Initial commit: ImpactFlow Discovery + Google OAuth auth layer

Discovery service (pre-existing): FastAPI + async SQLAlchemy + Alembic +
SQLite + Anthropic, with a five-prompt static UI that produces an Enneagram
+ Ikigai profile.

Auth implementation (this change set) follows
Impact_Flow_Auth_Plan_OAuth.html, adapted to the discovery_conversation /
discovery_profile schema:

- app/auth.py: Google OAuth registration, JWT issue/decode, dual-auth
  dependency (Bearer JWT or X-API-Key), refresh-token hashing, domain
  allow-list, synthetic api-key-admin user
- app/tracking.py: ActivityTrackingMiddleware + log_activity helper;
  tags machine-to-machine calls source=mcp
- app/routers/auth.py: /api/auth/{login,callback,refresh,logout},
  /api/me, /api/me/{stats,sessions,sessions/{id}}
- app/routers/activity.py: /api/activity, /api/activity/summary,
  /api/admin/activity, plus prune_old_activity (90-day retention)
- app/routers/discovery.py: every route now user-scoped via the auth
  dependency; /discovery/profile/{user_id} -> /discovery/profile/me
- alembic/versions/002_add_auth.py: users, refresh_tokens, activity_log
- tests/test_auth.py: 8 tests covering 401 paths, X-API-Key admin
  resolution, JWT round-trip, admin gating, domain allow-list
- README.md: Authentication section, expanded env-var table, updated
  data-model and API-reference tables
- .env.example: new GOOGLE_*, JWT_*, IMPACTFLOW_API_KEY, CORS_*,
  ALLOWED_EMAIL_DOMAINS placeholders
- .gitignore: also exclude data/*.log

Tests: 19/19 pass (11 pre-existing + 8 new). smoke_test.py exercises the
full discovery flow under X-API-Key plus 401 paths, OAuth login redirect,
activity logging, and /api/me/stats.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
This commit is contained in:
Joel Salmon
2026-05-27 10:59:41 -05:00
commit b8f176bb31
45 changed files with 4679 additions and 0 deletions
+295
View File
@@ -0,0 +1,295 @@
/* ImpactFlow Self-Discovery — shared styles
Palette: navy #0d1b2a, gold #c9a84c, cream #f8f5ef */
:root {
--navy: #0d1b2a;
--gold: #c9a84c;
--cream: #f8f5ef;
--navy-soft: #1c3049;
--shadow: rgba(13, 27, 42, 0.12);
--green: #2e7d32;
--yellow: #c9a84c;
--red: #c0392b;
}
* {
box-sizing: border-box;
}
body {
margin: 0;
background: var(--cream);
color: var(--navy);
font-family: "DM Sans", system-ui, sans-serif;
line-height: 1.6;
-webkit-font-smoothing: antialiased;
}
.wrap {
max-width: 760px;
margin: 0 auto;
padding: 48px 24px 80px;
}
/* ---------- Discovery flow ---------- */
.brand {
font-family: "Playfair Display", "DM Sans", serif;
font-size: 1.1rem;
letter-spacing: 0.04em;
color: var(--gold);
text-transform: uppercase;
margin-bottom: 40px;
}
.progress {
color: var(--gold);
font-weight: 600;
letter-spacing: 0.08em;
font-size: 0.85rem;
text-transform: uppercase;
margin-bottom: 14px;
}
.prompt-title {
font-family: "Playfair Display", "DM Sans", serif;
font-size: 1.35rem;
color: var(--gold);
margin: 0 0 10px;
}
.prompt-text {
font-family: "Playfair Display", "DM Sans", serif;
font-size: 1.7rem;
font-weight: 500;
color: var(--navy);
margin: 0 0 28px;
line-height: 1.35;
}
textarea {
width: 100%;
min-height: 240px;
padding: 20px;
border: 1px solid rgba(13, 27, 42, 0.18);
border-radius: 12px;
background: #fff;
color: var(--navy);
font-family: "DM Sans", system-ui, sans-serif;
font-size: 1.05rem;
line-height: 1.6;
resize: vertical;
}
textarea:focus {
outline: none;
border-color: var(--gold);
box-shadow: 0 0 0 3px rgba(201, 168, 76, 0.25);
}
.nav {
display: flex;
justify-content: space-between;
align-items: center;
margin-top: 28px;
gap: 16px;
}
button {
font-family: "DM Sans", system-ui, sans-serif;
font-size: 1rem;
font-weight: 600;
padding: 13px 30px;
border-radius: 10px;
border: none;
cursor: pointer;
transition: transform 0.06s ease, opacity 0.2s ease, background 0.2s ease;
}
button:active {
transform: translateY(1px);
}
button:disabled {
opacity: 0.4;
cursor: not-allowed;
}
.btn-primary {
background: var(--gold);
color: var(--navy);
}
.btn-primary:hover:not(:disabled) {
background: #d8b95f;
}
.btn-ghost {
background: transparent;
color: var(--navy);
border: 1px solid rgba(13, 27, 42, 0.25);
}
.btn-ghost:hover:not(:disabled) {
background: rgba(13, 27, 42, 0.05);
}
/* ---------- Loading state ---------- */
.loading {
display: none;
flex-direction: column;
align-items: center;
justify-content: center;
text-align: center;
min-height: 60vh;
background: var(--cream);
color: var(--navy);
}
.loading.active {
display: flex;
}
.loading p {
font-family: "Playfair Display", "DM Sans", serif;
font-size: 1.6rem;
color: var(--navy);
}
.spinner {
width: 46px;
height: 46px;
border: 4px solid rgba(201, 168, 76, 0.3);
border-top-color: var(--gold);
border-radius: 50%;
animation: spin 0.9s linear infinite;
margin-bottom: 22px;
}
@keyframes spin {
to {
transform: rotate(360deg);
}
}
/* ---------- Profile page ---------- */
.profile-narrative {
background: var(--navy);
color: var(--cream);
padding: 36px 34px;
border-radius: 16px;
font-size: 1.2rem;
line-height: 1.7;
box-shadow: 0 10px 30px var(--shadow);
margin-bottom: 36px;
}
.section-label {
font-family: "Playfair Display", "DM Sans", serif;
font-size: 0.85rem;
letter-spacing: 0.12em;
text-transform: uppercase;
color: var(--gold);
margin: 0 0 18px;
}
.ikigai-grid {
display: grid;
grid-template-columns: repeat(2, 1fr);
gap: 18px;
margin-bottom: 40px;
}
.card {
background: #fff;
border: 1px solid rgba(13, 27, 42, 0.1);
border-radius: 14px;
padding: 22px 24px;
box-shadow: 0 4px 14px rgba(13, 27, 42, 0.05);
}
.card h3 {
display: flex;
align-items: center;
gap: 9px;
margin: 0 0 10px;
font-size: 1.05rem;
color: var(--navy);
}
.card p {
margin: 0;
color: var(--navy-soft);
font-size: 0.98rem;
}
.dot {
display: inline-block;
width: 11px;
height: 11px;
border-radius: 50%;
flex: 0 0 auto;
}
.dot.high {
background: var(--green);
}
.dot.medium {
background: var(--yellow);
}
.dot.low {
background: var(--red);
}
.triad-block {
background: #fff;
border: 1px solid rgba(13, 27, 42, 0.1);
border-left: 5px solid var(--gold);
border-radius: 14px;
padding: 26px 28px;
margin-bottom: 40px;
}
.triad-block h2 {
display: flex;
align-items: center;
gap: 10px;
margin: 0 0 12px;
font-family: "Playfair Display", "DM Sans", serif;
font-size: 1.3rem;
color: var(--navy);
}
.triad-block p {
margin: 0;
color: var(--navy-soft);
}
.confirm-row {
text-align: center;
}
.confirmed {
background: var(--navy) !important;
color: var(--cream) !important;
cursor: default;
}
.error-box {
background: #fdecea;
border: 1px solid var(--red);
color: #7a231b;
padding: 18px 22px;
border-radius: 12px;
}
@media (max-width: 560px) {
.ikigai-grid {
grid-template-columns: 1fr;
}
.prompt-text {
font-size: 1.4rem;
}
}