6 commits

Author	SHA1	Message	Date
oliver	b36174bfa4	Add explicit Huawei hop system-view option and startup column safety-net. ... Some hops only accept stelnet in system-view; make it a saved yes/no setting (default off) instead of auto-retry, and always ALTER the new column on API boot when Alembic skips legacy DDL. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-08-28 23:58:05 +08:00
oliver	527472976a	Fix topology sync failing when ume_topo_link ifname columns are missing. ... Ensure startup safety-net adds a_ifname/z_ifname on brownfield DBs, and normalize ADD COLUMN IF NOT EXISTS for SQLite tests. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-08-11 09:34:07 +08:00
oliver	20c2fcd496	Harden auth with revocable sessions, cookies, and single-login default. ... Issue short-lived access JWTs backed by AuthSession rows, HttpOnly cookies with refresh rotation, idle timeout, session management UI, WebCRT ownership caps, and optional Redis login rate limits; new logins revoke other sessions by default. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-08-06 14:13:37 +08:00
oliver	b03c92bdef	Default collectors inline with the API again. ... Frontend+backend start is enough; external worker remains an optional production split. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-08-02 16:55:46 +08:00
oliver	136f40cdae	Split WebCRT and API startup; default collectors to worker process. ... Extract channel/session modules and CLI guard, move UME sidebands out of main, and default NETX_RUN_INLINE_SCHEDULERS off so ops run python -m netx_api.worker. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-08-02 16:50:52 +08:00
oliver	57b3faf9fb	Move schema evolution to Alembic with auto-upgrade on API start. ... Extract shared brownfield patches, add the legacy revision, and default to upgrade-head plus skip of duplicate inline DDL (with legacy fallback if Alembic fails). Co-authored-by: Cursor <cursoragent@cursor.com>	2026-08-02 16:41:56 +08:00