fix(tests): use configurable TEST_FAX_NUMBER for all smoke tests

- Added test_fax_number to Settings model (from TEST_FAX_NUMBER env var)
- Exposed test_fax_number in /admin/config endpoint
- Updated Diagnostics.tsx to load and use TEST_FAX_NUMBER
- Updated OutboundSmokeTests.tsx to load and use TEST_FAX_NUMBER
- Show helpful error when TEST_FAX_NUMBER not configured
- Display configured test number in UI instead of fake +15555550123

This ensures smoke tests work with real providers (Sinch, HumbleFax, etc)
instead of failing with fake numbers. Users configure their own test-capable
fax number via TEST_FAX_NUMBER environment variable.

Author: Faxbot Agent

README.md

@@ -2,19 +2,19 @@
   <img src="assets/faxbot_full_logo.png" alt="Faxbot logo" width="100%" />
 </p>
 <p align="center">
-  <a href="https://dmontgomery40.github.io/Faxbot/">
+  <a href="https://docs.faxbot.net/">
     <img alt="View the Documentation" src="https://img.shields.io/badge/Docs-Faxbot-2b5fff?style=for-the-badge">
   </a>
 </p>
 
 <p align="center">
-  <a href="https://faxbot.net">
+  <a href="https://faxbot.net/">
     <img alt="Visit the Website" src="https://img.shields.io/badge/Website-faxbot.net-00c853?style=for-the-badge">
   </a>
 </p>
 
 <p align="center">
-  <a href="https://faxbot.net/admin-demo">
+  <a href="https://faxbot.net/admin-demo/">
     <img alt="UI Demo" src="https://img.shields.io/badge/UI%20Demo-Admin%20Console-ff9800?style=for-the-badge">
   </a>
 </p>
@@ -68,23 +68,22 @@ The iOS companion lets you send faxes and check status from your phone. Email da
 ## SDKs
 - Python: `pip install faxbot`
 - Node.js: `npm install faxbot`
-→ [SDK Usage](docs/SDKS.md)
+→ [SDK Usage](https://github.com/dmontgomery40/faxbot/blob/auto-tunnel/docs/SDKS.md)
 
 ## Architecture highlights
 - Traits‑first capabilities: `/admin/providers` and `/admin/config` expose active providers + traits; UI and API gate features by traits.
 - Canonical event & error model: normalized inbound/outbound events, status mapping, and standard error codes.
 - Provider adapters: clean boundaries for verify_webhook/parse_inbound/send/status/cancel.
 
 Docs:
-- [Canonical Events](docs/api/canonical_events.md)
-- [MCP Integration](docs/MCP_INTEGRATION.md)
-- [API Reference](docs/API_REFERENCE.md)
+- [Canonical Events](https://github.com/dmontgomery40/faxbot/blob/auto-tunnel/docs/api/canonical_events.md)
+- [MCP Integration](https://github.com/dmontgomery40/faxbot/blob/auto-tunnel/docs/MCP_INTEGRATION.md)
+- [API Reference](https://github.com/dmontgomery40/faxbot/blob/auto-tunnel/docs/API_REFERENCE.md)
 
 ## Security
 - Use `X-API-Key` (multi‑key) for auth.
 - Enforce HTTPS and HMAC signature verification for cloud webhooks.
 - No PHI in logs; only IDs/metadata are surfaced.
 
 ## Contributing
-See [CONTRIBUTING.md](CONTRIBUTING.md). Please open issues/PRs; this project is GUI‑first and traits‑first—avoid backend‑name checks in new code.
-
+See [CONTRIBUTING.md](https://github.com/dmontgomery40/faxbot/blob/auto-tunnel/CONTRIBUTING.md). Please open issues/PRs; this project is GUI‑first and traits‑first—avoid backend‑name checks in new code.

api/admin_ui/src/components/Diagnostics.tsx

@@ -69,6 +69,7 @@ function Diagnostics({ client, onNavigate, docsBase }: DiagnosticsProps) {
   const [testStatus, setTestStatus] = useState<string | null>(null);
   const [expandedSections, setExpandedSections] = useState<string[]>(['summary']);
   const [anchors, setAnchors] = useState<Record<string, string>>({});
+  const [testNumber, setTestNumber] = useState<string>('');
   // Third‑party precise links (fallback)
   const thirdParty: Record<string, string> = {
     // Sinch
@@ -204,6 +205,18 @@ function Diagnostics({ client, onNavigate, docsBase }: DiagnosticsProps) {
     loadAnchors();
   }, [docsBase, active?.outbound, active?.inbound]);
 
+  // Load test fax number from config
+  useEffect(() => {
+    (async () => {
+      try {
+        const cfg = await client.getConfig();
+        setTestNumber(cfg?.test_fax_number || '');
+      } catch {
+        // ignore
+      }
+    })();
+  }, [client]);
+
   const runDiagnostics = async () => {
     try {
       setError(null);
@@ -605,14 +618,18 @@ function Diagnostics({ client, onNavigate, docsBase }: DiagnosticsProps) {
   };
 
   const runSendTestFax = async () => {
+    if (!testNumber) {
+      setError('TEST_FAX_NUMBER not configured. Set it in .env to your own fax-capable number.');
+      return;
+    }
     try {
       setError(null);
       setTestSending(true);
       setTestJobId(null);
       setTestStatus(null);
       const blob = new Blob(["Faxbot test"], { type: 'text/plain' });
       const file = new File([blob], 'test.txt', { type: 'text/plain' });
-      const result = await client.sendFax('+15555550123', file);
+      const result = await client.sendFax(testNumber, file);
       setTestJobId(result.id);
       setTestStatus(result.status);
 
@@ -642,14 +659,18 @@ function Diagnostics({ client, onNavigate, docsBase }: DiagnosticsProps) {
 
   // Send Test TXT (simple text → backend converts to PDF)
   const runSendTestTxtFax = async () => {
+    if (!testNumber) {
+      setError('TEST_FAX_NUMBER not configured. Set it in .env to your own fax-capable number.');
+      return;
+    }
     try {
       setError(null);
       setTestSendingTxt(true);
       setTestJobId(null);
       setTestStatus(null);
       const blob = new Blob(["Faxbot test TXT\nHello from Admin Console"], { type: 'text/plain' });
       const file = new File([blob], 'faxbot_test.txt', { type: 'text/plain' });
-      const result = await client.sendFax('+15555550123', file);
+      const result = await client.sendFax(testNumber, file);
       setTestJobId(result.id);
       setTestStatus(result.status);
       let attempts = 0;
@@ -716,6 +737,10 @@ function Diagnostics({ client, onNavigate, docsBase }: DiagnosticsProps) {
 
   // Send Test Image (PDF) — generates a simple PDF with text to exercise raster path
   const runSendTestImageFax = async () => {
+    if (!testNumber) {
+      setError('TEST_FAX_NUMBER not configured. Set it in .env to your own fax-capable number.');
+      return;
+    }
     try {
       setError(null);
       setTestSendingImg(true);
@@ -727,7 +752,7 @@ function Diagnostics({ client, onNavigate, docsBase }: DiagnosticsProps) {
       new Uint8Array(ab).set(bytes);
       const blob = new Blob([ab], { type: 'application/pdf' });
       const file = new File([blob], 'faxbot_test_image.pdf', { type: 'application/pdf' });
-      const result = await client.sendFax('+15555550123', file);
+      const result = await client.sendFax(testNumber, file);
       setTestJobId(result.id);
       setTestStatus(result.status);
       let attempts = 0;
@@ -895,7 +920,9 @@ function Diagnostics({ client, onNavigate, docsBase }: DiagnosticsProps) {
                     )}
                   </Box>
                   <Typography variant="caption" color="text.secondary">
-                    Uses your current backend settings. For cloud backends without valid credentials this will fail fast with an error.
+                    {testNumber 
+                      ? `Test destination: ${testNumber} (configured via TEST_FAX_NUMBER). Uses your current backend settings.`
+                      : 'Set TEST_FAX_NUMBER in .env to your own fax-capable number to enable tests. Fake numbers do not work with real providers.'}
                   </Typography>
                 </Stack>
               </ResponsiveFormSection>

api/admin_ui/src/components/EventStream.tsx

@@ -368,7 +368,15 @@ const EventStream: React.FC<EventStreamProps> = ({ client }) => {
                     secondary={
                       <Box>
                         <Typography variant="caption" color="text.secondary" display="block">
-                          {format(new Date(event.occurred_at), 'MMM dd, HH:mm:ss.SSS')}
+                          {new Date(event.occurred_at).toLocaleString('en-US', { 
+                            month: 'short', 
+                            day: '2-digit', 
+                            hour: '2-digit', 
+                            minute: '2-digit', 
+                            second: '2-digit',
+                            fractionalSecondDigits: 3,
+                            hour12: false 
+                          })}
                           {event.job_id && ` • Job: ${event.job_id}`}
                           {event.external_id && ` • Ext: ${event.external_id}`}
                           {event.correlation_id && ` • Correlation: ${event.correlation_id}`}

api/admin_ui/src/components/OutboundSmokeTests.tsx

@@ -1,4 +1,4 @@
-import { useState } from 'react';
+import { useState, useEffect } from 'react';
 import {
   Box,
   Typography,
@@ -74,10 +74,23 @@ export default function OutboundSmokeTests({ client, canSend = true }: OutboundS
   const [testJobs, setTestJobs] = useState<TestJob[]>([]);
   const [loading, setLoading] = useState<Record<string, boolean>>({});
   const [expandedJobs, setExpandedJobs] = useState<Set<string>>(new Set());
+  const [testNumber, setTestNumber] = useState<string>('');
 
   const activeOutbound = active?.outbound || '';
   const providerName = getProviderDisplayName(activeOutbound);
 
+  // Load test fax number from config
+  useEffect(() => {
+    (async () => {
+      try {
+        const cfg = await client.getConfig();
+        setTestNumber(cfg?.test_fax_number || '');
+      } catch {
+        // ignore
+      }
+    })();
+  }, [client]);
+
   const getStatusColor = (status: string): 'success' | 'error' | 'warning' | 'info' | 'default' => {
     switch (status.toLowerCase()) {
       case 'success':
@@ -199,11 +212,23 @@ export default function OutboundSmokeTests({ client, canSend = true }: OutboundS
   };
 
   const runSmokeTest = async (testType: 'txt' | 'pdf' | 'image') => {
+    if (!testNumber) {
+      const errorJob: TestJob = {
+        id: `error-${Date.now()}`,
+        type: testType,
+        status: 'failed',
+        error: 'TEST_FAX_NUMBER not configured. Set it in .env to your own fax-capable number.',
+        created_at: new Date().toISOString(),
+      };
+      setTestJobs(prev => [errorJob, ...prev.slice(0, 9)]);
+      return;
+    }
+    
     try {
       setLoading(prev => ({ ...prev, [testType]: true }));
 
       const testFile = createTestFile(testType);
-      const result = await client.sendFax('+15555550123', testFile);
+      const result = await client.sendFax(testNumber, testFile);
 
       const newJob: TestJob = {
         id: result.id,
@@ -339,7 +364,9 @@ export default function OutboundSmokeTests({ client, canSend = true }: OutboundS
             </Typography>
           </Box>
           <Typography variant="body2">
-            Tests use destination +15555550123 (safe test number)
+            {testNumber 
+              ? `Test destination: ${testNumber} (configured via TEST_FAX_NUMBER)`
+              : 'Configure TEST_FAX_NUMBER in .env to enable tests'}
           </Typography>
         </Alert>
 

api/app/config.py

@@ -147,6 +147,9 @@ class Settings(BaseModel):
     humblefax_webhook_secret: str = Field(default_factory=lambda: os.getenv("HUMBLEFAX_WEBHOOK_SECRET", ""))
     humblefax_callback_base: str = Field(default_factory=lambda: os.getenv("HUMBLEFAX_CALLBACK_BASE", ""))
 
+    # Testing - use your own fax-capable number for smoke tests (must be valid E.164)
+    test_fax_number: str = Field(default_factory=lambda: os.getenv("TEST_FAX_NUMBER", ""))
+
     # Storage backend for inbound artifacts
     storage_backend: str = Field(default_factory=lambda: os.getenv("STORAGE_BACKEND", "local"))  # local | s3
     s3_bucket: str = Field(default_factory=lambda: os.getenv("S3_BUCKET", ""))

api/app/main.py

@@ -1273,6 +1273,7 @@ def get_admin_config():
             "sip_ami_password_default": (settings.ami_password == "changeme"),
         },
         "public_api_url": settings.public_api_url,
+        "test_fax_number": settings.test_fax_number or "",
     }
     # v3 plugins status (feature-gated)
     if settings.feature_v3_plugins:

docs/SECURITY.md

@@ -22,10 +22,9 @@ Configuration and guidance for HIPAA‑aligned deployments and OAuth/OIDC setup.
 
 Recommended reading
 - [Authentication (API Keys)](/security/authentication)
-- [HIPAA Requirements](../HIPAA_REQUIREMENTS.md)
-- [OAuth/OIDC Setup](OAUTH_SETUP.md)
+- [HIPAA Requirements](https://github.com/dmontgomery40/faxbot/blob/auto-tunnel/HIPAA_REQUIREMENTS.md)
+- [OAuth/OIDC Setup](https://github.com/dmontgomery40/faxbot/blob/auto-tunnel/docs/OAUTH_SETUP.md)
 - [Authentication (API Keys)](/Faxbot/security/authentication.html)
 - [OAuth/OIDC Setup](/Faxbot/security/oauth-setup.html)
 - [Compliance Overview (faxbot.net)](https://faxbot.net/compliance/)
 - [Business Associate Agreement (PDF)](https://faxbot.net/compliance/business-associate-agreement.pdf)
-

docs/archive/legacy/SECURITY.md

@@ -22,10 +22,9 @@ Configuration and guidance for HIPAA‑aligned deployments and OAuth/OIDC setup.
 
 Recommended reading
 - [Authentication (API Keys)](/security/authentication)
-- [HIPAA Requirements](../HIPAA_REQUIREMENTS.md)
-- [OAuth/OIDC Setup](OAUTH_SETUP.md)
+- [HIPAA Requirements](https://github.com/dmontgomery40/faxbot/blob/auto-tunnel/HIPAA_REQUIREMENTS.md)
+- [OAuth/OIDC Setup](https://github.com/dmontgomery40/faxbot/blob/auto-tunnel/docs/OAUTH_SETUP.md)
 - [Authentication (API Keys)](/Faxbot/security/authentication.html)
 - [OAuth/OIDC Setup](/Faxbot/security/oauth-setup.html)
 - [Compliance Overview (faxbot.net)](https://faxbot.net/compliance/)
 - [Business Associate Agreement (PDF)](https://faxbot.net/compliance/business-associate-agreement.pdf)
-

docs/openapi-cors.html

@@ -30,27 +30,27 @@ <h1>Faxbot OpenAPI Specification</h1>
         <p>Access the Faxbot API specification without CORS restrictions:</p>
 
         <h2>🔗 Direct Links</h2>
-        <a href="https://raw.githubusercontent.com/DMontgomery40/Faxbot/docs-jekyll-site/docs/openapi.yaml" class="button">
+        <a href="https://raw.githubusercontent.com/dmontgomery40/faxbot/auto-tunnel/docs/openapi.yaml" class="button">
             📄 Raw YAML (No CORS)
         </a>
-        <a href="https://petstore.swagger.io/?url=https://raw.githubusercontent.com/DMontgomery40/Faxbot/docs-jekyll-site/docs/openapi.yaml" class="button">
+        <a href="https://petstore.swagger.io/?url=https://raw.githubusercontent.com/dmontgomery40/faxbot/auto-tunnel/docs/openapi.yaml" class="button">
             🔍 Swagger UI
         </a>
-        <a href="https://editor.swagger.io/?url=https://raw.githubusercontent.com/DMontgomery40/Faxbot/docs-jekyll-site/docs/openapi.yaml" class="button">
+        <a href="https://editor.swagger.io/?url=https://raw.githubusercontent.com/dmontgomery40/faxbot/auto-tunnel/docs/openapi.yaml" class="button">
             ✏️ Swagger Editor
         </a>
 
         <h2>📋 For Copy/Paste</h2>
         <p>Use this URL in any OpenAPI tool:</p>
-        <pre><code>https://raw.githubusercontent.com/DMontgomery40/Faxbot/docs-jekyll-site/docs/openapi.yaml</code></pre>
+        <pre><code>https://raw.githubusercontent.com/dmontgomery40/faxbot/auto-tunnel/docs/openapi.yaml</code></pre>
 
         <h2>🛠️ Tool-Specific Instructions</h2>
 
         <h3>Postman</h3>
         <ol>
             <li>Open Postman</li>
             <li>Click "Import" → "Link"</li>
-            <li>Paste: <code>https://raw.githubusercontent.com/DMontgomery40/Faxbot/docs-jekyll-site/docs/openapi.yaml</code></li>
+            <li>Paste: <code>https://raw.githubusercontent.com/dmontgomery40/faxbot/auto-tunnel/docs/openapi.yaml</code></li>
             <li>Click "Continue" → "Import"</li>
         </ol>
 
@@ -78,7 +78,7 @@ <h2>🔧 Why This Works</h2>
 
     <script>
         // Test if the raw URL is accessible
-        fetch('https://raw.githubusercontent.com/DMontgomery40/Faxbot/docs-jekyll-site/docs/openapi.yaml')
+        fetch('https://raw.githubusercontent.com/dmontgomery40/faxbot/auto-tunnel/docs/openapi.yaml')
             .then(response => {
                 if (response.ok) {
                     document.getElementById('status').innerHTML =