Semih
795528982e
fix(phase6a): increase BullMQ lockDuration to 5min (network/db calls exceed 30s)
...
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com >
2026-05-13 21:15:06 +00:00
Semih
1a7a1b5787
feat(phase6a): behavioral insight pipeline ingestion + tagging + compression
...
- prisma: sessions_meta, compressed_sessions, ingestion_watermarks
- worker: PostHog client (eu.i.posthog.com), heuristic filter
- worker: BullMQ insight-pipeline queue (ingest 5min / tag 2min / compress 3min)
- worker: tagger (bug_suspected, ux_friction, upgrade_hesitation, etc.) + severity scoring
- worker: rrweb -> semantic timeline transform + 8-pattern PII sanitization
- worker: fingerprint hash + MinIO upload (bucket: insight-compressed)
- web: /insights pipeline dashboard + session timeline viewer
- sidebar: Insights nav entry
LLM (Phase 6b), insight inbox, cost dashboard, GitHub loop deferred to later phases.
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com >
2026-05-13 20:58:36 +00:00
Semih
31040a76b4
feat(phase5): coolify ops + backup status dashboard
...
- lib/coolify.ts typed client (whitelisted apps)
- /operations: deploy/restart server actions per app, audited
- /operations: backup status cards reading MinIO listings
- lib/minio.ts shared client
- docs/phase5-deferred.md (migration runner + stripe webhook rationale)
2026-05-13 11:22:59 +00:00
Semih
909cacf7b3
feat(phase4): rate limit + audit archive + panel backup + DR docs
...
- src/lib/rate-limit.ts (Redis sliding window, fail-open)
- before-hook on /sign-in/email: 5 attempts/min per IP+email
- worker job audit-archive (daily 03:30, JSONL → MinIO, 90d retention)
- worker job panel-backup (daily 04:00, pg_dump -Fc -Z9 → MinIO)
- Dockerfile adds postgresql16-client
- scripts/restore-drill.sh restores latest dump into panel_drill
- docs/disaster-recovery.md + docs/phase4-deferred.md (mTLS + Infisical rationale)
2026-05-13 11:14:36 +00:00
Semih
ed79f4eacd
feat(phase3c): SSE /api/events/stream + live /events page
2026-05-13 11:06:32 +00:00
Semih
b9709ed07e
feat(phase3): worker container + event bus + scheduled jobs
...
apps/worker:
- BullMQ nightly scheduler (cron 0 3 * * *)
- Redis Streams consumer-group per wired/active project
- Persists events to Event model
schema:
- Event model (streamId unique, project + type indexed)
2026-05-13 11:03:58 +00:00
Semih
e455ebbfce
feat(phase2): planned badge, Cmd+K palette, per-project dashboard cards
...
- Project.status (planned/wired/active) + seed updates
- ProjectBadge component
- CommandPalette (⌘K) wired in PanelShell with project + nav + sign-out
- Dashboard '/' shows per-project cards + KPI strip
- Added doner312 to seeded projects
2026-05-13 10:54:07 +00:00
Semih
7b83ef8f11
feat(phase1d): sase admin-sdk skeleton + endpoint inventory on /projects/sase
2026-05-13 10:43:07 +00:00
Semih
e4e734fc66
feat(phase1c): audit sign-in / sign-out via better-auth after hook
2026-05-13 10:40:26 +00:00
Semih
f72dcc05ba
feat(phase1b): sase.tr read-only connection
...
- prisma/sase/schema.prisma with User + UserSubscription (partial view)
- lib/db-sase.ts exports typed RO client
- /projects/sase shows live metrics (users count, new users 7d, active subs)
- seed marks sase as active
DATABASE_URL_SASE_RO wired to super_panel_reader (SELECT-only)
2026-05-13 10:38:03 +00:00
Semih
d189206f06
feat(phase1a): admin-sdk base, audit helper, project seed, panel pages
...
- src/lib/audit.ts + src/lib/admin-sdk/base.ts (typed HTTP + auto audit)
- prisma/seed.ts seeds 5 projects (all inactive)
- pages: /projects, /projects/[key], /audit, /operations, /events, /settings
- components/panel-shell.tsx shared layout
- entrypoint runs seed after db push
2026-05-13 10:33:18 +00:00
Semih
5aca3934ca
feat: shadcn/ui + sidebar-07 + dashboard-01 layout
...
- shadcn init (neutral base, css variables)
- AppSidebar wired to panel routes (Overview/Projects/Operations/Events/Audit/Settings)
- NavUser dropdown uses Better Auth signOut
- SectionCards reads live counts from panel DB
- TooltipProvider wraps root layout
2026-05-13 10:12:57 +00:00
Semih
b2f59420b5
fix: secure cookie name in middleware; drop TOTP (tailscale gates access)
2026-05-13 10:04:52 +00:00
Semih
d906a6488f
chore: disable signup — single-user panel
2026-05-13 09:33:02 +00:00
Semih
db890c3e18
fix: dockerfile build flow + drop standalone
2026-05-13 09:27:58 +00:00
Semih
67a7c5b887
feat: phase 0 skeleton — next.js 16 + better-auth + prisma
2026-05-13 09:17:50 +00:00
