peter 911f5100d8 feat(audit): admin audit log (Notification P3) ...

Append-only who/what/when trail for admin actions + scheduler run summaries,
generalizing QuotaEvent. Logged at ACTION / run-summary granularity — never
per-row (a scheduler run touching thousands of videos is ONE row).

Backend:
- migration 0054_audit_log + AuditLog model (actor_id FK SET NULL, action,
  target_type/id, summary, before/after JSON, created_at).
- app/audit.py: AuditAction constants (single source of truth, i18n'd on the
  client) + record() (adds to the caller's txn) + gc(retention_days).
- producers wired: role change / suspend / delete / invite approve-deny-add /
  demo add-remove-reset / discovery purge (admin.py); config set/reset — secret
  VALUES never logged, key only (config.py); scheduler interval + maintenance
  tune (scheduler routes); sync pause/resume (sync.py); and the scheduler _job()
  choke point writes ONE run-summary row per run — manual runs + errors always,
  automatic runs only when they changed something (no no-op-poll spam).
- retention: audit_gc scheduler job prunes rows older than audit_retention_days
  (sysconfig, default 180; 0 = keep forever).
- admin API routes/audit.py (/api/admin/audit): recent-window list (actor emails
  resolved, System for background) + clear (leaves one tamper-evidence row).

Frontend:
- new admin-only "Audit log" nav page (ScrollText) using the shared DataTable
  (first admin page to reuse it) — sort/filter/paginate/persist, action select
  filter, actor text filter, before→after detail, Clear-all with confirm.
- AuditLog.tsx + auditColumns.tsx + api.adminAudit/clearAudit + AuditRow type.
- trilingual audit + auditActions namespaces (HU/EN/DE) + nav + config-group +
  scheduler job labels; Audit config group (retention days).

2026-07-12 07:32:41 +02:00

..

0001_initial.py

feat: M1 foundation — compose stack, FastAPI, Google OAuth, encrypted tokens

2026-06-11 01:01:37 +02:00

0002_ingest_core.py

feat: M2 (part 1) — subscription import, YouTube client, quota guard

2026-06-11 01:22:07 +02:00

0003_tags.py

feat: M3 — automatic channel tagging (language + topic system tags)

2026-06-11 01:57:19 +02:00

0004_feed_state_prefs.py

feat: M4 (part 1) — feed API, watch state, user preferences

2026-06-11 02:11:02 +02:00

0005_shorts_probed.py

fix: address reader-UI feedback (shorts, search, tags, login, UX)

2026-06-11 03:07:49 +02:00

0006_app_state.py

feat: sync status indicator, admin pause/resume, filtered video count

2026-06-11 04:15:25 +02:00

0007_deep_requested.py

feat(m5d): demand-driven deep backfill + per-user ETA

2026-06-11 23:07:09 +02:00

0008_invites.py

feat(m5c): onboarding — DB invites, request-access, admin approval, email

2026-06-12 01:43:07 +02:00

0009_quota_events.py

feat(stats): per-user API quota attribution + admin usage page

2026-06-12 02:47:55 +02:00

0010_watch_progress.py

feat(progress): track per-user resume position server-side

2026-06-14 18:40:05 +02:00

0011_playlists.py

feat(playlists): backend foundation — model, migration, CRUD API

2026-06-15 14:37:09 +02:00

0012_watch_later.py

feat(playlists): unify Saved into a built-in Watch later playlist

2026-06-15 15:33:53 +02:00

0013_playlist_fingerprint.py

feat(playlists): derive dirty from a synced-state fingerprint

2026-06-15 23:00:56 +02:00

0014_demo_account.py

feat(demo): demo-account schema + reusable rate limiter

2026-06-16 09:17:14 +02:00

0015_scheduler_settings.py

feat(scheduler): admin-editable job intervals (DB-backed, live reschedule)

2026-06-16 15:58:23 +02:00

0016_video_maintenance.py

feat(notifications): durable per-user inbox (P1) + maintenance schema

2026-06-18 03:20:17 +02:00

0017_notifications.py

feat(notifications): durable per-user inbox (P1) + maintenance schema

2026-06-18 03:20:17 +02:00

0018_maintenance_batch_setting.py

feat(scheduler): admin-tunable maintenance re-validation batch size

2026-06-18 04:37:08 +02:00

0019_user_yt_channel_id.py

feat(channels): discover & subscribe to channels from playlists

2026-06-19 02:16:42 +02:00

0020_rename_quota_actions.py

refactor(quota): canonical <entity>_<action> taxonomy for quota events

2026-06-19 11:48:11 +02:00

0021_system_config.py

feat(config): DB-backed system_config infrastructure + SMTP group

2026-06-19 12:22:36 +02:00

0022_password_auth.py

feat(auth): email+password registration with two-gate activation (5a backend)

2026-06-19 14:03:11 +02:00

0023_user_suspension.py

feat(admin): user management — roles, suspend, delete + lifecycle emails

2026-06-19 19:52:12 +02:00

0024_google_email_verified.py

feat(auth): account lifecycle — Google linking, passwords, suspension & deletion plumbing

2026-06-19 19:52:02 +02:00

0025_install_wizard.py

feat(setup): first-boot detection + setup-mode gating + one-time token (epic 6a)

2026-06-21 00:38:47 +02:00

0026_messages.py

feat(messages): end-to-end encrypted real-time direct messaging backend

2026-06-25 22:05:35 +02:00

0027_message_e2ee.py

feat(messages): end-to-end encrypted real-time direct messaging backend

2026-06-25 22:05:35 +02:00

0028_live_search_provenance.py

feat(search): live YouTube search backend

2026-06-29 02:01:31 +02:00

0029_unaccent_search.py

feat(feed): accent-insensitive search (unaccent)

2026-06-29 02:30:37 +02:00

0030_search_finds.py

feat(feed): per-user search finds in Mine scope + full-text relevance search

2026-06-30 00:39:09 +02:00

0031_title_fts.py

feat(feed): per-user search finds in Mine scope + full-text relevance search

2026-06-30 00:39:09 +02:00

0032_search_document.py

feat(feed): broaden search to a weighted document (title + keywords + queries + description)

2026-06-30 02:00:38 +02:00

0033_channel_explore.py

feat(channels): channel-explore backend — about metadata, ephemeral provenance, cleanup

2026-06-30 02:52:44 +02:00

0034_blocked_channels.py

feat(search): ephemeral results, count selector, blocklist, new-first ordering (backend)

2026-07-01 00:42:32 +02:00

0035_saved_views.py

feat(views): saved-views backend — table, model, CRUD + reorder API

2026-07-01 03:17:36 +02:00

0036_download_center.py

feat(downloads): M1 — schema, config, worker container, deps

2026-07-02 23:57:40 +02:00

0037_download_builtin_profiles.py

feat(downloads): M1 — schema, config, worker container, deps

2026-07-02 23:57:40 +02:00

0038_asset_gc_notified.py

feat(downloads): M3 — per-user quota + retention GC

2026-07-03 00:26:40 +02:00

0039_video_title_normalize.py

feat(titles): normalize video titles for display (feed, search, downloads)

2026-07-03 03:00:08 +02:00

0040_reset_builtin_profiles.py

improvement(downloads): no-embed builtin presets + 1080p default

2026-07-03 04:08:53 +02:00

0041_download_edit.py

feat(downloads): editor backend — trim/crop derivatives (phase 2)

2026-07-04 01:01:46 +02:00

0042_download_links.py

feat(downloads): public share-by-link + watch page backend

2026-07-04 04:19:29 +02:00

0043_asset_source_url.py

feat(downloads): store + show a canonical "downloaded from" source URL

2026-07-04 21:25:37 +02:00

0044_plex_catalog.py

feat(plex): P0 backend foundations — catalog model, config, client

2026-07-05 01:35:08 +02:00

0045_plex_filter_meta.py

feat(plex): expanded metadata filters, clickable info page, image disk cache

2026-07-05 23:45:55 +02:00

0046_plex_people_search.py

feat(plex): search cast & crew names + clickable person cards

2026-07-06 00:56:01 +02:00

0047_plex_collections.py

feat(plex): collections — sync, browse, filter, and info-page strips (Phase 1, read)

2026-07-06 02:25:48 +02:00

0048_plex_playlists.py

feat(plex): Playlists Phase 1 — per-user ordered watch-lists (Siftlode-native)

2026-07-06 19:05:12 +02:00

0049_download_display_meta.py

feat(downloads): editable details with clickable channel and extra links

2026-07-07 20:19:18 +02:00

0050_asset_poster.py

feat(downloads): clickable channels + poster fallback for thumbnail-less sources

2026-07-07 22:28:49 +02:00

0051_plex_link.py

feat(plex): Phase A — one-time Plex→Siftlode watch-state import

2026-07-09 14:42:18 +02:00

0052_plex_show_meta.py

feat(plex): TV-show metadata sync + series filters (Phase 1 of series view)

2026-07-10 21:43:09 +02:00

0053_user_session_epoch.py

feat(auth): SA4 — server-side session revocation via per-user session epoch

2026-07-12 03:00:16 +02:00

0054_audit_log.py

feat(audit): admin audit log (Notification P3)

2026-07-12 07:32:41 +02:00