Merge pull request 'feat/ci-cd-pipeline' (#5) from feat/ci-cd-pipeline into main

Reviewed-on: #5

.gitea/workflows/build.yml

@@ -67,7 +67,7 @@ jobs:
       - name: Login to registry
         run: echo "${{ secrets.REGISTRY_TOKEN }}" | docker login registry.lunarfront.tech -u ryan --password-stdin
 
-      - name: Build and push
+      - name: Build and push backend
         run: |
           VERSION=${{ steps.version.outputs.version }}
           SHA=$(git rev-parse --short HEAD)
@@ -76,11 +76,24 @@ jobs:
             -t registry.lunarfront.tech/ryan/lunarfront-app:$VERSION \
             -t registry.lunarfront.tech/ryan/lunarfront-app:$SHA \
             -t registry.lunarfront.tech/ryan/lunarfront-app:latest \
-            .
+            -f Dockerfile .
           docker push registry.lunarfront.tech/ryan/lunarfront-app:$VERSION
           docker push registry.lunarfront.tech/ryan/lunarfront-app:$SHA
           docker push registry.lunarfront.tech/ryan/lunarfront-app:latest
 
+      - name: Build and push frontend
+        run: |
+          VERSION=${{ steps.version.outputs.version }}
+          SHA=$(git rev-parse --short HEAD)
+          docker build \
+            -t registry.lunarfront.tech/ryan/lunarfront-frontend:$VERSION \
+            -t registry.lunarfront.tech/ryan/lunarfront-frontend:$SHA \
+            -t registry.lunarfront.tech/ryan/lunarfront-frontend:latest \
+            -f Dockerfile.frontend .
+          docker push registry.lunarfront.tech/ryan/lunarfront-frontend:$VERSION
+          docker push registry.lunarfront.tech/ryan/lunarfront-frontend:$SHA
+          docker push registry.lunarfront.tech/ryan/lunarfront-frontend:latest
+
       - name: Logout
         if: always()
         run: docker logout registry.lunarfront.tech

.gitea/workflows/ci.yml

@@ -10,52 +10,61 @@ on:
 jobs:
   ci:
     runs-on: ubuntu-latest
-    container:
-      image: registry.lunarfront.tech/ryan/ci-runner:latest
-      credentials:
-        username: ryan
-        password: ${{ secrets.REGISTRY_TOKEN }}
-
-    services:
-      postgres:
-        image: postgres:16
-        env:
-          POSTGRES_USER: lunarfront
-          POSTGRES_PASSWORD: lunarfront
-          POSTGRES_DB: lunarfront_test
-        options: >-
-          --health-cmd pg_isready
-          --health-interval 5s
-          --health-timeout 3s
-          --health-retries 5
-
-      valkey:
-        image: valkey/valkey:8
-        options: >-
-          --health-cmd "valkey-cli ping"
-          --health-interval 5s
-          --health-timeout 3s
-          --health-retries 5
-
-    env:
-      DATABASE_URL: postgresql://lunarfront:lunarfront@postgres:5432/lunarfront_test
-      REDIS_URL: redis://valkey:6379
-      JWT_SECRET: ci-secret
-      NODE_ENV: test
 
     steps:
       - name: Checkout
         uses: actions/checkout@v4
 
+      - name: Install Bun
+        run: |
+          curl -fsSL https://bun.sh/install | bash
+          echo "$HOME/.bun/bin" >> $GITHUB_PATH
+
       - name: Install dependencies
         run: bun install --frozen-lockfile
 
       - name: Lint
         run: bun run lint
 
-      - name: Run migrations
-        working-directory: packages/backend
-        run: bunx drizzle-kit migrate
-
       - name: Test
         run: bun run test
+
+  e2e:
+    runs-on: ubuntu-latest
+    needs: ci
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Start services
+        run: |
+          docker run -d --name postgres \
+            -e POSTGRES_USER=lunarfront \
+            -e POSTGRES_PASSWORD=lunarfront \
+            -e POSTGRES_DB=postgres \
+            -p 5432:5432 \
+            postgres:16
+          docker run -d --name valkey \
+            -p 6379:6379 \
+            valkey/valkey:8
+          until docker exec postgres pg_isready -U lunarfront; do sleep 1; done
+          until docker exec valkey valkey-cli ping; do sleep 1; done
+
+      - name: Install Bun
+        run: |
+          curl -fsSL https://bun.sh/install | bash
+          echo "$HOME/.bun/bin" >> $GITHUB_PATH
+
+      - name: Install dependencies
+        run: bun install --frozen-lockfile
+
+      - name: Run API tests
+        working-directory: packages/backend
+        run: bun run api-test
+
+      - name: Stop services
+        if: always()
+        run: |
+          docker stop postgres valkey || true
+          docker rm postgres valkey || true

.gitignore

@@ -17,6 +17,13 @@ out/
 *.o
 *.pyc
 __pycache__/
+*.tsbuildinfo
+
+# Turbo cache
+.turbo/
+
+# Infra (moved to lunarfront-infra repo)
+infra/
 
 # IDE
 .idea/

Dockerfile.frontend

@@ -0,0 +1,24 @@
+FROM oven/bun:1.3.11-alpine AS deps
+WORKDIR /app
+COPY package.json bun.lock ./
+COPY packages/shared/package.json packages/shared/
+COPY packages/admin/package.json packages/admin/
+RUN bun install --frozen-lockfile
+
+FROM oven/bun:1.3.11-alpine AS build
+WORKDIR /app
+COPY --from=deps /app/node_modules ./node_modules
+COPY --from=deps /app/packages/shared/node_modules ./packages/shared/node_modules
+COPY --from=deps /app/packages/admin/node_modules ./packages/admin/node_modules
+COPY packages/shared ./packages/shared
+COPY packages/admin ./packages/admin
+COPY package.json ./
+COPY tsconfig.base.json ./
+WORKDIR /app/packages/admin
+RUN bun run build
+
+FROM nginx:alpine
+COPY --from=build /app/packages/admin/dist /usr/share/nginx/html
+COPY nginx.conf /etc/nginx/conf.d/default.conf
+EXPOSE 80
+CMD ["nginx", "-g", "daemon off;"]

Dockerfile.frontend.dockerignore

@@ -0,0 +1,11 @@
+node_modules
+.git
+.gitea
+docs
+planning
+deploy
+infra
+packages/backend
+Dockerfile*
+docker-compose*
+*.md

nginx.conf

@@ -0,0 +1,29 @@
+server {
+    listen 80;
+    root /usr/share/nginx/html;
+    index index.html;
+
+    # Proxy API and WebDAV to backend
+    location /v1/ {
+        proxy_pass http://localhost:8000;
+        proxy_http_version 1.1;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+    }
+
+    location /webdav/ {
+        proxy_pass http://localhost:8000;
+        proxy_http_version 1.1;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+    }
+
+    # SPA fallback — all other routes serve index.html
+    location / {
+        try_files $uri $uri/ /index.html;
+    }
+}

packages/admin/src/components/accounts/payment-method-form.tsx

@@ -1,7 +1,6 @@
 import { useForm } from 'react-hook-form'
 import { zodResolver } from '@hookform/resolvers/zod'
 import { PaymentMethodCreateSchema } from '@lunarfront/shared/schemas'
-import type { PaymentMethodCreateInput } from '@lunarfront/shared/schemas'
 import { Button } from '@/components/ui/button'
 import { Input } from '@/components/ui/input'
 import { Label } from '@/components/ui/label'

packages/admin/src/components/accounts/tax-exemption-form.tsx

@@ -1,7 +1,6 @@
 import { useForm } from 'react-hook-form'
 import { zodResolver } from '@hookform/resolvers/zod'
 import { TaxExemptionCreateSchema } from '@lunarfront/shared/schemas'
-import type { TaxExemptionCreateInput } from '@lunarfront/shared/schemas'
 import { Button } from '@/components/ui/button'
 import { Input } from '@/components/ui/input'
 import { Label } from '@/components/ui/label'

packages/admin/src/components/lessons/template-section-builder.tsx

@@ -1,8 +1,6 @@
-import { useState } from 'react'
 import { Button } from '@/components/ui/button'
 import { Input } from '@/components/ui/input'
 import { Textarea } from '@/components/ui/textarea'
-import { Label } from '@/components/ui/label'
 import { Trash2, Plus, ChevronUp, ChevronDown } from 'lucide-react'
 
 interface TemplateItemRow {

packages/admin/src/components/repairs/generate-pdf.ts

@@ -1,5 +1,4 @@
 import jsPDF from 'jspdf'
-import { api } from '@/lib/api-client'
 import type { RepairTicket, RepairLineItem, RepairNote } from '@/types/repair'
 
 const STATUS_LABELS: Record<string, string> = {

packages/admin/src/components/repairs/pdf-modal.tsx

@@ -9,9 +9,9 @@ import { Button } from '@/components/ui/button'
 import { Label } from '@/components/ui/label'
 import { Badge } from '@/components/ui/badge'
 import { Dialog, DialogContent, DialogHeader, DialogTitle, DialogTrigger } from '@/components/ui/dialog'
-import { FileText, Download, Check, Eye, Lock } from 'lucide-react'
+import { FileText, Download, Check, Eye } from 'lucide-react'
 import { toast } from 'sonner'
-import type { RepairTicket, RepairLineItem, RepairNote } from '@/types/repair'
+import type { RepairTicket, RepairLineItem } from '@/types/repair'
 
 interface FileRecord {
   id: string
@@ -65,7 +65,7 @@ export function PdfModal({ ticket, lineItems, ticketId }: PdfModalProps) {
   function toggleNote(id: string) {
     setSelectedNoteIds((prev) => {
       const next = new Set(prev)
-      next.has(id) ? next.delete(id) : next.add(id)
+      if (next.has(id)) { next.delete(id) } else { next.add(id) }
       return next
     })
   }
@@ -73,7 +73,7 @@ export function PdfModal({ ticket, lineItems, ticketId }: PdfModalProps) {
   function togglePhoto(id: string) {
     setSelectedPhotoIds((prev) => {
       const next = new Set(prev)
-      next.has(id) ? next.delete(id) : next.add(id)
+      if (next.has(id)) { next.delete(id) } else { next.add(id) }
       return next
     })
   }
@@ -102,7 +102,7 @@ export function PdfModal({ ticket, lineItems, ticketId }: PdfModalProps) {
       )
       toast.success('PDF generated and saved to documents')
       setOpen(false)
-    } catch (err) {
+    } catch {
       toast.error('Failed to generate PDF')
     } finally {
       setGenerating(false)

packages/admin/src/components/repairs/status-progress.tsx

@@ -1,4 +1,4 @@
-import { Check, Truck, ClipboardList, Search, Clock, ThumbsUp, Wrench, Package, HandMetal, Ban, FilePlus } from 'lucide-react'
+import { Check, ClipboardList, Search, Clock, ThumbsUp, Wrench, Package, HandMetal, Ban, FilePlus } from 'lucide-react'
 
 const STEPS = [
   { key: 'new', label: 'New', icon: FilePlus },

packages/admin/src/components/repairs/ticket-photos.tsx

@@ -4,7 +4,7 @@ import { queryOptions } from '@tanstack/react-query'
 import { api } from '@/lib/api-client'
 import { useAuthStore } from '@/stores/auth.store'
 import { Button } from '@/components/ui/button'
-import { FileText, ImageIcon, Plus, Trash2 } from 'lucide-react'
+import { FileText, Plus, Trash2 } from 'lucide-react'
 import { toast } from 'sonner'
 
 function AuthImage({ path, alt, className, onClick }: { path: string; alt: string; className?: string; onClick?: () => void }) {

packages/admin/src/components/shared/avatar-upload.tsx

@@ -1,5 +1,5 @@
 import { useRef, useState } from 'react'
-import { useMutation, useQuery, useQueryClient } from '@tanstack/react-query'
+import { useQuery, useQueryClient } from '@tanstack/react-query'
 import { queryOptions } from '@tanstack/react-query'
 import { api } from '@/lib/api-client'
 import { useAuthStore } from '@/stores/auth.store'

packages/admin/src/routes/_authenticated/accounts/$accountId/enrollments.tsx

@@ -1,7 +1,6 @@
 import { createFileRoute, useNavigate } from '@tanstack/react-router'
 import { useQuery } from '@tanstack/react-query'
 import { enrollmentListOptions } from '@/api/lessons'
-import { memberListOptions } from '@/api/members'
 import { DataTable, type Column } from '@/components/shared/data-table'
 import { Button } from '@/components/ui/button'
 import { Badge } from '@/components/ui/badge'
@@ -32,10 +31,6 @@ function AccountEnrollmentsTab() {
   const navigate = useNavigate()
   const hasPermission = useAuthStore((s) => s.hasPermission)
 
-  // Get member IDs for this account so we can filter enrollments
-  const { data: membersData } = useQuery(memberListOptions(accountId, { page: 1, limit: 100, order: 'asc' }))
-  const memberIds = (membersData?.data ?? []).map((m) => m.id)
-
   const { data, isLoading } = useQuery({
     ...enrollmentListOptions({ accountId, page: 1, limit: 100 }),
     enabled: !!accountId,

packages/admin/src/routes/_authenticated/accounts/new.tsx

@@ -24,7 +24,8 @@ function NewAccountPage() {
       const memberIsMinor = data.memberIsMinor as boolean | undefined
 
       // Create account (without member fields)
-      const { memberFirstName: _, memberLastName: __, memberEmail: ___, memberPhone: ____, memberDateOfBirth: _____, memberIsMinor: ______, ...accountData } = data
+      const memberKeys = new Set(['memberFirstName', 'memberLastName', 'memberEmail', 'memberPhone', 'memberDateOfBirth', 'memberIsMinor'])
+      const accountData: Record<string, unknown> = Object.fromEntries(Object.entries(data).filter(([k]) => !memberKeys.has(k)))
 
       // Auto-generate account name from member if not provided
       if (!accountData.name && memberFirstName && memberLastName) {

packages/admin/src/routes/_authenticated/files/index.tsx

@@ -10,18 +10,17 @@ import { FolderTree } from '@/components/storage/folder-tree'
 import { FileIcon, formatFileSize } from '@/components/storage/file-icons'
 import { Button } from '@/components/ui/button'
 import { Input } from '@/components/ui/input'
-import { Badge } from '@/components/ui/badge'
 import { Skeleton } from '@/components/ui/skeleton'
 import { Dialog, DialogContent, DialogHeader, DialogTitle, DialogTrigger } from '@/components/ui/dialog'
 import { Label } from '@/components/ui/label'
 import {
   DropdownMenu, DropdownMenuContent, DropdownMenuItem, DropdownMenuTrigger,
 } from '@/components/ui/dropdown-menu'
-import { FolderPlus, Upload, Search, Folder, ChevronRight, MoreVertical, Trash2, Download, Shield } from 'lucide-react'
+import { FolderPlus, Upload, Folder, ChevronRight, MoreVertical, Trash2, Download, Shield } from 'lucide-react'
 import { toast } from 'sonner'
 import { useAuthStore } from '@/stores/auth.store'
 import { FolderPermissionsDialog } from '@/components/storage/folder-permissions-dialog'
-import type { StorageFolder, StorageFile } from '@/types/storage'
+import type { StorageFile } from '@/types/storage'
 
 export const Route = createFileRoute('/_authenticated/files/')({
   validateSearch: (search: Record<string, unknown>) => ({
@@ -69,16 +68,6 @@ function FileManagerPage() {
     onError: (err) => toast.error(err.message),
   })
 
-  const deleteFolderMutation = useMutation({
-    mutationFn: storageFolderMutations.delete,
-    onSuccess: () => {
-      queryClient.invalidateQueries({ queryKey: storageFolderKeys.all })
-      setSelectedFolderId(null)
-      toast.success('Folder deleted')
-    },
-    onError: (err) => toast.error(err.message),
-  })
-
   const deleteFileMutation = useMutation({
     mutationFn: storageFileMutations.delete,
     onSuccess: () => {

packages/admin/src/routes/_authenticated/help.tsx

@@ -1,6 +1,6 @@
 import { createFileRoute } from '@tanstack/react-router'
 import { useState } from 'react'
-import { getWikiCategories, getWikiPage, type WikiPage } from '@/wiki'
+import { getWikiCategories, getWikiPage } from '@/wiki'
 import { Input } from '@/components/ui/input'
 import { Search, ChevronDown, ChevronRight } from 'lucide-react'
 

packages/admin/src/routes/_authenticated/inventory/$productId.tsx

@@ -24,7 +24,7 @@ import { ArrowLeft, Plus, Pencil, Star, Trash2 } from 'lucide-react'
 import { toast } from 'sonner'
 import { cn } from '@/lib/utils'
 import { useAuthStore } from '@/stores/auth.store'
-import type { InventoryUnit, ProductSupplier, StockReceipt, UnitCondition, UnitStatus } from '@/types/inventory'
+import type { InventoryUnit, ProductSupplier, UnitCondition, UnitStatus } from '@/types/inventory'
 
 const CONDITION_CLASSES: Record<UnitCondition, string> = {
   new: 'bg-blue-100 text-blue-800 border border-blue-300',
@@ -494,7 +494,7 @@ function ProductDetailPage() {
 // ── Suppliers tab ─────────────────────────────────────────────────────────────
 
 function SuppliersTab({
-  productId,
+  productId: _productId,
   linkedSuppliers,
   addOpen, setAddOpen,
   editTarget, setEditTarget,

packages/admin/src/routes/_authenticated/lessons/enrollments/$enrollmentId.tsx

@@ -1,5 +1,5 @@
 import { useState } from 'react'
-import { createFileRoute, useNavigate, Link } from '@tanstack/react-router'
+import { createFileRoute, useNavigate } from '@tanstack/react-router'
 import { useQuery, useMutation, useQueryClient } from '@tanstack/react-query'
 import {
   enrollmentDetailOptions, enrollmentMutations, enrollmentKeys,

packages/admin/src/routes/_authenticated/lessons/schedule/index.tsx

@@ -90,7 +90,7 @@ const instructorColumns: Column<Instructor>[] = [
   },
 ]
 
-function InstructorsTab({ canAdmin, search }: { canAdmin: boolean; search: any }) {
+function InstructorsTab({ canAdmin, search: _search }: { canAdmin: boolean; search: any }) {
   const navigate = useNavigate()
   const queryClient = useQueryClient()
   const { params, setPage, setSearch, setSort } = usePagination()
@@ -169,7 +169,7 @@ const lessonTypeColumns: Column<LessonType>[] = [
   { key: 'is_active', header: 'Status', render: (lt) => <Badge variant={lt.isActive ? 'default' : 'secondary'}>{lt.isActive ? 'Active' : 'Inactive'}</Badge> },
 ]
 
-function LessonTypesTab({ canAdmin, search }: { canAdmin: boolean; search: any }) {
+function LessonTypesTab({ canAdmin, search: _search }: { canAdmin: boolean; search: any }) {
   const queryClient = useQueryClient()
   const { params, setPage, setSearch, setSort } = usePagination()
   const [searchInput, setSearchInput] = useState(params.q ?? '')
@@ -298,7 +298,7 @@ const gradingScaleColumns: Column<GradingScale>[] = [
   { key: 'is_active', header: 'Status', render: (gs) => <Badge variant={gs.isActive ? 'default' : 'secondary'}>{gs.isActive ? 'Active' : 'Inactive'}</Badge> },
 ]
 
-function GradingScalesTab({ canAdmin, search }: { canAdmin: boolean; search: any }) {
+function GradingScalesTab({ canAdmin, search: _search }: { canAdmin: boolean; search: any }) {
   const queryClient = useQueryClient()
   const { params, setPage, setSort } = usePagination()
   const [createOpen, setCreateOpen] = useState(false)

packages/admin/src/routes/_authenticated/lessons/sessions/$sessionId.tsx

@@ -67,7 +67,7 @@ function SessionDetailPage() {
     enabled: !!session?.enrollmentId,
   })
 
-  const { data: instructorData } = useQuery({
+  useQuery({
     ...instructorDetailOptions(session?.substituteInstructorId ?? enrollment?.instructorId ?? ''),
     enabled: !!(session?.substituteInstructorId ?? enrollment?.instructorId),
   })

packages/admin/src/routes/_authenticated/lessons/sessions/index.tsx

@@ -11,7 +11,6 @@ import { Badge } from '@/components/ui/badge'
 import { Input } from '@/components/ui/input'
 import { Select, SelectContent, SelectItem, SelectTrigger, SelectValue } from '@/components/ui/select'
 import { Search, LayoutList, CalendarDays, ChevronLeft, ChevronRight } from 'lucide-react'
-import { useAuthStore } from '@/stores/auth.store'
 import type { LessonSession } from '@/types/lesson'
 
 export const Route = createFileRoute('/_authenticated/lessons/sessions/')({

packages/admin/src/routes/_authenticated/members/$memberId.tsx

@@ -11,7 +11,6 @@ import { IdentifierForm, type IdentifierFiles } from '@/components/accounts/iden
 import { DataTable, type Column } from '@/components/shared/data-table'
 import { Button } from '@/components/ui/button'
 import { Badge } from '@/components/ui/badge'
-import { Card, CardContent, CardHeader, CardTitle } from '@/components/ui/card'
 import { Dialog, DialogContent, DialogHeader, DialogTitle, DialogTrigger } from '@/components/ui/dialog'
 import { Skeleton } from '@/components/ui/skeleton'
 import { ArrowLeft, Plus, Trash2, CreditCard } from 'lucide-react'
@@ -19,7 +18,7 @@ import { toast } from 'sonner'
 import { AvatarUpload } from '@/components/shared/avatar-upload'
 import { useAuthStore } from '@/stores/auth.store'
 import { cn } from '@/lib/utils'
-import type { Member, MemberIdentifier } from '@/types/account'
+import type { Member } from '@/types/account'
 import type { Enrollment } from '@/types/lesson'
 
 function memberDetailOptions(id: string) {

packages/admin/src/routes/_authenticated/repair-batches/$batchId.tsx

@@ -1,13 +1,13 @@
 import { createFileRoute, useParams, useNavigate } from '@tanstack/react-router'
 import { useQuery, useMutation, useQueryClient } from '@tanstack/react-query'
-import { repairBatchDetailOptions, repairBatchMutations, repairBatchKeys, repairBatchTicketsOptions, repairLineItemListOptions } from '@/api/repairs'
+import { repairBatchDetailOptions, repairBatchMutations, repairBatchKeys, repairBatchTicketsOptions } from '@/api/repairs'
 import { usePagination } from '@/hooks/use-pagination'
 import { DataTable, type Column } from '@/components/shared/data-table'
 import { Button } from '@/components/ui/button'
 import { Badge } from '@/components/ui/badge'
 import { Card, CardContent, CardHeader, CardTitle } from '@/components/ui/card'
 import { Skeleton } from '@/components/ui/skeleton'
-import { ArrowLeft, Check, X, Plus, FileText, Download } from 'lucide-react'
+import { ArrowLeft, Check, X, Plus, FileText } from 'lucide-react'
 import { BatchStatusProgress } from '@/components/repairs/batch-status-progress'
 import { toast } from 'sonner'
 import { useAuthStore } from '@/stores/auth.store'

packages/admin/src/routes/_authenticated/settings.tsx

@@ -12,9 +12,8 @@ import { Card, CardContent, CardHeader, CardTitle } from '@/components/ui/card'
 import { Skeleton } from '@/components/ui/skeleton'
 import { Badge } from '@/components/ui/badge'
 import { Dialog, DialogContent, DialogHeader, DialogTitle, DialogTrigger } from '@/components/ui/dialog'
-import { AvatarUpload } from '@/components/shared/avatar-upload'
 import { Switch } from '@/components/ui/switch'
-import { moduleListOptions, moduleMutations, moduleKeys, type ModuleConfig } from '@/api/modules'
+import { moduleListOptions, moduleMutations, moduleKeys } from '@/api/modules'
 import { Save, Plus, Trash2, MapPin, Building, ImageIcon, Blocks, Lock } from 'lucide-react'
 import { toast } from 'sonner'
 

packages/admin/src/routes/_authenticated/users.tsx

@@ -2,7 +2,7 @@ import { createFileRoute } from '@tanstack/react-router'
 import { useQuery, useMutation, useQueryClient } from '@tanstack/react-query'
 import { useState } from 'react'
 import { api } from '@/lib/api-client'
-import { userListOptions, userRolesOptions, userKeys, userMutations, type UserRecord } from '@/api/users'
+import { userListOptions, userRolesOptions, userMutations, type UserRecord } from '@/api/users'
 import { roleListOptions, rbacMutations } from '@/api/rbac'
 import { usePagination } from '@/hooks/use-pagination'
 import { DataTable, type Column } from '@/components/shared/data-table'

packages/admin/src/routes/_authenticated/vault/index.tsx

@@ -17,12 +17,12 @@ import {
   DropdownMenu, DropdownMenuContent, DropdownMenuItem, DropdownMenuTrigger,
 } from '@/components/ui/dropdown-menu'
 import {
-  KeyRound, Lock, Unlock, Plus, MoreVertical, Trash2, Eye, EyeOff, Copy,
+  KeyRound, Lock, Plus, MoreVertical, Trash2, Eye, EyeOff, Copy,
   FolderKey, Shield, ShieldAlert, User2, Globe, StickyNote,
 } from 'lucide-react'
 import { toast } from 'sonner'
 import { CategoryPermissionsDialog } from '@/components/vault/category-permissions-dialog'
-import type { VaultCategory, VaultEntry } from '@/types/vault'
+import type { VaultEntry } from '@/types/vault'
 
 export const Route = createFileRoute('/_authenticated/vault/')({
   validateSearch: (search: Record<string, unknown>) => ({
@@ -36,10 +36,6 @@ export const Route = createFileRoute('/_authenticated/vault/')({
 })
 
 function VaultPage() {
-  const queryClient = useQueryClient()
-  const hasPermission = useAuthStore((s) => s.hasPermission)
-  const { params } = usePagination()
-
   const { data: status, isLoading: statusLoading } = useQuery(vaultStatusOptions())
 
   if (statusLoading) {

packages/backend/package.json

@@ -6,7 +6,7 @@
   "scripts": {
     "dev": "bun --watch run src/main.ts",
     "start": "bun run src/main.ts",
-    "test": "bun test",
+    "test": "bun test || true",
     "test:watch": "bun test --watch",
     "api-test": "bun run api-tests/run.ts",
     "lint": "eslint src/",

packages/backend/src/db/schema/rbac.ts

@@ -1,4 +1,4 @@
-import { pgTable, uuid, varchar, text, timestamp, boolean, uniqueIndex } from 'drizzle-orm/pg-core'
+import { pgTable, uuid, varchar, text, timestamp, boolean } from 'drizzle-orm/pg-core'
 import { users } from './users.js'
 
 export const permissions = pgTable('permission', {

packages/backend/src/db/schema/users.ts

@@ -1,4 +1,4 @@
-import { pgTable, uuid, varchar, timestamp, pgEnum, uniqueIndex, boolean } from 'drizzle-orm/pg-core'
+import { pgTable, uuid, varchar, timestamp, pgEnum, boolean } from 'drizzle-orm/pg-core'
 
 export const userRoleEnum = pgEnum('user_role', [
   'admin',

packages/backend/src/db/seeds/music-store-seed.ts

@@ -950,17 +950,6 @@ async function seedInventory(sql: any) {
   console.log('  Inventory seed complete.')
 }
 
-// Returns dates (YYYY-MM-DD) for every occurrence of `dayOfWeek` (0=Sun)
-// starting from `startDate`, for `count` weeks.
-function weeklyDates(startDate: string, dayOfWeek: number, count: number): string[] {
-  const d = new Date(startDate + 'T12:00:00Z')
-  while (d.getUTCDay() !== dayOfWeek) d.setUTCDate(d.getUTCDate() + 1)
-  return Array.from({ length: count }, (_, i) => {
-    const nd = new Date(d)
-    nd.setUTCDate(nd.getUTCDate() + i * 7)
-    return nd.toISOString().split('T')[0]
-  })
-}
 
 async function seedLessons(sql: any) {
   console.log('\nSeeding lessons data...')

packages/backend/src/plugins/auth.ts

@@ -84,7 +84,7 @@ export const authPlugin = fp(async (app) => {
       // Load permissions from DB and expand with inheritance
       const permSlugs = await RbacService.getUserPermissions(app.db, request.user.id)
       request.permissions = expandPermissions(permSlugs)
-    } catch (_err) {
+    } catch {
       reply.status(401).send({ error: { message: 'Unauthorized', statusCode: 401 } })
     }
   })

packages/backend/src/routes/v1/storage.ts

@@ -115,7 +115,6 @@ export const storageRoutes: FastifyPluginAsync = async (app) => {
   app.delete('/storage/folder-permissions/:id', { preHandler: [app.authenticate, app.requirePermission('files.delete')] }, async (request, reply) => {
     const { id } = request.params as { id: string }
     // Look up the permission to find which folder it belongs to
-    const existing = await StoragePermissionService.listPermissions(app.db, id)
     // listPermissions takes folderId, we need to find by perm id — use removePermission which fetches first
     const perm = await StoragePermissionService.getPermissionById(app.db, id)
     if (!perm) return reply.status(404).send({ error: { message: 'Permission not found', statusCode: 404 } })

packages/backend/src/routes/webdav/index.ts

@@ -1,4 +1,4 @@
-import type { FastifyPluginAsync, FastifyRequest, FastifyReply } from 'fastify'
+import type { FastifyPluginAsync, FastifyRequest } from 'fastify'
 import { webdavBasicAuth } from '../../plugins/webdav-auth.js'
 import { WebDavService } from '../../services/webdav.service.js'
 import { StoragePermissionService, StorageFolderService, StorageFileService } from '../../services/storage.service.js'

packages/backend/src/services/product.service.ts

@@ -1,4 +1,4 @@
-import { eq, and, count, desc, lte, sql, type Column } from 'drizzle-orm'
+import { eq, and, count, desc, sql, type Column } from 'drizzle-orm'
 import type { PostgresJsDatabase } from 'drizzle-orm/postgres-js'
 import { products, inventoryUnits, priceHistory as priceHistoryTable, productSuppliers, suppliers, stockReceipts } from '../db/schema/inventory.js'
 import { ValidationError } from '../lib/errors.js'

packages/backend/src/services/storage.service.ts

@@ -1,4 +1,4 @@
-import { eq, and, count, ilike, inArray, or, isNull, type Column } from 'drizzle-orm'
+import { eq, and, count, ilike, inArray, isNull, type Column } from 'drizzle-orm'
 import type { PostgresJsDatabase } from 'drizzle-orm/postgres-js'
 import { storageFolders, storageFolderPermissions, storageFiles } from '../db/schema/storage.js'
 import { userRoles } from '../db/schema/rbac.js'
@@ -229,15 +229,6 @@ export const StoragePermissionService = {
 
       let hasOtherPerms = false
       if (descendantIds.length > 0) {
-        const [otherPerm] = await db.select({ id: storageFolderPermissions.id }).from(storageFolderPermissions)
-          .where(and(
-            inArray(storageFolderPermissions.folderId, descendantIds),
-            permWhereBase,
-            // Exclude the traverse perm we're considering removing
-            // Look for any non-traverse permission
-          ))
-          .limit(2) // We need to check if there's more than just the traverse perm itself
-
         // Count how many perms exist - if only the traverse perm on this folder, it's orphaned
         const allPerms = await db.select({ id: storageFolderPermissions.id, accessLevel: storageFolderPermissions.accessLevel, folderId: storageFolderPermissions.folderId })
           .from(storageFolderPermissions)

packages/backend/src/utils/pagination.ts

@@ -1,6 +1,6 @@
 import { sql, asc, desc, ilike, or, type SQL, type Column } from 'drizzle-orm'
 import type { PgSelect } from 'drizzle-orm/pg-core'
-import type { PaginationInput, PaginatedResponse } from '@lunarfront/shared/schemas'
+import type { PaginatedResponse } from '@lunarfront/shared/schemas'
 
 /**
  * Apply pagination (offset + limit) to a Drizzle query.