2 Commits

Include renames

Author	SHA1	Message	Date
peter	b1832afd18	style: apply ruff format across backend + scripts (line-length 100) ... Mechanical, whole-tree `ruff format` pass — no behaviour change. Recorded in .git-blame-ignore-revs (next commit) so git blame skips it.	2026-08-23 07:43:06 +02:00
peter	e31a1eedb6	feat(auth): account lifecycle — Google linking, passwords, suspension & deletion plumbing ... - Link a Google account to a password account, and adopt the Google identity onto a matching email account instead of 500ing on a duplicate; set or change a password from Settings. - Expose has_google/has_password on /api/me for the Sign-in methods UI. - Mark Google logins email-verified (backfill existing rows, migration 0024); stop a routine login from clobbering an admin-assigned role (env ADMIN_EMAILS stays the bootstrap admin). - Suspension login-gates (password + Google callback + current_user) with a rate-limited 'suspended' notice; shared purge_user (cascade delete + access-request cleanup + Google-grant revoke) behind self- and admin-deletion; single app_base source for user-facing email links.	2026-06-19 19:52:02 +02:00