pipu-music

3 Commits

Include renames

Author	SHA1	Message	Date
mrleo1nid	b39e4dc28f	fix(uploads): hash files without WebAssembly under strict CSP ci / contract / contract (сгенерированный код совпадает с openapi.yaml) (push) Successful in 3m17s Details ci / mobile / mobile (Metro-бандл Android) (push) Successful in 3m12s Details ci / docker / docker (образы собираются — их сервер собирает сам при обновлении) (push) Successful in 1m42s Details ci / ts / ts (packages + web) (push) Failing after 4m37s Details ci / module boundaries / boundaries (push) Successful in 5s Details ci / desktop / rust (desktop proxy) (push) Successful in 6m12s Details	2026-10-29 00:05:49 +03:00
mrleo1nid	17bb0e1846	fix(uploads): allow WebAssembly hashing under CSP ci / ts / ts (packages + web) (push) Failing after 4m29s Details ci / desktop / rust (desktop proxy) (push) Successful in 5m54s Details ci / docker / docker (образы собираются — их сервер собирает сам при обновлении) (push) Successful in 3m23s Details	2026-10-28 23:34:42 +03:00
mrleo1nidandClaude Opus 5.5	4fa1add80d	fix: address project review findings ci / contract (сгенерированный код совпадает с openapi.yaml) (push) Successful in 48s Details ci / api (push) Successful in 51s Details ci / recommender (push) Canceled after 2s Details ci / ts (packages + web) (push) Canceled after 0s Details ci / docker (образы собираются — их сервер собирает сам при обновлении) (apps/web/Dockerfile, web, ) (push) Canceled after 0s Details ci / docker (образы собираются — их сервер собирает сам при обновлении) (services/api/Dockerfile, api, api) (push) Canceled after 0s Details ci / docker (образы собираются — их сервер собирает сам при обновлении) (services/api/Dockerfile, storage-agent, storage-agent) (push) Canceled after 0s Details ci / docker (образы собираются — их сервер собирает сам при обновлении) (services/recommender/Dockerfile, recommender, ) (push) Canceled after 0s Details ci / mobile (Metro-бандл Android) (push) Canceled after 0s Details Security and robustness: - storage-agent rejects an empty INTERNAL_TOKEN (config notEmpty + middleware) - api takes the client IP only from X-Real-IP (chi RealIP trusted True-Client-IP) - /readyz reports ok/fail and logs the cause; checks run in parallel with a timeout - storage-agent shuts down gracefully; shared httpx.NewServer/Serve with IdleTimeout - goose migrations take a Postgres advisory lock - recommender readyz: per-check timeout, redis socket timeouts Clients: - Android release allows cleartext HTTP for LAN servers (expo-build-properties) - checkServer times out after 10s; connect button is disabled while checking Deploy and CI: - install.sh hands cache/uploads/updates/models to the non-root service users - update.sh refuses downgrades unless PIPU_ALLOW_DOWNGRADE=1 - recommender/analyzer get only the env they need; required secrets fail fast - nginx security headers and CSP; strip True-Client-IP - dev compose binds ports to 127.0.0.1; postgres/redis images pinned - version.mjs fails on a malformed explicit tag instead of releasing 0.0.0-dev - contract check catches untracked generated files - final releases fail without a release keystore; changelog skips rc tags Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-20 00:46:46 +03:00