7 Commits

Include renames

Author	SHA1	Message	Date
mrleo1nidandClaude Opus 5.5	f66be2ba0a	feat: storage writes via storage-agent, accepts_uploads and write_template (M5.5) ... - storage-agent: POST /internal/files copies a staged file into a source (temp file, fsync, SHA-256 check, hard link so nothing is overwritten, " (2)" suffix on conflict, owner PIPU_FILE_UID/GID) and POST /internal/files/test. NFS sources that accept uploads are mounted rw in an agent-only /library-rw and bind-mounted read-only for others; local sources are written through /library-host-rw. - meta: write templates ({track:02}, {disc:1-}, [optional]) with name sanitising and length limits, suggestion from the source's regexes and a reversibility check against 50 catalogue tracks. - API and admin UI: accepts_uploads / write_template on sources, write-template suggest and check endpoints, write test result. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-20 13:46:56 +03:00
mrleo1nidandClaude Opus 5.5	8b76aa3964	feat: album covers with palettes and signed links (M2) ... - covers are taken from the embedded picture of the first track or a cover/folder/front image in the album folder, converted by ffmpeg to WebP 64/300/1200 and named by content hash, so albums sharing a cover share the files; a full scan looks again for albums without one - a 3-colour palette (dominant, second, most saturated accent) from a deterministic k-means feeds placeholders, page tints and the wave - /covers/{id} is public but HMAC-signed and immutable; nginx serves the file via X-Accel-Redirect, X_ACCEL=false serves it from api - the web client picks the size by display size and pixel density - install.sh and update.sh generate STREAM_SIGNING_KEY Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-20 07:06:15 +03:00
mrleo1nidandClaude Opus 5.5	ed4a492dba	feat(api): sign-in, refresh rotation and bootstrap admin (M1) ... - users, refresh_tokens and audit_log schema (migration 00002) - argon2id passwords with rehash on login, password policy, lockout with exponential back-off and a per-IP rate limit in Redis - Ed25519 JWT access tokens with kid-based key rotation; rotating refresh tokens with reuse detection (cookie for web, body for Android) - bootstrap admin on first start; must_change_credentials and must_change_password gate every other endpoint - /auth/login, /auth/refresh, /auth/logout(-all), /me, /me/password, /me/bootstrap-credentials, /me/sessions; server-info reports bootstrap_required - role policy from docs/auth-and-roles.md with table tests - problem+json errors with field errors; ru/en translations of the codes - install.sh and update.sh generate JWT_PRIVATE_KEY Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-20 06:12:25 +03:00
mrleo1nidandClaude Opus 5.5	38edcd3e0e	docs(install): music on a local disk at /mnt/music, repo in /opt/pipu-music ... Add an install step for mounting the music disk via fstab and wire it into the stack: LIBRARY_HOST in .env points at the host folder, compose mounts it as /library-host (read-only for api, nginx and analyzer; writable only for storage-agent), nginx serves it through X-Accel, and install.sh validates the path and records it in .env. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-20 01:51:26 +03:00
mrleo1nidandClaude Opus 5.5	01319c58d7	build(deploy): build images on the server instead of publishing to a registry ... - deploy/compose.yaml: every app service has `build:` (repo root context), local tags pipu-music-<service>:<version> - deploy/update.sh: git fetch → checkout tag (latest release by default, or vX.Y.Z / main) → docker compose build --pull → up -d → prune → /readyz; re-executes from a temp copy because checkout may replace the script - install.sh / .env.example: no REGISTRY, PIPU_VERSION set by update.sh, .env owned by the invoking user - release.yml: drop image publishing; release ships APK + sha256 only - ci.yml: new `docker` job builds all images without push - docs: install guide uses git clone, deployment/ci-cd updated, ADR-013 Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-20 00:16:05 +03:00
mrleo1nidandClaude Opus 5.5	1633b28c1a	docs(deploy): add install guide for a domain with HTTPS ... - docs/install-guide.md: step-by-step server setup (DNS, Docker, install.sh, .env, launch, checks), web and Android client setup, own reverse proxy variant, updates, backups and troubleshooting - deploy/compose.tls.yaml + Caddyfile: optional Caddy with automatic Let's Encrypt in front of nginx (enabled via COMPOSE_FILE in .env) - nginx: honour X-Forwarded-Proto/For from private networks - .env.example: DOMAIN, ACME_EMAIL, COMPOSE_FILE, bootstrap admin vars - install.sh: create caddy data dirs; release.yml: ship TLS files as assets - deployment.md, docs index and README link to the guide Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-20 00:03:26 +03:00
mrleo1nidandClaude Opus 5.5	ebf296542c	feat: M0 monorepo skeleton with services, clients, deploy and CI ... - api/openapi.yaml: contract with /healthz, /readyz, /api/v1/server-info - services/api (Go): api with oapi-codegen strict server, goose migrations, readiness checks for Postgres/Redis; storage-agent stub with internal token - services/recommender (Python, uv): FastAPI health/readiness/internal status, `pipu-rec serve` and `pipu-rec analyze` entrypoints - packages: generated api-client, core (server URL + server check), i18n (ru/en + dictionary check), design-tokens (CSS vars + TS from tokens.json) - apps/web: Vite + React shell showing server status, language switch - apps/mobile: Expo (SDK 53) Android app with server connect screen - deploy: Dockerfiles, compose (prod + dev), nginx template, install/update scripts - .gitea/workflows: ci.yml and tag-based release.yml (images, signed APK, release) - scripts/version.mjs: version and Android versionCode from git tag - tests/fixtures/music/generate.sh: synthetic test library via ffmpeg - docs: versionCode formula, OpenAPI 3.0.3, dev instructions in README Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-19 23:55:11 +03:00