4 Commits

Include renames

Author	SHA1	Message	Date
mrleo1nidandClaude Opus 5.5	622eb84bc9	fix(mobile): hoist expo-modules-autolinking instead of depending on it ... expo-doctor rejects expo-modules-autolinking as a direct dependency, which failed the CI mobile job. Expose it through publicHoistPattern so Expo can still require it from the apps/mobile/node_modules/expo symlink and the autolinking import stays expo.modules.ExpoModulesPackage. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-20 03:28:58 +03:00
mrleo1nidandClaude Opus 5.5	65aef3164a	fix(mobile): make expo-modules-autolinking resolvable from the app ... pnpm 11 ignores node-linker=hoisted in .npmrc, so node_modules uses the isolated layout. Expo evaluates expo's react-native.config.js through the apps/mobile/node_modules/expo symlink, where require('expo-modules-autolinking') fails silently; autolinking then guessed the import from the Gradle namespace (expo.core.ExpoModulesPackage) and the release Java compile failed. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-20 03:18:23 +03:00
mrleo1nidandClaude Opus 5.5	4fa1add80d	fix: address project review findings ... Security and robustness: - storage-agent rejects an empty INTERNAL_TOKEN (config notEmpty + middleware) - api takes the client IP only from X-Real-IP (chi RealIP trusted True-Client-IP) - /readyz reports ok/fail and logs the cause; checks run in parallel with a timeout - storage-agent shuts down gracefully; shared httpx.NewServer/Serve with IdleTimeout - goose migrations take a Postgres advisory lock - recommender readyz: per-check timeout, redis socket timeouts Clients: - Android release allows cleartext HTTP for LAN servers (expo-build-properties) - checkServer times out after 10s; connect button is disabled while checking Deploy and CI: - install.sh hands cache/uploads/updates/models to the non-root service users - update.sh refuses downgrades unless PIPU_ALLOW_DOWNGRADE=1 - recommender/analyzer get only the env they need; required secrets fail fast - nginx security headers and CSP; strip True-Client-IP - dev compose binds ports to 127.0.0.1; postgres/redis images pinned - version.mjs fails on a malformed explicit tag instead of releasing 0.0.0-dev - contract check catches untracked generated files - final releases fail without a release keystore; changelog skips rc tags Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-20 00:46:46 +03:00
mrleo1nidandClaude Opus 5.5	ebf296542c	feat: M0 monorepo skeleton with services, clients, deploy and CI ... - api/openapi.yaml: contract with /healthz, /readyz, /api/v1/server-info - services/api (Go): api with oapi-codegen strict server, goose migrations, readiness checks for Postgres/Redis; storage-agent stub with internal token - services/recommender (Python, uv): FastAPI health/readiness/internal status, `pipu-rec serve` and `pipu-rec analyze` entrypoints - packages: generated api-client, core (server URL + server check), i18n (ru/en + dictionary check), design-tokens (CSS vars + TS from tokens.json) - apps/web: Vite + React shell showing server status, language switch - apps/mobile: Expo (SDK 53) Android app with server connect screen - deploy: Dockerfiles, compose (prod + dev), nginx template, install/update scripts - .gitea/workflows: ci.yml and tag-based release.yml (images, signed APK, release) - scripts/version.mjs: version and Android versionCode from git tag - tests/fixtures/music/generate.sh: synthetic test library via ffmpeg - docs: versionCode formula, OpenAPI 3.0.3, dev instructions in README Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-19 23:55:11 +03:00