ci(infra): coverage-gate (#68) + OpenAPI codegen-assert (#69) + uptime monitoring (#75)

#68: pytest-cov + [tool.coverage] fail_under=65 (baseline 71%), backend-tests --cov + xml.
#69: openapi-codegen-check job (dump app.openapi() → openapi-typescript → git diff).
  Job использует node_modules-pinned openapi-typescript/prettier (НЕ npx --yes latest —
  иначе version-mismatch ложный diff). + regenerated api-types.ts из СВЕЖЕГО main openapi
  (8288 строк, включая #73 /freshness — синхронен).
#75: Uptime Kuma isolated stack + status.gendsgn.ru Caddy + external Telegram watchdog.
#77: no change — build cache достаточен.

Closes #68
Closes #69
Closes #75
Closes #77

.forgejo/workflows/ci.yml

@@ -110,7 +110,7 @@ jobs:
         # format-pass = future enhancement. `ruff check .` сейчас green.
         run: uv run ruff check .
 
-      - name: Test (pytest)
+      - name: Test (pytest + coverage gate)
         # --ignore=tests/smoke: prod-smoke бьёт по live https://gendsgn.ru
         #   (помечены @pytest.mark.prod_smoke; pyproject addopts уже их deselect'ит,
         #   но --ignore — belt-and-suspenders на случай сбора фикстур).
@@ -119,7 +119,35 @@ jobs:
         # tests/sql/ mv_layout self-skip'ается через Postgres-connectivity probe
         #   (5432 недоступен в этом mock-lane) → SKIP. Это intended.
         # PDF-тесты ИДУТ (libpango выше). Target: 0 failed, skips OK.
-        run: uv run pytest -q --ignore=tests/smoke
+        #
+        # Coverage-gate (#68): --cov=app меряет покрытие пакета app/.
+        #   --cov-fail-under=65 → job RED если покрытие упало ниже baseline
+        #   (измерено 2026-06: mock-lane сьют ~71%, см. [tool.coverage] в pyproject;
+        #   65 = floor с запасом, не flaky). На CI PDF-тесты РЕАЛЬНО идут (libpango),
+        #   поэтому реальное CI-покрытие ≥ локально-измеренного floor.
+        #   coverage.xml — артефакт для будущего Codecov/Coveralls upload (#68 badge).
+        #   term-missing → видно непокрытые строки прямо в job-логе.
+        run: |
+          uv run pytest -q --ignore=tests/smoke \
+            --cov=app \
+            --cov-report=term-missing:skip-covered \
+            --cov-report=xml:coverage.xml \
+            --cov-fail-under=65
+
+      - name: Coverage summary → job output
+        # Дешёвый human-readable итог. Бежит даже если gate упал (if: always) —
+        # чтобы было видно НАСКОЛЬКО просело покрытие, а не только "fail".
+        # GITHUB_STEP_SUMMARY поддержан не во всех версиях Forgejo act_runner →
+        # если переменная пустая/файла нет, печатаем в обычный лог (fallback).
+        if: always()
+        run: |
+          [ -f coverage.xml ] || { echo "coverage.xml отсутствует — пропускаю summary"; exit 0; }
+          report="$(uv run coverage report --skip-covered --sort=cover | tail -40)"
+          if [ -n "${GITHUB_STEP_SUMMARY:-}" ]; then
+            { echo '```'; echo "$report"; echo '```'; } >> "$GITHUB_STEP_SUMMARY"
+          else
+            echo "$report"
+          fi
 
   frontend-tests:
     runs-on: ubuntu-latest
@@ -152,3 +180,95 @@ jobs:
         # `npm run test` = `vitest run` (single-shot, не watch). Только тесты —
         # `next build` НАМЕРЕННО не здесь (тяжёлый, verified в deploy.yml build).
         run: npm run test
+
+  # OpenAPI → TS codegen drift-gate (#69). Защищает фронт от молчаливого
+  # рассинхрона типов: если backend изменил OpenAPI-схему, а
+  # frontend/src/lib/api-types.ts не перегенерён (`npm run codegen`) — job RED.
+  #
+  # Бежит когда поменялся backend ИЛИ frontend (backend-change может застейлить
+  # типы даже без правок во frontend/). Отдельный job (не внутри frontend-tests),
+  # чтобы vitest и codegen-gate скейлились независимо.
+  #
+  # WHY no running server: `npm run codegen` бьёт по http://localhost:8000/openapi.json,
+  # но схема = app.openapi() — её можно сдампить из python БЕЗ uvicorn/DB
+  # (app.main импортируется под TESTING=1 со stub-DSN, как в backend-tests).
+  # Это убирает flaky port-wait. openapi-typescript v7 принимает локальный файл.
+  #
+  # WHY prettier: committed api-types.ts форматируется prettier'ом через
+  # pre-commit hook (mirrors-prettier, no config → defaults, 2-space). Raw
+  # openapi-typescript отдаёт 4-space → diff-шум. Прогоняем prettier (defaults)
+  # на regen, чтобы сравнивать ТОЛЬКО контент, не форматирование.
+  openapi-codegen-check:
+    runs-on: ubuntu-latest
+    needs: changes
+    if: |
+      needs.changes.outputs.backend == 'true' ||
+      needs.changes.outputs.frontend == 'true'
+    env:
+      # Те же stub-переменные, что backend-tests: psycopg требует parseable URL
+      # на импорте; реального коннекта нет (схему дампим, не обслуживаем запросы).
+      TESTING: "1"
+      DATABASE_URL: postgresql+psycopg://test:test@localhost:5432/test
+      REDIS_URL: redis://localhost:6379/0
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Set up Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: "3.12"
+
+      - name: Set up Node
+        uses: actions/setup-node@v4
+        with:
+          node-version: "20"
+          cache: npm
+          cache-dependency-path: frontend/package-lock.json
+
+      - name: Install uv
+        run: |
+          curl -LsSf https://astral.sh/uv/install.sh | sh
+          echo "$HOME/.local/bin" >> "$GITHUB_PATH"
+
+      - name: Install system deps for geo + WeasyPrint
+        # app.main транзитивно тянет geo/PDF-модули. На macOS-dev импорт схемы
+        # проходит и без этих либ, но на ubuntu ставим как backend-tests
+        # (belt-and-suspenders, чтобы import app.main точно не падал).
+        run: |
+          sudo apt-get update
+          sudo apt-get install -y libpq-dev libgdal-dev libproj-dev libgeos-dev \
+            libcairo2 libpango-1.0-0 libpangoft2-1.0-0
+
+      - name: Install backend deps (uv sync --frozen)
+        working-directory: backend
+        run: uv sync --frozen
+
+      - name: Install frontend deps (npm ci)
+        working-directory: frontend
+        run: npm ci --legacy-peer-deps --no-audit --no-fund
+
+      - name: Dump OpenAPI schema from app (no server)
+        working-directory: backend
+        run: uv run python -c "import json; from app.main import app; print(json.dumps(app.openapi()))" > /tmp/openapi.json
+
+      - name: Regenerate api-types.ts + format (prettier defaults)
+        working-directory: frontend
+        # 1) openapi-typescript из дампнутого файла (эквивалент `npm run codegen`,
+        #    который читает ту же схему по URL). 2) prettier (defaults, как
+        #    pre-commit hook) → формат совпадает с committed-файлом.
+        run: |
+          npx openapi-typescript /tmp/openapi.json -o src/lib/api-types.ts
+          npx prettier --write src/lib/api-types.ts
+
+      - name: Assert api-types.ts is up-to-date
+        working-directory: frontend
+        # git diff --exit-code: 0 если файл не изменился (типы актуальны),
+        # 1 если regen дал другой результат (типы устарели → fail с подсказкой).
+        run: |
+          if ! git diff --exit-code -- src/lib/api-types.ts; then
+            echo "::error::frontend/src/lib/api-types.ts устарел относительно backend OpenAPI." \
+                 "Запусти: cd frontend && npm run codegen (с backend на :8000), затем закоммить." \
+                 "Pre-commit prettier отформатирует автоматически."
+            exit 1
+          fi
+          echo "✓ api-types.ts актуален относительно backend OpenAPI-схемы."

Caddyfile

@@ -149,6 +149,25 @@ errors.gendsgn.ru {
     }
 }
 
+# Uptime Kuma — self-hosted uptime monitoring + public status page (#75 B6-1).
+# DNS: A-record status.gendsgn.ru → IP VPS (добавить перед деплоем стека).
+# Контейнер из docker-compose.uptime.yml (project gendesign-uptime) на shared
+# gendesign_shared network. Если стек не запущен — Caddy отдаёт 502 ТОЛЬКО на
+# этом домене, main-сайт не страдает (как obsidian.gendsgn.ru).
+#
+# ВНИМАНИЕ: status-page НАМЕРЕННО публичен (trust-building для пилотов, issue #75).
+# Admin-панель Kuma (/dashboard, /manage-*) защищена собственным логином Kuma —
+# НЕ кладём её за caddy/users.caddy.snippet, иначе double-auth сломает setup.
+status.gendsgn.ru {
+    encode zstd gzip
+
+    reverse_proxy uptime-kuma:3001
+
+    log {
+        output file /var/log/caddy/status.gendsgn.ru.log
+    }
+}
+
 # Forgejo — self-hosted git (migration 2026-05-16).
 # DNS: A-record git.gendsgn.ru → IP VPS.
 # Forgejo container из forgejo-migration/docker-compose.yml на shared

backend/pyproject.toml

@@ -44,6 +44,7 @@ dependencies = [
 dev = [
     "pytest>=8.0.0",
     "pytest-asyncio>=0.23.0",
+    "pytest-cov>=5.0.0",  # coverage gate в CI (#68): pytest --cov=app --cov-fail-under
     "ruff>=0.5.0",
     "mypy>=1.10.0",
     "types-redis>=4.6.0",
@@ -101,9 +102,35 @@ ignore_missing_imports = true
 [tool.pytest.ini_options]
 testpaths = ["tests"]
 asyncio_mode = "auto"
+# --cov НАМЕРЕННО НЕ в addopts: локальный `pytest` остаётся быстрым/без coverage.
+# Coverage-gate включается ТОЛЬКО в CI явными флагами
+# (`--cov=app --cov-fail-under=65`, см. .forgejo/workflows/ci.yml backend-tests).
 addopts = ["-m", "not prod_smoke"]
 markers = [
     "slow: marks tests as slow (need real network, deselect with -m 'not slow')",
     "prod_smoke: production smoke tests against live https://gendsgn.ru (run only post-deploy with -m prod_smoke)",
     "integration: phantom column gate tests requiring TEST_DATABASE_URL (SSH tunnel to prod Postgres)",
 ]
+
+[tool.coverage.run]
+# Меряем покрытие пакета app/. branch=true — учитываем непокрытые ветки, не только строки.
+source = ["app"]
+branch = true
+omit = [
+    "app/**/__main__.py",
+    "tests/*",
+]
+
+[tool.coverage.report]
+# Baseline gate = 65% (измерено: mock-lane CI-сьют даёт ~71% на 2026-06; 65 = floor
+# с запасом под libpango-skip дельту и PR-to-PR дрейф, не ratchet'ит слишком туго).
+# Поднимать постепенно по мере роста сьюта (#68 acceptance: "постепенно поднимать").
+fail_under = 65
+show_missing = true
+skip_covered = true
+exclude_also = [
+    "if TYPE_CHECKING:",
+    "raise NotImplementedError",
+    "if __name__ == .__main__.:",
+    "@(abc\\.)?abstractmethod",
+]

backend/uv.lock

@@ -380,6 +380,90 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/d1/d6/3965ed04c63042e047cb6a3e6ed1a63a35087b6a609aa3a15ed8ac56c221/colorama-0.4.6-py2.py3-none-any.whl", hash = "sha256:4f1d9991f5acc0ca119f9d443620b77f9d6b33703e51011c16baf57afb285fc6", size = 25335, upload-time = "2022-10-25T02:36:20.889Z" },
 ]
 
+[[package]]
+name = "coverage"
+version = "7.14.1"
+source = { registry = "https://pypi.org/simple" }
+sdist = { url = "https://files.pythonhosted.org/packages/54/fd/0ab2772530e946e1be1abd0bc09e647ec9b02e88f0867857601fefca8953/coverage-7.14.1.tar.gz", hash = "sha256:30c08f7d90415aa98b3c990385dea2939b0da55f38515e5b369b83655f8523be", size = 920132, upload-time = "2026-05-26T20:41:36.783Z" }
+wheels = [
+    { url = "https://files.pythonhosted.org/packages/3d/b7/bdbb725ba02c5b42825b200c940f38b7a54fcad24627b7192f78f8110d76/coverage-7.14.1-cp312-cp312-macosx_10_13_x86_64.whl", hash = "sha256:a06c76364a9360e33d6d23769aefdf7f66f38e2ffb60ceb1baaa4989d83b695c", size = 220022, upload-time = "2026-05-26T20:39:03.702Z" },
+    { url = "https://files.pythonhosted.org/packages/72/81/fdc0898a55c6219223291ec1a1fe89966ef212ce82276aa0899df84b5de0/coverage-7.14.1-cp312-cp312-macosx_11_0_arm64.whl", hash = "sha256:fad54e871165f6ec2f536063ac74c3104508a12963e64072ba44bd822de52b0c", size = 220379, upload-time = "2026-05-26T20:39:05.381Z" },
+    { url = "https://files.pythonhosted.org/packages/de/72/de048c4a25e13bce59ac6a339351c10bdf2515e07459afcdaf04dc3143a2/coverage-7.14.1-cp312-cp312-manylinux1_i686.manylinux_2_28_i686.manylinux_2_5_i686.whl", hash = "sha256:84b535f00655ecafe1d929d1fb00ed5d6fa3051ea643ab2c161a3887b86f294b", size = 251888, upload-time = "2026-05-26T20:39:07.367Z" },
+    { url = "https://files.pythonhosted.org/packages/28/30/300c343f68beb9d4cbb64ec81e58c5b6b80b56927f72d2b38654ac26e013/coverage-7.14.1-cp312-cp312-manylinux1_x86_64.manylinux_2_28_x86_64.manylinux_2_5_x86_64.whl", hash = "sha256:6b6b0853b895fe0e98cbfc580d1ec3393d9302b4b1e96a77b3f5c91fdab899e6", size = 254624, upload-time = "2026-05-26T20:39:09.037Z" },
+    { url = "https://files.pythonhosted.org/packages/b1/ed/7b25642496e8170b6bac14adce00537c6e5fa2d586159401a4de3e8b49e6/coverage-7.14.1-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:442cc9c952b2df400cda54bb04ab87330cf2cd08a8692cbbea36773531eb6f37", size = 255739, upload-time = "2026-05-26T20:39:10.889Z" },
+    { url = "https://files.pythonhosted.org/packages/7f/a2/abd210b8c4e29c24e4624916db97bb519097a91034aaeb767f937e7da794/coverage-7.14.1-cp312-cp312-manylinux2014_ppc64le.manylinux_2_17_ppc64le.manylinux_2_28_ppc64le.whl", hash = "sha256:8270544c361ed405a27a060dbc9ed2c124b084d96dfdc2d9a2510482aef981ad", size = 257998, upload-time = "2026-05-26T20:39:12.722Z" },
+    { url = "https://files.pythonhosted.org/packages/7f/24/7c50beed3792fe62f6ce0545c6686ce83379719e2c0276179333d97eae92/coverage-7.14.1-cp312-cp312-manylinux_2_31_riscv64.manylinux_2_39_riscv64.whl", hash = "sha256:48b283b1dd6372e8de2a7a9a4c4d5dc06f4d4fd209b876f3c88a7a205a0c8f84", size = 252296, upload-time = "2026-05-26T20:39:14.259Z" },
+    { url = "https://files.pythonhosted.org/packages/15/05/0f874628ebcbfc77ead559ff210281ef06a97db08481832e7dd39274a135/coverage-7.14.1-cp312-cp312-musllinux_1_2_aarch64.whl", hash = "sha256:5b0c99ba93a07d56f6df340bb79be53202a082b2fdb81bfe6190b741a3470d54", size = 253658, upload-time = "2026-05-26T20:39:15.923Z" },
+    { url = "https://files.pythonhosted.org/packages/99/6f/ca6ad067364b337ef997802115e7ecad2abd2248b05471464b0dea02b4d4/coverage-7.14.1-cp312-cp312-musllinux_1_2_i686.whl", hash = "sha256:e471bc5769ff073b058cfadb0d736b56ce067c8560eabeb0da88462df98c23e7", size = 251803, upload-time = "2026-05-26T20:39:17.537Z" },
+    { url = "https://files.pythonhosted.org/packages/c0/30/b9b4d377cd9f40baf228068f5a81faf8450c6228503011bd499708483a50/coverage-7.14.1-cp312-cp312-musllinux_1_2_ppc64le.whl", hash = "sha256:f497a1ea81d4cd7c10ddcaa685135b9aabd291af3d55775a9ddf3cb7a364cdd9", size = 255873, upload-time = "2026-05-26T20:39:19.414Z" },
+    { url = "https://files.pythonhosted.org/packages/3c/21/7c721a9e5e6bb88547d30a787aefb97512d3f54c1324c7488d9b3743f7f9/coverage-7.14.1-cp312-cp312-musllinux_1_2_riscv64.whl", hash = "sha256:2222be86d0b54f5dd5a38f45f17f315f737245e857bf0bdedc70734f84a13c02", size = 251372, upload-time = "2026-05-26T20:39:21.169Z" },
+    { url = "https://files.pythonhosted.org/packages/9d/8c/f8ae5a2200130e1503cd7661a6cd3b2b7bacef98277fbf3571fb13f8b766/coverage-7.14.1-cp312-cp312-musllinux_1_2_x86_64.whl", hash = "sha256:85e85586565842f6932abebd4c18bcb1074223dc0b3576e7d173ca710622813a", size = 253245, upload-time = "2026-05-26T20:39:23.097Z" },
+    { url = "https://files.pythonhosted.org/packages/34/62/70a9024672a5f6910517d9628c52c9afbdd3cf8f46426af52bb148a56fff/coverage-7.14.1-cp312-cp312-win32.whl", hash = "sha256:4a28fd227808366b196a75476dced2eb35b351d6766ba9c858dc93319e87f4f1", size = 222567, upload-time = "2026-05-26T20:39:24.868Z" },
+    { url = "https://files.pythonhosted.org/packages/f6/81/8b7cd386839b039ebe1855733b9f9449a8dec5d79564018234f185a7fa70/coverage-7.14.1-cp312-cp312-win_amd64.whl", hash = "sha256:54acdb6674a4661768d7bf7db32dfb9f46ab1d764f8aba6df75ce1a6a088724e", size = 223372, upload-time = "2026-05-26T20:39:26.603Z" },
+    { url = "https://files.pythonhosted.org/packages/ae/ba/b44d472022f620d289d95fa830143235c0c36461c6f2437ea8d51e5481ed/coverage-7.14.1-cp312-cp312-win_arm64.whl", hash = "sha256:99cd41ff91afd94896fea3bc002706b6ae4ce95727d06e4a0f39c0a8d8bd8b1a", size = 221989, upload-time = "2026-05-26T20:39:28.242Z" },
+    { url = "https://files.pythonhosted.org/packages/8a/9e/5f6d56327c62b185225d145191c607e07515294a0aa6338e58805cd4a5ac/coverage-7.14.1-cp313-cp313-macosx_10_13_x86_64.whl", hash = "sha256:be9f2c802dcfce3f71298303aa5dad0dce440a76c52f2f60dacd8656dab78793", size = 220044, upload-time = "2026-05-26T20:39:29.902Z" },
+    { url = "https://files.pythonhosted.org/packages/75/92/e82aca356744cbbc0f77a0b623e38918c1872361963413a3bab5d0340393/coverage-7.14.1-cp313-cp313-macosx_11_0_arm64.whl", hash = "sha256:6223a72fd0e4c7156353ec0f08a5f93623e1d3034d0e2683b9bb8ea674131b1d", size = 220412, upload-time = "2026-05-26T20:39:31.561Z" },
+    { url = "https://files.pythonhosted.org/packages/27/c9/385bde0bf7ed0f4bf3a7ee5367060a86b5d218718cfd6fb943c0f836b34f/coverage-7.14.1-cp313-cp313-manylinux1_i686.manylinux_2_28_i686.manylinux_2_5_i686.whl", hash = "sha256:7279d2110a28cebc738b6459ecda2771735a4c18465fbbd36b3288fe5ed92247", size = 251412, upload-time = "2026-05-26T20:39:33.337Z" },
+    { url = "https://files.pythonhosted.org/packages/51/8c/23faf6a2343a0d17f960a4bd56c43bc7eb4cf312f774dd6ceebd82c7d8fc/coverage-7.14.1-cp313-cp313-manylinux1_x86_64.manylinux_2_28_x86_64.manylinux_2_5_x86_64.whl", hash = "sha256:9eeb3fcbc13ba40dfbdb22d01d196a28e9cef9ed4c29b60061a1e0e823a9929d", size = 254008, upload-time = "2026-05-26T20:39:35.009Z" },
+    { url = "https://files.pythonhosted.org/packages/42/06/36f4aa9ca8a815e6036156e80706a67828bb97bd826948244f6996dda957/coverage-7.14.1-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:5f0cfc27c539f07cf5c0a4cfe211d0b6cae039f8f40526dbaa71944e64b50a7b", size = 255241, upload-time = "2026-05-26T20:39:36.71Z" },
+    { url = "https://files.pythonhosted.org/packages/ca/79/95266316352f90f6b1c6736bb413302edfde2453fb32422d3911642691b3/coverage-7.14.1-cp313-cp313-manylinux2014_ppc64le.manylinux_2_17_ppc64le.manylinux_2_28_ppc64le.whl", hash = "sha256:221c70f316241a78e77e607c227cefc8808d4e08f28d99c04f35694690e940be", size = 257373, upload-time = "2026-05-26T20:39:38.412Z" },
+    { url = "https://files.pythonhosted.org/packages/e3/9c/58316d1f66c488b5fca8a0eb3e98348807813efa8a0d0833b9021be27488/coverage-7.14.1-cp313-cp313-manylinux_2_31_riscv64.manylinux_2_39_riscv64.whl", hash = "sha256:da028256b04ec30e5e0114b6f76172938c313991f0a2d3d894271315cf5d5e43", size = 251635, upload-time = "2026-05-26T20:39:40.268Z" },
+    { url = "https://files.pythonhosted.org/packages/ef/5a/ca2398a568e16fed7bb713e84ba3603a7164fb65779abe645c565ec890d5/coverage-7.14.1-cp313-cp313-musllinux_1_2_aarch64.whl", hash = "sha256:76a085d7005236a767e3426148b2c407e53ad61695c562f8a81da2d373324901", size = 253373, upload-time = "2026-05-26T20:39:42.145Z" },
+    { url = "https://files.pythonhosted.org/packages/6e/2c/0396562c32deaebe7be51d865b3a41e9a87d7561acafe1a28f53b07e019a/coverage-7.14.1-cp313-cp313-musllinux_1_2_i686.whl", hash = "sha256:b553d04b5e778a8e56d57eb134aff42a92718ecba45e79c4764ecfa40efd92ff", size = 251341, upload-time = "2026-05-26T20:39:43.907Z" },
+    { url = "https://files.pythonhosted.org/packages/fd/8f/a94f9221184c9cae1ee115820e3798e48b6b17777a9f19e46fb9a0c8dc74/coverage-7.14.1-cp313-cp313-musllinux_1_2_ppc64le.whl", hash = "sha256:46f714d2fb8ae2f4f29f23ada7f1e79b759fff5a70f94a1dac23af204c3ec9e4", size = 255497, upload-time = "2026-05-26T20:39:46.166Z" },
+    { url = "https://files.pythonhosted.org/packages/71/69/505d70e47db1eaebcd002c39759707621ef184cd6b1ae084d9f41293f323/coverage-7.14.1-cp313-cp313-musllinux_1_2_riscv64.whl", hash = "sha256:1896f5e19ff3f0431c7ce2172adc54890fd97f86b59ced8ca1649145d9ffe35d", size = 251159, upload-time = "2026-05-26T20:39:48.03Z" },
+    { url = "https://files.pythonhosted.org/packages/e0/aa/58681c383aa33a9d2ed40a02d7a22fbf780d1fa4d575396365777828198c/coverage-7.14.1-cp313-cp313-musllinux_1_2_x86_64.whl", hash = "sha256:62fd185ef9df3c33d1c8178c5af105f762afbad96038de9a4ae100aa6297ca33", size = 252934, upload-time = "2026-05-26T20:39:49.872Z" },
+    { url = "https://files.pythonhosted.org/packages/eb/fd/11c928cd6bdffc7074bb5965c173d9ebf517fb00205e1da524b98d29ef92/coverage-7.14.1-cp313-cp313-win32.whl", hash = "sha256:ab4af6352741a604c431c6072fce5bee33bf0f20dc7a56618d6bf6bb89e9810c", size = 222584, upload-time = "2026-05-26T20:39:51.68Z" },
+    { url = "https://files.pythonhosted.org/packages/6f/92/fb416fc26d340dcba19518c418d6048e913186e17243982c5e435e41fa7a/coverage-7.14.1-cp313-cp313-win_amd64.whl", hash = "sha256:7af486dabe8954d03b087f0021540897afe084f04e16ff5579e08cc46f871416", size = 223394, upload-time = "2026-05-26T20:39:53.472Z" },
+    { url = "https://files.pythonhosted.org/packages/73/c6/02d56e3867972f77d5036de924643f26c056e848f00452cafb4dbc3c29b4/coverage-7.14.1-cp313-cp313-win_arm64.whl", hash = "sha256:2224f89ffd0c5605ccce1ed7a584da162bc7c55f601ab1c946bc9de31a486b42", size = 222015, upload-time = "2026-05-26T20:39:55.374Z" },
+    { url = "https://files.pythonhosted.org/packages/4d/9e/fcc77914050df73f7662fa1f00902774c79c075a8388ab334074574bf77e/coverage-7.14.1-cp313-cp313t-macosx_10_13_x86_64.whl", hash = "sha256:de286598cc65d2b489411174b1faec2f5a7775fb3201fd925db2a76b4030f37d", size = 220733, upload-time = "2026-05-26T20:39:57.189Z" },
+    { url = "https://files.pythonhosted.org/packages/f7/67/2963cbdaf5cbadec44efa3a1e39eaa1f02df4079585f05387607a221e126/coverage-7.14.1-cp313-cp313t-macosx_11_0_arm64.whl", hash = "sha256:042c46ded7c288aeb07cf14a28b6c1e10b78fcba40171c3fa1e939377eeef0b5", size = 221086, upload-time = "2026-05-26T20:39:59.019Z" },
+    { url = "https://files.pythonhosted.org/packages/c8/c5/8701645574e11881f2f47d8930f98bc48b5d43b25eb5b4430dfc4a2f9f48/coverage-7.14.1-cp313-cp313t-manylinux1_i686.manylinux_2_28_i686.manylinux_2_5_i686.whl", hash = "sha256:f4ddbe407477f04c45115d1a4e5bc480f753553b534d338d4c3358b1cdd0ea52", size = 262381, upload-time = "2026-05-26T20:40:00.822Z" },
+    { url = "https://files.pythonhosted.org/packages/7c/28/7a64d73598263e0c5abd5084211a8474488d31b3c552ff531c719dfcff62/coverage-7.14.1-cp313-cp313t-manylinux1_x86_64.manylinux_2_28_x86_64.manylinux_2_5_x86_64.whl", hash = "sha256:d13e6725992e2d2fd7d81d4f5241952d13740121dfd501da09201be39b2c003a", size = 264458, upload-time = "2026-05-26T20:40:02.506Z" },
+    { url = "https://files.pythonhosted.org/packages/fa/d8/4969179db9f7eb4df218e69540adf829d1c835f59452513d065d15446802/coverage-7.14.1-cp313-cp313t-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:f747dc8edcfe740130f28f32f3995e955494285717e86ee25af51db2219df08a", size = 266884, upload-time = "2026-05-26T20:40:04.421Z" },
+    { url = "https://files.pythonhosted.org/packages/a6/78/a45d5794dbc9bafd97afc96a4377c86c7820d78b6cf51b89bc1d4e919275/coverage-7.14.1-cp313-cp313t-manylinux2014_ppc64le.manylinux_2_17_ppc64le.manylinux_2_28_ppc64le.whl", hash = "sha256:ced2f09ef276fd58611a1ef502164ad266d2b75174e5a40cabbdb4033f9f6cf2", size = 268022, upload-time = "2026-05-26T20:40:06.298Z" },
+    { url = "https://files.pythonhosted.org/packages/21/cb/4f5e354e9e3e67af96bd4e57113e6db6b22298c7168b13eec408a549903d/coverage-7.14.1-cp313-cp313t-manylinux_2_31_riscv64.manylinux_2_39_riscv64.whl", hash = "sha256:b84800013769a78ccb9ef4659402e26d06867e337b61ec365f77ad008adea80e", size = 261631, upload-time = "2026-05-26T20:40:08.226Z" },
+    { url = "https://files.pythonhosted.org/packages/ec/49/eced49af4cb996d5d8b7e94e736175c513e4facd3398507b89892b4326d8/coverage-7.14.1-cp313-cp313t-musllinux_1_2_aarch64.whl", hash = "sha256:ea8cd6ca0ee9f616aaef3afc6882e32c2cbf18b00d96313ffd76af650574034d", size = 264443, upload-time = "2026-05-26T20:40:10.137Z" },
+    { url = "https://files.pythonhosted.org/packages/f1/d8/5603a88a7c5913a6b54f6cb1a8c46f7b39cbb30f27cd3f492908da09b2d7/coverage-7.14.1-cp313-cp313t-musllinux_1_2_i686.whl", hash = "sha256:aa5e304a873fabddc11e484e9b6b738bd38bd7bed17b09aa84eecf5332e8b8bb", size = 262069, upload-time = "2026-05-26T20:40:11.999Z" },
+    { url = "https://files.pythonhosted.org/packages/f0/59/2ae3cb79da554a06c8619d6c88ea19dd1e4aed4b834b6a83bb1fa243bdc5/coverage-7.14.1-cp313-cp313t-musllinux_1_2_ppc64le.whl", hash = "sha256:5a1c5215be81035e629d5bc756650634d0bf31991038db7a0eccb90f025ce16d", size = 265780, upload-time = "2026-05-26T20:40:13.858Z" },
+    { url = "https://files.pythonhosted.org/packages/af/5f/b130c1dc999031f2648bd25317fbce505ad8d5562079b4ed81e736a84967/coverage-7.14.1-cp313-cp313t-musllinux_1_2_riscv64.whl", hash = "sha256:79058c47dae6788504b5effb319961bcd72d7240551464b91d474bc0ed186d69", size = 260970, upload-time = "2026-05-26T20:40:16.142Z" },
+    { url = "https://files.pythonhosted.org/packages/87/d1/ec13ccddeb48ec963bdfa72a11224bac2584bd045ba13beca82f8113e9c7/coverage-7.14.1-cp313-cp313t-musllinux_1_2_x86_64.whl", hash = "sha256:370c5afae3fa0658e11694a32b24c2778f6bc2d17718121f94ee185e69f26b54", size = 263157, upload-time = "2026-05-26T20:40:18.382Z" },
+    { url = "https://files.pythonhosted.org/packages/cf/c2/cd91ead503045161092d3845f7bb95ea2f25131ce96d3e314dd835d91b9c/coverage-7.14.1-cp313-cp313t-win32.whl", hash = "sha256:3758dd0a7f1fa57365ef2e781df0f0731d38b6e3772259d13dae4bd8a958d4b1", size = 223259, upload-time = "2026-05-26T20:40:20.381Z" },
+    { url = "https://files.pythonhosted.org/packages/71/9f/1e28d97e6bd2c76b07f38b7c02870f1371255ff6717f54eca578fcbbdd0e/coverage-7.14.1-cp313-cp313t-win_amd64.whl", hash = "sha256:6ff665fb023a77386fe11685190cee1f60a7d635994a30d9b0a061533d470fce", size = 224320, upload-time = "2026-05-26T20:40:22.316Z" },
+    { url = "https://files.pythonhosted.org/packages/a9/e0/d936e908f0e1efa55e52b91e01b52f1055cef5e1ab2718493390ed8e2fb8/coverage-7.14.1-cp313-cp313t-win_arm64.whl", hash = "sha256:17a5a241e5997621a956a7f402a7433ef4221e5152809b785bec79e2323799f1", size = 222577, upload-time = "2026-05-26T20:40:24.894Z" },
+    { url = "https://files.pythonhosted.org/packages/d6/34/fc2f101b151af3799a101f0550b0454aa008afdc0add677394ec4aa8ea10/coverage-7.14.1-cp314-cp314-macosx_10_15_x86_64.whl", hash = "sha256:d5ed429d0b8edaac649e889b4ffcedb6c80b06629a3f93050e3dddfb99235bee", size = 220091, upload-time = "2026-05-26T20:40:27.249Z" },
+    { url = "https://files.pythonhosted.org/packages/3d/a7/1ebae2ab5b961b5c79bb09fe7b3ac99edb190d8be4a8c510b2cf66f46468/coverage-7.14.1-cp314-cp314-macosx_11_0_arm64.whl", hash = "sha256:8011224a62280e50dab346960c03cf47aca1a1e09e608c0fb33fd6e0cc8e9500", size = 220421, upload-time = "2026-05-26T20:40:30.084Z" },
+    { url = "https://files.pythonhosted.org/packages/5e/90/92aca9cf0acc95123c96cd1eb1f08917897a7f5dee01e15738922971ec31/coverage-7.14.1-cp314-cp314-manylinux1_i686.manylinux_2_28_i686.manylinux_2_5_i686.whl", hash = "sha256:12c42ec1e14f553c4f817e989365982e646e27211f10a0f717855b94a79c8906", size = 251466, upload-time = "2026-05-26T20:40:32.542Z" },
+    { url = "https://files.pythonhosted.org/packages/26/2b/78048cbe3b999f6cbf9cc0d90abba6a88a3e0863a8c1c6cbc762f3f8802f/coverage-7.14.1-cp314-cp314-manylinux1_x86_64.manylinux_2_28_x86_64.manylinux_2_5_x86_64.whl", hash = "sha256:06144cd511cf2624873a035c5069cf297144f6e77a73ee3d7a55b605ec5efb42", size = 253973, upload-time = "2026-05-26T20:40:34.473Z" },
+    { url = "https://files.pythonhosted.org/packages/8e/21/c2e33b29d1cfde484a19d437afc343c6cd30b08d78cbbf9f5aff14e57b2b/coverage-7.14.1-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:a311d8e1da24be5c1ccf85cbfb06315dbaa1703d5a1eab3f6432c72b837917c8", size = 255318, upload-time = "2026-05-26T20:40:38.154Z" },
+    { url = "https://files.pythonhosted.org/packages/8e/ee/aad2f108d63b769121005302f16bf66db8625c88ceaba466942e09a2607e/coverage-7.14.1-cp314-cp314-manylinux2014_ppc64le.manylinux_2_17_ppc64le.manylinux_2_28_ppc64le.whl", hash = "sha256:c79cead5b5bc584d9c71451cb984d0e3a84e0c0937379c8efcbf27c8d661b851", size = 257633, upload-time = "2026-05-26T20:40:40.164Z" },
+    { url = "https://files.pythonhosted.org/packages/c2/f8/11a2c29b4fd76d9849f81d0bb812ec0017a9396df3217214e38934a8c837/coverage-7.14.1-cp314-cp314-manylinux_2_31_riscv64.manylinux_2_39_riscv64.whl", hash = "sha256:dcbf65f1f66a26cdd88c35cf68fb4729c5d1cd2e88added72420541dfb212034", size = 251488, upload-time = "2026-05-26T20:40:42.631Z" },
+    { url = "https://files.pythonhosted.org/packages/c9/b8/9a5820de4b8ac2b71d85e3b5fb49108d7469c665f0e2ad0dd7569023e305/coverage-7.14.1-cp314-cp314-musllinux_1_2_aarch64.whl", hash = "sha256:fd86572566fb40189a8260446158235159bc7a82dfbc87a3b39cf4fb57fcec1c", size = 253329, upload-time = "2026-05-26T20:40:45.208Z" },
+    { url = "https://files.pythonhosted.org/packages/6b/ff/f33e4823667e27548e8fd8df44217515303f9808d0ff29817db56f87d990/coverage-7.14.1-cp314-cp314-musllinux_1_2_i686.whl", hash = "sha256:7771b601718fdde84832c3a434ca9bbf4ae9adbc49d84198b4110700c3c77c36", size = 251291, upload-time = "2026-05-26T20:40:47.502Z" },
+    { url = "https://files.pythonhosted.org/packages/68/9b/489db0ebb209054766b90a9014a45f6d26eb724c02ec21311c3733b5a644/coverage-7.14.1-cp314-cp314-musllinux_1_2_ppc64le.whl", hash = "sha256:39b21e212c55af06fa375e3dbf90a8a8e38792f3a910c580066d23563830ddd5", size = 255564, upload-time = "2026-05-26T20:40:49.372Z" },
+    { url = "https://files.pythonhosted.org/packages/27/b5/16bc2d4c2409b23c7737edb68c83bc89e345f378050549fe1d75ac7d34d5/coverage-7.14.1-cp314-cp314-musllinux_1_2_riscv64.whl", hash = "sha256:f2302660e32562a532b442480121aef8aa61a5bdb20b30bf0adab29f10a5a4b4", size = 251107, upload-time = "2026-05-26T20:40:51.677Z" },
+    { url = "https://files.pythonhosted.org/packages/7d/0c/2629997469a00cd069d588a41c9dc887610f2775ae89d250c4791e65272a/coverage-7.14.1-cp314-cp314-musllinux_1_2_x86_64.whl", hash = "sha256:03a6f93c1ec3b7f2e77b5dbcc5573a2c21f12529a5c6bbe0f16f72303cc2fa4d", size = 252764, upload-time = "2026-05-26T20:40:54.267Z" },
+    { url = "https://files.pythonhosted.org/packages/d2/ee/f78d63c8f079e0d7211c7e2401fa17e311514534ba61bae03e4b287ce4ab/coverage-7.14.1-cp314-cp314-win32.whl", hash = "sha256:8a3ce026d73290f42f08dafecbd82c193a74df280461fbf97300fec51fd133ee", size = 222837, upload-time = "2026-05-26T20:40:56.496Z" },
+    { url = "https://files.pythonhosted.org/packages/dc/b9/be539854f93a70dfbeec69117f33ec70dc42ff0b65b5b07ab8d40d04228e/coverage-7.14.1-cp314-cp314-win_amd64.whl", hash = "sha256:114c95ef29302423b87d159075805f4ab973254a2638a5d7d046c94887cc87d7", size = 223650, upload-time = "2026-05-26T20:40:58.351Z" },
+    { url = "https://files.pythonhosted.org/packages/fe/9e/24e2842fef40f35ac82ba3a7719c8023d011bf3bf652d0675316a9d088a1/coverage-7.14.1-cp314-cp314-win_arm64.whl", hash = "sha256:a07891c3f4805442b31b71e84ba3cf29ed1aa9a428284e06deeb4b23e5b46343", size = 222218, upload-time = "2026-05-26T20:41:00.321Z" },
+    { url = "https://files.pythonhosted.org/packages/0a/1d/ac0a9df5fe31c1e8bdd658074905fc12844a05c1a7e3fdb8417e97c31e23/coverage-7.14.1-cp314-cp314t-macosx_10_15_x86_64.whl", hash = "sha256:1101a5ebb083aecb625ebb6209d4105b58f647b093cb2dc8122d7b33f743cfe1", size = 220822, upload-time = "2026-05-26T20:41:02.281Z" },
+    { url = "https://files.pythonhosted.org/packages/32/cf/f964fd9aff20323f9f1a726c97135f8a76bcd87b92dad141a456a43f3c64/coverage-7.14.1-cp314-cp314t-macosx_11_0_arm64.whl", hash = "sha256:851b9e1e4e8a4608e77c79714b2e77c0970d2ed7202a05e92ae407817481887b", size = 221084, upload-time = "2026-05-26T20:41:04.593Z" },
+    { url = "https://files.pythonhosted.org/packages/d8/5e/7e5ef2aba844de2b80d678619fcf0841b42e3f37f16411226f3fe4c1016f/coverage-7.14.1-cp314-cp314t-manylinux1_i686.manylinux_2_28_i686.manylinux_2_5_i686.whl", hash = "sha256:d5b89cdfb2ee051b71e8c3c70bd81a9eff81100f736a269136fe1a68efe00474", size = 262454, upload-time = "2026-05-26T20:41:06.641Z" },
+    { url = "https://files.pythonhosted.org/packages/64/62/75809bded87015cc4935524218a2a8ed8dd1a8498bfed30a2f4f7a4b4d34/coverage-7.14.1-cp314-cp314t-manylinux1_x86_64.manylinux_2_28_x86_64.manylinux_2_5_x86_64.whl", hash = "sha256:0177614a0370f227888b4e436a7c55686d6a9f90eb1ade2b624ba685a1686e86", size = 264578, upload-time = "2026-05-26T20:41:08.556Z" },
+    { url = "https://files.pythonhosted.org/packages/f3/42/d33392dc14633525012d2d504fa1a33b05538bf535f5c1d64675e5754b78/coverage-7.14.1-cp314-cp314t-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:2d69af5dea2de76fc485a83032a630523f985198b7e25be901ec60181587b01e", size = 266981, upload-time = "2026-05-26T20:41:10.824Z" },
+    { url = "https://files.pythonhosted.org/packages/2a/49/0157c4428c2aca7f1e09d5565930586fd5ae36f1655f08b0daa7cf1fcae1/coverage-7.14.1-cp314-cp314t-manylinux2014_ppc64le.manylinux_2_17_ppc64le.manylinux_2_28_ppc64le.whl", hash = "sha256:35ab22d91de736e8966b980dc355cbcdd2c6dbbcfe275f9a2991bc8a91b3df65", size = 268112, upload-time = "2026-05-26T20:41:12.966Z" },
+    { url = "https://files.pythonhosted.org/packages/96/26/86b9ce71f4092b1ed325ce1421698081df1286b833400b6836912834d6e0/coverage-7.14.1-cp314-cp314t-manylinux_2_31_riscv64.manylinux_2_39_riscv64.whl", hash = "sha256:357d4e32935c36588aaba057d734fa32428c360c9fc2e4442afbf1b646beee6e", size = 261558, upload-time = "2026-05-26T20:41:15Z" },
+    { url = "https://files.pythonhosted.org/packages/20/4c/c311210c5472cf5401d8422b0d7812cdd520f24417673afabda6c323faca/coverage-7.14.1-cp314-cp314t-musllinux_1_2_aarch64.whl", hash = "sha256:51bd64741cc6fa065abd300ede1afe5a5291ece9c31da8b24884deda48bcc3f8", size = 264447, upload-time = "2026-05-26T20:41:17.369Z" },
+    { url = "https://files.pythonhosted.org/packages/fb/71/59513f8710ed3e6b0ac0a050a5b7e977bb9c9e880354863b5d00d8809256/coverage-7.14.1-cp314-cp314t-musllinux_1_2_i686.whl", hash = "sha256:9132cd363a68a4c3daa7c8704a654b1e39d3360f6f5b8ddd470608a945236c07", size = 262048, upload-time = "2026-05-26T20:41:19.309Z" },
+    { url = "https://files.pythonhosted.org/packages/84/8d/bceed32dc494f5bbf50f775cd2e78ca814953942b5ea28d3c1c3ac316f14/coverage-7.14.1-cp314-cp314t-musllinux_1_2_ppc64le.whl", hash = "sha256:07c6290b1697b862c0478eab545eec949a0d0e4d6d03497f446d706da3b4f2de", size = 265781, upload-time = "2026-05-26T20:41:21.559Z" },
+    { url = "https://files.pythonhosted.org/packages/e7/c5/9348fe40dbfd4991aaf78df2c6c3098bfb2cc834d1fd362a64b4efef855a/coverage-7.14.1-cp314-cp314t-musllinux_1_2_riscv64.whl", hash = "sha256:5ea0c297e27133853b4d8a3eb799bff5a2dbd9f2f41537a240d337ac9b4df890", size = 260896, upload-time = "2026-05-26T20:41:23.428Z" },
+    { url = "https://files.pythonhosted.org/packages/ca/92/1ea0f03929da7cf87206b1fa24f4c8e9c158be0455481af29ec0a1f3503f/coverage-7.14.1-cp314-cp314t-musllinux_1_2_x86_64.whl", hash = "sha256:01b7733daad0237daa01ef80fe2dfceffc911e6a17fa7b55d14aa8214eaaaecd", size = 263214, upload-time = "2026-05-26T20:41:25.419Z" },
+    { url = "https://files.pythonhosted.org/packages/f6/a9/b2493c054c0e01a643266742ab45e15744e60743f9260cd930c7142b1124/coverage-7.14.1-cp314-cp314t-win32.whl", hash = "sha256:6adc5a36984624a70bf11d7184e20fa0a49aa7c47ffab43804106a1a695ea22e", size = 223624, upload-time = "2026-05-26T20:41:27.795Z" },
+    { url = "https://files.pythonhosted.org/packages/fc/bd/3e1e6a57fccd2d7c83fcdf338e93ba98eb85c6e877dd34731ac585375490/coverage-7.14.1-cp314-cp314t-win_amd64.whl", hash = "sha256:ddf799247318f34dbcd2efa8c95a8d0642674e926bb1774cf9b63dfd2a389d1c", size = 224728, upload-time = "2026-05-26T20:41:30.098Z" },
+    { url = "https://files.pythonhosted.org/packages/bb/d7/31066cf1d2f0c6c797fce911bcfa01dd35642dc6da992a950256097c5860/coverage-7.14.1-cp314-cp314t-win_arm64.whl", hash = "sha256:145986fe66647eb489f18d9a997567a3fd358584c4b5a808769113abc07466af", size = 222752, upload-time = "2026-05-26T20:41:32.123Z" },
+    { url = "https://files.pythonhosted.org/packages/8a/3c/1a983b9a745d7f83d53f057bcc5bf79ba6a2bbc08266b3f0c7d6fe630c9b/coverage-7.14.1-py3-none-any.whl", hash = "sha256:a252f21c27e38347e60111a3266b03827422a7d5525951aceee313aa68bab1d2", size = 211815, upload-time = "2026-05-26T20:41:34.078Z" },
+]
+
 [[package]]
 name = "cryptography"
 version = "47.0.0"
@@ -615,6 +699,7 @@ dev = [
     { name = "pre-commit" },
     { name = "pytest" },
     { name = "pytest-asyncio" },
+    { name = "pytest-cov" },
     { name = "ruff" },
     { name = "types-redis" },
 ]
@@ -663,6 +748,7 @@ dev = [
     { name = "pre-commit", specifier = ">=3.7.0" },
     { name = "pytest", specifier = ">=8.0.0" },
     { name = "pytest-asyncio", specifier = ">=0.23.0" },
+    { name = "pytest-cov", specifier = ">=5.0.0" },
     { name = "ruff", specifier = ">=0.5.0" },
     { name = "types-redis", specifier = ">=4.6.0" },
 ]
@@ -1921,6 +2007,20 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/e5/35/f8b19922b6a25bc0880171a2f1a003eaeb93657475193ab516fd87cac9da/pytest_asyncio-1.3.0-py3-none-any.whl", hash = "sha256:611e26147c7f77640e6d0a92a38ed17c3e9848063698d5c93d5aa7aa11cebff5", size = 15075, upload-time = "2025-11-10T16:07:45.537Z" },
 ]
 
+[[package]]
+name = "pytest-cov"
+version = "7.1.0"
+source = { registry = "https://pypi.org/simple" }
+dependencies = [
+    { name = "coverage" },
+    { name = "pluggy" },
+    { name = "pytest" },
+]
+sdist = { url = "https://files.pythonhosted.org/packages/b1/51/a849f96e117386044471c8ec2bd6cfebacda285da9525c9106aeb28da671/pytest_cov-7.1.0.tar.gz", hash = "sha256:30674f2b5f6351aa09702a9c8c364f6a01c27aae0c1366ae8016160d1efc56b2", size = 55592, upload-time = "2026-03-21T20:11:16.284Z" }
+wheels = [
+    { url = "https://files.pythonhosted.org/packages/9d/7a/d968e294073affff457b041c2be9868a40c1c71f4a35fcc1e45e5493067b/pytest_cov-7.1.0-py3-none-any.whl", hash = "sha256:a0461110b7865f9a271aa1b51e516c9a95de9d696734a2f71e3e78f46e1d4678", size = 22876, upload-time = "2026-03-21T20:11:14.438Z" },
+]
+
 [[package]]
 name = "python-dateutil"
 version = "2.9.0.post0"

docker-compose.uptime.yml

@@ -0,0 +1,57 @@
+# Uptime Kuma — self-hosted uptime monitoring + alerting (#75 B6-1).
+#
+# Деплоится ОТДЕЛЬНО от main-стека (свой compose-проект `gendesign-uptime`),
+# по образцу docker-compose.obsidian.yml. НЕ входит в deploy.yml path-фильтры —
+# main-pipeline (project `gendesign`, -f docker-compose.prod.yml) его НЕ трогает
+# и НЕ пересоздаёт. Запуск/обновление — вручную (Anton), см. инструкцию ниже.
+#
+#   docker network create gendesign_shared   # один раз, обычно уже создан main-стеком
+#   docker compose -p gendesign-uptime -f docker-compose.uptime.yml up -d
+#
+# Caddy в main-стеке маршрутизирует status.gendsgn.ru → uptime-kuma:3001 через
+# external network gendesign_shared (Caddyfile, блок status.gendsgn.ru).
+#
+# WHY отдельный контейнер, а не VPS: issue допускает доп-контейнер. Trade-off
+# принят сознательно — если упадёт весь VPS, Kuma упадёт вместе с сайтом и не
+# отправит алерт. Митигируется внешним «watchdog» (healthchecks.io / UptimeRobot
+# free tier), который пингует https://gendsgn.ru/health извне — см. README-блок
+# «External watchdog» ниже. Kuma покрывает per-endpoint/SSL/latency-мониторинг
+# и self-hosted status-page; внешний пинг — last-resort «весь хост лёг».
+#
+# Лёгкий: образ ~250 МБ, idle RAM ~80-120 МБ. mem_limit держит его в узде.
+
+services:
+  uptime-kuma:
+    image: louislam/uptime-kuma:1
+    container_name: gendesign-uptime-kuma
+    restart: unless-stopped
+    # expose (НЕ ports) — наружу не публикуем, фронтит Caddy через shared-сеть.
+    # Если нужен прямой доступ для первичной настройки без Caddy — временно
+    # раскомментируй ports ниже (127.0.0.1 only) и ходи через SSH-туннель.
+    expose:
+      - "3001"
+    # ports:
+    #   - "127.0.0.1:3001:3001"
+    volumes:
+      # Persistent: SQLite-база Kuma (мониторы, история, настройки, нотификации).
+      - uptime_kuma_data:/app/data
+    healthcheck:
+      # Встроенный extra/healthcheck в образе louislam/uptime-kuma.
+      test: ["CMD", "extra/healthcheck"]
+      interval: 60s
+      timeout: 10s
+      retries: 3
+      start_period: 30s
+    networks:
+      - shared
+    mem_limit: 256m
+
+volumes:
+  uptime_kuma_data:
+
+networks:
+  # Та же external-сеть, что у main-стека (Caddy) и obsidian-стека.
+  # Создаётся вне compose: docker network create gendesign_shared
+  shared:
+    external: true
+    name: gendesign_shared

ops/gendesign-uptime.default.example

@@ -0,0 +1,28 @@
+# Environment file for ops/uptime-healthcheck.sh (external uptime watchdog, #75).
+#
+# Install as a ROOT-OWNED, chmod-600 file that is NOT in git, on whatever host
+# runs the cron (ideally a host OTHER than the prod VM, so it survives a full
+# VPS outage):
+#   sudo cp ops/gendesign-uptime.default.example /etc/default/gendesign-uptime
+#   sudo chmod 600 /etc/default/gendesign-uptime
+#   sudo $EDITOR /etc/default/gendesign-uptime   # fill in real Telegram creds
+#
+# uptime-healthcheck.sh sources this file if present. With NO Telegram vars set,
+# it still logs up/down but sends no alert (useful for a dry run first).
+#
+# Get a bot token from @BotFather; get your chat_id by messaging the bot then
+# GET https://api.telegram.org/bot<TOKEN>/getUpdates and reading message.chat.id.
+
+# --- Telegram alerting (both required to enable alerts) ---
+#TELEGRAM_BOT_TOKEN=123456789:AA-REPLACE_WITH_REAL_BOT_TOKEN
+#TELEGRAM_CHAT_ID=123456789
+
+# --- optional overrides (defaults are sensible; uncomment only to change) ---
+#BASE_URL=https://gendsgn.ru
+#STATE_FILE=/var/tmp/gendesign-uptime-state
+#CURL_TIMEOUT=15
+#RETRIES=2
+#RETRY_SLEEP=5
+# Custom check list (newline-separated "label|path|expected_status"):
+#CHECKS="health|/health|200
+#market-pulse|/api/v1/analytics/market-pulse|200"

ops/uptime-healthcheck.sh

@@ -0,0 +1,142 @@
+#!/usr/bin/env bash
+# External uptime watchdog for gendesign (#75 B6-1, lightweight fallback).
+#
+# WHY THIS EXISTS alongside Uptime Kuma (docker-compose.uptime.yml): Kuma runs
+# ON the prod VM, so if the whole VM dies it can't alert. This script is meant to
+# run from cron on a DIFFERENT host (your laptop, a tiny free-tier box, Beget
+# shared-host cron) and hit the PUBLIC URLs over the internet — last-resort
+# "весь хост лёг" detection. Kuma covers rich per-endpoint/SSL/latency monitoring;
+# this covers the case Kuma structurally can't.
+#
+# Self-contained: only needs `curl` + `bash`. No docker, no repo checkout.
+# State (last-known status per check) lives in a file so we alert on TRANSITIONS
+# (up→down, down→up) — not every run — to avoid Telegram spam.
+#
+# Usage (cron — note `bash`, not a bare path, so a missing +x bit can't break it):
+#   * * * * * bash /path/to/uptime-healthcheck.sh >> /var/log/gendesign-uptime.log 2>&1
+#
+# Telegram alerting — set these in an env file (NOT in git, chmod 600):
+#   TELEGRAM_BOT_TOKEN=123456:ABC...
+#   TELEGRAM_CHAT_ID=123456789
+# Default env path: /etc/default/gendesign-uptime (override via UPTIME_ENV_FILE).
+# A redacted template lives at ops/gendesign-uptime.default.example.
+# Without a token set, the script still logs up/down but sends no alert.
+
+set -euo pipefail
+
+# --- config (env-overridable) ---
+UPTIME_ENV_FILE="${UPTIME_ENV_FILE:-/etc/default/gendesign-uptime}"
+# shellcheck source=/dev/null
+[[ -f "$UPTIME_ENV_FILE" ]] && source "$UPTIME_ENV_FILE"
+
+BASE_URL="${BASE_URL:-https://gendsgn.ru}"
+STATE_FILE="${STATE_FILE:-/var/tmp/gendesign-uptime-state}"
+CURL_TIMEOUT="${CURL_TIMEOUT:-15}"          # seconds per request (connect+read)
+RETRIES="${RETRIES:-2}"                     # extra attempts before declaring DOWN
+RETRY_SLEEP="${RETRY_SLEEP:-5}"             # seconds between attempts
+TELEGRAM_BOT_TOKEN="${TELEGRAM_BOT_TOKEN:-}"
+TELEGRAM_CHAT_ID="${TELEGRAM_CHAT_ID:-}"
+
+# Checks to probe. Format per line: "<label>|<path>|<expected_http_status>".
+# Override the whole list via CHECKS env (same newline-separated format).
+#
+# DEFAULT = /health ONLY. WHY: this watchdog is UNAUTHENTICATED, and in the
+# Caddyfile only /health (and /preview/*) are public — ALL /api/* sits behind
+# the Basic-Auth gate (import caddy/users.caddy.snippet) and returns 401 to an
+# anonymous client. So the issue's /api/v1/analytics/market-pulse and
+# /parcels/{cad}/analyze monitors CANNOT be probed anonymously — they belong in
+# Uptime Kuma, which can attach the Basic-Auth header (see README "Kuma monitors"
+# in docker-compose.uptime.yml). Probing them here would false-alarm forever.
+CHECKS="${CHECKS:-health|/health|200}"
+
+log() { echo "[$(date -u +'%Y-%m-%dT%H:%M:%SZ')] $*"; }
+
+# --- telegram (no-op if token/chat unset) ---
+notify() {
+  local text="$1"
+  if [[ -z "$TELEGRAM_BOT_TOKEN" || -z "$TELEGRAM_CHAT_ID" ]]; then
+    log "NOTIFY (telegram disabled — no token/chat): $text"
+    return 0
+  fi
+  curl -fsS --max-time "$CURL_TIMEOUT" \
+    -X POST "https://api.telegram.org/bot${TELEGRAM_BOT_TOKEN}/sendMessage" \
+    -d "chat_id=${TELEGRAM_CHAT_ID}" \
+    -d "disable_web_page_preview=true" \
+    --data-urlencode "text=${text}" \
+    >/dev/null 2>&1 \
+    || log "WARN: telegram sendMessage failed"
+}
+
+# --- state helpers (last status per check) ---
+prev_status() {
+  local label="$1"
+  [[ -f "$STATE_FILE" ]] || { echo "unknown"; return; }
+  # Line format: "<label> <status>". grep the latest for this label.
+  local v
+  v="$(grep -E "^${label} " "$STATE_FILE" 2>/dev/null | tail -1 | awk '{print $2}')"
+  echo "${v:-unknown}"
+}
+
+set_status() {
+  local label="$1" status="$2" tmp
+  tmp="$(mktemp)"
+  # Drop any prior line for this label, then append the fresh one.
+  if [[ -f "$STATE_FILE" ]]; then
+    grep -vE "^${label} " "$STATE_FILE" > "$tmp" 2>/dev/null || true
+  fi
+  echo "${label} ${status}" >> "$tmp"
+  mv "$tmp" "$STATE_FILE"
+}
+
+# --- probe one URL with retries; echoes "up" or "down code=NNN" ---
+probe() {
+  local url="$1" expect="$2" attempt code
+  # NB: NO `-f` here. `-w %{http_code}` always prints exactly a 3-digit status
+  # (or 000 on connect/timeout failure), so we judge by the code ourselves and
+  # never need a `|| echo` fallback (which previously concatenated → "401000").
+  for attempt in $(seq 1 "$((RETRIES + 1))"); do
+    code="$(curl -sS -o /dev/null -w '%{http_code}' --max-time "$CURL_TIMEOUT" "$url" 2>/dev/null)"
+    code="${code:-000}"
+    if [[ "$code" == "$expect" ]]; then
+      echo "up"
+      return 0
+    fi
+    [[ "$attempt" -le "$RETRIES" ]] && sleep "$RETRY_SLEEP"
+  done
+  # Report the last code seen for the alert body.
+  echo "down code=${code}"
+  return 0
+}
+
+# --- run ---
+overall_rc=0
+while IFS= read -r line; do
+  [[ -z "$line" ]] && continue
+  label="${line%%|*}"
+  rest="${line#*|}"
+  path="${rest%%|*}"
+  expect="${rest##*|}"
+  url="${BASE_URL}${path}"
+
+  result="$(probe "$url" "$expect")"
+  now="up"
+  [[ "$result" == up ]] || now="down"
+  prev="$(prev_status "$label")"
+
+  if [[ "$now" == "up" ]]; then
+    log "OK   $label ($url)"
+    if [[ "$prev" == "down" ]]; then
+      notify "✅ RECOVERED: gendesign $label is back UP ($url)"
+    fi
+  else
+    overall_rc=1
+    log "DOWN $label ($url) — $result"
+    # Alert on transition into down (or first-ever observation that is down).
+    if [[ "$prev" != "down" ]]; then
+      notify "🔴 DOWN: gendesign $label — ${url} (${result#down }). $(date -u +'%Y-%m-%dT%H:%M:%SZ')"
+    fi
+  fi
+  set_status "$label" "$now"
+done <<< "$CHECKS"
+
+exit "$overall_rc"