2 Commits

Include renames

Author	SHA1	Message	Date
adminandClaude Opus 5	8adef83f23	Pixel art e2e checks run through in a full CI run (#130) ... CI has been red since 66d6aaf (tasks 221 and 223, two failures each). Both failures come from the tests added with #130, not from the editor. - Module 04 still expected 19 asset types in the + menu. Pixel art and Palette make it 21. - Module 48 died with "reading 'assets'". The password change in module 45 ends every other session of the e2e account, including the one the tools had cached, so api() got a 401. api() now drops the cached session and signs in once more on a 401. Tests: - GM_STEPS=4,45,48 (fresh seed): ALL PASSED, 102 checks. - Counter-check: without the retry module 48 dies with exactly the CI error. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>	2026-09-21 18:48:47 +02:00
adminandClaude Opus 5	8e4bb6e1f9	User management: signing in is required before anything is loaded, the sign-in screen is drawn in the same canvas (user name, password as bullets, Enter moves on and submits) and the editor is built only after it; the API gained auth/session, auth/login and auth/logout while every other route answers 401 without a session, projects carry an owner and a foreign one comes back as 404, accounts live in data/users.json with a password hash and sessions as files in data/sessions with a sliding 30 days, so a build under the open tab does not sign anybody out; Logout sits at the far right of the toolbar and, as asked in the issue, does not reload the page: Editor.dispose() takes the editor down while the canvas stays, which is why the autosave, the focus handlers, the window listeners of the tilemap panel, the shortcuts and the plugins all got a way back; the tools sign in as e2e (tools/lib/auth.mjs, password from GAME_MAKER_E2E_PASSWORD or the git-ignored data/e2e-password.txt) and the browser gets the same session by cookie, new e2e module 45 covers the screen, the wrong pair, the bullets, logout without a reload and signing in again, new unit tests for HttpAuthStore and for what a session leaves behind (#177) ... Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>	2026-09-20 12:50:52 +02:00