feat: Backend esm vitest

[deepshekhardas]

Port of upstream ether#7605

Converts backend tests from mocha to vitest and migrates to ESM.

---

Summary by cubic

Moves the backend test suite to ESM and replaces Mocha with vitest, then updates CI to run on Node ≥24 with pnpm. Also adds first‑class packaging (Debian/Snap), refreshes the admin UI, and ships several editor and privacy improvements.

• New Features

  • Admin: update notifier (banner + /update page), revamped settings form and authors tools, i18n/a11y fixes.
  • Editor: DOCX export via LibreOffice (Abiword removed), line duplicate/delete shortcuts, better Page Up/Down and undo scrolling, timeslider line numbers, theme‑color and Open Graph/Twitter metadata, optional showMenuRight param.
  • Privacy/GDPR: pad deletion tokens (with recovery flow), tri‑state IP logging and a new Privacy document.

• CI & Packaging

  • Backend tests now run on vitest under ESM; GitHub Actions upgraded (Node 24, pnpm caching, consolidated workflows).
  • New Debian .deb and Snap build/publish pipelines; Docker and release workflows hardened; APT repo publishing added.
  • Frontend CI discovers plugin tests and adds with‑plugins Playwright runs; legacy Travis/LGTM configs removed.
  • Tooling tweaks: .npmrc uses hardlink installs; stricter dependency policy relaxed to avoid CI breaks; dependency and action versions bumped.

^{Written for commit ef58b53. Summary will update on new commits. Review in cubic}

[cubic-dev-ai]

5 issues found across 733 files

Prompt for AI agents (unresolved issues)

Check if these issues are valid — if so, understand the root cause of each and fix them. If appropriate, use sub-agents to investigate and fix each issue separately.


<file name=".github/workflows/release.yml">

<violation number="1" location=".github/workflows/release.yml:75">
P2: `dangerously-allow-all-builds=true` disables pnpm’s dependency build-script guard for all packages; restrict allowed builds to the packages that actually need it (e.g., `sharp`).</violation>
</file>

<file name="admin/src/components/ColorSwatch.tsx">

<violation number="1" location="admin/src/components/ColorSwatch.tsx:13">
P2: Duplicate color `#ffa8a8` appears at two positions in the PALETTE (indices 8 and 55). For an author-color palette, duplicates reduce distinct color count — two authors with different index values would receive the same swatch color.</violation>
</file>

<file name="admin/scripts/gen-api.mjs">

<violation number="1" location="admin/scripts/gen-api.mjs:37">
P2: Avoid calling `process.exit()` inside this `try` block; it can bypass the `finally` cleanup and leak temp directories on failures.</violation>
</file>

<file name="admin/src/components/settings/widgets/NumberInput.tsx">

<violation number="1" location="admin/src/components/settings/widgets/NumberInput.tsx:34">
P2: Blur does not resync `draft` with the current prop value, so value changes that occurred while focused can leave stale text in the input.</violation>
</file>

<file name="admin/src/components/UpdateBanner.tsx">

<violation number="1" location="admin/src/components/UpdateBanner.tsx:7">
P2: Handle non-finite countdown values in `fmtRemaining`; malformed `scheduledFor` currently renders `NaN` in the banner.</violation>
</file>

<sub>Note: This PR contains a large number of files. cubic only reviews up to 100 files per PR, so some files may not have been reviewed. cubic prioritizes the most important files to review.
On a pro plan you can use ultrareview for larger PRs.

Re-trigger cubic</sub>

[cubic-dev-ai]

P2: dangerously-allow-all-builds=true disables pnpm’s dependency build-script guard for all packages; restrict allowed builds to the packages that actually need it (e.g., sharp).

Prompt for AI agents

Check if this issue is valid — if so, understand the root cause and fix it. At .github/workflows/release.yml, line 75:

<comment>`dangerously-allow-all-builds=true` disables pnpm’s dependency build-script guard for all packages; restrict allowed builds to the packages that actually need it (e.g., `sharp`).</comment>

<file context>
@@ -48,24 +48,31 @@ jobs:
+        # install script must run to fetch the platform binary. pnpm 11
+        # turned ignored-builds into an error; allow all builds for this
+        # external repo since we don't control its pnpm-workspace.yaml.
+        run: pnpm install --frozen-lockfile --config.dangerously-allow-all-builds=true
         working-directory: ether.github.com
       - name: Set git user
</file context>

Suggested change

	run: pnpm install --frozen-lockfile --config.dangerously-allow-all-builds=true
	run: pnpm install --frozen-lockfile --allow-build=sharp

[cubic-dev-ai]

P2: Duplicate color #ffa8a8 appears at two positions in the PALETTE (indices 8 and 55). For an author-color palette, duplicates reduce distinct color count — two authors with different index values would receive the same swatch color.

Prompt for AI agents

Check if this issue is valid — if so, understand the root cause and fix it. At admin/src/components/ColorSwatch.tsx, line 13:

<comment>Duplicate color `#ffa8a8` appears at two positions in the PALETTE (indices 8 and 55). For an author-color palette, duplicates reduce distinct color count — two authors with different index values would receive the same swatch color.</comment>

<file context>
@@ -0,0 +1,37 @@
+// admin already has many other small constants inline.
+const PALETTE = [
+  '#ffc7c7', '#fff1c7', '#e3ffc7', '#c7ffd5', '#c7ffff', '#c7d5ff',
+  '#e3c7ff', '#ffc7f1', '#ffa8a8', '#ffe699', '#cfff9e', '#99ffb3',
+  '#a3ffff', '#99b3ff', '#cc99ff', '#ff99e5', '#e7b1b1', '#e9dcAf',
+  '#cde9af', '#bfedcc', '#b1e7e7', '#c3cdee', '#d2b8ea', '#eec3e6',
</file context>

[cubic-dev-ai]

P2: Avoid calling process.exit() inside this try block; it can bypass the finally cleanup and leak temp directories on failures.

Prompt for AI agents

Check if this issue is valid — if so, understand the root cause and fix it. At admin/scripts/gen-api.mjs, line 37:

<comment>Avoid calling `process.exit()` inside this `try` block; it can bypass the `finally` cleanup and leak temp directories on failures.</comment>

<file context>
@@ -0,0 +1,78 @@
+  );
+  if (dump.status !== 0) {
+    console.error(`dump-spec.ts failed with exit code ${dump.status}`);
+    process.exit(dump.status ?? 1);
+  }
+
</file context>

[cubic-dev-ai]

P2: Blur does not resync draft with the current prop value, so value changes that occurred while focused can leave stale text in the input.

Prompt for AI agents

Check if this issue is valid — if so, understand the root cause and fix it. At admin/src/components/settings/widgets/NumberInput.tsx, line 34:

<comment>Blur does not resync `draft` with the current prop value, so value changes that occurred while focused can leave stale text in the input.</comment>

<file context>
@@ -0,0 +1,48 @@
+      data-testid={`field-${path.join('.')}`}
+      value={draft}
+      onFocus={() => { focusedRef.current = true; }}
+      onBlur={() => { focusedRef.current = false; }}
+      onChange={e => {
+        const next = e.target.value;
</file context>

[cubic-dev-ai]

P2: Handle non-finite countdown values in fmtRemaining; malformed scheduledFor currently renders NaN in the banner.

Prompt for AI agents

Check if this issue is valid — if so, understand the root cause and fix it. At admin/src/components/UpdateBanner.tsx, line 7:

<comment>Handle non-finite countdown values in `fmtRemaining`; malformed `scheduledFor` currently renders `NaN` in the banner.</comment>

<file context>
@@ -0,0 +1,104 @@
+import {useStore} from '../store/store';
+
+const fmtRemaining = (ms: number): string => {
+  if (ms <= 0) return '0s';
+  const s = Math.floor(ms / 1000);
+  const m = Math.floor(s / 60);
</file context>