10 Commits

Include renames

Author	SHA1	Message	Date
mrleo1nidandClaude Opus 5.5	718125b719	ci: split CI by area with path filters and speed up releases ... - ci.yml becomes ci-api, ci-contract, ci-recommender, ci-ts, ci-mobile and docker workflows, each filtered by paths; docs-only commits run nothing - docker builds all four images in one job with plain docker build on the runner host, so the layer cache survives between runs - release no longer re-runs the test suite (the tagged commit already passed CI on main); version and release notes are one job - the android job mounts persistent Gradle and Android SDK caches from /opt/ci-cache (when the runner allows the volumes) and uses --build-cache - RELEASE_TOKEN is optional: fall back to the built-in job token - docs: CI layout and act_runner settings (capacity, cache, valid_volumes) Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-20 03:55:45 +03:00
mrleo1nidandClaude Opus 5.5	d3b2e7bfc3	ci(release): publish the release first, then attach the APK ... The release job now creates the Gitea release right after verification with generated notes: Android build status, changes grouped by Conventional Commit type with commit links, server update steps and APK install/check notes. The android job attaches the APK and .sha256 and rewrites only the status block (building / built with size, versionCode and SHA-256 / failed with a log link). scripts/release.mjs is idempotent on re-runs and unit-tested. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-20 03:45:21 +03:00
mrleo1nidandClaude Opus 5.5	12fc866c26	ci(release): cap memory of the Android release build ... v0.1.5 got past Metro, but the Gradle daemon was killed mid-bundle on the 8 GB runner. Compile Kotlin inside the Gradle JVM instead of a second daemon, limit Gradle and Metro to two workers, set the heap explicitly and print free/dmesg when the build fails. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-20 02:55:48 +03:00
mrleo1nidandClaude Opus 5.5	42d64cd49f	fix(mobile): keep Metro out of the native android/ios build directories ... Expo's monorepo config watches all of apps/mobile, so during the release build Metro crawled and hashed gigabytes of Gradle/CMake intermediates in android/ and the createBundleReleaseJsAndAssets task appeared to hang. Run the release build with CI=1 (no file watcher) and NODE_ENV=production. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-20 01:28:57 +03:00
mrleo1nidandClaude Opus 5.5	58fd82e52b	ci(release): build the APK for arm64-v8a only and report disk usage ... The v0.1.2 release ran out of disk while Gradle unpacked the NDK; building React Native's native code for four ABIs needs several more GB. Print df before the build and after a failure to make the next shortage obvious. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-20 00:48:33 +03:00
mrleo1nidandClaude Opus 5.5	4fa1add80d	fix: address project review findings ... Security and robustness: - storage-agent rejects an empty INTERNAL_TOKEN (config notEmpty + middleware) - api takes the client IP only from X-Real-IP (chi RealIP trusted True-Client-IP) - /readyz reports ok/fail and logs the cause; checks run in parallel with a timeout - storage-agent shuts down gracefully; shared httpx.NewServer/Serve with IdleTimeout - goose migrations take a Postgres advisory lock - recommender readyz: per-check timeout, redis socket timeouts Clients: - Android release allows cleartext HTTP for LAN servers (expo-build-properties) - checkServer times out after 10s; connect button is disabled while checking Deploy and CI: - install.sh hands cache/uploads/updates/models to the non-root service users - update.sh refuses downgrades unless PIPU_ALLOW_DOWNGRADE=1 - recommender/analyzer get only the env they need; required secrets fail fast - nginx security headers and CSP; strip True-Client-IP - dev compose binds ports to 127.0.0.1; postgres/redis images pinned - version.mjs fails on a malformed explicit tag instead of releasing 0.0.0-dev - contract check catches untracked generated files - final releases fail without a release keystore; changelog skips rc tags Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-20 00:46:46 +03:00
mrleo1nidandClaude Opus 5.5	1324cad2af	ci(release): install explicit Android SDK packages in setup-android ... The default `tools` package no longer exists in the SDK repository, so sdkmanager failed and the v0.1.1 release job never built the APK. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-20 00:30:47 +03:00
mrleo1nidandClaude Opus 5.5	01319c58d7	build(deploy): build images on the server instead of publishing to a registry ... - deploy/compose.yaml: every app service has `build:` (repo root context), local tags pipu-music-<service>:<version> - deploy/update.sh: git fetch → checkout tag (latest release by default, or vX.Y.Z / main) → docker compose build --pull → up -d → prune → /readyz; re-executes from a temp copy because checkout may replace the script - install.sh / .env.example: no REGISTRY, PIPU_VERSION set by update.sh, .env owned by the invoking user - release.yml: drop image publishing; release ships APK + sha256 only - ci.yml: new `docker` job builds all images without push - docs: install guide uses git clone, deployment/ci-cd updated, ADR-013 Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-20 00:16:05 +03:00
mrleo1nidandClaude Opus 5.5	1633b28c1a	docs(deploy): add install guide for a domain with HTTPS ... - docs/install-guide.md: step-by-step server setup (DNS, Docker, install.sh, .env, launch, checks), web and Android client setup, own reverse proxy variant, updates, backups and troubleshooting - deploy/compose.tls.yaml + Caddyfile: optional Caddy with automatic Let's Encrypt in front of nginx (enabled via COMPOSE_FILE in .env) - nginx: honour X-Forwarded-Proto/For from private networks - .env.example: DOMAIN, ACME_EMAIL, COMPOSE_FILE, bootstrap admin vars - install.sh: create caddy data dirs; release.yml: ship TLS files as assets - deployment.md, docs index and README link to the guide Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-20 00:03:26 +03:00
mrleo1nidandClaude Opus 5.5	ebf296542c	feat: M0 monorepo skeleton with services, clients, deploy and CI ... - api/openapi.yaml: contract with /healthz, /readyz, /api/v1/server-info - services/api (Go): api with oapi-codegen strict server, goose migrations, readiness checks for Postgres/Redis; storage-agent stub with internal token - services/recommender (Python, uv): FastAPI health/readiness/internal status, `pipu-rec serve` and `pipu-rec analyze` entrypoints - packages: generated api-client, core (server URL + server check), i18n (ru/en + dictionary check), design-tokens (CSS vars + TS from tokens.json) - apps/web: Vite + React shell showing server status, language switch - apps/mobile: Expo (SDK 53) Android app with server connect screen - deploy: Dockerfiles, compose (prod + dev), nginx template, install/update scripts - .gitea/workflows: ci.yml and tag-based release.yml (images, signed APK, release) - scripts/version.mjs: version and Android versionCode from git tag - tests/fixtures/music/generate.sh: synthetic test library via ffmpeg - docs: versionCode formula, OpenAPI 3.0.3, dev instructions in README Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-19 23:55:11 +03:00