Qresp 2.0 modernization, auth, ownership, drafts, and admin management

.github/workflows/backend-smoke.yml

@@ -0,0 +1,37 @@
+name: backend-smoke
+
+# Deterministic backend verification. Uses the pinned lock file and the
+# in-process mongomock backend, so NO external MongoDB service is required.
+# Mirrors the local handoff checks documented in QUICKSTART.md.
+# Matrix: 3.11 = local dev baseline (lock provenance), 3.14 = Docker runtime.
+
+on:
+  push:
+    branches: ["**"]
+  pull_request:
+
+jobs:
+  backend:
+    runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        python-version: ["3.11", "3.14"]
+    defaults:
+      run:
+        working-directory: backend
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with:
+          python-version: ${{ matrix.python-version }}
+      - name: Install backend (exact locked versions)
+        run: |
+          python -m pip install --upgrade pip
+          pip install -r requirements.lock.txt
+      - name: pip check
+        run: python -m pip check
+      - name: Import / boot smoke (GET /)
+        run: python -c "import project; r = project.app.test_client().get('/'); assert r.status_code == 200, r.status_code; print('boot OK:', r.status_code)"
+      - name: Backend tests (nose2, mongomock — no MongoDB)
+        run: python -m nose2 -v

.github/workflows/prototype-tests.yml

@@ -0,0 +1,29 @@
+name: prototype-tests
+
+# Runs the standalone curation-assistant prototype test suite. This is the
+# modern replacement for the defunct Travis CI config (.travis.yml); the legacy
+# backend/frontend suites still need a MongoDB service / Node toolchain and are
+# tracked as follow-ups in modernization_report.md.
+
+on:
+  push:
+    branches: ["**"]
+  pull_request:
+
+jobs:
+  prototype:
+    runs-on: ubuntu-latest
+    defaults:
+      run:
+        working-directory: prototypes/curation_assistant
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.11"
+      - name: Install prototype (with test extras)
+        run: |
+          python -m pip install --upgrade pip
+          pip install -e ".[test]"
+      - name: Run tests
+        run: pytest -q

.gitignore

@@ -22,11 +22,25 @@ PUBLISH_*
 # Python
 __pycache__
 
+# Coverage data (every nose2 run rewrites it; was mistakenly tracked)
+.coverage
+
 # Pytest
 .pytest_cache
 
 # Certificate Files
 *.certs
 *.crt
 *.key
-*.pem
+*.pem
+
+# Local implementation-planning notes (kept out of source control)
+RELATED_EXTERNAL_150_IMPLEMENTATION_AND_EVALUATION_PROMPT.md
+UX_CURATION_EXPLORER_IMPLEMENTATION_CHECKLIST.md
+
+# Generated live external-evaluation runs. `raw-results.jsonl` for the full
+# public corpus is ~57 MB, well past the 200 kB pre-commit ceiling, and the
+# whole directory is a reproducible artifact of one sweep. Deliberately narrow:
+# it matches only `related-eval-external-*`, so earlier hand-rated
+# `related-eval-*` folders stay visible to git exactly as they are.
+related-eval-external-*/

.pre-commit-config.yaml

@@ -1,14 +1,22 @@
-- repo: git://github.com/pre-commit/pre-commit-hooks
-  rev: v2.2.3
-  hooks:
-  - id: check-yaml
-  - id: check-json
-  - id: check-xml
-  - id: check-ast
-  - id: check-merge-conflict
-  - id: flake8
-  - id: no-commit-to-branch
-    args: [--branch, master, --branch, develop]
-  - id: check-added-large-files
-    args: [--maxkb=200]
-  - id: trailing-whitespace
+# pre-commit hooks. Run `pre-commit install` once, then hooks run on commit.
+# Modernized: GitHub disabled the git:// protocol (Jan 2022), the top-level
+# `repos:` key is now required, and `flake8` moved out of pre-commit-hooks into
+# its own repository (pycqa/flake8).
+repos:
+  - repo: https://github.com/pre-commit/pre-commit-hooks
+    rev: v4.6.0
+    hooks:
+      - id: check-yaml
+      - id: check-json
+      - id: check-xml
+      - id: check-ast
+      - id: check-merge-conflict
+      - id: no-commit-to-branch
+        args: [--branch, master, --branch, develop]
+      - id: check-added-large-files
+        args: [--maxkb=200]
+      - id: trailing-whitespace
+  - repo: https://github.com/pycqa/flake8
+    rev: 7.1.0
+    hooks:
+      - id: flake8