Stable

.dockerignore

@@ -0,0 +1,41 @@
+# Version control
+.git/
+.github/
+
+# Frontend source — pre-built assets are already committed to web/
+web-src/
+
+# Dev / build tooling
+tools/build.py
+tools/deploy_docker.sh
+tools/init.py
+tools/run_e2e_tests.sh
+tools/start_in_virtualenv.sh
+samples/
+
+# Python cache
+__pycache__/
+*.pyc
+*.pyo
+*.pyd
+*.egg-info/
+
+# Tests (not needed at runtime)
+src/tests/
+src/e2e_tests/
+
+# Docs
+*.md
+LICENSE
+
+# macOS
+.DS_Store
+
+# IDE / local tooling
+.vscode/
+.idea/
+.claude/
+
+# Runtime directories (mounted as volumes)
+conf/runners/
+logs/

.github/dependabot.yml

@@ -0,0 +1,24 @@
+version: 2
+updates:
+  # Frontend (Vite/Vue) dependencies
+  - package-ecosystem: "npm"
+    directory: "/web-src"
+    schedule:
+      interval: "weekly"
+    open-pull-requests-limit: 10
+    groups:
+      dev-dependencies:
+        dependency-type: "development"
+
+  # Python backend dependencies
+  - package-ecosystem: "pip"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    open-pull-requests-limit: 10
+
+  # GitHub Actions workflow versions
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"

.github/workflows/ci.yml

@@ -0,0 +1,101 @@
+name: CI
+
+on:
+  push:
+    branches: [ master, stable ]
+  pull_request:
+    branches: [ master, stable ]
+
+jobs:
+  python-tests:
+    name: Python ${{ matrix.python-version }}
+    runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        python-version: ["3.10", "3.11", "3.12", "3.13", "3.14"]
+
+    steps:
+      - uses: actions/checkout@v6
+
+      - name: Set up Python ${{ matrix.python-version }}
+        uses: actions/setup-python@v6
+        with:
+          python-version: ${{ matrix.python-version }}
+          cache: pip
+
+      - name: Install dependencies
+        run: |
+          pip install -r requirements.txt
+          pip install ldap3 bcrypt parameterized pytest
+
+      - name: Run unit tests
+        working-directory: src
+        env:
+          PYTHONPATH: .
+        run: pytest tests/ -q --tb=short
+
+  frontend-tests:
+    name: Frontend (Node 22)
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@v6
+
+      - name: Set up Node.js
+        uses: actions/setup-node@v6
+        with:
+          node-version: "22"
+          cache: npm
+          cache-dependency-path: web-src/package-lock.json
+
+      - name: Install dependencies
+        working-directory: web-src
+        run: npm ci
+
+      - name: Run unit tests
+        working-directory: web-src
+        run: npm run test:unit-ci
+
+  e2e-tests:
+    name: E2E (Playwright)
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@v6
+
+      - name: Set up Python
+        uses: actions/setup-python@v6
+        with:
+          python-version: "3.13"
+          cache: pip
+
+      - name: Set up Node.js
+        uses: actions/setup-node@v6
+        with:
+          node-version: "22"
+          cache: npm
+          cache-dependency-path: web-src/package-lock.json
+
+      - name: Install frontend dependencies
+        working-directory: web-src
+        run: npm ci
+
+      - name: Install Playwright browser
+        working-directory: web-src
+        run: npx playwright install --with-deps chromium
+
+      - name: Run e2e tests
+        working-directory: web-src
+        # Builds the frontend, then starts the backend with the isolated
+        # e2e config (tests/e2e/server.sh creates its own venv) and runs
+        # the Playwright suite against it.
+        run: npm run test:e2e
+
+      - name: Upload Playwright report on failure
+        uses: actions/upload-artifact@v4
+        if: failure()
+        with:
+          name: playwright-report
+          path: web-src/playwright-report/
+          retention-days: 7

.github/workflows/docker.yml

@@ -0,0 +1,68 @@
+name: Docker
+
+on:
+  push:
+    branches: [ master, stable ]
+    tags:     [ 'v*' ]
+
+jobs:
+  build-and-push:
+    name: Build & push (${{ matrix.platform }})
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
+
+    steps:
+      - uses: actions/checkout@v6
+
+      - name: Set up Node.js
+        uses: actions/setup-node@v6
+        with:
+          node-version: "22"
+          cache: npm
+          cache-dependency-path: web-src/package-lock.json
+
+      - name: Build frontend
+        working-directory: web-src
+        run: npm ci && npm run build
+        # Outputs to ../web/ (see build.outDir in web-src/vite.config.js)
+
+      - name: Set up QEMU
+        uses: docker/setup-qemu-action@v4
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v4
+
+      - name: Log in to GitHub Container Registry
+        uses: docker/login-action@v4
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Extract image metadata
+        id: meta
+        uses: docker/metadata-action@v6
+        with:
+          images: ghcr.io/${{ github.repository }}
+          tags: |
+            # master branch → :latest
+            type=raw,value=latest,enable=${{ github.ref == 'refs/heads/master' }}
+            # stable branch → :stable
+            type=raw,value=stable,enable=${{ github.ref == 'refs/heads/stable' }}
+            # git tag v1.2.3 → :1.2.3 and :1.2
+            type=semver,pattern={{version}}
+            type=semver,pattern={{major}}.{{minor}}
+
+      - name: Build and push
+        uses: docker/build-push-action@v7
+        with:
+          context: .
+          file: tools/Dockerfile
+          platforms: linux/amd64,linux/arm64
+          push: true
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}
+          cache-from: type=gha
+          cache-to: type=gha,mode=max

.gitignore

@@ -1,3 +1,6 @@
+# macOS
+.DS_Store
+
 # Byte-compiled / optimized / DLL files
 __pycache__/
 *.py[cod]
@@ -63,6 +66,7 @@ target/
 .ipynb_checkpoints
 
 conf/runners
+conf/scripts
 conf/theme
 conf/conf.json
 conf/.htpasswd
@@ -80,3 +84,9 @@ web-src/geckodriver.log
 venv/
 /venv2/
 e2e_venv/
+
+# e2e (Playwright)
+.e2e_venv/
+web-src/tests/e2e/.run/
+web-src/playwright-report/
+web-src/test-results/