siftlode/backend/app
npeter83 eda9bbbc57 feat(setup): first-boot detection + setup-mode gating + one-time token (epic 6a)
- app_state gains configured + setup_token_hash (migration 0025); existing installs (any users)
  are marked configured so they never see the wizard, a fresh DB starts in setup mode.
- On first boot the app mints a one-time setup token and logs the wizard URL (only the hash is
  stored); the token gates the setup steps (added in 6c).
- A middleware locks all /api + /auth routes (except /api/setup, /api/version, /healthz, static)
  to 503 until configured, with a DB-free cached fast-path once setup completes.
- GET /api/setup/status tells the SPA whether to show the wizard.
2026-06-21 00:38:47 +02:00
..
routes feat(setup): first-boot detection + setup-mode gating + one-time token (epic 6a) 2026-06-21 00:38:47 +02:00
static chore: rebrand Subfeed -> Siftlode 2026-06-14 04:40:22 +02:00
sync feat(config): move operational params to DB (quota/backfill/shorts/batch) 2026-06-19 13:07:45 +02:00
youtube feat(auth): manage Google OAuth credentials from the database (epic 6b) 2026-06-20 20:04:23 +02:00
__init__.py feat: M1 foundation — compose stack, FastAPI, Google OAuth, encrypted tokens 2026-06-11 01:01:37 +02:00
auth.py feat(auth): manage Google OAuth credentials from the database (epic 6b) 2026-06-20 20:04:23 +02:00
config.py feat(auth): account lifecycle — Google linking, passwords, suspension & deletion plumbing 2026-06-19 19:52:02 +02:00
db.py feat: M1 foundation — compose stack, FastAPI, Google OAuth, encrypted tokens 2026-06-11 01:01:37 +02:00
email.py feat(admin): user management — roles, suspend, delete + lifecycle emails 2026-06-19 19:52:12 +02:00
main.py feat(setup): first-boot detection + setup-mode gating + one-time token (epic 6a) 2026-06-21 00:38:47 +02:00
models.py feat(setup): first-boot detection + setup-mode gating + one-time token (epic 6a) 2026-06-21 00:38:47 +02:00
notifications.py feat(notifications): durable per-user inbox (P1) + maintenance schema 2026-06-18 03:20:17 +02:00
progress.py feat(scheduler): admin run-now/run-all triggers + live progress + completion notices 2026-06-18 04:01:10 +02:00
quota.py feat(config): move operational params to DB (quota/backfill/shorts/batch) 2026-06-19 13:07:45 +02:00
ratelimit.py feat(demo): demo-account schema + reusable rate limiter 2026-06-16 09:17:14 +02:00
scheduler.py feat(demo): scheduled demo-account reset (5c) 2026-06-19 15:25:13 +02:00
security.py feat(auth): email+password registration with two-gate activation (5a backend) 2026-06-19 14:03:11 +02:00
state.py feat(setup): first-boot detection + setup-mode gating + one-time token (epic 6a) 2026-06-21 00:38:47 +02:00
sysconfig.py feat(auth): manage Google OAuth credentials from the database (epic 6b) 2026-06-20 20:04:23 +02:00