <xlorep@darkhelm.org> Co-committed-by: Cliff Hill <xlorep@darkhelm.org>	2026-06-18 11:19:24 -04:00
Cliff Hill	4454e9aef5	Adding renovate stuff. ... Signed-off-by: Cliff Hill <xlorep@darkhelm.org>	2025-11-04 12:40:53 -05:00
Cliff Hill	772c4cfab5	Fixing the optimization ... Signed-off-by: Cliff Hill <xlorep@darkhelm.org>	2025-10-31 12:48:40 -04:00
Cliff Hill	9bbb362e5b	Optimizing the docker builds for cicd. ... Signed-off-by: Cliff Hill <xlorep@darkhelm.org>	2025-10-31 11:25:34 -04:00
Cliff Hill	6df52238de	Optimizing the build so that CICD doesn't take FOREVER to run. ... Signed-off-by: Cliff Hill <xlorep@darkhelm.org>	2025-10-31 09:09:46 -04:00
Cliff Hill	8a49a2f233	Making network connectivity more resiliant and getting the secrets more secure. ... Signed-off-by: Cliff Hill <xlorep@darkhelm.org>	2025-10-27 15:30:11 -04:00
Cliff Hill	8ab2e1dd28	Did some things. ... Signed-off-by: Cliff Hill <xlorep@darkhelm.org>	2025-10-18 21:29:28 -04:00