fix(ci): remove sudo from docker install — Gitea ubuntu runner is root without sudo

ci: trigger workflow on PR with build-only validation
feat: add admin-web Docker build & push workflow with semantic-release
2026-07-13 14:15:32 +02:00 · 2026-07-12 22:50:35 +02:00 · 2026-07-12 19:11:15 +02:00
23 changed files with 114 additions and 757 deletions
--- a/.github/workflows/admin-web-docker.yml
+++ b/.github/workflows/admin-web-docker.yml
@@ -17,35 +17,8 @@ env:
  NODE_VERSION: "22"

 jobs:
-  test:
-    name: Admin Web Tests
-    runs-on: ubuntu-latest
-    timeout-minutes: 10
-    if: |
-      !contains(github.event.head_commit.message, '[skip ci]') &&
-      !contains(github.event.head_commit.message, '[ci skip]')
-    defaults:
-      run:
-        working-directory: admin-web
-    steps:
-      - name: Checkout
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
-      - name: Setup Node.js
-        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
-        with:
-          node-version: ${{ env.NODE_VERSION }}
-          cache: npm
-          cache-dependency-path: admin-web/package-lock.json
-      - name: Install dependencies
-        run: npm ci
-      - name: Type check
-        run: npx tsc --noEmit
-      - name: Run unit tests
-        run: npx vitest run
-
  build-validation:
    name: Docker Build Validation
-    needs: [test]
    if: github.event_name == 'pull_request'
    runs-on: ubuntu-latest
    timeout-minutes: 15
@@ -74,7 +47,6 @@ jobs:

  semantic-release:
    name: Semantic Release
-    needs: [test]
    runs-on: ubuntu-latest
    timeout-minutes: 10
    if: |
@@ -128,7 +100,7 @@ jobs:

  build-and-push:
    name: Build & Push Docker Image
-    needs: [semantic-release, test]
+    needs: semantic-release
    runs-on: ubuntu-latest
    timeout-minutes: 15
    if: |
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -12,6 +12,7 @@ jobs:
    name: Detect Changes
    runs-on: ubuntu-latest
    outputs:
+      admin-web: ${{ steps.filter.outputs.admin-web }}
      youtube-worker: ${{ steps.filter.outputs.youtube-worker }}
      supabase-functions: ${{ steps.filter.outputs.supabase-functions }}
    steps:
@@ -21,6 +22,9 @@ jobs:
        id: filter
        with:
          filters: |
+            admin-web:
+              - 'admin-web/**'
+              - '.github/workflows/ci.yml'
            youtube-worker:
              - 'youtube-worker/**'
              - '.github/workflows/ci.yml'
@@ -29,6 +33,40 @@ jobs:
              - 'youtube-worker/**'
              - '.github/workflows/ci.yml'

+  # ── Admin Web: Next.js ──
+  admin-web-test:
+    name: Admin Web CI
+    needs: changes
+    if: needs.changes.outputs.admin-web == 'true'
+    runs-on: ubuntu-latest
+    defaults:
+      run:
+        working-directory: admin-web
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: '20'
+          cache: 'npm'
+          cache-dependency-path: admin-web/package-lock.json
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Type check
+        run: npx tsc --noEmit
+
+      - name: Run unit tests
+        run: npx vitest run
+
+      - name: Install Playwright browsers
+        run: npx playwright install --with-deps chromium
+
+      - name: Run E2E tests
+        run: npx playwright test
+
  # ── YouTube Worker: Node.js microservice ──
  youtube-worker-check:
    name: YouTube Worker
@@ -57,7 +95,7 @@ jobs:
  # ── Deploy: Supabase edge functions + YouTube worker ──
  deploy-functions:
    name: Deploy
-    needs: [changes, youtube-worker-check]
+    needs: [changes, admin-web-test, youtube-worker-check]
    if: |
      always() &&
      github.ref == 'refs/heads/main' &&
--- a/.github/workflows/pr-iphone-deploy.yml
+++ b/.github/workflows/pr-iphone-deploy.yml
@@ -106,15 +106,16 @@ jobs:

          # 1. Try WiFi first (Xcode 15+ devicectl network discovery)
          echo "📱 Trying WiFi install via devicectl..."
-          if xcrun devicectl device install app --device "$UDID" "$APP" > /tmp/devicectl.log 2>&1; then
+          xcrun devicectl device install app --device "$UDID" "$APP" 2>&1 | tail -3
+          if [ ${PIPESTATUS[0]} -eq 0 ]; then
            echo "✅ Installed via WiFi"
            exit 0
          fi
-          tail -10 /tmp/devicectl.log

          # 2. Fallback to USB via ios-deploy
          echo "🔌 WiFi failed, trying USB..."
-          if ios-deploy --bundle "$APP" --id "$UDID" --justlaunch; then
+          ios-deploy --bundle "$APP" --id "$UDID" --justlaunch
+          if [ $? -eq 0 ]; then
            echo "✅ Installed via USB"
            exit 0
          fi
@@ -122,7 +123,6 @@ jobs:
          echo "❌ Install failed (both WiFi and USB)"
          exit 1

-
      - name: Post "Ready to test" comment
        env:
          GT_TOKEN: ${{ secrets.PR_API_TOKEN }}
--- a/admin-web/app/login/page.test.tsx
+++ b/admin-web/app/login/page.test.tsx
@@ -14,15 +14,11 @@ vi.mock('next/navigation', () => ({
  }),
 }))

-// Mock sonner toast — the login page calls toast.success on success. We also
-// stub toast.error for future-proofing (the page uses setError for the error
-// path today, but tests may evolve to assert toasts).
+// Mock sonner toast
 const mockToastSuccess = vi.fn()
-const mockToastError = vi.fn()
 vi.mock('sonner', () => ({
  toast: {
    success: (...args: any[]) => mockToastSuccess(...args),
-    error: (...args: any[]) => mockToastError(...args),
  },
 }))

@@ -49,9 +45,7 @@ describe('LoginPage', () => {
  it('should render login form', () => {
    render(<LoginPage />)

-    // CardTitle is not a semantic heading (shadcn renders it as <div>), so we
-    // assert on the visible text instead of querying by role="heading".
-    expect(screen.getByText(/tabatafit admin/i)).toBeInTheDocument()
+    expect(screen.getByRole('heading', { name: /tabatafit admin/i })).toBeInTheDocument()
    expect(screen.getByLabelText(/email/i)).toBeInTheDocument()
    expect(screen.getByLabelText(/password/i)).toBeInTheDocument()
    expect(screen.getByRole('button', { name: /sign in/i })).toBeInTheDocument()
@@ -119,14 +113,9 @@ describe('LoginPage', () => {
  })

  it('should show error for invalid credentials', async () => {
-    // Production supabase-js returns an AuthError (extends Error) instance,
-    // so the page's `err instanceof Error ? err.message : "Login failed"`
-    // branch surfaces the real message. The mock must match that shape;
-    // a plain `{ message }` object would hit the fallback ("Login failed")
-    // and the test would never see the real credential error text.
-    mockSignInWithPassword.mockResolvedValue({
-      data: { user: null },
-      error: new Error('Invalid login credentials'),
+    mockSignInWithPassword.mockResolvedValue({ 
+      data: { user: null }, 
+      error: { message: 'Invalid login credentials' } 
    })

    render(<LoginPage />)
--- a/admin-web/app/page.test.tsx
+++ b/admin-web/app/page.test.tsx
@@ -97,27 +97,21 @@ describe('DashboardPage', () => {
    expect(screen.getByText(/manage trainer profiles/i)).toBeInTheDocument()
  })

-  it('should link to correct routes', async () => {
+  it('should link to correct routes', () => {
    mockFrom.mockReturnValue({
      select: () => Promise.resolve({ count: 0, error: null }),
    })

    render(<DashboardPage />)

-    // Stats are fetched in useEffect; the link accessible name only includes
-    // the count digit once the async state has resolved. Wait for it.
-    await waitFor(() => {
-      expect(screen.getByRole('link', { name: /workouts\s+\d+/i })).toHaveAttribute('href', '/workouts')
-    })
-    expect(screen.getByRole('link', { name: /trainers\s+\d+/i })).toHaveAttribute('href', '/trainers')
-    expect(screen.getByRole('link', { name: /collections\s+\d+/i })).toHaveAttribute('href', '/collections')
+    expect(screen.getByRole('link', { name: /workouts \d+/i })).toHaveAttribute('href', '/workouts')
+    expect(screen.getByRole('link', { name: /trainers \d+/i })).toHaveAttribute('href', '/trainers')
+    expect(screen.getByRole('link', { name: /collections \d+/i })).toHaveAttribute('href', '/collections')
  })

  it('should handle stats fetch errors gracefully', async () => {
-    // TODO: code path silently ignores {error} from supabase — should log/toast (out of scope).
-    // The production fetchStats destructures `{ count }` from the resolved payload without
-    // ever throwing on `{ count: null, error }`, so console.error is NOT called on this path.
-    // We only assert that the UI renders without crashing and falls back to the empty state.
+    const consoleError = vi.spyOn(console, 'error').mockImplementation(() => {})
+    
    mockFrom.mockReturnValue({
      select: () => Promise.resolve({ count: null, error: new Error('Database error') }),
    })
@@ -125,29 +119,24 @@ describe('DashboardPage', () => {
    render(<DashboardPage />)

    await waitFor(() => {
-      expect(screen.getByText('Workouts')).toBeInTheDocument()
-      expect(screen.getByText('Trainers')).toBeInTheDocument()
-      expect(screen.getByText('Collections')).toBeInTheDocument()
+      expect(consoleError).toHaveBeenCalled()
    })
+
+    consoleError.mockRestore()
  })

-  it('should render correct icons', async () => {
+  it('should render correct icons', () => {
    mockFrom.mockReturnValue({
      select: () => Promise.resolve({ count: 0, error: null }),
    })

    render(<DashboardPage />)

-    // shadcn Card renders <div data-slot="card">, not a semantic <article>.
-    // Only the 3 stat cards live inside a <Link> (rendered as <a>); the
-    // "Getting Started" card below has no icon, so we scope the query.
-    await waitFor(() => {
-      const cards = document.querySelectorAll('a [data-slot="card"]')
-      expect(cards.length).toBe(3)
-      cards.forEach(card => {
-        const icon = card.querySelector('svg')
-        expect(icon).toBeInTheDocument()
-      })
+    // All cards should have icons (lucide icons render as svg)
+    const cards = screen.getAllByRole('article')
+    cards.forEach(card => {
+      const icon = card.querySelector('svg')
+      expect(icon).toBeInTheDocument()
    })
  })

@@ -166,14 +155,13 @@ describe('DashboardPage', () => {
    render(<DashboardPage />)

    await waitFor(() => {
-      // shadcn Card renders <div data-slot="card">, not a semantic <article>.
-      const workoutCard = screen.getByText('Workouts').closest('[data-slot="card"]')
+      const workoutCard = screen.getByText('Workouts').closest('article')
      expect(workoutCard?.querySelector('.text-orange-500')).toBeInTheDocument()

-      const trainerCard = screen.getByText('Trainers').closest('[data-slot="card"]')
+      const trainerCard = screen.getByText('Trainers').closest('article')
      expect(trainerCard?.querySelector('.text-blue-500')).toBeInTheDocument()

-      const collectionCard = screen.getByText('Collections').closest('[data-slot="card"]')
+      const collectionCard = screen.getByText('Collections').closest('article')
      expect(collectionCard?.querySelector('.text-green-500')).toBeInTheDocument()
    })
  })
--- a/admin-web/components/sidebar.test.tsx
+++ b/admin-web/components/sidebar.test.tsx
@@ -91,10 +91,8 @@ describe('Sidebar', () => {
  })

  it('should handle logout errors gracefully', async () => {
-    // Real supabase.auth.signOut() never throws — it resolves with { error }.
-    // Mocking it realistically avoids an unhandled rejection and matches prod behaviour.
-    mockSignOut.mockResolvedValueOnce({ error: new Error('Network error') })
-
+    mockSignOut.mockRejectedValueOnce(new Error('Network error'))
+    
    render(<Sidebar />)

    const logoutButton = screen.getByRole('button', { name: /logout/i })
@@ -103,9 +101,6 @@ describe('Sidebar', () => {
    await waitFor(() => {
      expect(mockSignOut).toHaveBeenCalled()
    })
-
-    // Graceful: even when signOut errors, the user is still redirected to login.
-    expect(mockPush).toHaveBeenCalledWith('/login')
  })

  it('should have correct styling for navigation', () => {
--- a/admin-web/components/ui/dialog.test.tsx
+++ b/admin-web/components/ui/dialog.test.tsx
@@ -55,12 +55,7 @@ describe('Dialog', () => {
    expect(screen.getByText('Test Description')).toBeInTheDocument()
  })

-  // SKIPPED: jsdom limitation — Radix Dialog closes its content via a
-  // `pointerDown` listener on the overlay, which is not reproducible in jsdom
-  // (jsdom has no real pointer events / hit-testing). The escape-key path
-  // below covers the close behaviour; the click-outside path is exercised by
-  // Playwright E2E instead.
-  it.skip('should close dialog when clicking outside', async () => {
+  it('should close dialog when clicking outside', async () => {
    render(
      <Dialog>
        <DialogTrigger asChild>
@@ -75,7 +70,7 @@ describe('Dialog', () => {
    )

    await userEvent.click(screen.getByRole('button', { name: /open dialog/i }))
-
+    
    await waitFor(() => {
      expect(screen.getByRole('dialog')).toBeInTheDocument()
    })
@@ -183,10 +178,7 @@ describe('Dialog', () => {

    await waitFor(() => {
      const dialog = screen.getByRole('dialog')
-      // Modern Radix no longer emits aria-modal; it relies on role=dialog
-      // plus aria-labelledby (and aria-describedby when a Description is set).
-      expect(dialog).toHaveAttribute('role', 'dialog')
-      expect(dialog).toHaveAttribute('aria-labelledby')
+      expect(dialog).toHaveAttribute('aria-modal', 'true')
    })
  })
 })
--- a/admin-web/components/workout-form.test.tsx
+++ b/admin-web/components/workout-form.test.tsx
@@ -3,24 +3,6 @@ import { render, screen, waitFor } from '@testing-library/react'
 import userEvent from '@testing-library/user-event'
 import WorkoutForm from './workout-form'

-// Mock sonner toast — the production form uses toast.error / toast.success,
-// never window.alert. We surface named vi.fn()s so tests can assert calls.
-const mockToastError = vi.fn()
-const mockToastSuccess = vi.fn()
-vi.mock('sonner', () => ({
-  toast: {
-    error: (...args: any[]) => mockToastError(...args),
-    success: (...args: any[]) => mockToastSuccess(...args),
-    info: vi.fn(),
-    loading: vi.fn(),
-    warning: vi.fn(),
-    message: vi.fn(),
-    promise: vi.fn(),
-    custom: vi.fn(),
-    dismiss: vi.fn(),
-  },
-}))
-
 // Mock Next.js router
 const mockPush = vi.fn()
 vi.mock('next/navigation', () => ({
@@ -577,16 +559,6 @@ describe('WorkoutForm', () => {
    })

    it('should successfully submit form in create mode', async () => {
-      // Make the insert promise resolve on a macrotask so React has time to
-      // re-render the "Saving..." loading state between setIsLoading(true)
-      // and setIsLoading(false). Without this, the loading state is transient
-      // and the waitFor below never observes it.
-      mockInsertSelectSingle.mockImplementation(
-        () => new Promise(resolve =>
-          setTimeout(() => resolve({ data: { id: 'new-workout-id' }, error: null }), 10)
-        )
-      )
-
      render(<WorkoutForm mode="create" />)

      await waitFor(() => {
@@ -596,20 +568,10 @@ describe('WorkoutForm', () => {
      // Fill in required fields
      await userEvent.type(screen.getByLabelText(/workout title/i), 'Test Workout')
      
-      // Wait for trainers fetch to resolve (the custom Select replaces the
-      // "Loading trainers..." placeholder once isLoadingTrainers flips false).
-      await waitFor(() => {
-        expect(screen.getByLabelText(/trainer/i)).toBeInTheDocument()
-      })
-      // Open the custom dropdown and pick the trainer
+      // Select trainer
      await userEvent.click(screen.getByLabelText(/trainer/i))
      await userEvent.click(screen.getByText('Test Trainer'))

-      // Fill the first exercise name — the default `exercises` state is
-      // [{ name: "", duration: 20 }] which fails validation without this.
-      await userEvent.click(screen.getByRole('tab', { name: /content/i }))
-      await userEvent.type(screen.getByTestId('exercise-name-0'), 'Push-ups')
-
      const submitButton = screen.getByRole('button', { name: /create workout/i })
      await userEvent.click(submitButton)

@@ -630,15 +592,6 @@ describe('WorkoutForm', () => {
    })

    it('should successfully submit form in edit mode', async () => {
-      // Make the update promise resolve on a macrotask so React has time to
-      // re-render the "Saving..." loading state between setIsLoading(true)
-      // and setIsLoading(false). See the create-mode test for rationale.
-      mockUpdateEqSelectSingle.mockImplementation(
-        () => new Promise(resolve =>
-          setTimeout(() => resolve({ data: { id: 'test-id' }, error: null }), 10)
-        )
-      )
-
      const initialData = {
        id: 'test-id',
        title: 'Test Workout',
@@ -711,20 +664,10 @@ describe('WorkoutForm', () => {
      // Fill in required fields
      await userEvent.type(screen.getByLabelText(/workout title/i), 'Test Workout')
      
-      // Wait for trainers fetch to resolve (the custom Select replaces the
-      // "Loading trainers..." placeholder once isLoadingTrainers flips false).
-      await waitFor(() => {
-        expect(screen.getByLabelText(/trainer/i)).toBeInTheDocument()
-      })
-      // Open the custom dropdown and pick the trainer
+      // Select trainer
      await userEvent.click(screen.getByLabelText(/trainer/i))
      await userEvent.click(screen.getByText('Test Trainer'))

-      // Fill the first exercise name — the default `exercises` state is
-      // [{ name: "", duration: 20 }] which fails validation without this.
-      await userEvent.click(screen.getByRole('tab', { name: /content/i }))
-      await userEvent.type(screen.getByTestId('exercise-name-0'), 'Push-ups')
-
      const submitButton = screen.getByRole('button', { name: /create workout/i })
      await userEvent.click(submitButton)

@@ -758,20 +701,10 @@ describe('WorkoutForm', () => {
      // Fill in required fields
      await userEvent.type(screen.getByLabelText(/workout title/i), 'Test Workout')
      
-      // Wait for trainers fetch to resolve (the custom Select replaces the
-      // "Loading trainers..." placeholder once isLoadingTrainers flips false).
-      await waitFor(() => {
-        expect(screen.getByLabelText(/trainer/i)).toBeInTheDocument()
-      })
-      // Open the custom dropdown and pick the trainer
+      // Select trainer
      await userEvent.click(screen.getByLabelText(/trainer/i))
      await userEvent.click(screen.getByText('Test Trainer'))

-      // Fill the first exercise name — the default `exercises` state is
-      // [{ name: "", duration: 20 }] which fails validation without this.
-      await userEvent.click(screen.getByRole('tab', { name: /content/i }))
-      await userEvent.type(screen.getByTestId('exercise-name-0'), 'Push-ups')
-
      const submitButton = screen.getByRole('button', { name: /create workout/i })
      await userEvent.click(submitButton)

@@ -787,6 +720,8 @@ describe('WorkoutForm', () => {
    })

    it('should handle submission error', async () => {
+      const alertMock = vi.spyOn(window, 'alert').mockImplementation(() => {})
+      
      // Setup insert to fail
      mockInsertSelectSingle.mockResolvedValue({
        data: null,
@@ -802,30 +737,23 @@ describe('WorkoutForm', () => {
      // Fill in required fields
      await userEvent.type(screen.getByLabelText(/workout title/i), 'Test Workout')
      
-      // Wait for trainers fetch to resolve (the custom Select replaces the
-      // "Loading trainers..." placeholder once isLoadingTrainers flips false).
-      await waitFor(() => {
-        expect(screen.getByLabelText(/trainer/i)).toBeInTheDocument()
-      })
-      // Open the custom dropdown and pick the trainer
+      // Select trainer
      await userEvent.click(screen.getByLabelText(/trainer/i))
      await userEvent.click(screen.getByText('Test Trainer'))

-      // Fill the first exercise name — the default `exercises` state is
-      // [{ name: "", duration: 20 }] which fails validation without this.
-      await userEvent.click(screen.getByRole('tab', { name: /content/i }))
-      await userEvent.type(screen.getByTestId('exercise-name-0'), 'Push-ups')
-
      const submitButton = screen.getByRole('button', { name: /create workout/i })
      await userEvent.click(submitButton)

-      // Production form calls toast.error (sonner) on save failure, not window.alert
+      // Should show alert on error
      await waitFor(() => {
-        expect(mockToastError).toHaveBeenCalledWith('Failed to save workout. Please try again.')
+        expect(alertMock).toHaveBeenCalledWith('Failed to save workout. Please try again.')
      })
+
+      alertMock.mockRestore()
    })

    it('should handle update error in edit mode', async () => {
+      const alertMock = vi.spyOn(window, 'alert').mockImplementation(() => {})
      const consoleErrorMock = vi.spyOn(console, 'error').mockImplementation(() => {})
      
      // Setup update to fail
@@ -865,11 +793,12 @@ describe('WorkoutForm', () => {
      const submitButton = screen.getByRole('button', { name: /update workout/i })
      await userEvent.click(submitButton)

-      // Production form calls toast.error (sonner) on save failure, not window.alert
+      // Should show alert on error
      await waitFor(() => {
-        expect(mockToastError).toHaveBeenCalledWith('Failed to save workout. Please try again.')
+        expect(alertMock).toHaveBeenCalledWith('Failed to save workout. Please try again.')
      })

+      alertMock.mockRestore()
      consoleErrorMock.mockRestore()
    })
  })
--- a/admin-web/package.json
+++ b/admin-web/package.json
@@ -1,6 +1,6 @@
 {
  "name": "my-app",
-  "version": "1.0.0",
+  "version": "0.1.0",
  "private": true,
  "scripts": {
    "dev": "next dev",
--- a/admin-web/vitest.config.ts
+++ b/admin-web/vitest.config.ts
@@ -1,4 +1,4 @@
-import { defineConfig, configDefaults } from 'vitest/config'
+import { defineConfig } from 'vitest/config'
 import react from '@vitejs/plugin-react'
 import path from 'path'

@@ -9,14 +9,6 @@ export default defineConfig({
    globals: true,
    setupFiles: ['./test/setup.ts'],
    include: ['**/*.{test,spec}.{js,mjs,cjs,ts,mts,cts,jsx,tsx}'],
-    // Exclude Playwright E2E specs + reports from the Vitest unit run.
-    // Spread configDefaults.exclude to keep filtering node_modules/dist/build.
-    exclude: [
-      'e2e/**',
-      'playwright-report/**',
-      'test-results/**',
-      ...configDefaults.exclude,
-    ],
    coverage: {
      provider: 'v8',
      reporter: ['text', 'json', 'html'],
--- a/scripts/verify-admin-web-docker.sh
+++ b/scripts/verify-admin-web-docker.sh
@@ -263,9 +263,9 @@ check_workflow_valid() {
  yaml_valid ".github/workflows/admin-web-docker.yml" "admin-web-docker.yml is valid YAML"
 }

-# --- workflow: exactly 4 jobs --------------------------------------- #
+# --- workflow: exactly 3 jobs --------------------------------------- #
 check_workflow_jobs() {
-  local label="workflow has exactly 4 jobs: test + build-validation + semantic-release + build-and-push"
+  local label="workflow has exactly 3 jobs: build-validation + semantic-release + build-and-push"
  local f=".github/workflows/admin-web-docker.yml"
  if [[ ! -f "$f" ]]; then
    fail "$label" "file missing"
@@ -281,16 +281,16 @@ print(','.join(sorted(jobs)))
    fail "$label" "could not parse jobs"
    return
  fi
-  if [[ "$out" == "build-and-push,build-validation,semantic-release,test" ]]; then
+  if [[ "$out" == "build-and-push,build-validation,semantic-release" ]]; then
    pass "$label"
  else
    fail "$label" "jobs=[$out]"
  fi
 }

-# --- workflow: build-and-push needs semantic-release + test ---------- #
+# --- workflow: build-and-push needs semantic-release --------------- #
 check_workflow_needs() {
-  local label="build-and-push needs: [semantic-release, test]"
+  local label="build-and-push needs: semantic-release"
  local f=".github/workflows/admin-web-docker.yml"
  if [[ ! -f "$f" ]]; then
    fail "$label" "file missing"
@@ -305,7 +305,7 @@ n=bp.get('needs')
 if isinstance(n,list): print(','.join(n))
 else: print(str(n))
 " "$f" 2>/dev/null || true)
-  if [[ "$out" == "semantic-release,test" ]]; then
+  if [[ "$out" == "semantic-release" ]]; then
    pass "$label"
  else
    fail "$label" "needs='$out'"
--- a/tabatago-swift/TabataGo/Resources/Info.plist
+++ b/tabatago-swift/TabataGo/Resources/Info.plist
@@ -18,8 +18,17 @@
 	<string>APPL</string>
 	<key>CFBundleShortVersionString</key>
 	<string>1.0</string>
+	<key>CFBundleURLTypes</key>
+	<array>
+		<dict>
+			<key>CFBundleURLSchemes</key>
+			<array>
+				<string>tabatago</string>
+			</array>
+		</dict>
+	</array>
 	<key>CFBundleVersion</key>
-	<string>2</string>
+	<string>1</string>
 	<key>NSHealthShareUsageDescription</key>
 	<string>TabataGo reads your health data to show fitness stats and personalize your workouts.</string>
 	<key>NSHealthUpdateUsageDescription</key>
--- a/tabatago-swift/TabataGo/Resources/TabataGo.entitlements
+++ b/tabatago-swift/TabataGo/Resources/TabataGo.entitlements
@@ -9,8 +9,6 @@
 		<string>health-records</string>
 	</array>
 	<key>com.apple.security.application-groups</key>
-	<array>
-		<string>group.fr.millianlmx.tabatago</string>
-	</array>
+	<array/>
 </dict>
 </plist>
--- a/tabatago-swift/TabataGo/Services/AudioService.swift
+++ b/tabatago-swift/TabataGo/Services/AudioService.swift
@@ -28,55 +28,12 @@ final class AudioService {
            try audioSession.setCategory(
                .playback,
                mode: .default,
-                options: [.allowAirPlay, .allowBluetooth]
+                options: [.mixWithOthers, .allowAirPlay, .allowBluetooth]
            )
            try audioSession.setActive(true)
        } catch {
            print("[Audio] Session configuration failed: \(error)")
        }
-
-        // ─── Interruption Handler
-        NotificationCenter.default.addObserver(
-            forName: AVAudioSession.interruptionNotification,
-            object: nil,
-            queue: .main
-        ) { [weak self] notification in
-            guard let self,
-                  let typeValue = notification.userInfo?[AVAudioSessionInterruptionTypeKey] as? UInt,
-                  let type = AVAudioSession.InterruptionType(rawValue: typeValue) else { return }
-
-            if type == .ended {
-                guard let optionsValue = notification.userInfo?[AVAudioSessionInterruptionOptionKey] as? UInt,
-                      AVAudioSession.InterruptionOptions(rawValue: optionsValue).contains(.shouldResume) else { return }
-                do {
-                    try self.audioSession.setActive(true)
-                } catch {
-                    print("[Audio] Re-activation failed after interruption: \(error)")
-                }
-            }
-        }
-
-        // ─── Route Change Handler
-        NotificationCenter.default.addObserver(
-            forName: AVAudioSession.routeChangeNotification,
-            object: nil,
-            queue: .main
-        ) { [weak self] notification in
-            guard let self,
-                  let reasonValue = notification.userInfo?[AVAudioSessionRouteChangeReasonKey] as? UInt,
-                  let reason = AVAudioSession.RouteChangeReason(rawValue: reasonValue) else { return }
-
-            switch reason {
-            case .newDeviceAvailable, .oldDeviceUnavailable:
-                do {
-                    try self.audioSession.setActive(true)
-                } catch {
-                    print("[Audio] Route re-activation failed: \(error)")
-                }
-            default:
-                break
-            }
-        }
    }

    // ─── Phase Audio Cues ─────────────────────────────────────────
--- a/tabatago-swift/TabataGo/ViewModels/PlayerViewModel.swift
+++ b/tabatago-swift/TabataGo/ViewModels/PlayerViewModel.swift
@@ -39,7 +39,6 @@ final class PlayerViewModel: ObservableObject {
    @Published var isComplete: Bool = false
    @Published var showExitConfirmation: Bool = false
    @Published private(set) var completedSession: WorkoutSession? = nil
-    @Published var liveActivityError: String? = nil

    // Track info for Live Activity — set by View when music changes
    var currentTrackTitle = ""
@@ -383,10 +382,7 @@ final class PlayerViewModel: ObservableObject {
    // ─── Dynamic Island / Live Activity ─────────────────────────────

    func syncActivity(shouldAlert: Bool = false) {
-        guard ActivityAuthorizationInfo().areActivitiesEnabled else {
-            liveActivityError = "Live Activities are disabled in Settings"
-            return
-        }
+        guard ActivityAuthorizationInfo().areActivitiesEnabled else { return }
        guard isRunning else { return }

        let isPlayingMusic = (phase == .work || phase == .rest) && isRunning && !isPaused
@@ -453,14 +449,8 @@ final class PlayerViewModel: ObservableObject {
                attributes: attrs,
                content: ActivityContent(state: state, staleDate: staleDate)
            )
-            liveActivityError = nil
            observeActivityState()
-        } catch let authError as ActivityAuthorizationError {
-            liveActivityError = "Live Activities: \(authError.localizedDescription)"
        } catch {
-            let msg = error.localizedDescription
-            let truncated = msg.count > 200 ? String(msg.prefix(200)) + "…" : msg
-            liveActivityError = "Live Activity error: \(truncated)"
            print("❌ Failed to start Live Activity: \(error.localizedDescription)")
        }
    }
--- a/tabatago-swift/TabataGo/Views/Player/PlayerView.swift
+++ b/tabatago-swift/TabataGo/Views/Player/PlayerView.swift
@@ -66,40 +66,6 @@ struct PlayerView: View {
                    }
                }

-                // ══════════════════════════════════════════════════
-                // Live Activity error banner (non-blocking)
-                // ══════════════════════════════════════════════════
-                if let error = vm.liveActivityError {
-                    VStack {
-                        HStack(spacing: 8) {
-                            Image(systemName: "exclamationmark.triangle.fill")
-                                .font(.caption)
-                                .foregroundStyle(.yellow)
-                            Text(error)
-                                .font(.caption2.weight(.medium))
-                                .foregroundStyle(.white.opacity(0.9))
-                            Spacer()
-                            Button {
-                                vm.liveActivityError = nil
-                            } label: {
-                                Image(systemName: "xmark")
-                                    .font(.system(size: 10, weight: .bold))
-                                    .foregroundStyle(.white.opacity(0.6))
-                            }
-                        }
-                        .padding(.horizontal, 16)
-                        .padding(.vertical, 10)
-                        .background(.ultraThinMaterial.opacity(0.9))
-                        .clipShape(RoundedRectangle(cornerRadius: 12))
-                        .padding(.horizontal, 16)
-                        .padding(.top, 60)
-                        Spacer()
-                    }
-                    .transition(.move(edge: .top).combined(with: .opacity))
-                    .animation(.spring(duration: 0.3), value: vm.liveActivityError)
-                    .zIndex(100)
-                }
-
                // ══════════════════════════════════════════════════
                // Layer 4 — Compact timer ring (top-right corner)
                // ══════════════════════════════════════════════════
--- a/tabatago-swift/TabataGoWatch/Complications/Info.plist
+++ b/tabatago-swift/TabataGoWatch/Complications/Info.plist
@@ -19,7 +19,7 @@
 	<key>CFBundleShortVersionString</key>
 	<string>1.0</string>
 	<key>CFBundleVersion</key>
-	<string>2</string>
+	<string>1</string>
 	<key>NSExtension</key>
 	<dict>
 		<key>NSExtensionPointIdentifier</key>
--- a/tabatago-swift/TabataGoWatch/Resources/Info.plist
+++ b/tabatago-swift/TabataGoWatch/Resources/Info.plist
@@ -19,7 +19,7 @@
 	<key>CFBundleShortVersionString</key>
 	<string>1.0</string>
 	<key>CFBundleVersion</key>
-	<string>2</string>
+	<string>1</string>
 	<key>NSHealthShareUsageDescription</key>
 	<string>TabataGo reads your heart rate and calories during workouts.</string>
 	<key>NSHealthUpdateUsageDescription</key>
--- a/tabatago-swift/TabataGoWidget/Info.plist
+++ b/tabatago-swift/TabataGoWidget/Info.plist
@@ -4,6 +4,8 @@
 <dict>
 	<key>CFBundleDevelopmentRegion</key>
 	<string>$(DEVELOPMENT_LANGUAGE)</string>
+	<key>CFBundleDisplayName</key>
+	<string>TabataGoWidget</string>
 	<key>CFBundleExecutable</key>
 	<string>$(EXECUTABLE_NAME)</string>
 	<key>CFBundleIdentifier</key>
--- a/tabatago-swift/TabataGoWidget/WorkoutLiveActivity.swift
+++ b/tabatago-swift/TabataGoWidget/WorkoutLiveActivity.swift
@@ -553,7 +553,7 @@ struct WorkoutLiveActivity: Widget {
            .contentMargins(.leading, 8, for: .expanded)
            .contentMargins(.trailing, 8, for: .expanded)
            .contentMargins(.bottom, 6, for: .expanded)
-            .widgetURL(URL(string: "tabatago://workout"))
+            .widgetURL(URL(string: "tabatago://workout")!)
        }
        .supplementalActivityFamilies([.small, .medium])
    }
--- a/tabatago-swift/project.yml
+++ b/tabatago-swift/project.yml
@@ -60,10 +60,6 @@ targets:
        SUPABASE_ANON_KEY: $(SUPABASE_ANON_KEY)
        REVENUECAT_API_KEY: $(REVENUECAT_API_KEY)
        POSTHOG_API_KEY: $(POSTHOG_API_KEY)
-        NSSupportsLiveActivities: true
-        NSSupportsLiveActivitiesFrequentUpdates: true
-        UIBackgroundModes:
-          - audio
    entitlements:
      path: TabataGo/Resources/TabataGo.entitlements
      properties:
@@ -80,8 +76,6 @@ targets:

      - target: TabataGoWatch
        embed: true
-      - target: TabataGoWidget
-        embed: true
    settings:
      base:
        PRODUCT_BUNDLE_IDENTIFIER: fr.millianlmx.tabatago
@@ -162,30 +156,6 @@ targets:
        TARGETED_DEVICE_FAMILY: "4"
        WATCHOS_DEPLOYMENT_TARGET: "11.0"

-  TabataGoWidget:
-    type: app-extension
-    platform: iOS
-    deploymentTarget: "26.0"
-    sources:
-      - path: TabataGoWidget
-        excludes:
-          - "**/.DS_Store"
-      - path: TabataGo/Models/WorkoutActivityAttributes.swift
-      - path: TabataGo/Models/MusicActivityAttributes.swift
-    info:
-      path: TabataGoWidget/Info.plist
-      properties:
-        NSExtension:
-          NSExtensionPointIdentifier: com.apple.widgetkit-extension
-        NSSupportsLiveActivities: true
-        NSSupportsLiveActivitiesFrequentUpdates: true
-    settings:
-      base:
-        PRODUCT_BUNDLE_IDENTIFIER: fr.millianlmx.tabatago.widget
-        IPHONEOS_DEPLOYMENT_TARGET: "26.0"
-        TARGETED_DEVICE_FAMILY: "1"
-        ENABLE_PREVIEWS: YES
-
  TabataGoTests:
    type: bundle.unit-test
    platform: iOS
@@ -215,7 +185,6 @@ schemes:
    build:
      targets:
        TabataGo: all
-        TabataGoWidget: all
    run:
      config: Debug
    archive:
--- a/youtube-worker/Dockerfile
+++ b/youtube-worker/Dockerfile
@@ -11,8 +11,8 @@ RUN apt-get update && \

 WORKDIR /app

-COPY package.json package-lock.json ./
-RUN npm ci --omit=dev
+COPY package.json package-lock.json* ./
+RUN npm install --production

 COPY server.js ./

--- a/youtube-worker/package-lock.json
+++ b/youtube-worker/package-lock.json
@@ -8,7 +8,6 @@
      "name": "youtube-worker",
      "version": "1.0.0",
      "dependencies": {
-        "@google/genai": "^1.46.0",
        "@supabase/supabase-js": "^2.49.1",
        "youtubei.js": "^17.0.1"
      }
@@ -19,87 +18,6 @@
      "integrity": "sha512-sBXGT13cpmPR5BMgHE6UEEfEaShh5Ror6rfN3yEK5si7QVrtZg8LEPQb0VVhiLRUslD2yLnXtnRzG035J/mZXQ==",
      "license": "(Apache-2.0 AND BSD-3-Clause)"
    },
-    "node_modules/@google/genai": {
-      "version": "1.52.0",
-      "resolved": "https://registry.npmjs.org/@google/genai/-/genai-1.52.0.tgz",
-      "integrity": "sha512-gwSvbpiN/17O9TbsqSsE/OzZcpv5Fo4RQjdngGgogtuB9RsyJ8ZHhX5KjHj1bp5N9snN2eK8LDGXSaWW2hof8Q==",
-      "hasInstallScript": true,
-      "license": "Apache-2.0",
-      "dependencies": {
-        "google-auth-library": "^10.3.0",
-        "p-retry": "^4.6.2",
-        "protobufjs": "^7.5.4",
-        "ws": "^8.18.0"
-      },
-      "engines": {
-        "node": ">=20.0.0"
-      },
-      "peerDependencies": {
-        "@modelcontextprotocol/sdk": "^1.25.2"
-      },
-      "peerDependenciesMeta": {
-        "@modelcontextprotocol/sdk": {
-          "optional": true
-        }
-      }
-    },
-    "node_modules/@protobufjs/aspromise": {
-      "version": "1.1.2",
-      "resolved": "https://registry.npmjs.org/@protobufjs/aspromise/-/aspromise-1.1.2.tgz",
-      "integrity": "sha512-j+gKExEuLmKwvz3OgROXtrJ2UG2x8Ch2YZUxahh+s1F2HZ+wAceUNLkvy6zKCPVRkU++ZWQrdxsUeQXmcg4uoQ==",
-      "license": "BSD-3-Clause"
-    },
-    "node_modules/@protobufjs/base64": {
-      "version": "1.1.2",
-      "resolved": "https://registry.npmjs.org/@protobufjs/base64/-/base64-1.1.2.tgz",
-      "integrity": "sha512-AZkcAA5vnN/v4PDqKyMR5lx7hZttPDgClv83E//FMNhR2TMcLUhfRUBHCmSl0oi9zMgDDqRUJkSxO3wm85+XLg==",
-      "license": "BSD-3-Clause"
-    },
-    "node_modules/@protobufjs/codegen": {
-      "version": "2.0.5",
-      "resolved": "https://registry.npmjs.org/@protobufjs/codegen/-/codegen-2.0.5.tgz",
-      "integrity": "sha512-zgXFLzW3Ap33e6d0Wlj4MGIm6Ce8O89n/apUaGNB/jx+hw+ruWEp7EwGUshdLKVRCxZW12fp9r40E1mQrf/34g==",
-      "license": "BSD-3-Clause"
-    },
-    "node_modules/@protobufjs/eventemitter": {
-      "version": "1.1.1",
-      "resolved": "https://registry.npmjs.org/@protobufjs/eventemitter/-/eventemitter-1.1.1.tgz",
-      "integrity": "sha512-vW1GmwMZNnL+gMRaovlh9yZX74kc+TTU3FObkkurpMaRtBfLP3ldjS9KQWlwZgraRE0+dheEEoAxdzcJQ8eXZg==",
-      "license": "BSD-3-Clause"
-    },
-    "node_modules/@protobufjs/fetch": {
-      "version": "1.1.1",
-      "resolved": "https://registry.npmjs.org/@protobufjs/fetch/-/fetch-1.1.1.tgz",
-      "integrity": "sha512-GpptLrs57adMSuHi3VNj0mAF8dwh36LMaYF6XyJ6JMWlVsc+t42tm1HSEDmOs3A8fC9yyeisgLhsTVQokOZ0zw==",
-      "license": "BSD-3-Clause",
-      "dependencies": {
-        "@protobufjs/aspromise": "^1.1.1"
-      }
-    },
-    "node_modules/@protobufjs/float": {
-      "version": "1.0.2",
-      "resolved": "https://registry.npmjs.org/@protobufjs/float/-/float-1.0.2.tgz",
-      "integrity": "sha512-Ddb+kVXlXst9d+R9PfTIxh1EdNkgoRe5tOX6t01f1lYWOvJnSPDBlG241QLzcyPdoNTsblLUdujGSE4RzrTZGQ==",
-      "license": "BSD-3-Clause"
-    },
-    "node_modules/@protobufjs/path": {
-      "version": "1.1.2",
-      "resolved": "https://registry.npmjs.org/@protobufjs/path/-/path-1.1.2.tgz",
-      "integrity": "sha512-6JOcJ5Tm08dOHAbdR3GrvP+yUUfkjG5ePsHYczMFLq3ZmMkAD98cDgcT2iA1lJ9NVwFd4tH/iSSoe44YWkltEA==",
-      "license": "BSD-3-Clause"
-    },
-    "node_modules/@protobufjs/pool": {
-      "version": "1.1.0",
-      "resolved": "https://registry.npmjs.org/@protobufjs/pool/-/pool-1.1.0.tgz",
-      "integrity": "sha512-0kELaGSIDBKvcgS4zkjz1PeddatrjYcmMWOlAuAPwAeccUrPHdUqo/J6LiymHHEiJT5NrF1UVwxY14f+fy4WQw==",
-      "license": "BSD-3-Clause"
-    },
-    "node_modules/@protobufjs/utf8": {
-      "version": "1.1.2",
-      "resolved": "https://registry.npmjs.org/@protobufjs/utf8/-/utf8-1.1.2.tgz",
-      "integrity": "sha512-b1UQwcEZ4yCnMCD8DAL1VlbvBJE9/IX4FTIp7BG1xYpf29SLazLSrqUkj4w7Y5y7cCVP6E5tcqqcI0xemPkHug==",
-      "license": "BSD-3-Clause"
-    },
    "node_modules/@supabase/auth-js": {
      "version": "2.100.0",
      "resolved": "https://registry.npmjs.org/@supabase/auth-js/-/auth-js-2.100.0.tgz",
@@ -195,12 +113,6 @@
        "undici-types": "~7.18.0"
      }
    },
-    "node_modules/@types/retry": {
-      "version": "0.12.0",
-      "resolved": "https://registry.npmjs.org/@types/retry/-/retry-0.12.0.tgz",
-      "integrity": "sha512-wWKOClTTiizcZhXnPY4wikVAwmdYHp8q6DmC+EJUzAMsycb7HB32Kh9RN4+0gExjmPmZSAQjgURXIGATPegAvA==",
-      "license": "MIT"
-    },
    "node_modules/@types/ws": {
      "version": "8.18.1",
      "resolved": "https://registry.npmjs.org/@types/ws/-/ws-8.18.1.tgz",
@@ -210,193 +122,6 @@
        "@types/node": "*"
      }
    },
-    "node_modules/agent-base": {
-      "version": "7.1.4",
-      "resolved": "https://registry.npmjs.org/agent-base/-/agent-base-7.1.4.tgz",
-      "integrity": "sha512-MnA+YT8fwfJPgBx3m60MNqakm30XOkyIoH1y6huTQvC0PwZG7ki8NacLBcrPbNoo8vEZy7Jpuk7+jMO+CUovTQ==",
-      "license": "MIT",
-      "engines": {
-        "node": ">= 14"
-      }
-    },
-    "node_modules/base64-js": {
-      "version": "1.5.1",
-      "resolved": "https://registry.npmjs.org/base64-js/-/base64-js-1.5.1.tgz",
-      "integrity": "sha512-AKpaYlHn8t4SVbOHCy+b5+KKgvR4vrsD8vbvrbiQJps7fKDTkjkDry6ji0rUJjC0kzbNePLwzxq8iypo41qeWA==",
-      "funding": [
-        {
-          "type": "github",
-          "url": "https://github.com/sponsors/feross"
-        },
-        {
-          "type": "patreon",
-          "url": "https://www.patreon.com/feross"
-        },
-        {
-          "type": "consulting",
-          "url": "https://feross.org/support"
-        }
-      ],
-      "license": "MIT"
-    },
-    "node_modules/bignumber.js": {
-      "version": "9.3.1",
-      "resolved": "https://registry.npmjs.org/bignumber.js/-/bignumber.js-9.3.1.tgz",
-      "integrity": "sha512-Ko0uX15oIUS7wJ3Rb30Fs6SkVbLmPBAKdlm7q9+ak9bbIeFf0MwuBsQV6z7+X768/cHsfg+WlysDWJcmthjsjQ==",
-      "license": "MIT",
-      "engines": {
-        "node": "*"
-      }
-    },
-    "node_modules/buffer-equal-constant-time": {
-      "version": "1.0.1",
-      "resolved": "https://registry.npmjs.org/buffer-equal-constant-time/-/buffer-equal-constant-time-1.0.1.tgz",
-      "integrity": "sha512-zRpUiDwd/xk6ADqPMATG8vc9VPrkck7T07OIx0gnjmJAnHnTVXNQG3vfvWNuiZIkwu9KrKdA1iJKfsfTVxE6NA==",
-      "license": "BSD-3-Clause"
-    },
-    "node_modules/data-uri-to-buffer": {
-      "version": "4.0.1",
-      "resolved": "https://registry.npmjs.org/data-uri-to-buffer/-/data-uri-to-buffer-4.0.1.tgz",
-      "integrity": "sha512-0R9ikRb668HB7QDxT1vkpuUBtqc53YyAwMwGeUFKRojY/NWKvdZ+9UYtRfGmhqNbRkTSVpMbmyhXipFFv2cb/A==",
-      "license": "MIT",
-      "engines": {
-        "node": ">= 12"
-      }
-    },
-    "node_modules/debug": {
-      "version": "4.4.3",
-      "resolved": "https://registry.npmjs.org/debug/-/debug-4.4.3.tgz",
-      "integrity": "sha512-RGwwWnwQvkVfavKVt22FGLw+xYSdzARwm0ru6DhTVA3umU5hZc28V3kO4stgYryrTlLpuvgI9GiijltAjNbcqA==",
-      "license": "MIT",
-      "dependencies": {
-        "ms": "^2.1.3"
-      },
-      "engines": {
-        "node": ">=6.0"
-      },
-      "peerDependenciesMeta": {
-        "supports-color": {
-          "optional": true
-        }
-      }
-    },
-    "node_modules/ecdsa-sig-formatter": {
-      "version": "1.0.11",
-      "resolved": "https://registry.npmjs.org/ecdsa-sig-formatter/-/ecdsa-sig-formatter-1.0.11.tgz",
-      "integrity": "sha512-nagl3RYrbNv6kQkeJIpt6NJZy8twLB/2vtz6yN9Z4vRKHN4/QZJIEbqohALSgwKdnksuY3k5Addp5lg8sVoVcQ==",
-      "license": "Apache-2.0",
-      "dependencies": {
-        "safe-buffer": "^5.0.1"
-      }
-    },
-    "node_modules/extend": {
-      "version": "3.0.2",
-      "resolved": "https://registry.npmjs.org/extend/-/extend-3.0.2.tgz",
-      "integrity": "sha512-fjquC59cD7CyW6urNXK0FBufkZcoiGG80wTuPujX590cB5Ttln20E2UB4S/WARVqhXffZl2LNgS+gQdPIIim/g==",
-      "license": "MIT"
-    },
-    "node_modules/fetch-blob": {
-      "version": "3.2.0",
-      "resolved": "https://registry.npmjs.org/fetch-blob/-/fetch-blob-3.2.0.tgz",
-      "integrity": "sha512-7yAQpD2UMJzLi1Dqv7qFYnPbaPx7ZfFK6PiIxQ4PfkGPyNyl2Ugx+a/umUonmKqjhM4DnfbMvdX6otXq83soQQ==",
-      "funding": [
-        {
-          "type": "github",
-          "url": "https://github.com/sponsors/jimmywarting"
-        },
-        {
-          "type": "paypal",
-          "url": "https://paypal.me/jimmywarting"
-        }
-      ],
-      "license": "MIT",
-      "dependencies": {
-        "node-domexception": "^1.0.0",
-        "web-streams-polyfill": "^3.0.3"
-      },
-      "engines": {
-        "node": "^12.20 || >= 14.13"
-      }
-    },
-    "node_modules/formdata-polyfill": {
-      "version": "4.0.10",
-      "resolved": "https://registry.npmjs.org/formdata-polyfill/-/formdata-polyfill-4.0.10.tgz",
-      "integrity": "sha512-buewHzMvYL29jdeQTVILecSaZKnt/RJWjoZCF5OW60Z67/GmSLBkOFM7qh1PI3zFNtJbaZL5eQu1vLfazOwj4g==",
-      "license": "MIT",
-      "dependencies": {
-        "fetch-blob": "^3.1.2"
-      },
-      "engines": {
-        "node": ">=12.20.0"
-      }
-    },
-    "node_modules/gaxios": {
-      "version": "7.2.0",
-      "resolved": "https://registry.npmjs.org/gaxios/-/gaxios-7.2.0.tgz",
-      "integrity": "sha512-CUVb4wcYe+771XevyH6HtGmXFAGGKkIC3kswAP8Z1JCe0j80JMaTPZH930DWFrvo0atjh18Arc0pEyUCWa5bfg==",
-      "license": "Apache-2.0",
-      "dependencies": {
-        "extend": "^3.0.2",
-        "https-proxy-agent": "^7.0.1",
-        "node-fetch": "^3.3.2"
-      },
-      "engines": {
-        "node": ">=18"
-      }
-    },
-    "node_modules/gcp-metadata": {
-      "version": "8.1.2",
-      "resolved": "https://registry.npmjs.org/gcp-metadata/-/gcp-metadata-8.1.2.tgz",
-      "integrity": "sha512-zV/5HKTfCeKWnxG0Dmrw51hEWFGfcF2xiXqcA3+J90WDuP0SvoiSO5ORvcBsifmx/FoIjgQN3oNOGaQ5PhLFkg==",
-      "license": "Apache-2.0",
-      "dependencies": {
-        "gaxios": "^7.0.0",
-        "google-logging-utils": "^1.0.0",
-        "json-bigint": "^1.0.0"
-      },
-      "engines": {
-        "node": ">=18"
-      }
-    },
-    "node_modules/google-auth-library": {
-      "version": "10.9.0",
-      "resolved": "https://registry.npmjs.org/google-auth-library/-/google-auth-library-10.9.0.tgz",
-      "integrity": "sha512-xtvUqvINPhTaBm7nXqlYPcrMHJPm1lCNdSovxnKKhTm+4JsvQ+KGVYJViLoH9Yxu8w+T0Qv5HubzYT9BLrppJg==",
-      "license": "Apache-2.0",
-      "dependencies": {
-        "base64-js": "^1.3.0",
-        "ecdsa-sig-formatter": "^1.0.11",
-        "gaxios": "^7.1.4",
-        "gcp-metadata": "8.1.2",
-        "google-logging-utils": "1.1.3",
-        "jws": "^4.0.0"
-      },
-      "engines": {
-        "node": ">=18"
-      }
-    },
-    "node_modules/google-logging-utils": {
-      "version": "1.1.3",
-      "resolved": "https://registry.npmjs.org/google-logging-utils/-/google-logging-utils-1.1.3.tgz",
-      "integrity": "sha512-eAmLkjDjAFCVXg7A1unxHsLf961m6y17QFqXqAXGj/gVkKFrEICfStRfwUlGNfeCEjNRa32JEWOUTlYXPyyKvA==",
-      "license": "Apache-2.0",
-      "engines": {
-        "node": ">=14"
-      }
-    },
-    "node_modules/https-proxy-agent": {
-      "version": "7.0.6",
-      "resolved": "https://registry.npmjs.org/https-proxy-agent/-/https-proxy-agent-7.0.6.tgz",
-      "integrity": "sha512-vK9P5/iUfdl95AI+JVyUuIcVtd4ofvtrOr3HNtM2yxC9bnMbEdp3x01OhQNnjb8IJYi38VlTE3mBXwcfvywuSw==",
-      "license": "MIT",
-      "dependencies": {
-        "agent-base": "^7.1.2",
-        "debug": "4"
-      },
-      "engines": {
-        "node": ">= 14"
-      }
-    },
    "node_modules/iceberg-js": {
      "version": "0.8.1",
      "resolved": "https://registry.npmjs.org/iceberg-js/-/iceberg-js-0.8.1.tgz",
@@ -406,42 +131,6 @@
        "node": ">=20.0.0"
      }
    },
-    "node_modules/json-bigint": {
-      "version": "1.0.0",
-      "resolved": "https://registry.npmjs.org/json-bigint/-/json-bigint-1.0.0.tgz",
-      "integrity": "sha512-SiPv/8VpZuWbvLSMtTDU8hEfrZWg/mH/nV/b4o0CYbSxu1UIQPLdwKOCIyLQX+VIPO5vrLX3i8qtqFyhdPSUSQ==",
-      "license": "MIT",
-      "dependencies": {
-        "bignumber.js": "^9.0.0"
-      }
-    },
-    "node_modules/jwa": {
-      "version": "2.0.1",
-      "resolved": "https://registry.npmjs.org/jwa/-/jwa-2.0.1.tgz",
-      "integrity": "sha512-hRF04fqJIP8Abbkq5NKGN0Bbr3JxlQ+qhZufXVr0DvujKy93ZCbXZMHDL4EOtodSbCWxOqR8MS1tXA5hwqCXDg==",
-      "license": "MIT",
-      "dependencies": {
-        "buffer-equal-constant-time": "^1.0.1",
-        "ecdsa-sig-formatter": "1.0.11",
-        "safe-buffer": "^5.0.1"
-      }
-    },
-    "node_modules/jws": {
-      "version": "4.0.1",
-      "resolved": "https://registry.npmjs.org/jws/-/jws-4.0.1.tgz",
-      "integrity": "sha512-EKI/M/yqPncGUUh44xz0PxSidXFr/+r0pA70+gIYhjv+et7yxM+s29Y+VGDkovRofQem0fs7Uvf4+YmAdyRduA==",
-      "license": "MIT",
-      "dependencies": {
-        "jwa": "^2.0.1",
-        "safe-buffer": "^5.0.1"
-      }
-    },
-    "node_modules/long": {
-      "version": "5.3.2",
-      "resolved": "https://registry.npmjs.org/long/-/long-5.3.2.tgz",
-      "integrity": "sha512-mNAgZ1GmyNhD7AuqnTG3/VQ26o760+ZYBPKjPvugO8+nLbYfX6TVpJPseBvopbdY+qpZ/lKUnmEc1LeZYS3QAA==",
-      "license": "Apache-2.0"
-    },
    "node_modules/meriyah": {
      "version": "6.1.4",
      "resolved": "https://registry.npmjs.org/meriyah/-/meriyah-6.1.4.tgz",
@@ -451,115 +140,6 @@
        "node": ">=18.0.0"
      }
    },
-    "node_modules/ms": {
-      "version": "2.1.3",
-      "resolved": "https://registry.npmjs.org/ms/-/ms-2.1.3.tgz",
-      "integrity": "sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==",
-      "license": "MIT"
-    },
-    "node_modules/node-domexception": {
-      "version": "1.0.0",
-      "resolved": "https://registry.npmjs.org/node-domexception/-/node-domexception-1.0.0.tgz",
-      "integrity": "sha512-/jKZoMpw0F8GRwl4/eLROPA3cfcXtLApP0QzLmUT/HuPCZWyB7IY9ZrMeKw2O/nFIqPQB3PVM9aYm0F312AXDQ==",
-      "deprecated": "Use your platform's native DOMException instead",
-      "funding": [
-        {
-          "type": "github",
-          "url": "https://github.com/sponsors/jimmywarting"
-        },
-        {
-          "type": "github",
-          "url": "https://paypal.me/jimmywarting"
-        }
-      ],
-      "license": "MIT",
-      "engines": {
-        "node": ">=10.5.0"
-      }
-    },
-    "node_modules/node-fetch": {
-      "version": "3.3.2",
-      "resolved": "https://registry.npmjs.org/node-fetch/-/node-fetch-3.3.2.tgz",
-      "integrity": "sha512-dRB78srN/l6gqWulah9SrxeYnxeddIG30+GOqK/9OlLVyLg3HPnr6SqOWTWOXKRwC2eGYCkZ59NNuSgvSrpgOA==",
-      "license": "MIT",
-      "dependencies": {
-        "data-uri-to-buffer": "^4.0.0",
-        "fetch-blob": "^3.1.4",
-        "formdata-polyfill": "^4.0.10"
-      },
-      "engines": {
-        "node": "^12.20.0 || ^14.13.1 || >=16.0.0"
-      },
-      "funding": {
-        "type": "opencollective",
-        "url": "https://opencollective.com/node-fetch"
-      }
-    },
-    "node_modules/p-retry": {
-      "version": "4.6.2",
-      "resolved": "https://registry.npmjs.org/p-retry/-/p-retry-4.6.2.tgz",
-      "integrity": "sha512-312Id396EbJdvRONlngUx0NydfrIQ5lsYu0znKVUzVvArzEIt08V1qhtyESbGVd1FGX7UKtiFp5uwKZdM8wIuQ==",
-      "license": "MIT",
-      "dependencies": {
-        "@types/retry": "0.12.0",
-        "retry": "^0.13.1"
-      },
-      "engines": {
-        "node": ">=8"
-      }
-    },
-    "node_modules/protobufjs": {
-      "version": "7.6.5",
-      "resolved": "https://registry.npmjs.org/protobufjs/-/protobufjs-7.6.5.tgz",
-      "integrity": "sha512-/FPD0nUc9jH6rfFjji9IBqOz4pcSE3CsT1m7Ep6Mdb0LxSUMj8hgl6GomOvZzpNpAqqGaXA0P3VSrZLFzIhQrw==",
-      "hasInstallScript": true,
-      "license": "BSD-3-Clause",
-      "dependencies": {
-        "@protobufjs/aspromise": "^1.1.2",
-        "@protobufjs/base64": "^1.1.2",
-        "@protobufjs/codegen": "^2.0.5",
-        "@protobufjs/eventemitter": "^1.1.1",
-        "@protobufjs/fetch": "^1.1.1",
-        "@protobufjs/float": "^1.0.2",
-        "@protobufjs/path": "^1.1.2",
-        "@protobufjs/pool": "^1.1.0",
-        "@protobufjs/utf8": "^1.1.1",
-        "@types/node": ">=13.7.0",
-        "long": "^5.3.2"
-      },
-      "engines": {
-        "node": ">=12.0.0"
-      }
-    },
-    "node_modules/retry": {
-      "version": "0.13.1",
-      "resolved": "https://registry.npmjs.org/retry/-/retry-0.13.1.tgz",
-      "integrity": "sha512-XQBQ3I8W1Cge0Seh+6gjj03LbmRFWuoszgK9ooCpwYIrhhoO80pfq4cUkU5DkknwfOfFteRwlZ56PYOGYyFWdg==",
-      "license": "MIT",
-      "engines": {
-        "node": ">= 4"
-      }
-    },
-    "node_modules/safe-buffer": {
-      "version": "5.2.1",
-      "resolved": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.2.1.tgz",
-      "integrity": "sha512-rp3So07KcdmmKbGvgaNxQSJr7bGVSVk5S9Eq1F+ppbRo70+YeaDxkw5Dd8NPN+GD6bjnYm2VuPuCXmpuYvmCXQ==",
-      "funding": [
-        {
-          "type": "github",
-          "url": "https://github.com/sponsors/feross"
-        },
-        {
-          "type": "patreon",
-          "url": "https://www.patreon.com/feross"
-        },
-        {
-          "type": "consulting",
-          "url": "https://feross.org/support"
-        }
-      ],
-      "license": "MIT"
-    },
    "node_modules/tslib": {
      "version": "2.8.1",
      "resolved": "https://registry.npmjs.org/tslib/-/tslib-2.8.1.tgz",
@@ -572,15 +152,6 @@
      "integrity": "sha512-AsuCzffGHJybSaRrmr5eHr81mwJU3kjw6M+uprWvCXiNeN9SOGwQ3Jn8jb8m3Z6izVgknn1R0FTCEAP2QrLY/w==",
      "license": "MIT"
    },
-    "node_modules/web-streams-polyfill": {
-      "version": "3.3.3",
-      "resolved": "https://registry.npmjs.org/web-streams-polyfill/-/web-streams-polyfill-3.3.3.tgz",
-      "integrity": "sha512-d2JWLCivmZYTSIoge9MsgFCZrt571BikcWGYkjC1khllbTeDlGqZ2D8vD8E/lJa8WGWbb7Plm8/XJYV7IJHZZw==",
-      "license": "MIT",
-      "engines": {
-        "node": ">= 8"
-      }
-    },
    "node_modules/ws": {
      "version": "8.20.0",
      "resolved": "https://registry.npmjs.org/ws/-/ws-8.20.0.tgz",
Author	SHA1	Message	Date
Millian Lamiaux	9cf7ea1f15	fix(ci): remove sudo from docker install — Gitea ubuntu runner is root without sudo Some checks failed Admin Web Docker / Docker Build Validation (pull_request) Successful in 1m2s Details Admin Web Docker / Semantic Release (pull_request) Has been skipped Details CI / Detect Changes (pull_request) Successful in 4s Details Admin Web Docker / Build & Push Docker Image (pull_request) Has been skipped Details CI / Admin Web CI (pull_request) Failing after 38s Details CI / YouTube Worker (pull_request) Has been skipped Details CI / Deploy (pull_request) Has been skipped Details PR → Build → WiFi/USB Deploy → LGTM / Build & Deploy to iPhone (WiFi/USB) (pull_request) Failing after 3m8s Details PR → Build → WiFi/USB Deploy → LGTM / Wait for LGTM comment (pull_request) Has been skipped Details	2026-07-13 14:15:32 +02:00
Millian Lamiaux	3dd044029e	ci: trigger workflow on PR with build-only validation Some checks failed CI / Deploy (pull_request) Has been skipped Details PR → Build → WiFi/USB Deploy → LGTM / Build & Deploy to iPhone (WiFi/USB) (pull_request) Failing after 2m37s Details PR → Build → WiFi/USB Deploy → LGTM / Wait for LGTM comment (pull_request) Has been skipped Details Admin Web Docker / Docker Build Validation (pull_request) Failing after 28s Details Admin Web Docker / Semantic Release (pull_request) Has been skipped Details CI / Detect Changes (pull_request) Successful in 4s Details Admin Web Docker / Build & Push Docker Image (pull_request) Has been skipped Details CI / Admin Web CI (pull_request) Failing after 38s Details CI / YouTube Worker (pull_request) Has been skipped Details	2026-07-12 22:50:35 +02:00
Millian Lamiaux	cb86bf55b3	feat: add admin-web Docker build & push workflow with semantic-release Some checks failed CI / Detect Changes (pull_request) Successful in 4s Details CI / Admin Web CI (pull_request) Failing after 39s Details CI / YouTube Worker (pull_request) Has been skipped Details CI / Deploy (pull_request) Has been skipped Details PR → Build → WiFi/USB Deploy → LGTM / Build & Deploy to iPhone (WiFi/USB) (pull_request) Failing after 2m15s Details PR → Build → WiFi/USB Deploy → LGTM / Wait for LGTM comment (pull_request) Has been skipped Details	2026-07-12 19:11:15 +02:00