Merge branch 'develop' into chore/rename-permission-guard

Author: jtimpe

.github/ISSUE_TEMPLATE/release-tracker-issue-template.md

@@ -0,0 +1,90 @@
+---
+name: Release Tracker
+about: Track the release handoff to OFA, staging validation, and production deployment.
+title: Release Tracker vX.X.X
+labels: ''
+assignees: ''
+
+---
+
+# Release Tracker Issue Template
+
+**TITLE:** Release vX.X.X
+
+**CONTENT:**
+
+### 🔗 Included Pull Requests (Dev Team)
+*List the PRs included in this release. **Testing instructions for each feature must be located within these linked PRs.***
+* #XXX - [Feature/Bugfix Title]
+* #XXX - [Feature/Bugfix Title]
+
+### ➡️ URL of GitHub Release Tag:
+https://github.com/raft-tech/TANF-app/releases/tag/vX.X.X
+
+---
+
+### 📦 1. Preparation & Handoff (Dev / UX / PM)
+*Ensuring the release branch is ready and documented before ACF takes over.*
+
+- [ ] **Release Tagged:** `develop` branch tagged with the new release version.
+- [ ] **Release Branch Created:** Branch cut from `develop`.
+- [ ] **PR Opened to Staging:** PR opened from the release branch to `HHS:main`.
+- [ ] **Testing Instructions Verified:** All linked PRs contain clear testing instructions for ACF validation.
+- [ ] **UX/Documentation Check:** UX team has reviewed the PRs, confirmed user-facing changes, and started drafting Release Notes and Knowledge Center guidance.
+- [ ] **Migration Flag:** Does this release include a database migration? **[Yes / No]** *(If Yes, rollback from production will be highly complex).*
+- [ ] **Handoff Complete:** Issue assigned to @[Alex_username] for Staging validation.
+
+---
+
+### 🧪 2. Staging Validation & QASP (ACF / Alex)
+*Tracking the status once ACF takes over deployment and testing.*
+
+- [ ] **Staging Cleared:** Team notified that Staging is about to be updated/restarted.
+- [ ] **Deployed to Staging:** PR merged and deployed to the Staging environment.
+- [ ] **Feature Validation:** Testing instructions from the linked PRs have been executed and passed.
+- [ ] **Regression Validation:** Core workflows (login, submissions, data integrity, etc.) remain functional.
+
+**🐛 Bug Tracking Protocol (If issues are found in Staging):**
+1. **Non-Dev Team:** Add a comment on this issue describing the bug/unexpected behavior.
+2. **Dev Team:** Review the comment, investigate root cause, and open a formal GitHub Issue.
+3. **Triage Decision:**
+    * *Revert:* If isolated to a new feature, revert the PR out of the release candidate.
+    * *Hotfix:* Warranted **only if** the bug blocks the release entirely AND the production release is needed ASAP. (Dev cuts hotfix PR against the release branch -> merged to `HHS:main` for re-testing).
+
+- [ ] **Documentation Finalized:** UX team confirms all Release Notes and Knowledge Center updates are finalized and ready for launch.
+
+---
+
+### 🚦 3. Production-Ready Sign-Off
+- [ ] ACF/Alex confirms all PRs are validated, no blocking bugs exist, documentation is finalized, and the release is approved for production deployment.
+
+---
+
+### 🛟 4. Rollback & Contingency Reference
+*Review before production deployment.*
+
+* **Pipeline/CircleCI Failure:** Retry the pipeline. If it fails again, requires a hotfix to unblock.
+* **Missing Config/Secrets (App crashes on boot):** Do not rollback. ACF updates environment variables in the production console and restarts the app.
+* **Third-Party API Blocked in Prod:** Dev provides an emergency hotfix to hide the broken UI component.
+* **Performance/Database Lockup Under Load:** Dev writes an emergency hotfix for the offending query.
+* **Critical Regression Post-Deploy:**
+    * *No migrations in release:* Rollback the deployment to the previous stable version.
+    * *Migrations in release:* Rollback is generally not possible; requires an emergency hotfix.
+
+---
+
+### 🚀 5. Production Deployment (ACF / Alex)
+*The final deployment executed by ACF.*
+
+- [ ] **Maintenance Mode:** Alex has enabled the maintenance page to ensure users are out of the system.
+- [ ] **Deployed to Prod:** PR opened and merged to `HHS:master`, triggering deployment.
+- [ ] **Post-Launch Verification:** Quick check that the production environment is stable post-deploy, and the maintenance page is deactivated.
+
+---
+
+### 📢 6. Post-Release Communication (PM / UX / ACF)
+*Closing the loop with users and stakeholders.*
+
+- [ ] **Release Notes Published:** (UX team) Plain-language, user-facing release notes and Knowledge Center guidance have been published.
+- [ ] **Stakeholders Notified:** (ACF) Any required external communication regarding the new version has been sent.
+- [ ] **Close this Issue:** (ACF / PM) The release is fully deployed and stable.

.gitignore

@@ -12,6 +12,7 @@ tdrs-frontend/yarn-error.log*
 tdrs-frontend/vars-frontend.yml
 tdrs-frontend/pa11y-screenshots/*
 tdrs-frontend/cypress/reports*
+tdrs-frontend/test-results*.xml
 .eslintcache
 downloads/
 
@@ -125,8 +126,3 @@ cypress.env.json
 tdrs-backend/*.pg
 tdrs-backend/django.log
 
-# Pytest cache
-tdrs-backend/.pytest_cache/*
-
-# frontend cypress test results
-tdrs-frontend/test-results*.xml

Taskfile.yml

@@ -293,8 +293,8 @@ tasks:
     dir: tdrs-backend
     cmds:
       - export CYPRESS_TOKEN=local-cypress-token
-      - docker-compose exec web python manage.py delete_cypress_users -usernames new-cypress@teamraft.com cypress-admin@teamraft.com
-      - docker-compose exec web python manage.py loaddata cypress/users cypress/data_files cypress/regions cypress/profile_editing_regions cypress/profile_editing_users
+      - docker compose -f docker-compose.yml exec web python manage.py delete_cypress_users -usernames new-cypress@teamraft.com cypress-admin@teamraft.com cypress-data-analyst-dana@teamraft.com cypress-fra-data-analyst-derek@teamraft.com cypress-data-analyst-donna@teamraft.com cypress-fra-data-analyst-david@teamraft.com cypress-fra-ofa-regional-staff-rachel@acf.hhs.gov cypress-fra-ofa-regional-staff-robert@acf.hhs.gov cypress-fra-ofa-regional-staff-rita@acf.hhs.gov cypress-fra-ofa-regional-staff-ryan@acf.hhs.gov
+      - docker compose -f docker-compose.yml exec web python manage.py loaddata cypress/users cypress/data_files cypress/regions cypress/profile_editing_regions cypress/profile_editing_users
 
   frontend-e2e-local:
     desc: Run Cypress E2E tests locally (Cypress on host, app in docker)
@@ -325,6 +325,13 @@ tasks:
           CYPRESS_API_URL=http://localhost:8989/v1 CYPRESS_ADMIN_URL=http://localhost:8989/admin CYPRESS_TOKEN={{.CYPRESS_TOKEN}} env -u ELECTRON_RUN_AS_NODE npx --yes @yarnpkg/cli-dist@4.6.0 test:e2e-ci
         fi
 
+  frontend-e2e-cmd:
+    desc: Run Cypress E2E tests headlessly from the command line (app in docker)
+    dir: tdrs-frontend
+    cmds:
+      - docker compose -f docker-compose.yml up -d --build tdp-frontend
+      - CYPRESS_TOKEN=${CYPRESS_TOKEN:-local-cypress-token} npm run test:e2e-ci
+
   k6:
     desc: Run k6 performance tests
     dir: performance-tests

cf-memory-usage.sh

@@ -0,0 +1,82 @@
+#!/usr/bin/env bash
+# Show memory allocation per app in the current CF space vs the space's quota.
+
+set -euo pipefail
+
+if ! command -v cf &>/dev/null; then
+  echo "Error: cf CLI not found. Install it first."
+  exit 1
+fi
+
+if ! cf target &>/dev/null; then
+  echo "Error: Not logged in to Cloud Foundry. Run 'cf login' first."
+  exit 1
+fi
+
+target_info=$(cf target)
+org=$(echo "$target_info" | awk '/^org:/{print $2}')
+space=$(echo "$target_info" | awk '/^space:/{print $2}')
+
+echo "Org:   $org"
+echo "Space: $space"
+echo ""
+
+# Get app names from cf apps (skip header lines)
+app_names=$(cf apps | awk 'NR>4 && NF>0 {print $1}')
+
+if [ -z "$app_names" ]; then
+  echo "No apps found in this space."
+  exit 0
+fi
+
+printf "%-40s %8s %12s %15s %15s\n" "APP" "STATE" "INSTANCES" "ALLOCATED" "USED"
+printf "%-40s %8s %12s %15s %15s\n" "---" "-----" "---------" "---------" "----"
+
+total_allocated_mb=0
+
+for app_name in $app_names; do
+  app_info=$(cf app "$app_name" 2>/dev/null || true)
+
+  state=$(echo "$app_info" | awk '/^requested state:/{print $3}')
+  instances=$(echo "$app_info" | awk '/^instances:/{print $2}')
+  mem_alloc=$(echo "$app_info" | awk '/^memory usage:/{print $3}')
+
+  # Parse instance memory usage from the instance line (e.g. "809M of 1G")
+  mem_used=$(echo "$app_info" | awk '/^#[0-9]/{print $4}' | head -1)
+  [ -z "$mem_used" ] && mem_used="N/A"
+
+  # Parse allocated memory into MB
+  alloc_val=$(echo "$mem_alloc" | sed 's/[^0-9.]//g')
+  alloc_unit=$(echo "$mem_alloc" | sed 's/[0-9.]//g')
+  case "$alloc_unit" in
+    G) alloc_mb=$(echo "$alloc_val * 1024" | bc) ;;
+    M) alloc_mb="$alloc_val" ;;
+    *) alloc_mb=0 ;;
+  esac
+
+  # Multiply by total instances
+  total_inst=$(echo "$instances" | cut -d'/' -f2)
+  [ -z "$total_inst" ] && total_inst=1
+  app_total_mb=$(echo "$alloc_mb * $total_inst" | bc)
+
+  total_allocated_mb=$(echo "$total_allocated_mb + $app_total_mb" | bc)
+
+  printf "%-40s %8s %12s %13sMB %15s\n" "$app_name" "$state" "$instances" "$app_total_mb" "$mem_used"
+done
+
+echo ""
+echo "--- Summary ---"
+echo "Total memory allocated across all apps: ${total_allocated_mb}MB"
+
+
+echo ""
+echo ""
+echo ""
+echo "--- Space Quota Available ---"
+
+# Derive env from space name (expects space like "tanf-dev", "tanf-staging", "tanf-prod")
+env=$(echo "$space" | awk -F'-' '{print $NF}')
+quota_name="${env}_quota"
+
+echo "Using space quota: $quota_name"
+cf space-quota "$quota_name" 2>/dev/null || echo "Could not find space quota '$quota_name'."