docs: full refresh per DOCSPLAN (auth subsystem, backends model, access classes, sudo table, state-model mechanics) + 3 stale docstrings

2026-09-05 16:34:57 +00:00
parent 78fcb01877
commit b503a6dcf0
13 changed files with 1468 additions and 543 deletions
@@ -113,6 +113,7 @@ Reload running Flask via SIGHUP (auto-reloads `webui.*` and `lib.*` modules, the
 | `webui/api/network`   | `/api/network/`     | `daemon/handlers/network`  | `lib.network`   |
 | `webui/api/logs`      | `/api/logs/`        | `daemon/handlers/logs`     | —               |
 | `webui/api/status`    | `/api/status/`      | `daemon/handlers/status`   | —               |
+| `webui/api/auth`      | `/api/auth/`        | `daemon/handlers/auth`     | `lib.auth` / `lib.auth_users` |

 ## Privileged Operations

@@ -160,7 +161,7 @@ user (full `rw` on all subsystems; default username `admin`), **not** an nginx h

 **Linter / formatter:** Ruff (`ruff check` + `ruff format`). Config in `pyproject.toml`.

-**Tests:** pytest in `tests/` (27 test files). All subprocess calls are mocked — no system services required.
+**Tests:** pytest in `tests/` (28 Python + 9 JS test files). All subprocess calls are mocked — no system services required.

 ```bash
 .venv/bin/ruff check lib/ webui/ tests/   # lint