3 Commits

Author	SHA1	Message	Date
pi-agent	0098d9ca4a	feat: auto-healing system — HEALTHCHECK, rate-limiter cleanup, auto-rollback CI, watchdog ... - Dockerfile: add HEALTHCHECK (30s interval, 10s timeout, 3 retries) - rate-limit.ts: auto-cleanup stale entries every 5 min (prevents memory leak) - scripts/auto-heal.sh: watchdog for Synology cron — auto-restarts container, reloads nginx gateway, escalates on excessive failures - CI workflow: auto-rollback on deploy failure (tags :rollback image, reverts if health check fails after deploy)	2026-06-28 02:52:11 +08:00
pi-agent	de48918acf	security: fix critical webhook direct upgrade path, seed auth, CORS Vary header ... - Webhook polar/route: block direct ?userId=&tier= upgrades in production (NODE_ENV guard) - Seed route: require ADMIN_SECRET via x-admin-secret header - Feedback route: require FEEDBACK_ADMIN_TOKEN env var in production - CORS middleware: add Vary: Origin header for caching correctness - MOCK_PAYMENTS: add NODE_ENV production guard - Wallet top-up: add production guard for mock mode when POLAR_ACCESS_TOKEN unset	2026-06-28 01:15:45 +08:00
root	913fa94fb9	Add CI workflow	2026-06-21 19:20:51 +02:00