Production hardening: security, stability, maintainability (closes R4/R5/R6) - #53

Merged

emanuelrechsteiner merged 12 commits into

mainfrom

chore/production-hardening

Jun 17, 2026

Commits on Jun 17, 2026

test(core): make manual integration test import-safe and CI-skippable

emanuelrechsteiner
and
claude
committed
5270f78
fix(db): remove duplicate clerk_user_id index definition

emanuelrechsteiner
and
claude
committed
ceb6b79
fix(api): harden Clerk JWT authentication (security)

emanuelrechsteiner
and
claude
committed
30df5cc
fix(api): close auth-review follow-ups (azp/issuer/account-linking)

emanuelrechsteiner
and
claude
committed
5d268e7
fix(core): correct cleaning-engine bugs and isolation (stability)

emanuelrechsteiner
and
claude
committed
f335109
fix(core): resolve all 90 ruff findings + 2 latent bugs (maintainability)

emanuelrechsteiner
and
claude
committed
f7ba1b5
chore(config): add ruff/mypy/pytest config and fix api type-safety

emanuelrechsteiner
and
claude
committed
555a2ab
docs(architecture): add ADR-008 dual-auth model; mark R4/R5/R6 closed

emanuelrechsteiner
and
claude
committed
14530d0
fix(db): add prepend_sys_path so alembic can import the api package

emanuelrechsteiner
and
claude
committed
bfb2eca
fix(db): track initial schema migration; stop gitignore swallowing .py

emanuelrechsteiner
and
claude
committed
ee4f3ba
test(config): set pytest pythonpath so 'api' imports in CI

emanuelrechsteiner
and
claude
committed
2afa357
test(config): add root conftest to put repo root on sys.path

emanuelrechsteiner
and
claude
committed
c1da2dd