feat: The Other Dude v9.0.1 — full-featured email system

ci: add GitHub Pages deployment workflow for docs site

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

backend/tests/integration/test_config_api.py

@@ -0,0 +1,149 @@
+"""
+Integration tests for the Config Backup API endpoints.
+
+Tests exercise:
+- GET  /api/tenants/{tenant_id}/devices/{device_id}/config/backups
+- GET  /api/tenants/{tenant_id}/devices/{device_id}/config/schedules
+- PUT  /api/tenants/{tenant_id}/devices/{device_id}/config/schedules
+
+POST /backups (trigger) and POST /restore require actual RouterOS connections
+and git store, so we only test that the endpoints exist and respond appropriately.
+
+All tests run against real PostgreSQL.
+"""
+
+import uuid
+
+import pytest
+
+pytestmark = pytest.mark.integration
+
+
+class TestConfigBackups:
+    """Config backup listing and schedule endpoints."""
+
+    async def test_list_config_backups_empty(
+        self,
+        client,
+        auth_headers_factory,
+        admin_session,
+        create_test_device,
+        create_test_tenant,
+    ):
+        """GET config backups for a device with no backups returns 200 + empty list."""
+        tenant = await create_test_tenant(admin_session)
+        auth = await auth_headers_factory(
+            admin_session, existing_tenant_id=tenant.id
+        )
+        tenant_id = auth["tenant_id"]
+        device = await create_test_device(admin_session, tenant.id)
+        await admin_session.commit()
+
+        resp = await client.get(
+            f"/api/tenants/{tenant_id}/devices/{device.id}/config/backups",
+            headers=auth["headers"],
+        )
+        assert resp.status_code == 200
+        data = resp.json()
+        assert isinstance(data, list)
+        assert len(data) == 0
+
+    async def test_get_backup_schedule_default(
+        self,
+        client,
+        auth_headers_factory,
+        admin_session,
+        create_test_device,
+        create_test_tenant,
+    ):
+        """GET schedule returns synthetic default when no schedule configured."""
+        tenant = await create_test_tenant(admin_session)
+        auth = await auth_headers_factory(
+            admin_session, existing_tenant_id=tenant.id
+        )
+        tenant_id = auth["tenant_id"]
+        device = await create_test_device(admin_session, tenant.id)
+        await admin_session.commit()
+
+        resp = await client.get(
+            f"/api/tenants/{tenant_id}/devices/{device.id}/config/schedules",
+            headers=auth["headers"],
+        )
+        assert resp.status_code == 200
+        data = resp.json()
+        assert data["is_default"] is True
+        assert data["cron_expression"] == "0 2 * * *"
+        assert data["enabled"] is True
+
+    async def test_update_backup_schedule(
+        self,
+        client,
+        auth_headers_factory,
+        admin_session,
+        create_test_device,
+        create_test_tenant,
+    ):
+        """PUT schedule creates/updates device-specific backup schedule."""
+        tenant = await create_test_tenant(admin_session)
+        auth = await auth_headers_factory(
+            admin_session, existing_tenant_id=tenant.id, role="operator"
+        )
+        tenant_id = auth["tenant_id"]
+        device = await create_test_device(admin_session, tenant.id)
+        await admin_session.commit()
+
+        schedule_data = {
+            "cron_expression": "0 3 * * 1",  # Monday at 3am
+            "enabled": True,
+        }
+        resp = await client.put(
+            f"/api/tenants/{tenant_id}/devices/{device.id}/config/schedules",
+            json=schedule_data,
+            headers=auth["headers"],
+        )
+        assert resp.status_code == 200
+        data = resp.json()
+        assert data["cron_expression"] == "0 3 * * 1"
+        assert data["enabled"] is True
+        assert data["is_default"] is False
+        assert data["device_id"] == str(device.id)
+
+    async def test_backup_endpoints_respond(
+        self,
+        client,
+        auth_headers_factory,
+        admin_session,
+        create_test_device,
+        create_test_tenant,
+    ):
+        """Config backup router responds (not 404) for expected paths."""
+        tenant = await create_test_tenant(admin_session)
+        auth = await auth_headers_factory(
+            admin_session, existing_tenant_id=tenant.id
+        )
+        tenant_id = auth["tenant_id"]
+        device = await create_test_device(admin_session, tenant.id)
+        await admin_session.commit()
+
+        # List backups -- should respond
+        backups_resp = await client.get(
+            f"/api/tenants/{tenant_id}/devices/{device.id}/config/backups",
+            headers=auth["headers"],
+        )
+        assert backups_resp.status_code != 404
+
+        # Get schedule -- should respond
+        schedule_resp = await client.get(
+            f"/api/tenants/{tenant_id}/devices/{device.id}/config/schedules",
+            headers=auth["headers"],
+        )
+        assert schedule_resp.status_code != 404
+
+    async def test_config_backups_unauthenticated(self, client):
+        """GET config backups without auth returns 401."""
+        tenant_id = str(uuid.uuid4())
+        device_id = str(uuid.uuid4())
+        resp = await client.get(
+            f"/api/tenants/{tenant_id}/devices/{device_id}/config/backups"
+        )
+        assert resp.status_code == 401