31 Commits

Author	SHA1	Message	Date
Hartmut	01f8974314	rename(phase 3): compose/DB/infra names + stray code refs capakraken → nexus ... - docker-compose.yml / .prod.yml / .ci.yml: project names, POSTGRES_DB/USER, pg_isready, DATABASE_URL, volume names (nexus_pgdata, nexus_prod_*) - .github/workflows/ci.yml: POSTGRES_PASSWORD, pg_isready, psql credentials, GRANT statements, POSTGRES_PASSWORD=nexus_dev for Docker Deploy job - scripts/db-target-guard.mjs: expectedDatabase default, NEXUS_EXPECTED_DB_NAME - scripts/prisma-with-env.mjs, e2e/test-server.mjs: env-var rename - packages/db/src/safe-destructive-env.ts + reset-dispo-import.ts: DB name set - packages/db/src/destructive-db-guard.ts: PROTECTED_DATABASE_NAMES → "nexus" - packages/db/src/destructive-db-guard.test.ts: all fixture DB names + comments - .env.example, tooling/deploy/deploy.env.example: DATABASE_URL, image refs - packages/api: Redis channel/key prefixes (rbac-invalidate, sse, ratelimit), logger service name, app-base-url log prefix - E2E: DB container names, localStorage/sessionStorage keys, email domains - scripts: architecture-guardrails filter, export/import-dev-seed defaults, harden-postgres defaults, start.sh pg_isready, worktree-hygiene fixture - tooling/migrate/rename-to-nexus.sh: new maintenance-window cutover script Only intentional capakraken survivor: anonymization.ts DEFAULT_ANONYMIZATION_SEED (functional cryptographic constant — changing it would invalidate stored aliases). Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>	2026-05-21 16:35:39 +02:00
Hartmut	3391ae5ce6	ci: consolidate workflows into single CI pipeline with job deps ... Collapses ci.yml, release-image.yml, and deploy-test.yml from three parallel push-triggered workflows into one orchestrated pipeline: - release-image.yml: converted to reusable workflow (workflow_call + workflow_dispatch). No longer triggers on push directly. - deploy-test.yml: deleted, content inlined into ci.yml as the docker-deploy-test job with needs: [build]. - ci.yml: adds docker-deploy-test job and release-images job. The release-images job calls release-image.yml via uses: and is gated to push events on main, so PRs do not publish images. - check-architecture-guardrails.mjs: updated to enforce the new reusable-workflow shape (workflow_call trigger, ci.yml chains release-image.yml, main-push gating). One run per commit, clear Success/Failure status, no wasted image builds when CI fails. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-04-12 14:54:05 +02:00
Hartmut	ed9827aa16	ci: fix architecture guardrails and document QNAP runner setup ... - release-image.yml: add guardrail anchor comments for runner/migrator target markers - useTimelineSSE.ts: trim JSDoc to stay under 120-line limit - timelineDragCleanup.ts: bump guardrail to 115 lines (type defs are cohesive, splitting would not reduce complexity) - .gitea/gitea_compose_qnap_all_in_one.md: full QNAP Container Station setup with absolute /share/Container/gitea paths, explicit act_runner register step, and $$-escaped env vars Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-04-12 12:11:24 +02:00
Hartmut	e103174d39	refactor(web): extract preview target setup	2026-04-01 11:59:10 +02:00
Hartmut	2a7769a0de	refactor(web): extract range release resolution	2026-04-01 11:53:11 +02:00
Hartmut	1e2bd3d4eb	refactor(web): extract project drag finalize	2026-04-01 11:49:14 +02:00
Hartmut	463caedcfd	refactor(web): extract touch event forwarding	2026-04-01 11:39:39 +02:00
Hartmut	37c6e03d23	refactor(web): extract allocation release effects	2026-04-01 11:35:17 +02:00
Hartmut	f4e9831dea	refactor(web): extract allocation drag session	2026-04-01 11:27:03 +02:00
Hartmut	510459fbff	refactor(web): extract allocation multi-drag session	2026-04-01 11:22:18 +02:00
Hartmut	5402189158	refactor(web): extract drag position helpers	2026-04-01 11:18:31 +02:00
Hartmut	3fe3a5fb2a	refactor(web): extract project drag session	2026-04-01 11:16:15 +02:00
Hartmut	0181f2b304	refactor(web): extract multi-select session	2026-04-01 11:14:28 +02:00
Hartmut	b14be80e32	refactor(web): extract timeline drag cleanup	2026-04-01 11:12:20 +02:00
Hartmut	922394c56a	refactor(web): split touch canvas adapters	2026-04-01 11:09:26 +02:00
Hartmut	a4789d718b	refactor(web): centralize multi-select release handling	2026-04-01 10:50:21 +02:00
Hartmut	ca947befde	refactor(web): extract allocation release classification	2026-04-01 10:48:47 +02:00
Hartmut	0ab1374853	refactor(web): centralize touch mouse adapters	2026-04-01 10:43:38 +02:00
Hartmut	eda8722d83	refactor(web): extract document drag listeners	2026-04-01 10:39:28 +02:00
Hartmut	84c5760392	refactor(web): extract range selection bootstrap	2026-04-01 10:17:39 +02:00
Hartmut	c941b1e5cf	refactor(web): extract allocation drag action plans	2026-04-01 10:15:54 +02:00
Hartmut	203bb8751d	refactor(web): extract allocation drag bootstrap	2026-04-01 10:10:06 +02:00
Hartmut	892a9c5ccf	refactor(web): extract project drag helpers	2026-04-01 10:06:32 +02:00
Hartmut	c32f56ba89	refactor(web): extract allocation multi-drag helpers	2026-04-01 10:03:16 +02:00
Hartmut	e23b502dd9	test(repo): guard allocation drag helper boundaries	2026-04-01 09:58:20 +02:00
Hartmut	ea4074af8f	test(repo): guard timeline drag helper boundaries	2026-04-01 09:52:23 +02:00
Hartmut	167eec31de	test(repo): guard timeline live preview boundaries	2026-04-01 09:43:14 +02:00
Hartmut	01e116ce99	test(repo): guard critical ownership surfaces	2026-04-01 09:04:29 +02:00
Hartmut	8c5be51251	feat(platform): checkpoint current implementation state	2026-04-01 07:42:03 +02:00
Hartmut	a7362f17bd	refactor(config): enforce runtime auth secret policy	2026-03-30 23:40:00 +02:00
Hartmut	7bcc831b5c	refactor(ops): standardize image-based production delivery	2026-03-30 23:35:29 +02:00