npeter83 283c4c9a1e feat(setup): first-boot detection + setup-mode gating + one-time token (epic 6a) ... - app_state gains configured + setup_token_hash (migration 0025); existing installs (any users) are marked configured so they never see the wizard, a fresh DB starts in setup mode. - On first boot the app mints a one-time setup token and logs the wizard URL (only the hash is stored); the token gates the setup steps (added in 6c). - A middleware locks all /api + /auth routes (except /api/setup, /api/version, /healthz, static) to 503 until configured, with a DB-free cached fast-path once setup completes. - GET /api/setup/status tells the SPA whether to show the wizard.		2026-06-21 00:38:47 +02:00
..
0001_initial.py	feat: M1 foundation — compose stack, FastAPI, Google OAuth, encrypted tokens	2026-06-11 01:01:37 +02:00
0002_ingest_core.py	feat: M2 (part 1) — subscription import, YouTube client, quota guard	2026-06-11 01:22:07 +02:00
0003_tags.py	feat: M3 — automatic channel tagging (language + topic system tags)	2026-06-11 01:57:19 +02:00
0004_feed_state_prefs.py	feat: M4 (part 1) — feed API, watch state, user preferences	2026-06-11 02:11:02 +02:00
0005_shorts_probed.py	fix: address reader-UI feedback (shorts, search, tags, login, UX)	2026-06-11 03:07:49 +02:00
0006_app_state.py	feat: sync status indicator, admin pause/resume, filtered video count	2026-06-11 04:15:25 +02:00
0007_deep_requested.py	feat(m5d): demand-driven deep backfill + per-user ETA	2026-06-11 23:07:09 +02:00
0008_invites.py	feat(m5c): onboarding — DB invites, request-access, admin approval, email	2026-06-12 01:43:07 +02:00
0009_quota_events.py	feat(stats): per-user API quota attribution + admin usage page	2026-06-12 02:47:55 +02:00
0010_watch_progress.py	feat(progress): track per-user resume position server-side	2026-06-14 18:40:05 +02:00
0011_playlists.py	feat(playlists): backend foundation — model, migration, CRUD API	2026-06-15 14:37:09 +02:00
0012_watch_later.py	feat(playlists): unify Saved into a built-in Watch later playlist	2026-06-15 15:33:53 +02:00
0013_playlist_fingerprint.py	feat(playlists): derive dirty from a synced-state fingerprint	2026-06-15 23:00:56 +02:00
0014_demo_account.py	feat(demo): demo-account schema + reusable rate limiter	2026-06-16 09:17:14 +02:00
0015_scheduler_settings.py	feat(scheduler): admin-editable job intervals (DB-backed, live reschedule)	2026-06-16 15:58:23 +02:00
0016_video_maintenance.py	feat(notifications): durable per-user inbox (P1) + maintenance schema	2026-06-18 03:20:17 +02:00
0017_notifications.py	feat(notifications): durable per-user inbox (P1) + maintenance schema	2026-06-18 03:20:17 +02:00
0018_maintenance_batch_setting.py	feat(scheduler): admin-tunable maintenance re-validation batch size	2026-06-18 04:37:08 +02:00
0019_user_yt_channel_id.py	feat(channels): discover & subscribe to channels from playlists	2026-06-19 02:16:42 +02:00
0020_rename_quota_actions.py	refactor(quota): canonical <entity>_<action> taxonomy for quota events	2026-06-19 11:48:11 +02:00
0021_system_config.py	feat(config): DB-backed system_config infrastructure + SMTP group	2026-06-19 12:22:36 +02:00
0022_password_auth.py	feat(auth): email+password registration with two-gate activation (5a backend)	2026-06-19 14:03:11 +02:00
0023_user_suspension.py	feat(admin): user management — roles, suspend, delete + lifecycle emails	2026-06-19 19:52:12 +02:00
0024_google_email_verified.py	feat(auth): account lifecycle — Google linking, passwords, suspension & deletion plumbing	2026-06-19 19:52:02 +02:00
0025_install_wizard.py	feat(setup): first-boot detection + setup-mode gating + one-time token (epic 6a)	2026-06-21 00:38:47 +02:00