test: add API integration suite, fixtures, and frontend unit tests

Author: clean6378-max-it

.coverage

@@ -57,3 +57,42 @@ jobs:
 
       - name: Run tests
         run: pytest --tb=short -q
+
+  integration-tests:
+    name: API integration tests + coverage
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.12"
+          cache: pip
+          cache-dependency-path: |
+            requirements.txt
+            requirements-dev.txt
+
+      - name: Install dev dependencies
+        run: pip install -r requirements-dev.txt
+
+      - name: Run integration tests with coverage
+        run: pytest tests/test_api_integration.py tests/test_search.py -v --cov=api --cov-report=xml
+
+      - uses: actions/upload-artifact@v4
+        with:
+          name: coverage-report
+          path: coverage.xml
+
+  js-tests:
+    name: Frontend unit tests (vitest)
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-node@v4
+        with:
+          node-version: "20"
+          cache: npm
+
+      - run: npm ci
+      - run: npm test

.github/workflows/ci.yml

@@ -10,3 +10,6 @@ build/
 .vscode/
 *.swp
 *.swo
+node_modules/
+coverage/
+coverage.xml

.gitignore

@@ -10,14 +10,33 @@
 
 search_bp = Blueprint("search", __name__)
 
+_DEFAULT_LIMIT = 50
+_MAX_LIMIT = 500
+
+
+def _parse_limit(raw: str | None) -> int:
+    """Parse positive integer limit query param; raise ValueError if invalid."""
+    if raw is None or raw == "":
+        return _DEFAULT_LIMIT
+    try:
+        n = int(raw)
+    except ValueError:
+        raise ValueError("limit must be a positive integer") from None
+    if n < 1:
+        raise ValueError("limit must be a positive integer")
+    return min(n, _MAX_LIMIT)
+
 
 @search_bp.route("/api/search")
 def search():
     query = request.args.get("q", "").strip().lower()
     if not query:
         return jsonify([])
 
-    max_results = int(request.args.get("limit", 50))
+    try:
+        max_results = _parse_limit(request.args.get("limit"))
+    except ValueError:
+        return jsonify({"error": "Invalid limit: must be a positive integer"}), 400
     base = current_app.config.get("CLAUDE_PROJECTS_DIR") or get_claude_projects_dir()
     projects = list_projects(base)