Modernization of DAVE

.env.example

@@ -0,0 +1,43 @@
+# DAVE Security Configuration Template
+# Copy this file to .env and configure for your environment
+
+# Flask Configuration
+FLASK_ENV=production
+FLASK_DEBUG=False
+FLASK_SECRET_KEY=your-secret-key-here-min-32-chars
+
+# Session Security
+SESSION_COOKIE_SECURE=True
+SESSION_LIFETIME_HOURS=24
+
+# CORS Configuration
+CORS_ENABLED=True
+CORS_ORIGINS=http://localhost:3000,https://your-domain.com
+
+# Upload Limits
+MAX_UPLOAD_SIZE_MB=100
+
+# Rate Limiting
+RATELIMIT_ENABLED=True
+RATELIMIT_DEFAULT=100 per hour
+REDIS_URL=redis://localhost:6379
+
+# Authentication (future)
+AUTH_ENABLED=False
+AUTH_METHOD=jwt
+JWT_SECRET_KEY=your-jwt-secret-key
+JWT_TOKEN_LIFETIME_HOURS=1
+
+# API Keys (comma separated)
+API_KEY_ENABLED=False
+API_KEYS=key1,key2,key3
+
+# Shutdown Protection
+PROTECT_SHUTDOWN=True
+SHUTDOWN_PASSWORD=secure-shutdown-password
+
+# Logging
+SANITIZE_LOGS=True
+
+# Database (future)
+DATABASE_URL=sqlite:///dave.db

.gitattributes

@@ -0,0 +1,2 @@
+# SCM syntax highlighting & preventing 3-way merges
+pixi.lock merge=binary linguist-language=YAML linguist-generated=true

.github/dependabot.yml

@@ -0,0 +1,42 @@
+version: 2
+updates:
+  # Python dependencies via pixi
+  - package-ecosystem: "pip"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+      day: "monday"
+    open-pull-requests-limit: 5
+    labels:
+      - "dependencies"
+      - "python"
+    commit-message:
+      prefix: "chore"
+      include: "scope"
+
+  # JavaScript dependencies
+  - package-ecosystem: "npm"
+    directory: "/src/main/js/electron"
+    schedule:
+      interval: "weekly"
+      day: "monday"
+    open-pull-requests-limit: 5
+    labels:
+      - "dependencies"
+      - "javascript"
+    commit-message:
+      prefix: "chore"
+      include: "scope"
+
+  # GitHub Actions
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+      day: "monday"
+    labels:
+      - "dependencies"
+      - "ci"
+    commit-message:
+      prefix: "ci"
+      include: "scope"

.github/workflows/cd.yml

@@ -0,0 +1,163 @@
+name: CD
+
+on:
+  push:
+    tags:
+      - 'v*'
+  release:
+    types: [published]
+  workflow_dispatch:
+    inputs:
+      create_release:
+        description: 'Create release'
+        required: true
+        default: false
+        type: boolean
+
+jobs:
+  build:
+    runs-on: ${{ matrix.os }}
+    strategy:
+      matrix:
+        include:
+          - os: ubuntu-latest
+            platform: linux
+            artifact_name: dave-linux
+          - os: macos-latest
+            platform: macos
+            artifact_name: dave-macos
+          - os: windows-latest
+            platform: windows
+            artifact_name: dave-windows
+
+    steps:
+    - uses: actions/checkout@v4
+
+    - name: Setup Pixi
+      uses: prefix-dev/setup-pixi@v0.6.0
+      with:
+        pixi-version: v0.40.0
+        cache: true
+
+    - name: Install dependencies
+      run: |
+        pixi install
+        pixi run install-node-deps
+
+    - name: Run tests (quick)
+      run: pixi run test
+
+    - name: Build application
+      run: python build.py --platform ${{ matrix.platform }} --legacy --no-tests
+
+    - name: Upload build artifacts
+      uses: actions/upload-artifact@v4
+      with:
+        name: ${{ matrix.artifact_name }}
+        path: |
+          dist/
+          build/
+        retention-days: 30
+
+    - name: Package artifacts for release
+      if: startsWith(github.ref, 'refs/tags/')
+      run: |
+        # Legacy builder creates zip files in dist/
+        if [ "${{ matrix.platform }}" = "linux" ]; then
+          cp dist/*.zip dave-${{ matrix.platform }}.zip 2>/dev/null || echo "No zip files found for Linux"
+          find build/ -name "*.deb" -exec cp {} dave-${{ matrix.platform }}.deb \; 2>/dev/null || echo "No deb files found"
+          find build/ -name "*.rpm" -exec cp {} dave-${{ matrix.platform }}.rpm \; 2>/dev/null || echo "No rpm files found"
+        elif [ "${{ matrix.platform }}" = "macos" ]; then
+          cp dist/*.zip dave-${{ matrix.platform }}.zip 2>/dev/null || echo "No zip files found for macOS"
+          find build/ -name "*.dmg" -exec cp {} dave-${{ matrix.platform }}.dmg \; 2>/dev/null || echo "No dmg files found"
+        elif [ "${{ matrix.platform }}" = "windows" ]; then
+          cp dist/*.zip dave-${{ matrix.platform }}.zip 2>/dev/null || echo "No zip files found for Windows"
+          find build/ -name "*.exe" -exec cp {} dave-${{ matrix.platform }}.exe \; 2>/dev/null || echo "No exe files found"
+        fi
+      shell: bash
+
+    - name: Upload release artifacts
+      uses: actions/upload-artifact@v4
+      if: startsWith(github.ref, 'refs/tags/')
+      with:
+        name: release-${{ matrix.artifact_name }}
+        path: |
+          dave-${{ matrix.platform }}.*
+        retention-days: 90
+
+  release:
+    needs: build
+    runs-on: ubuntu-latest
+    if: startsWith(github.ref, 'refs/tags/') || github.event.inputs.create_release == 'true'
+
+    steps:
+    - uses: actions/checkout@v4
+
+    - name: Download all artifacts
+      uses: actions/download-artifact@v4
+      with:
+        path: ./artifacts
+
+    - name: Display structure of downloaded files
+      run: ls -la ./artifacts/
+
+    - name: Create Release
+      id: create_release
+      uses: actions/create-release@v1
+      env:
+        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+      with:
+        tag_name: ${{ github.ref_name }}
+        release_name: DAVE ${{ github.ref_name }}
+        body: |
+          ## DAVE ${{ github.ref_name }}
+
+          ### Changes
+          - See commit history for detailed changes
+
+          ### Downloads
+          - **Linux**: dave-linux.zip
+          - **macOS**: dave-macos.zip  
+          - **Windows**: dave-windows.zip
+
+          ### Installation
+          1. Download the appropriate package for your platform
+          2. Extract the archive
+          3. Follow the installation instructions in the README
+
+          ### Requirements
+          - Python 3.13+
+          - 8GB RAM minimum
+          - 10GB disk space
+        draft: false
+        prerelease: false
+
+    - name: Upload Linux Release Asset
+      uses: actions/upload-release-asset@v1
+      env:
+        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+      with:
+        upload_url: ${{ steps.create_release.outputs.upload_url }}
+        asset_path: ./artifacts/release-dave-linux/dave-linux.zip
+        asset_name: dave-linux.zip
+        asset_content_type: application/zip
+
+    - name: Upload macOS Release Asset
+      uses: actions/upload-release-asset@v1
+      env:
+        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+      with:
+        upload_url: ${{ steps.create_release.outputs.upload_url }}
+        asset_path: ./artifacts/release-dave-macos/dave-macos.zip
+        asset_name: dave-macos.zip
+        asset_content_type: application/zip
+
+    - name: Upload Windows Release Asset
+      uses: actions/upload-release-asset@v1
+      env:
+        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+      with:
+        upload_url: ${{ steps.create_release.outputs.upload_url }}
+        asset_path: ./artifacts/release-dave-windows/dave-windows.zip
+        asset_name: dave-windows.zip
+        asset_content_type: application/zip

.github/workflows/ci.yml

@@ -0,0 +1,80 @@
+name: CI
+
+on:
+  push:
+    branches: [ modernization-2025, master ]
+  pull_request:
+    branches: [ modernization-2025, master ]
+
+jobs:
+  test:
+    runs-on: ${{ matrix.os }}
+    strategy:
+      matrix:
+        os: [ubuntu-latest, macos-latest, windows-latest]
+        python-version: ['3.13']
+
+    steps:
+    - uses: actions/checkout@v4
+
+    - name: Setup Pixi
+      uses: prefix-dev/setup-pixi@v0.6.0
+      with:
+        pixi-version: v0.40.0
+        cache: true
+
+    - name: Install dependencies
+      run: |
+        pixi install
+        pixi run install-node-deps
+
+    - name: Run Python linting
+      run: pixi run lint
+
+    - name: Run Python tests
+      run: pixi run test
+
+    - name: Run Python tests with coverage
+      run: pixi run test-coverage
+
+    - name: Install Playwright browsers
+      run: pixi run test-e2e-install
+
+    - name: Run E2E tests
+      run: pixi run test-e2e
+
+    - name: Upload coverage reports
+      uses: codecov/codecov-action@v4
+      if: matrix.os == 'ubuntu-latest'
+      with:
+        file: ./coverage.xml
+        flags: unittests
+        name: codecov-umbrella
+        fail_ci_if_error: false
+
+  security:
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/checkout@v4
+
+    - name: Setup Pixi
+      uses: prefix-dev/setup-pixi@v0.6.0
+      with:
+        pixi-version: v0.40.0
+        cache: true
+
+    - name: Install dependencies
+      run: pixi install
+
+    - name: Run security checks
+      run: |
+        pixi run lint
+        # Additional security checks can be added here
+
+    - name: Check for secrets
+      uses: trufflesecurity/trufflehog@main
+      with:
+        path: ./
+        base: main
+        head: HEAD
+        extra_args: --debug --only-verified