17 Commits

Author	SHA1	Message	Date
Lars	b06d026dd0	chore(version): update version and changelog for release 0.8.118 ... - Bumped APP_VERSION to 0.8.118 and updated DB_SCHEMA_VERSION to 20260514062. - Enhanced the dashboard API with a new endpoint that consolidates training home data, allowing for a single request to retrieve upcoming training sessions, planned sessions with notes, and review pending items. - Updated the frontend Dashboard component to utilize the new API structure, improving data loading efficiency and user experience. - Added migration details and changelog entries to reflect the latest changes and improvements.	2026-05-14 08:53:09 +02:00
Lars	14cf8a1a53	feat(tests): enhance smoke test for exercise navigation ... - Added a check to ensure the loading spinner is not visible before navigating to the exercises page, improving test reliability. - Updated navigation logic to wait for both the URL change and the click event on the exercises link, reducing race conditions. - Modified the assertion to check for the visibility of the main heading on the exercises page, ensuring stricter validation of page load success.	2026-05-14 08:17:15 +02:00
Lars	597486bef1	feat(dashboard): add GET /api/dashboard/kpis endpoint and integrate into frontend ... - Implemented a new API endpoint for retrieving dashboard KPIs, providing a consolidated overview of drafts, personal exercises, and year-to-date completed units. - Updated the Dashboard component to utilize the new endpoint, enhancing data retrieval efficiency and user experience. - Added a helper function in the exercises router for programmatic access to exercise listings. - Updated versioning and changelog to reflect the addition of the dashboard feature.	2026-05-14 07:47:27 +02:00
Lars	255fa45e90	feat(tests): add E2E test for Dashboard API budget and update documentation ... - Introduced a new E2E test to validate API call counts for `/api/profiles/me` and `/api/training-units` after reloading the Dashboard, ensuring compliance with refactor phase requirements. - Updated architecture documentation to include details about the new test and its execution within the CI pipeline.	2026-05-14 06:49:15 +02:00
Lars	6586d3b68b	feat(version): update app version to 0.8.80 and add changelog entries for recent fixes and enhancements ... fix(RightsDeclarationDialog): change cancel button to icon for improved UI feat(MediaLibraryPage): implement rights dialog for visibility promotions and enhance error handling fix(version): update MediaLibraryPage version to 1.4.0 reflecting rights dialog changes	2026-05-11 09:39:15 +02:00
Lars	34235ef46d	feat(compliance): P-06 Upload-Einwilligungsdialog v1-conservative ... Implementiert server-seitige Rechteerklärungspflicht für alle Medien-Uploads und Sichtbarkeits-Promotions (konservative Erstannahme: alle Uploads). Backend: - backend/media_rights.py (NEU): Kernmodul — validate_rights_declaration, check_rights_coverage, assert_rights_for_promotion, assert_rights_for_exercise_link, write_rights_declaration, update_rights_quick_fields - backend/migrations/048_media_rights_declarations.sql (NEU): Tabelle media_asset_rights_declarations (Append-only Audit-Log), Felder rights_status/rights_visibility_level in media_assets - backend/routers/media_assets.py: P-06-Pflichtprüfung in PATCH (single + bulk), POST /api/media-assets/{id}/rights-declarations (Re-Deklaration), GET /api/admin/media-rights/legacy-summary|legacy-assets (Admin-Endpoints) - backend/routers/exercises.py: P-06-Felder in upload_exercise_media, assert_rights_for_exercise_link in attach_exercise_media_from_asset - backend/main.py: admin_rights_router registriert Frontend: - frontend/src/components/RightsDeclarationDialog.jsx (NEU): 9-Felder-Dialog (konservativ: immer alle Fragen), Client-Validierung, VORLÄUFIG-Hinweis - frontend/src/pages/MediaLibraryPage.jsx: Dialog-Intercept vor Upload, Altbestand-Indikator (legacy_unreviewed) - frontend/src/utils/api.js: P-06-Felder in bulkUploadMediaAssets weitergeleitet Tests: - backend/tests/test_media_rights_declaration.py (NEU): 28 Unit-/Integrationstests - backend/tests/test_media_assets_archive.py: P-06 fetchone-Slots + Mock ergänzt - backend/tests/test_media_assets_copyright_promotion.py: check_rights_coverage gemockt - tests/dev-smoke-test.spec.js: 5 P-06 E2E-Tests ergänzt Dokumentation: - docs/compliance-implementation.md: P-06-Abschnitt - docs/compliance-package-register.md: Status ⚠️ teilweise umgesetzt (KRIT-04 offen) - docs/compliance-roadmap.md: P-06 im Freigaben-Log Offen: KRIT-04 (rechtliche Finalisierung Einwilligungsformulierung) — technisch vollständig, Rechtstext VORLÄUFIG. version: 0.8.75 module: media_rights 1.0.0, media_assets 1.13.0, exercises 2.20.0 Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-05-11 08:12:44 +02:00
Lars	80936b226d	feat(compliance): P-01c Admin-konfigurierbare Rechtstexte (0.8.71) ... DB 047: legal_documents (versioniert, draft/published/archived) + legal_document_audit (Änderungslog); Partial-Unique-Index garantiert max. ein published-Dokument pro document_type. Backend: GET /api/legal-documents/{type}/published (kein Auth); Superadmin-CRUD + Publish/Archive + Audit unter /api/admin/legal-documents. Frontend: LegalPage lädt aus API mit Platzhalter-Fallback; AdminLegalDocumentsPage (/admin/legal-documents) mit Tab-Navigation, Versionsliste, Entwurf-Editor, Publish/Archive-Workflow, Änderungslog. AdminPageNav: Link „Rechtstexte" ergänzt. version: 0.8.71 (backend + frontend) module: legal_documents 1.0.0 Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-05-10 11:53:07 +02:00
Lars	cfab5c2d69	fix(tests): stabilize login() helper with waitForURL before navigation ... Replace waitForLoadState('networkidle') with waitForURL (not /login) to ensure React auth processing completes before tests proceed with page.goto(). Prevents race condition where page.goto() interrupted in-progress token storage. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-05-10 11:36:10 +02:00
Lars	8261fa4420	feat(compliance): P-01b Mobile/PWA-Zugriff auf Rechtstexte via Einstellungen ... - SettingsLegalPage.jsx: neue Hub-Seite /settings/legal mit allen 4 Rechtstext-Links - App.jsx: Route /settings/legal in ProtectedLayout registriert - AccountSettingsPage.jsx: Link zu /settings/legal unterhalb System-Info - 3 Playwright-Tests für P-01b (Einstellungen → Rechtliches → Links → Routen) - Version: 0.8.69 → 0.8.70 (backend + frontend) Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-05-10 10:51:20 +02:00
Lars	d7ed0c0e9b	feat(compliance): P-01 Rechtstextseiten technisch anlegen (0.8.69) ... Öffentliche Routen /impressum /datenschutz /nutzungsbedingungen /medienrichtlinie ohne Auth erreichbar. LegalPage-Komponente mit deutlichem Platzhalterhinweis und strukturierten Pflichtfeldern je Rechtstext. Links in LoginPage-Footer und DesktopSidebar-Footer. KRIT-01 technischer Teil geschlossen. Juristische Inhalte bleiben offen — Betreiber + Rechtsanwalt erforderlich. - frontend/src/pages/LegalPage.jsx (neu) - frontend/src/App.jsx: 4 öffentliche Routen - frontend/src/pages/LoginPage.jsx: Rechtstext-Links im Footer - frontend/src/components/DesktopSidebar.jsx: Links im Sidebar-Footer - tests/dev-smoke-test.spec.js: 5 neue P-01-Tests version: 0.8.69 (backend + frontend) Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-05-10 09:41:45 +02:00
Lars	6abc911e94	fix(test): P-12 Playwright-Test akzeptiert confirm()-Dialog beim Logout ... DesktopSidebar-Logout ruft App.jsx handleLogout() auf, welcher confirm('Wirklich abmelden?') zeigt. In Playwright headless gibt confirm() standardmäßig false zurück → Logout wurde nie ausgeführt. page.once('dialog', dialog => dialog.accept()) behebt das. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-05-10 09:17:19 +02:00
Lars	28ca64b5b4	feat(compliance): P-12 sessionStorage-Bereinigung bei Logout (0.8.68) ... Sicherheit P-12 (MITT-05): logout() entfernt alle sj_coach_*-Schlüssel aus sessionStorage gezielt per Präfix-Löschung. Fremde Schlüssel (Browser-Extensions etc.) bleiben erhalten. Verhindert Datenleak bei Nutzerwechsel im selben Tab (geteilter Rechner). - AuthContext.jsx: Präfix-Schleife in logout() - tests/dev-smoke-test.spec.js: Playwright-Test P-12 (injects/checks 3 sj_coach_*-Schlüssel + 1 Fremd-Schlüssel; prüft selektive Löschung) Compliance-Dokumentation: - docs/compliance-implementation.md: P-12 ✅, Version 0.8.68 - docs/compliance-package-register.md: kanonisches Paketregister (neu) - docs/compliance-roadmap.md: lebende Steuerungs-Roadmap (neu) - docs/compliance-audit.md: §20 Paket-ID-Stabilitätsregel version: 0.8.68 (backend + frontend) module: auth 1.2.0 Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-05-10 09:08:28 +02:00
Lars	3210796139	feat: update dashboard smoke test for new UI elements ... - Modified the dashboard smoke test to reflect changes in the main heading and greeting text. - Updated expectations to check for the visibility of the new "Dashboard" heading and the greeting message, enhancing test accuracy.	2026-05-07 07:51:24 +02:00
Lars	14745b347d	fix: update test workflow and improve smoke tests ... - Changed the artifact upload action in the CI workflow from v4 to v3 due to compatibility issues with Gitea. - Enhanced the smoke test for the clubs page to check the URL and visibility of the primary heading, ensuring more robust validation. - Updated session persistence test to verify the visibility of the dashboard heading after a page reload, improving test reliability.	2026-05-05 23:03:40 +02:00
Lars	07b1cd8209	chore: clean up docker-compose files and enhance SQL migration for skills ... - Removed version specification from docker-compose.dev-env.yml and docker-compose.yml for consistency. - Added a unique constraint to the skills table in the SQL migration to prevent duplicate entries, ensuring data integrity during imports. - Updated test cases in dev-smoke-test.spec.js to improve locator strategies and enhance viewport handling for mobile navigation.	2026-04-29 13:41:17 +02:00
Lars	50b8ff12cd	feat: enhance Playwright configuration and CI workflow for E2E testing ... - Updated playwright.config.js to allow dynamic base URL configuration via environment variables, improving flexibility for different environments. - Modified .gitea/workflows/test.yml to include steps for starting a development stack, seeding test data, and stopping the stack after tests, enhancing the CI process for end-to-end testing. - Refactored login test in dev-smoke-test.spec.js to use a dedicated function for submitting the login form, improving code clarity and maintainability.	2026-04-29 12:35:30 +02:00
Lars	c44bbefc5e	feat: Add comprehensive test suite with Playwright ... Test Suite: - playwright.config.js: Config for dev environment (http://192.168.2.49:3098) - tests/dev-smoke-test.spec.js: 8 tests covering: * Login functionality * Dashboard loading * Navigation to Exercises/Clubs * Desktop-Sidebar visibility (≥1024px) * Bottom-Nav visibility (Mobile) * Session persistence after reload * Console error checking Gitea CI/CD: - .gitea/workflows/test.yml: Automated testing after deploy * Backend syntax check * Frontend build test * Playwright E2E tests * Screenshot upload on failure Test Coverage: - Auth flow (login, session persistence) - Responsive navigation (mobile + desktop) - Page navigation (dashboard, exercises, clubs) - Error detection (console errors) Next: Run tests locally, then implement Exercise CRUD	2026-04-22 16:33:03 +02:00