feat: release 1.0.0

Core improvements across:
  - Admin panel (exercises, modules, users, settings pages + APIs)
  - Auth system (login, register, OAuth, passkey, session, rate-limit, TOTP)
  - PII encryption (crypto, email hashing, encrypt-on-write, decrypt-on-read)
  - Route protection (middleware, API auth checks, useRequireAuth hook)
  - Per-user preferences (theme + language synced to DB)
  - Navbar (dynamic settings fetch), LabLayout, ProgressTracker
  - i18n locales (95+ new keys each in es/en)
  - DB schema (new columns: preferences, disabled, email_hash, difficulty, showDifficulty)

Author: ialejandro

.env.example

@@ -61,3 +61,27 @@ SESSION_SECRET=your-secret-key-at-least-32-characters-long
 # -----------------------------------------------------------------------------
 # ADMIN_EMAIL=admin@devopslab.local
 # ADMIN_PASSWORD=admin1234
+
+# -----------------------------------------------------------------------------
+# Registration
+# -----------------------------------------------------------------------------
+# Set to "false" to disable new user sign-ups. Existing users can still log in.
+# NEXT_PUBLIC_REGISTRATION_ENABLED=true
+
+# -----------------------------------------------------------------------------
+# Demo Mode
+# -----------------------------------------------------------------------------
+# When set to "true", hides auth UI (login/register/profile/logout) in Navbar
+# and shows a "Demo" badge. Admin panel still requires login.
+NEXT_PUBLIC_DEMO_MODE=false
+
+# -----------------------------------------------------------------------------
+# SMTP (Email verification and password reset)
+# -----------------------------------------------------------------------------
+# Only enabled when SMTP_HOST is configured
+# SMTP_HOST=
+# SMTP_PORT=587
+# SMTP_USER=
+# SMTP_PASS=
+# SMTP_FROM=noreply@devopslab.local
+# SMTP_SECURE=false

.github/dependabot.yml

@@ -0,0 +1,38 @@
+version: 2
+updates:
+  - package-ecosystem: github-actions
+    directory: "/"
+    schedule:
+      interval: monthly
+    open-pull-requests-limit: 10
+    labels:
+      - enhancement
+      - dependency-management
+    groups:
+      github-actions:
+        patterns:
+          - "*"
+  - package-ecosystem: pip
+    directory: "/"
+    schedule:
+      interval: monthly
+    open-pull-requests-limit: 10
+    labels:
+      - enhancement
+      - dependency-management
+    groups:
+      pip:
+        patterns:
+          - "*"
+  - package-ecosystem: docker
+    directory: "/"
+    schedule:
+      interval: monthly
+    open-pull-requests-limit: 10
+    labels:
+      - enhancement
+      - dependency-management
+    groups:
+      docker:
+        patterns:
+          - "*"

.github/workflows/ci.yml

@@ -0,0 +1,32 @@
+name: CI
+
+on:
+  pull_request:
+    branches: [main]
+
+jobs:
+  check:
+    name: Lint & Build
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+
+      - name: Setup Node.js
+        uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
+        with:
+          node-version: 22
+          cache: npm
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Lint
+        run: npm run lint
+
+      - name: Build
+        run: |
+          mkdir -p data
+          npm run db:seed
+          npm run exercises:import
+          npm run build

.github/workflows/release.yml

@@ -0,0 +1,47 @@
+name: Release
+
+on:
+  push:
+    branches: [main]
+
+permissions:
+  contents: write
+  issues: write
+  pull-requests: write
+
+jobs:
+  release:
+    name: Semantic Release
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        with:
+          fetch-depth: 0
+          persist-credentials: false
+
+      - name: Setup Node.js
+        uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
+        with:
+          node-version: 22
+          cache: npm
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Build
+        run: |
+          mkdir -p data
+          npm run db:seed
+          npm run exercises:import
+          npm run build
+
+      - name: Configure Git
+        run: |
+          git config user.name "$GITHUB_ACTOR"
+          git config user.email "$GITHUB_ACTOR@users.noreply.github.com"
+
+      - name: Release
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: npx semantic-release

CONTRIBUTING.md

@@ -1,4 +1,114 @@
-# Contributing: Adding New Exercises
+# Contributing
+
+## Development Setup
+
+### Prerequisites
+
+- Node.js 22 or higher
+- npm (included with Node.js)
+- Git
+
+### Getting Started
+
+1. Clone the repository:
+   ```bash
+   git clone https://github.com/devops-ia/self-learning-platform.git
+   cd self-learning-platform
+   ```
+
+2. Install dependencies:
+   ```bash
+   npm install
+   ```
+
+3. Create and seed the database:
+   ```bash
+   npm run db:seed
+   ```
+
+4. Import exercise definitions:
+   ```bash
+   npm run exercises:import
+   ```
+
+5. Start the development server:
+   ```bash
+   npm run dev
+   ```
+
+The application will be available at http://localhost:3000
+
+## Available Commands
+
+### npm Scripts
+
+- `npm run dev` - Start development server on localhost:3000
+- `npm run build` - Production build
+- `npm run lint` - Run ESLint
+- `npm run db:seed` - Create or reset SQLite database tables
+- `npm run exercises:import` - Import YAML exercises into database
+
+### Makefile Targets
+
+For convenience, the project includes a Makefile with common tasks:
+
+- `make install` - Install npm dependencies
+- `make dev` - Start development server
+- `make build` - Full production build (seed + import + build)
+- `make lint` - Run ESLint
+- `make seed` - Create or reset database tables
+- `make import` - Import YAML exercises into database
+- `make test` - Run tests
+
+See `make help` for the complete list of available commands.
+
+## Coding Standards
+
+- **TypeScript**: All code must use TypeScript in strict mode
+- **Styling**: Use Tailwind CSS 4 for all styles. Do not use custom CSS unless absolutely necessary
+- **Database**: Use Drizzle ORM for all database operations
+- **Validation**: Use Zod schemas for input validation
+- **Internationalization**: Use the `useT()` hook for all UI strings. Add translations to `src/lib/i18n/locales/`
+- **Code formatting**: No emojis in code, comments, or commit messages
+- **File organization**: Follow the existing directory structure. Prefer editing existing files over creating new ones
+
+## Pull Request Workflow
+
+1. Create a new branch from `main`:
+   ```bash
+   git checkout -b feat/your-feature-name
+   ```
+
+2. Make your changes following the coding standards
+
+3. Verify your changes:
+   ```bash
+   npm run lint
+   npm run build
+   ```
+
+4. Commit your changes using conventional commits:
+   - `feat:` for new features
+   - `fix:` for bug fixes
+   - `docs:` for documentation changes
+   - `refactor:` for code refactoring
+   - `test:` for test additions or changes
+   - `chore:` for maintenance tasks
+
+   Example:
+   ```bash
+   git add .
+   git commit -m "feat: add Ansible module support"
+   ```
+
+5. Push your branch and open a pull request:
+   ```bash
+   git push origin feat/your-feature-name
+   ```
+
+6. CI will run automatically to verify linting and build. Address any issues before requesting review.
+
+## Adding New Exercises
 
 Exercises are stored in the database and loaded at runtime. There are two ways to add them: **YAML import** (recommended) or **admin panel**.
 

Dockerfile

@@ -29,6 +29,9 @@ COPY drizzle.config.ts ./
 # Build application
 RUN npm run build
 
+# Compile seed script to CJS for Docker runtime (no tsx needed)
+RUN npx esbuild src/lib/db/seed.ts --bundle --platform=node --outfile=scripts/docker-seed.cjs --external:better-sqlite3 --external:argon2 --format=cjs
+
 # =======================
 # Stage 2: Database Init
 # =======================
@@ -92,4 +95,4 @@ USER nextjs
 
 # Start the Next.js application
 # Use wrapper script to ensure binding to HOST:PORT
-CMD ["sh", "-c", "node ./scripts/seed.js 2>/dev/null || true && node ./scripts/start-server.js"]
+CMD ["sh", "-c", "node ./scripts/docker-seed.cjs 2>/dev/null || true && node ./scripts/start-server.js"]