4 commits

Author	SHA1	Message	Date
oliver	d56020d84c	Harden runtime budgets: DB pool, CLI concurrency, timeouts, and metrics. ... Add shared CLI budget/timeout with force-close, parallel port-traffic dispatch, unified shutdown, bounded audit queue, output/log caps, and /metrics probes. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-08-02 18:02:43 +08:00
oliver	b03c92bdef	Default collectors inline with the API again. ... Frontend+backend start is enough; external worker remains an optional production split. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-08-02 16:55:46 +08:00
oliver	136f40cdae	Split WebCRT and API startup; default collectors to worker process. ... Extract channel/session modules and CLI guard, move UME sidebands out of main, and default NETX_RUN_INLINE_SCHEDULERS off so ops run python -m netx_api.worker. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-08-02 16:50:52 +08:00
oliver	633a9d55bd	Harden auth scopes, SQL/WebCRT gates, and per-install JWT secrets. ... Add capability RBAC, Alembic bootstrap, optional worker schedulers, and close public docs by default so lab installs stay usable without shared signing keys. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-08-02 16:24:34 +08:00