docs(settings): Update README + Copilot instructions; bump Program Info to 2025.1.0-alpha.11

README: Add System Settings API endpoints; describe new tabbed Settings layout with role gating; add Vite dev proxy tip to use relative /api paths.
Copilot instructions: Note SystemSetting key–value store in data model; document system_settings.py (CRUD + supplement-table convenience endpoint); reference apiSystemSettings.ts; note defaults seeding via init_defaults.py.
Program Info: Bump version to 2025.1.0-alpha.11; changelog explicitly tied to the Settings page (Events tab: supplement-table URL moved; Academic Calendar: set active period; proxy note); README docs mention.
No functional changes to API or UI code in this commit; documentation and program info only.

server/routes/auth.py

@@ -122,24 +122,32 @@ def get_current_user():
     db_session = Session()
     try:
         user = db_session.query(User).filter_by(id=user_id).first()
-        
+
         if not user:
             # Session is stale, user was deleted
             session.clear()
             return jsonify({"error": "Not authenticated"}), 401
-        
+
         if not user.is_active:
             # User was deactivated
             session.clear()
             return jsonify({"error": "Account is disabled"}), 401
-        
+
+        # For SQLAlchemy Enum(UserRole), ensure we return the string value
+        role_value = user.role.value if isinstance(user.role, UserRole) else str(user.role)
+
         return jsonify({
             "id": user.id,
             "username": user.username,
-            "role": user.role.value,
+            "role": role_value,
             "is_active": user.is_active
         }), 200
-        
+
+    except Exception as e:
+        # Avoid naked 500s; return a JSON error with minimal info (safe in dev)
+        env = os.environ.get("ENV", "production").lower()
+        msg = str(e) if env in ("development", "dev") else "Internal server error"
+        return jsonify({"error": msg}), 500
     finally:
         db_session.close()