30 Commits

Include renames

Author	SHA1	Message	Date
mokhtar	0f01c2fbd7	storage: version querylog.db and migrate it in place, never reset a healthy file ... querylog.db carries a schema version; migrations run at startup as one transaction after a vacuumed 0600 backup, and every failure refuses startup (exit 2, no systemd restart loop) instead of starting empty. corruption is the only automatic recreate left. the cut gate now requires a fixture-proven migration or an explicit versioned break with restore instructions, and locks shipped migration files and fixtures byte-for-byte.	2026-08-28 17:56:19 +02:00
mokhtar	6a0630c288	overview: one endpoint, live projections and a response cache (m36)	2026-08-27 17:48:20 +02:00
mokhtar	ce143d1d87	db-mode config changes apply live in-process ... settings and upstream writes now follow a prepare, commit, publish, retire contract: candidates are built and validated before the database transaction, published as infallible pointer swaps, and old generations retire after their readers drain. per-query policy values snapshot once per query; upstream pool, cache, rate limiter, sessions, api limiter, log sink, blocklist scheduler and the query-log queue each gained one named live operation. restart_required shrinks from every scalar key to the bind keys and web.enabled; the admin ui drops its restart notices for everything else. file mode is unchanged.	2026-08-24 00:04:28 +02:00
mokhtar	fe71efe335	cut: schema gate — refuse to release an undisclosed querylog schema change ... the gate recomputes the previous release tag's ddl fingerprint from the remote peeled object and compares it against the tree's; a change must be disclosed by 'resets your query history' in the version's changelog section. the 0.0.9 reset shipped with an announcement claiming no schema change; this makes the impact mechanical instead of remembered.	2026-08-23 15:07:27 +02:00
mokhtar	f1a85d3dab	logger tests: join every writer future before its database closes, fix the gate-open race	2026-08-23 12:26:09 +02:00
mokhtar	5da4652e89	querylog: return to the default checkpoint cadence	2026-08-22 23:10:17 +02:00
mokhtar	648d9b4496	milestone 30: overview as a dashboard, explicit health contract, period aggregations	2026-08-22 16:45:15 +02:00
mokhtar	0fd6bbd312	milestone 28: query provenance — every logged query is exactly explainable ... query rows gain qclass, rcode, group, policy action and reason, the matched rule or list entry with its source, cname and safe-search targets, route kind, forward zone, and the resolver that actually answered — the pool and local markers die. servfails are logged and name the resolver that lost; post-parse protocol refusals become rows. a detail page at /queries/:id renders the ordered explanation, and coverage watermarks distinguish an empty history from a missing one. the schema fingerprint changes: existing query history is recreated with the old file kept aside and the reset filed as a resolved diagnostic. fixes an oversized udp reply being rebuilt as noerror, which handed clients a truncated nxdomain as success.	2026-08-22 09:16:40 +02:00
mokhtar	9b0b7c19f4	querylog: checkpoint every 8192 wal pages instead of 1000	2026-08-21 18:43:45 +02:00
mokhtar	addf24f92c	query log batching: one transaction per flush interval, not per query	2026-08-20 20:57:11 +02:00
mokhtar	037f209179	milestone 27: diagnostics — operational failures land in one curated log, resolved history purgeable	2026-08-20 20:05:59 +02:00
mokhtar	64c0d723a6	querylog: the aside file's name says why, so a schema change is not called corrupt	2026-08-17 20:24:21 +02:00
mokhtar	e0a7cd8a6b	milestone 26: upstream health answers for the selected period	2026-08-17 18:21:56 +02:00
mokhtar	3c794b645b	milestone 25: client names learned over reverse dns	2026-08-15 11:18:44 +02:00
mokhtar	21c5ce1f36	filter: separate the compiled bodies in the checksum, a name moving between them was invisible	2026-08-14 02:09:25 +02:00
mokhtar	1bce81eea0	milestone 24: persist and surface the unsupported-line count	2026-08-13 20:44:27 +02:00
mokhtar	21571e448e	schema: collapse config.db to a single baseline, ddl_v1 stays editable until v0.1	2026-08-13 19:14:54 +02:00
mokhtar	2ab7c1f1de	milestone 21: abp list exceptions and a regex rule kind	2026-08-13 19:14:47 +02:00
mokhtar	d76afc147a	milestone 20: declarative configuration for iac	2026-08-11 23:31:40 +02:00
mokhtar	6c507992e4	milestone 19: hygiene sweep - dead ecs surface, single-source constants, tls classification, frontend state hazards, docker smoke network fix	2026-08-07 20:39:27 +02:00
mokhtar	6f67940995	milestone 18: collapse duplicated infrastructure into shared listener core, crud list helper, resource shells, transport race, name and line helpers, ui modules	2026-08-07 18:20:30 +02:00
mokhtar	c50c6d285a	milestone 17: real deadlines, validator holes, upstream editor, trusted proxies, contract samples, badvers	2026-08-07 17:55:59 +02:00
mokhtar	25455e5ae2	milestone 16: behavioral fixes for silent failures, locks, counters and the query log	2026-08-07 01:54:40 +02:00
mokhtar	8c3328562e	milestone 13 discrepancies: redact credentials from urls in logs, metrics and cli output	2026-08-07 00:45:17 +02:00
mokhtar	5253c47303	milestone 8: web server, rest api, sse, auth, metrics and static assets	2026-08-02 00:54:13 +02:00
mokhtar	a8092bb1b9	milestone 7: serving pipeline, client tracking, pause and lifecycle	2026-08-01 21:43:52 +02:00
mokhtar	8c50b6617f	milestone 6: dns cache, rate limiting, query logging, disk monitoring and retention	2026-08-01 17:48:12 +02:00
mokhtar	59d94df722	milestone 5: blocklist filtering, local records and conditional forwarding	2026-08-01 16:43:55 +02:00
mokhtar	3baf5d6581	dot upstreams: per-upstream tls_name for sni and cert verification by dns name	2026-08-01 14:38:45 +02:00
mokhtar	70bff22d75	storage and config: sqlite wrapper, migrations, querylog policy, repositories, zon config with import/export/check cli	2026-08-01 14:21:44 +02:00