49 Commits

Include renames

Author	SHA1	Message	Date
ik	137aa806c0	test: cover admin media proxy routes	2026-09-16 20:19:35 +07:00
ik	d9f58fb90e	fix: harden admin page cache headers	2026-09-16 19:57:05 +07:00
ik	9bcb019d3a	feat: extend admin operations and media review	2026-09-16 19:50:01 +07:00
ik	73feb75767	perf: add reproducible query plan gate	2026-09-13 16:46:41 +07:00
ik	86ed3a966a	security: enforce nonce based content policy	2026-09-13 16:38:47 +07:00
ik	fe9367b5e9	security: forbid inline style attributes	2026-09-13 15:17:00 +07:00
ik	14958be302	security: externalize astro scripts and styles	2026-09-13 15:14:21 +07:00
ik	c93c6adc7a	security: restrict production content origins	2026-09-13 09:33:39 +07:00
ik	d4ded77355	ci: schedule isolated production bootstrap	2026-09-12 20:58:50 +07:00
ik	f6e6211871	test: verify release schema upgrade	2026-09-12 20:57:58 +07:00
ik	049f1ef30a	refactor: separate migrations from API runtime	2026-09-12 16:02:19 +07:00
ik	868278fdba	security: restrict MinIO app to one bucket	2026-09-12 16:01:00 +07:00
ik	926182a6cf	feat: add alpha load-test methodology	2026-09-12 15:58:07 +07:00
ik	966000b0b0	feat: transform catalogs into field atlas	2026-09-12 15:20:26 +07:00
ik	907ad537e2	fix: accept non-hex alembic revision ids	2026-09-11 07:58:40 +07:00
ik	6664f24f20	fix: invoke Caddy adapter correctly in bootstrap	2026-09-11 07:48:05 +07:00
ik	d28ad31aca	fix: fail closed on bootstrap migration inspection	2026-09-11 07:46:10 +07:00
ik	d6bc5ce85c	fix: alert on degraded community scheduler health	2026-09-11 07:44:30 +07:00
ik	42bdec6c2f	fix: isolate scheduler validation in bootstrap	2026-09-11 07:43:14 +07:00
ik	486e4c4673	fix: wire report idempotency and bootstrap scheduler check	2026-09-11 07:41:55 +07:00
ik	2ba4f6027d	A10: Add Caddy config validation and scheduler checks to bootstrap	2026-09-11 07:35:22 +07:00
ik	7386e7bea8	A10: Fix Alembic head extraction in bootstrap script ... Bug: 'alembic heads' returns '48094a7d1b92 (head)', but DB query returns only '48094a7d1b92'. String comparison failed due to '(head)' suffix. Fix: - Extract revision ID using grep -oE '^[a-f0-9]+' before space - Handle multiple heads: check if DB version matches any head - Add validation for empty outputs with clear error messages - Add success message showing head and DB version Verification: - Script syntax: bash -n passes - Handles single head (exact match) - Handles multiple heads (DB version matches any)	2026-09-10 17:57:46 +07:00
ik	49027306d9	A10: Fix bootstrap to use dynamic Alembic head check ... - Replace hardcoded '0013' with dynamic 'alembic heads' check - Works with any current head revision - Caddy adapt and scheduler checks already in place from previous fixes - Bootstrap uses loopback ports and isolated compose profile	2026-09-10 06:13:00 +07:00
ik	fc878c81d4	fix: R04 site cooldown uses full registry for disabled sources; R05 remove proxy/scheduler from bootstrap (#1788956171115)	2026-09-10 05:37:38 +07:00
ik	a37f9c4696	fix: R01 Caddy body_limit → request_body max_size (Caddy 2.10.2 compat) (#1788956171115)	2026-09-09 20:35:36 +07:00
ik	63e33e1861	fix: audit P0-P1 — T03-T07, D01-D08, U01-U02 (#1788956171115)	2026-09-09 20:02:52 +07:00
ik	c6fdc969c2	fix: separate admin page and API authentication	2026-09-09 07:29:39 +07:00
ik	eb501affb8	test: verify production proxy form routing	2026-09-09 07:27:52 +07:00
ik	bb61d21dd6	sync	2026-09-08 21:07:07 +07:00
ik	214b328cd2	perf: cache public activity aggregates	2026-09-07 18:54:58 +07:00
ik	fa3b24fb1f	feat: add safe diagnostics export	2026-09-07 18:49:53 +07:00
ik	6477681e41	ops: monitor database and object storage growth	2026-09-07 18:46:34 +07:00
ik	02b67741f8	feat: expose deployment build identity	2026-09-07 18:43:20 +07:00
ik	3529b6a1c8	feat: complete brand icon and static caching	2026-09-07 16:59:44 +07:00
ik	0701383c28	feat: schedule authorized community imports	2026-09-07 16:45:49 +07:00
ik	7217356594	feat: enable safe community auto publishing	2026-09-07 13:00:58 +07:00
ik	16e4c071d1	docs: target an open alpha launch	2026-09-07 09:27:11 +07:00
ik	2aa2d30750	feat: add production deployment preflight	2026-09-07 09:18:22 +07:00
ik	5e27a5b066	perf: stabilize list queries for pilot	2026-09-07 08:02:37 +07:00
ik	c45b4511b7	feat: serialize official record imports	2026-09-07 07:54:07 +07:00
ik	687b4c9cb5	feat: harden production security boundaries	2026-09-07 07:51:25 +07:00
ik	2fa6b68279	feat: automate production maintenance	2026-09-07 07:44:11 +07:00
ik	6e60988ac9	docs: record rf4spotter deployment status	2026-09-06 14:46:11 +07:00
ik	e6653d4c77	feat: add production health monitoring	2026-09-06 14:44:38 +07:00
ik	2200336524	feat: add production data retention	2026-09-06 14:37:58 +07:00
ik	0f075469c8	test: verify clean production bootstrap	2026-09-06 14:34:05 +07:00
ik	66fb1625da	feat: verify production backup restore	2026-09-06 14:24:26 +07:00
ik	870d9cc7f9	feat: harden production data and backups	2026-09-06 14:08:07 +07:00
ik	a4bd395856	feat: add production deployment for rf4spotter.ru	2026-09-06 13:52:30 +07:00