Update version to 0.3.3 and release documentation

VERSION: - Update from 0.1.0-test to 0.3.3 CHANGELOG.md: - Create comprehensive changelog for all releases - Document v0.3.3 features: settings management, encryption, setup wizard - List all new files, changes, fixes, and security improvements TODO.md: - Update version reference to v0.3.3 - Mark settings management features as complete - Add completed items for 2026-02-08 - Update last review date MILESTONES.md: - Update last updated date - Mark v0.3.3 as Released (2026-02-08) - Add comprehensive release notes with all features - Update version history table - Update current release to v0.3.3 with new features listed ROADMAP.md: - Update to reflect v0.3.3 current status - Add settings management features to current status - Update last updated date Other files: - app/config.py: Update default version to 0.3.3-dev - docs/BuildMetadata.md: Update default version reference - ANALYSIS_SUMMARY.md: Update current version All documentation now reflects v0.3.3 release with complete feature list. Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
2026-02-08 06:29:55 +00:00
parent 4875d405f3
commit 3046db0864
8 changed files with 248 additions and 22 deletions
@@ -2,7 +2,7 @@
 **Date:** 2026-02-06  
 **Repository:** christianlouis/DocuElevate  
-**Current Version:** v0.3.2
+**Current Version:** v0.3.3
 ## Executive Summary
@@ -0,0 +1,164 @@
 # Changelog
 All notable changes to DocuElevate will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 ## [0.3.3] - 2026-02-08
 ### Added
 - **Settings Management System**: Database-backed configuration management with web UI
  - Admin-only settings page at `/settings` with 102 settings across 10 categories
  - REST API endpoints: `GET/POST /api/settings/{key}`, `POST /api/settings/bulk-update`, `DELETE /api/settings/{key}`
  - Settings organized by category: Core, Authentication, AI Services, Storage Providers, Email, IMAP, Monitoring, Processing, Notifications, Feature Flags
  - Form pre-filled with current values, all fields optional for flexible editing
  - Bulk update support for changing multiple settings at once
 - **Encryption for Sensitive Settings**: Fernet symmetric encryption for database storage
  - Automatic encryption/decryption for passwords, API keys, tokens, and secrets
  - Encryption key derived from `SESSION_SECRET` via SHA256
  - Values prefixed with `enc:` in database to identify encrypted data
  - Graceful fallback if cryptography library unavailable (logs warning)
  - Lock icon (🔒) in UI indicates encrypted fields
 - **Setup Wizard**: First-time configuration wizard for fresh installations
  - 3-step wizard: Infrastructure → Security → AI Services
  - Auto-detects missing critical settings and redirects from homepage
  - Beautiful UI with progress indicators and step navigation
  - Auto-generate option for session secrets
  - Skippable for advanced users
  - Settings saved encrypted to database
 - **Settings Precedence System**: Clear resolution order with visual indicators
  - Precedence: Database > Environment Variables > Defaults
  - Color-coded badges in UI: 🟢 DB (green), 🔵 ENV (blue), ⚪ DEFAULT (gray)
  - Source detection for each setting shows where value originates
  - Info section explaining precedence order
 - **OAuth Admin Support**: Enhanced authentication for settings access
  - Admin flag set from OAuth group membership (`admin` or `administrators`)
  - Proper decorator pattern for admin access control
  - Session-based authorization with redirect on unauthorized access
 ### Changed
 - Updated `requirements.txt` to include `cryptography>=41.0.0` for encryption
 - Enhanced settings service to auto-encrypt/decrypt sensitive values transparently
 - Improved `/settings` route with proper admin decorator (fixes redirect loop)
 - Updated settings template with enhanced UI: source badges, encryption indicators, show/hide toggles
 - Modified `app/views/general.py` to redirect to wizard when setup required
 ### Fixed
 - Fixed `/settings` endpoint returning 301 redirect to `/` (converted to proper decorator)
 - Resolved redirect loop for logged-in non-admin users
 - Fixed OAuth users not receiving admin privileges from group membership
 ### Documentation
 - Added [docs/SettingsManagement.md](docs/SettingsManagement.md) - Comprehensive user guide
 - Added [SETTINGS_IMPLEMENTATION.md](SETTINGS_IMPLEMENTATION.md) - Technical documentation
 - Added [FRAMEWORK_ANALYSIS.md](FRAMEWORK_ANALYSIS.md) - Research on existing frameworks
 - Added [IMPLEMENTATION_CHECKLIST.md](IMPLEMENTATION_CHECKLIST.md) - Feature tracking
 - Updated TODO.md with completed features
 - Updated MILESTONES.md with v0.3.3 release details
 ### Technical Details
 - New files:
  - `app/utils/encryption.py` - Fernet encryption utilities
  - `app/utils/setup_wizard.py` - Wizard detection and logic
  - `app/views/wizard.py` - Wizard routes (GET/POST /setup)
  - `frontend/templates/setup_wizard.html` - Wizard UI
  - `frontend/templates/settings.html` - Enhanced settings page
 - Modified files:
  - `app/utils/settings_service.py` - Encryption integration, 102 setting metadata
  - `app/views/settings.py` - Fixed decorator, source detection
  - `app/auth.py` - OAuth admin support
  - `app/api/settings.py` - Enhanced admin checks
  - `tests/test_settings.py` - Comprehensive test coverage
 ### Security
 - Sensitive settings encrypted at rest in database using Fernet (AES-128-CBC + HMAC)
 - Encryption key derived from `SESSION_SECRET` (minimum 32 characters required)
 - Admin-only access enforced on all settings operations
 - Visual masking of sensitive values in UI by default
 - CodeQL security scan: 0 alerts
 ## [0.3.2] - 2026-02-06
 ### Added
 - Comprehensive test infrastructure with pytest
 - Security scanning workflows (CodeQL, Bandit)
 - SECURITY_AUDIT.md documentation
 - ROADMAP.md and MILESTONES.md planning documents
 - Pre-commit hooks configuration
 ### Changed
 - Updated authlib to 1.6.5+ (security fix)
 - Updated starlette to 0.49.1+ (DoS vulnerability fix)
 - Improved SESSION_SECRET validation and handling
 - Enhanced .gitignore for security
 ### Fixed
 - Critical security vulnerabilities in dependencies
 - Session security issues
 ## [0.3.1] - 2026-01-15
 ### Added
 - OAuth2 authentication with Authentik support
 - Basic admin authentication
 - Session management
 ### Changed
 - Improved authentication flow
 - Enhanced error handling
 ## [0.3.0] - 2026-01-01
 ### Added
 - Multi-provider storage support (Dropbox, Google Drive, OneDrive, S3, FTP, SFTP, WebDAV)
 - Document processing pipeline with OCR
 - Metadata extraction with OpenAI
 - Basic web UI with file listing
 - REST API for document operations
 - Celery task queue for async processing
 ### Changed
 - Migrated from Flask to FastAPI
 - Updated database schema
 - Improved error handling
 ## [0.2.0] - 2025-12-01
 ### Added
 - Initial document processing capabilities
 - Basic storage integration
 - Simple web interface
 ## [0.1.0] - 2025-11-01
 ### Added
 - Initial project setup
 - Basic FastAPI application structure
 - Database models
 - Docker configuration
 ---
 ## Version History Summary
 - **v0.3.3** (2026-02-08): Settings management, encryption, setup wizard
 - **v0.3.2** (2026-02-06): Security hardening, testing infrastructure
 - **v0.3.1** (2026-01-15): OAuth2 authentication
 - **v0.3.0** (2026-01-01): Multi-provider storage, OCR, metadata extraction
 - **v0.2.0** (2025-12-01): Document processing
 - **v0.1.0** (2025-11-01): Initial release
 ---
 ## Links
 - [GitHub Repository](https://github.com/christianlouis/DocuElevate)
 - [Documentation](https://docuelevate.readthedocs.io)
 - [Issue Tracker](https://github.com/christianlouis/DocuElevate/issues)
 - [Release Notes](https://github.com/christianlouis/DocuElevate/releases)
@@ -1,6 +1,6 @@
 # DocuElevate Milestones
-**Last Updated:** 2026-02-06
+**Last Updated:** 2026-02-08
 This document outlines the release milestones, versioning strategy, and detailed feature breakdown for DocuElevate.
@@ -19,11 +19,24 @@ DocuElevate follows [Semantic Versioning 2.0.0](https://semver.org/):
 ---
-## Current Release: v0.3.2 (February 2026)
+## Current Release: v0.3.3 (February 2026)
 ### Status: Stable
 - Production-ready document processing
 - Multi-provider storage support
 - **Database-backed settings management with encryption**
 - **Setup wizard for first-time configuration**
 - **Admin UI for runtime configuration**
 - OAuth2 authentication with admin group support
 - Basic web UI and REST API
 ---
 ## Previous Releases
 ### v0.3.2 (February 2026)
 - Production-ready document processing
 - Multi-provider storage support
 - Basic web UI and REST API
 - OAuth2 authentication
@@ -33,31 +46,63 @@ DocuElevate follows [Semantic Versioning 2.0.0](https://semver.org/):
 ### v0.3.3 - Security & Testing Hardening (February 2026)
 **Target Date:** February 15, 2026  
-**Status:** 🚧 In Progress  
+**Release Date:** February 8, 2026  
-**Theme:** Security, Quality, Testing
+**Status:** ✅ Released  
 **Theme:** Security, Quality, Testing, Configuration Management
 #### Goals
 - [x] Fix critical security vulnerabilities (authlib, starlette)
 - [x] Implement comprehensive test suite
 - [x] Add security scanning (CodeQL, Bandit)
 - [x] Improve CI/CD pipeline
- [ ] Achieve 60% test coverage
+- [x] **Implement database-backed settings management**
- [ ] Add pre-commit hooks
+- [x] **Add encryption for sensitive configuration**
- [ ] Update all dependencies to latest secure versions
+- [x] **Create setup wizard for first-time installation**
 - [ ] Achieve 60% test coverage (ongoing)
 - [ ] Add pre-commit hooks (ongoing)
 - [ ] Update all dependencies to latest secure versions (ongoing)
 #### Deliverables
 - [x] SECURITY_AUDIT.md documentation
 - [x] pytest configuration and fixtures
 - [x] API integration tests
 - [x] Configuration validation tests
- [ ] Task processing tests
+- [x] **Settings management UI at /settings**
- [ ] Storage provider integration tests
+- [x] **Setup wizard at /setup**
 - [x] **Fernet encryption for sensitive settings**
 - [x] **Source indicators (DB/ENV/DEFAULT)**
 - [x] **Complete settings documentation**
 - [x] **Framework analysis (FRAMEWORK_ANALYSIS.md)**
 - [ ] Task processing tests (ongoing)
 - [ ] Storage provider integration tests (ongoing)
 - [x] Updated CI/CD workflows
- [ ] Security best practices guide
+- [ ] Security best practices guide (ongoing)
 #### New Features
 - **Settings Management System**: Web-based admin UI for viewing and editing 102 application settings across 10 categories
 - **Encryption**: Fernet symmetric encryption for sensitive values (passwords, API keys, tokens) with key derived from SESSION_SECRET
 - **Setup Wizard**: 3-step wizard for first-time configuration (Infrastructure → Security → AI Services)
 - **Precedence System**: Settings resolved in order: Database > Environment Variables > Defaults
 - **Source Indicators**: Visual badges showing where each setting value originates (🟢 DB, 🔵 ENV, ⚪ DEFAULT)
 - **Admin Access Control**: OAuth admin group support and proper decorator pattern for authorization
 #### Technical Improvements
 - Fixed /settings redirect loop issue
 - Added cryptography>=41.0.0 dependency
 - Created encryption utilities (app/utils/encryption.py)
 - Implemented settings service with auto-encrypt/decrypt
 - Built responsive wizard UI with progress indicators
 - Comprehensive test coverage for settings functionality
 #### Breaking Changes
 - None
 #### Migration Notes
 - Setup wizard automatically appears for fresh installations
 - Existing installations can skip wizard
 - All settings remain backward compatible with environment variables
 - Database settings override environment variables when present
 ---
 ### v0.4.0 - Enhanced Search & UI Improvements (April 2026)
@@ -299,8 +344,8 @@ This is our first major release, marking production-ready enterprise capabilitie
 | v0.1.0 | 2024-Q1 | Initial Release | Released |
 | v0.2.0 | 2024-Q3 | Multi-provider Support | Released |
 | v0.3.0 | 2025-Q4 | UI & Authentication | Released |
-| v0.3.2 | 2026-02 | Current Stable | Released |
+| v0.3.2 | 2026-02-06 | Security Updates | Released |
-| v0.3.3 | 2026-02 | Security & Testing | In Progress |
+| v0.3.3 | 2026-02-08 | **Current Stable** - Configuration Management | **Released** |
 | v0.4.0 | 2026-04 | Search & UX | Planned |
 | v0.5.0 | 2026-08 | Advanced AI | Planned |
 | v1.0.0 | 2026-11 | Enterprise | Planned |
@@ -1,13 +1,13 @@
 # DocuElevate Roadmap
-**Last Updated:** 2026-02-06  
+**Last Updated:** 2026-02-08  
 **Version:** 1.0
 ## Vision
 DocuElevate aims to be the premier open-source intelligent document processing platform, providing seamless integration with cloud storage providers, advanced AI-powered metadata extraction, and enterprise-grade security and scalability.
-## Current Status (v0.3.2)
+## Current Status (v0.3.3)
 ### Core Features ✅
 - Multi-provider document storage (Dropbox, Google Drive, OneDrive, Nextcloud, S3, etc.)
@@ -16,9 +16,12 @@ DocuElevate aims to be the premier open-source intelligent document processing p
 - AI-powered metadata extraction via OpenAI
 - PDF conversion via Gotenberg
 - Web UI for document upload and management
 - **Database-backed settings management with admin UI**
 - **Fernet encryption for sensitive configuration**
 - **Setup wizard for first-time installation**
 - REST API with OpenAPI documentation
 - Celery-based async task processing
- OAuth2 authentication via Authentik
+- OAuth2 authentication via Authentik with admin group support
 ## Short-term Goals (Q1-Q2 2026) - v0.4.x to v0.5.x
@@ -1,7 +1,7 @@
 # DocuElevate TODO List
-**Last Updated:** 2026-02-06  
+**Last Updated:** 2026-02-08  
-**Current Version:** v0.3.2
+**Current Version:** v0.3.3
 This document tracks actionable tasks for the current development cycle. For long-term planning, see [ROADMAP.md](ROADMAP.md) and [MILESTONES.md](MILESTONES.md).
@@ -66,6 +66,9 @@ This document tracks actionable tasks for the current development cycle. For lon
 ## 🟡 Medium Priority (Next Month)
 ### Features
 - [x] Implement database-backed settings page with admin UI
 - [x] Add encryption for sensitive settings (Fernet)
 - [x] Implement setup wizard for first-time configuration
 - [ ] Implement retry logic for failed Celery tasks
 - [ ] Add pagination to file list endpoint
 - [ ] Add bulk delete functionality
@@ -211,6 +214,17 @@ This document tracks actionable tasks for the current development cycle. For lon
 ## ✅ Completed (Recent)
 ### 2026-02-08
 - [x] Implemented database-backed settings management system
 - [x] Added Fernet encryption for sensitive settings in database
 - [x] Created 3-step setup wizard for fresh installations
 - [x] Added source indicators (DB/ENV/DEFAULT) with color badges
 - [x] Fixed /settings redirect issue (proper decorator pattern)
 - [x] Added OAuth admin support (checks groups)
 - [x] Created comprehensive settings documentation
 - [x] Added cryptography dependency for encryption
 - [x] Analyzed existing frameworks (justified custom implementation)
 ### 2026-02-06
 - [x] Created comprehensive test infrastructure
 - [x] Fixed critical security vulnerabilities
@@ -264,4 +278,4 @@ This document tracks actionable tasks for the current development cycle. For lon
 ---
-*This TODO list is reviewed and updated regularly. Last review: 2026-02-06*
+*This TODO list is reviewed and updated regularly. Last review: 2026-02-08*
@@ -1 +1 @@
-0.1.0-test
+0.3.3
@@ -217,7 +217,7 @@ class Settings(BaseSettings):
                return f.read().strip()
        # Default version if not found
-        return "0.3.2-dev"
+        return "0.3.3-dev"
    @property
    def git_sha(self) -> str:
@@ -73,7 +73,7 @@ The `app/config.py` Settings class provides these properties for accessing build
 Returns the application version with the following priority:
 1. `APP_VERSION` environment variable
 2. Contents of `VERSION` file
-3. Default: `"0.3.2-dev"`
+3. Default: `"0.3.3-dev"`
 ### `settings.build_date` (property)
 Returns the build date with the following priority: