4 Commits

Include renames

Author	SHA1	Message	Date
mrleo1nidandClaude Opus 5.5	74da457362	feat(auth): make upload review a separate grant instead of an admin privilege ... Reviewing the upload queue is now a per-user flag (reviews_uploads), not part of the admin role: several people can hold it, a moderator can have it, and an admin may not. Only admins grant or revoke it; existing admins keep it. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-21 10:07:05 +03:00
mrleo1nidandClaude Opus 5.5	978f03b8f8	feat(admin): reset a user's recommendations from the users panel ... - POST /admin/users/{id}/reset-recommendations clears the taste profile (onboarding, CF vector, bandit), play stats and wave impressions; likes, dislikes and history stay, wave sessions stay so a playing wave keeps going - moderators may reset plain users, admins anyone including themselves; the reset is written to the audit log - users panel gets the menu action with a confirmation; docs updated Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-21 08:52:31 +03:00
mrleo1nidandClaude Opus 5.5	ed4a492dba	feat(api): sign-in, refresh rotation and bootstrap admin (M1) ... - users, refresh_tokens and audit_log schema (migration 00002) - argon2id passwords with rehash on login, password policy, lockout with exponential back-off and a per-IP rate limit in Redis - Ed25519 JWT access tokens with kid-based key rotation; rotating refresh tokens with reuse detection (cookie for web, body for Android) - bootstrap admin on first start; must_change_credentials and must_change_password gate every other endpoint - /auth/login, /auth/refresh, /auth/logout(-all), /me, /me/password, /me/bootstrap-credentials, /me/sessions; server-info reports bootstrap_required - role policy from docs/auth-and-roles.md with table tests - problem+json errors with field errors; ru/en translations of the codes - install.sh and update.sh generate JWT_PRIVATE_KEY Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-20 06:12:25 +03:00
mrleo1nidandClaude Opus 5.5	9eb1c25147	docs: add product idea, design prototypes and development documentation ... - IDEA.md: product vision from the user's perspective (input for design) - Architecture, ADRs, data model, REST API overview - Auth and roles, library storage (NFS, path regexes, scanner, search), playback, recommendation system ("My Wave"), track upload queue - Web, Android (offline, self-update), i18n, design system - Testing strategy, Gitea Actions CI/CD, deployment, conventions, roadmap - Clickable web/Android design prototypes and wave button variants - .claude/launch.json to serve the prototypes locally Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-19 23:21:31 +03:00