steve 57a13f0759 http: POST /setup — set password, drop session, audit setup_completed ...

Replaces the 501 stub with the full handler: validates the token and
password, hashes and stores the password, deletes the setup token,
mints an 8-hour session cookie, appends a user.setup_completed audit
entry, and redirects to /. Adds TestSetupPostHappyPath covering the
full round-trip including normal-login verification after setup.

2026-05-05 10:57:24 +01:00

..

config

lint: drive baseline to zero, drop only-new-issues gate

2026-05-03 16:15:17 +01:00

http

http: POST /setup — set password, drop session, audit setup_completed

2026-05-05 10:57:24 +01:00

maintenance

maintenance: pure-logic ticker decides forget/prune/check fires

2026-05-04 10:19:15 +01:00

ui

http: GET /setup landing page with expiry handling

2026-05-05 10:57:24 +01:00

ws

feat(alerts): per-source-group dedup so two failing backups produce two alerts

2026-05-04 22:59:48 +01:00