[FIX] Align OpenAPI spec with API validation

.dockerignore

@@ -0,0 +1,71 @@
+# Git
+.git
+.gitignore
+.gitattributes
+
+# Python
+__pycache__/
+*.py[cod]
+*$py.class
+*.so
+.Python
+env/
+venv/
+ENV/
+.venv
+*.egg-info/
+dist/
+build/
+*.egg
+
+# IDE
+.vscode/
+.idea/
+*.swp
+*.swo
+*~
+
+# OS
+.DS_Store
+Thumbs.db
+
+# Docker (don't copy docker files into the image)
+Dockerfile
+docker-compose*.yml
+.dockerignore
+
+# Database lock files
+*.db
+*.sqlite
+*.sqlite3
+.db_initialized
+
+# Logs
+logs/
+*.log
+
+# Test files
+.coverage
+htmlcov/
+.pytest_cache/
+.tox/
+
+# CI/CD
+.github/
+.travis.yml
+.circleci/
+
+# Temporary files
+tmp/
+temp/
+*.tmp
+
+# Secrets and credentials (prevent accidental inclusion)
+*.pem
+*.key
+service-account.json
+gcp-key.json
+secret_key
+secret_csrf
+config.py
+.env

.gitattributes

@@ -1 +1,2 @@
-*.bat text eol=crlf
+*.bat text eol=crlf
+*.sh text eol=lf

.github/dependabot.yml

@@ -10,3 +10,11 @@ updates:
   reviewers:
   - canihavesomecoffee
   - thealphadollar
+- package-ecosystem: npm
+  directory: "/web"
+  schedule:
+    interval: weekly
+  open-pull-requests-limit: 5
+  groups:
+    minor-and-patch:
+      update-types: ["minor", "patch"]

.github/workflows/ci-vm-scripts.yml

@@ -0,0 +1,37 @@
+name: CI-VM scripts
+
+# Static analysis for the CI-VM runner scripts (the scripts that run on the
+# throwaway test VMs). Runs only when those scripts change. shellcheck lints the
+# bash runners; PSScriptAnalyzer lints the PowerShell startup script.
+
+on:
+  pull_request:
+    paths:
+      - 'install/ci-vm/**'
+      - '.github/workflows/ci-vm-scripts.yml'
+  push:
+    paths:
+      - 'install/ci-vm/**'
+      - '.github/workflows/ci-vm-scripts.yml'
+
+jobs:
+  shellcheck:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - name: Install shellcheck
+        run: sudo apt-get update && sudo apt-get install -y shellcheck
+      - name: shellcheck (bash runner scripts)
+        run: shellcheck --severity=error install/ci-vm/ci-linux/ci/runCI install/ci-vm/ci-linux/startup-script.sh
+
+  psscriptanalyzer:
+    runs-on: windows-latest
+    steps:
+      - uses: actions/checkout@v4
+      - name: PSScriptAnalyzer (startup-script.ps1)
+        shell: pwsh
+        run: |
+          Set-PSRepository PSGallery -InstallationPolicy Trusted
+          Install-Module -Name PSScriptAnalyzer -Force -Scope CurrentUser
+          $issues = Invoke-ScriptAnalyzer -Path install/ci-vm/ci-windows/startup-script.ps1 -Severity Error
+          if ($issues) { $issues | Format-Table -AutoSize; exit 1 }

.github/workflows/main.yml

@@ -15,19 +15,25 @@ jobs:
 
     runs-on: ubuntu-latest
     strategy:
+      fail-fast: false
       matrix:
-        python-version: [3.7, 3.8, 3.9]
+        python-version: ['3.12', '3.13', '3.14', '3.15']
+        include:
+          - python-version: '3.15'
+            experimental: true
+
+    continue-on-error: ${{ matrix.experimental || false }}
 
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3
     - name: Set up Python ${{ matrix.python-version }}
-      uses: actions/setup-python@v2
+      uses: actions/setup-python@v3
       with:
         python-version: ${{ matrix.python-version }}
     - name: Install dependencies
       run: |
         sudo apt-get update
-        sudo apt-get install libvirt-dev
+        sudo apt-get install libvirt-dev libxml2-dev libxslt-dev
         python -m pip install --upgrade pip
         if [ -f test-requirements.txt ]; then pip install -r test-requirements.txt; fi
         if [ -f requirements.txt ]; then pip install -r requirements.txt; fi
@@ -48,14 +54,4 @@ jobs:
         pycodestyle ./ --config=./.pycodestylerc
     - name: Test with nose
       run: |
-        nosetests --nocapture --with-cov --cov-config .coveragerc
-    - name: Temporary fix for codecov
-      run: |
-        coverage xml -i
-    - name: Upload to codecov
-      uses: codecov/codecov-action@v2
-      with:
-        flags: unittests
-        name: sample-platform
-        fail_ci_if_error: true
-        files: ./coverage.xml
+        nose2

.github/workflows/sp-deployment-pipeline.yml

@@ -0,0 +1,218 @@
+name: Deploy sample platform
+
+on:
+  workflow_dispatch:
+  workflow_run:
+    workflows: [ "Run tests and code checks" ]
+    types: [ completed ]
+    branches:
+      - "master"
+
+env:
+  DEPLOY_BRANCH: master
+  INSTALL_FOLDER: /var/www/sample-platform
+  SAMPLE_REPOSITORY: /repository
+
+jobs:
+  deploy:
+    runs-on: ubuntu-latest
+    if: ${{ github.event_name == 'workflow_dispatch' || github.event.workflow_run.conclusion == 'success' }}
+    permissions:
+      id-token: write
+      contents: read
+
+    steps:
+      - name: Pre-deployment checks
+        uses: appleboy/ssh-action@823bd89e131d8d508129f9443cad5855e9ba96f0  # v1.2.4
+        with:
+          host: ${{ vars.PLATFORM_DOMAIN }}
+          username: ${{ vars.SSH_USER }}
+          key: ${{ secrets.SSH_KEY_PRIVATE }}
+          port: 22
+          command_timeout: 2m
+          envs: INSTALL_FOLDER,SAMPLE_REPOSITORY,DEPLOY_BRANCH
+          script: |
+            set -e
+            echo "=== Pre-deployment checks ==="
+            cd $INSTALL_FOLDER
+
+            # Check if deployment scripts exist (for backwards compatibility)
+            if [ -f "install/deploy/pre_deploy.sh" ]; then
+              sudo INSTALL_FOLDER="$INSTALL_FOLDER" \
+                   SAMPLE_REPOSITORY="$SAMPLE_REPOSITORY" \
+                   DEPLOY_BRANCH="$DEPLOY_BRANCH" \
+                   bash install/deploy/pre_deploy.sh
+            else
+              echo "Deployment scripts not found, using legacy validation"
+              # Basic validation
+              test -f config.py || { echo "ERROR: config.py not found"; exit 1; }
+              # Save current commit for potential manual rollback
+              git rev-parse HEAD > /tmp/previous_commit.txt
+              echo "Current commit saved: $(cat /tmp/previous_commit.txt)"
+            fi
+
+      - name: Deploy application
+        uses: appleboy/ssh-action@823bd89e131d8d508129f9443cad5855e9ba96f0  # v1.2.4
+        with:
+          host: ${{ vars.PLATFORM_DOMAIN }}
+          username: ${{ vars.SSH_USER }}
+          key: ${{ secrets.SSH_KEY_PRIVATE }}
+          port: 22
+          command_timeout: 10m
+          envs: INSTALL_FOLDER,SAMPLE_REPOSITORY,DEPLOY_BRANCH
+          script: |
+            set -e
+            echo "=== Deploying application ==="
+            cd $INSTALL_FOLDER
+
+            # Check if deployment scripts exist
+            if [ -f "install/deploy/deploy.sh" ]; then
+              sudo INSTALL_FOLDER="$INSTALL_FOLDER" \
+                   SAMPLE_REPOSITORY="$SAMPLE_REPOSITORY" \
+                   DEPLOY_BRANCH="$DEPLOY_BRANCH" \
+                   bash install/deploy/deploy.sh
+            else
+              echo "Using legacy deployment"
+              # Legacy deployment (will be removed after scripts are merged)
+              sudo git restore .
+              sudo git checkout $DEPLOY_BRANCH
+              sudo git fetch origin $DEPLOY_BRANCH
+              sudo git reset --hard origin/$DEPLOY_BRANCH
+              sudo git clean -f -d
+              sudo git pull origin $DEPLOY_BRANCH
+
+              sudo python3 -m pip install -r requirements.txt --break-system-packages
+              sudo FLASK_APP=./run.py flask db upgrade
+
+              sudo cp "install/ci-vm/ci-linux/ci/bootstrap" "${SAMPLE_REPOSITORY}/TestData/ci-linux/bootstrap" 2>/dev/null || true
+              sudo cp "install/ci-vm/ci-linux/ci/runCI" "${SAMPLE_REPOSITORY}/TestData/ci-linux/runCI" 2>/dev/null || true
+              sudo cp "install/ci-vm/ci-windows/ci/runCI.bat" "${SAMPLE_REPOSITORY}/TestData/ci-windows/runCI.bat" 2>/dev/null || true
+
+              sudo systemctl reload platform
+            fi
+
+      # The console is a static build, so it is compiled here and only the
+      # output is shipped; the VM needs no Node toolchain. This runs after
+      # the code deploy so the target directory exists.
+      - name: Build web console
+        uses: actions/checkout@v4
+
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 22
+          cache: npm
+          cache-dependency-path: web/package-lock.json
+
+      - name: Compile console
+        working-directory: web
+        run: |
+          npm ci --ignore-scripts
+          npm run build:app
+
+      - name: Ship console
+        uses: appleboy/scp-action@917f8b81dfc1ccd331fef9e2d61bdc6c8be94634  # v0.1.7
+        with:
+          host: ${{ vars.PLATFORM_DOMAIN }}
+          username: ${{ vars.SSH_USER }}
+          key: ${{ secrets.SSH_KEY_PRIVATE }}
+          port: 22
+          # Lands at <INSTALL_FOLDER>/web/app/, which is what the nginx
+          # root expects: the directory name has to match the /app/ URL.
+          source: "web/dist/**"
+          target: ${{ env.INSTALL_FOLDER }}/web/app
+          strip_components: 2
+          overwrite: true
+
+      - name: Verify deployment
+        id: health_check
+        uses: appleboy/ssh-action@823bd89e131d8d508129f9443cad5855e9ba96f0  # v1.2.4
+        with:
+          host: ${{ vars.PLATFORM_DOMAIN }}
+          username: ${{ vars.SSH_USER }}
+          key: ${{ secrets.SSH_KEY_PRIVATE }}
+          port: 22
+          command_timeout: 2m
+          envs: INSTALL_FOLDER
+          script: |
+            echo "=== Verifying deployment ==="
+            cd $INSTALL_FOLDER
+
+            # Check if deployment scripts exist
+            if [ -f "install/deploy/post_deploy.sh" ]; then
+              sudo INSTALL_FOLDER="$INSTALL_FOLDER" bash install/deploy/post_deploy.sh
+            else
+              echo "Using legacy health check"
+              # Legacy health check - just verify service is running
+              sleep 5
+              if systemctl is-active --quiet platform; then
+                echo "Platform service is running"
+                # Try to hit the homepage
+                HTTP_CODE=$(curl -s -o /dev/null -w "%{http_code}" http://127.0.0.1/ 2>/dev/null || echo "000")
+                if [ "$HTTP_CODE" -ge 200 ] && [ "$HTTP_CODE" -lt 400 ]; then
+                  echo "Homepage responding with HTTP $HTTP_CODE"
+                  exit 0
+                else
+                  echo "ERROR: Homepage returned HTTP $HTTP_CODE"
+                  exit 1
+                fi
+              else
+                echo "ERROR: Platform service is not running"
+                systemctl status platform || true
+                exit 1
+              fi
+            fi
+
+      - name: Rollback on failure
+        if: failure() && steps.health_check.outcome == 'failure'
+        uses: appleboy/ssh-action@823bd89e131d8d508129f9443cad5855e9ba96f0  # v1.2.4
+        with:
+          host: ${{ vars.PLATFORM_DOMAIN }}
+          username: ${{ vars.SSH_USER }}
+          key: ${{ secrets.SSH_KEY_PRIVATE }}
+          port: 22
+          command_timeout: 5m
+          envs: INSTALL_FOLDER,SAMPLE_REPOSITORY
+          script: |
+            echo "=== ROLLBACK INITIATED ==="
+            cd $INSTALL_FOLDER
+
+            # Check if deployment scripts exist
+            if [ -f "install/deploy/rollback.sh" ]; then
+              sudo INSTALL_FOLDER="$INSTALL_FOLDER" \
+                   SAMPLE_REPOSITORY="$SAMPLE_REPOSITORY" \
+                   bash install/deploy/rollback.sh
+            else
+              echo "Using legacy rollback"
+              # Legacy rollback
+              if [ -f "/tmp/previous_commit.txt" ]; then
+                PREV_COMMIT=$(cat /tmp/previous_commit.txt)
+                echo "Rolling back to commit: $PREV_COMMIT"
+                sudo git checkout "$PREV_COMMIT"
+                sudo python3 -m pip install -r requirements.txt --break-system-packages
+                sudo systemctl reload platform
+                echo "Rollback complete"
+              else
+                echo "ERROR: No previous commit saved, cannot rollback"
+                echo "MANUAL INTERVENTION REQUIRED"
+              fi
+            fi
+
+      - name: Report deployment status
+        if: always()
+        uses: appleboy/ssh-action@823bd89e131d8d508129f9443cad5855e9ba96f0  # v1.2.4
+        with:
+          host: ${{ vars.PLATFORM_DOMAIN }}
+          username: ${{ vars.SSH_USER }}
+          key: ${{ secrets.SSH_KEY_PRIVATE }}
+          port: 22
+          command_timeout: 30s
+          envs: INSTALL_FOLDER
+          script: |
+            echo "=== Deployment Summary ==="
+            cd $INSTALL_FOLDER
+            echo "Current commit: $(git rev-parse HEAD)"
+            echo "Branch: $(git branch --show-current)"
+            echo "Service status: $(systemctl is-active platform 2>/dev/null || echo 'unknown')"
+
+            # Cleanup lock file if it exists
+            rm -f /tmp/sp-deploy.lock