20 Commits

Include renames

Author	SHA1	Message	Date
mokhtar	0f01c2fbd7	storage: version querylog.db and migrate it in place, never reset a healthy file ... querylog.db carries a schema version; migrations run at startup as one transaction after a vacuumed 0600 backup, and every failure refuses startup (exit 2, no systemd restart loop) instead of starting empty. corruption is the only automatic recreate left. the cut gate now requires a fixture-proven migration or an explicit versioned break with restore instructions, and locks shipped migration files and fixtures byte-for-byte.	2026-08-28 17:56:19 +02:00
mokhtar	6a0630c288	overview: one endpoint, live projections and a response cache (m36)	2026-08-27 17:48:20 +02:00
mokhtar	648d9b4496	milestone 30: overview as a dashboard, explicit health contract, period aggregations	2026-08-22 16:45:15 +02:00
mokhtar	0fd6bbd312	milestone 28: query provenance — every logged query is exactly explainable ... query rows gain qclass, rcode, group, policy action and reason, the matched rule or list entry with its source, cname and safe-search targets, route kind, forward zone, and the resolver that actually answered — the pool and local markers die. servfails are logged and name the resolver that lost; post-parse protocol refusals become rows. a detail page at /queries/:id renders the ordered explanation, and coverage watermarks distinguish an empty history from a missing one. the schema fingerprint changes: existing query history is recreated with the old file kept aside and the reset filed as a resolved diagnostic. fixes an oversized udp reply being rebuilt as noerror, which handed clients a truncated nxdomain as success.	2026-08-22 09:16:40 +02:00
mokhtar	037f209179	milestone 27: diagnostics — operational failures land in one curated log, resolved history purgeable	2026-08-20 20:05:59 +02:00
mokhtar	e0a7cd8a6b	milestone 26: upstream health answers for the selected period	2026-08-17 18:21:56 +02:00
mokhtar	3c794b645b	milestone 25: client names learned over reverse dns	2026-08-15 11:18:44 +02:00
mokhtar	21c5ce1f36	filter: separate the compiled bodies in the checksum, a name moving between them was invisible	2026-08-14 02:09:25 +02:00
mokhtar	1bce81eea0	milestone 24: persist and surface the unsupported-line count	2026-08-13 20:44:27 +02:00
mokhtar	2ab7c1f1de	milestone 21: abp list exceptions and a regex rule kind	2026-08-13 19:14:47 +02:00
mokhtar	d76afc147a	milestone 20: declarative configuration for iac	2026-08-11 23:31:40 +02:00
mokhtar	6c507992e4	milestone 19: hygiene sweep - dead ecs surface, single-source constants, tls classification, frontend state hazards, docker smoke network fix	2026-08-07 20:39:27 +02:00
mokhtar	6f67940995	milestone 18: collapse duplicated infrastructure into shared listener core, crud list helper, resource shells, transport race, name and line helpers, ui modules	2026-08-07 18:20:30 +02:00
mokhtar	8c3328562e	milestone 13 discrepancies: redact credentials from urls in logs, metrics and cli output	2026-08-07 00:45:17 +02:00
mokhtar	5253c47303	milestone 8: web server, rest api, sse, auth, metrics and static assets	2026-08-02 00:54:13 +02:00
mokhtar	a8092bb1b9	milestone 7: serving pipeline, client tracking, pause and lifecycle	2026-08-01 21:43:52 +02:00
mokhtar	8c50b6617f	milestone 6: dns cache, rate limiting, query logging, disk monitoring and retention	2026-08-01 17:48:12 +02:00
mokhtar	59d94df722	milestone 5: blocklist filtering, local records and conditional forwarding	2026-08-01 16:43:55 +02:00
mokhtar	3baf5d6581	dot upstreams: per-upstream tls_name for sni and cert verification by dns name	2026-08-01 14:38:45 +02:00
mokhtar	70bff22d75	storage and config: sqlite wrapper, migrations, querylog policy, repositories, zon config with import/export/check cli	2026-08-01 14:21:44 +02:00