409 commits

This branch

This branch

All branches

Author	SHA1	Message	Date
lekss361	47d0374386	fix(sf-fe-a5): address review #346 — CSV injection + area_m2 NaN fallback + nits ... 🟠 HIGH (security): ExportButtons.escapeCsvCell now prefixes cells starting with =/+/-/@/tab/CR with a leading apostrophe (OWASP CWE-1236). Prevents Excel/Calc/Sheets from evaluating attacker-controllable strings (egrn.address, cad_num) as formulas (=cmd|... / =HYPERLINK / DDE). 🟡 MEDIUM: buildFallbackEgrn now returns area_m2: NaN instead of 0; KPI 'Площадь' and EgrnPropertyTable 'Площадь' row both gate on Number.isFinite + >0, rendering '—' consistently when EGRN absent (previously asymmetric: KPI '—' / table '0 м²'). 🟢 LOW: scoreVerdict collapsed dead branch (both >=80 and >=65 returned same ПОДХОДИТ label). MiniMap toSiteMapData narrows source via explicit ternary instead of unchecked 'as' cast.	2026-05-18 01:53:09 +03:00
lekss361	6fe8d637fe	feat(sf-fe-a5): Section 1 "Инфо об участке" — HeadlineBar + KPI + EGRN + POI + Export ... - Section1ParcelInfo: wrapper с HeadlineBar вердикт, 4 KpiCard (Площадь/Район/Медиана/Score), 2-col grid (MiniMap + EgrnPropertyTable + PoiList2Gis), ExportButtons. Anchor id="section-1" для scrollspy. - MiniMap: dynamic import SiteMap (ssr:false), 400×320, адаптер ParcelAnalyzeResponse → ParcelAnalysis. - EgrnPropertyTable: 10 EGRN полей key-value, monospace для cad_num/area_m2, zebra-stripe. - PoiList2Gis: top-7 POI weighted score, Lucide иконки (Train/TreePine/GraduationCap/Baby/ShoppingBag/Hospital), distance + weight Badge, fallback из score_breakdown. - ExportButtons: PDF blob download (B7 /snapshot.pdf) + frontend CSV из analyze response, loading state, error display. - site-finder-api.ts: useParcelAnalyzeQuery (B5) + useParcelPoiScoreQuery (B6) с MOCK_ANALYZE/MOCK_POI_SCORE fallback. - mocks: parcel-analyze.json + poi-score.json fixtures для dev. - page.tsx: Section 1 placeholder заменён на <Section1ParcelInfo cad={cad} />.	2026-05-18 01:43:11 +03:00
lekss361	6ee20294f2	fix(frontend): sync package-lock.json with lucide-react (P0 deploy fail) (#345)	2026-05-17 22:30:31 +00:00
lekss361	956e461b9f	Merge pull request 'feat(sf-fe-a4): analysis sidebar (scrollspy) + breadcrumb + user avatar' (#344) from feat/sf-fe-a4-sidebar into main	2026-05-17 22:20:03 +00:00
lekss361	5aab8a97af	Merge pull request 'feat(sf-fe-a2): /site-finder entry — EntryMap + filters + drawer + recent' (#343) from feat/sf-fe-a2-entry into main	2026-05-17 22:19:17 +00:00
lekss361	05b6966a5f	Merge pull request 'fix(22d): commit outer transaction in scrape_catalog_objects orchestrator' (#342) from fix/22d-catalog-objects-missing-commit into main	2026-05-17 22:13:49 +00:00
lekss361	0084773abf	feat(sf-fe-a2): EntryMap + MapFilterBar + ParcelDrawer + RecentParcels + ParcelLegend ... - EntryMap: Leaflet карта ЕКБ с CircleMarker парцелей, bbox-aware refetch (TanStack Query), click-to-select, deselect on backdrop, isFetching indicator - MapFilterBar: chip-фильтры (status/area/vri) + district select + counter, bbox-linked counter через FilterBarBridge без ремаунта карты - ParcelDrawer: slide-in panel 360px — 4 KPI (status/area/district/vri) + coords + CTA «Открыть анализ» -> /site-finder/analysis/[cad], fallback ПКК Росреестр - RecentParcels: TanStack Query hook с localStorage fallback (gd_recent_parcels), merges B2 server list + local-only items; empty state + hover effects - ParcelLegend: status color legend (free/in_progress/favorite) + STATUS_COLORS export reused in EntryMap markers - site-finder-api.ts: useParcelsBboxQuery + useRecentParcels hooks, mock fallback via MOCK_PARCELS_BBOX / MOCK_RECENT_PARCELS; getLocalRecentParcels / addLocalRecentParcel - parcels-bbox.json: 20 ЕКБ-парцелей фикстура (6 районов, все статусы, разные ВРИ) - page.tsx: заменены MapPlaceholder + SidebarPlaceholder на реальные компоненты	2026-05-18 01:12:32 +03:00
lekss361	440b53cef0	feat(sf-fe-a4): AnalysisSidebar (scrollspy) + Breadcrumb + UserAvatar ... Wire analysis/[cad]/page.tsx: replace SidebarPlaceholder with AnalysisSidebar (sticky, IntersectionObserver scrollspy on sections 1/2/3/3.1/3.2/3.3/4/5), header with AnalysisBreadcrumb (SiteFinder → cad → Анализ) and UserAvatar (gd_org_id from localStorage, SSR-safe). Add lucide-react to package.json (was used in A1 but missing from deps).	2026-05-18 01:12:18 +03:00
lekss361	e5498682ba	fix(22d): commit outer transaction in scrape_catalog_objects orchestrator ... PR #335 использовал `with db.begin_nested():` SAVEPOINT для per-row UPDATE, но outer transaction никогда не commit'ился. После цикла Celery task закрывал session (`db.close()` в finally) → autobegin'd outer tx rollback → все UPDATE'ы теряются. Симптом: task завершается с processed=3 succeeded=3, в Glitchtip нет ошибок, но в БД ни одного catalog_scraped_at != NULL. Fix: добавлен db.commit() после цикла + rollback на ошибку commit'а.	2026-05-18 01:10:06 +03:00
lekss361	2548f71f40	feat(sf-fe-a3): UI primitives — HeadlineBar + Badge + Drawer (#341)	2026-05-17 22:06:53 +00:00
lekss361	3aaaaba5f9	feat(sf-fe-a1): routes shell — entry / analysis + _legacy/ backup + mock toggle (#340)	2026-05-17 22:01:49 +00:00
lekss361	96b03872ac	fix(22d): register scrape_kn_catalog_objects in celery include list (#339)	2026-05-17 21:54:13 +00:00
lekss361	bb7fbd5bc0	feat(sf-b4): GET /landing/stats — 5 KPI + paradox for landing page hero (#331)	2026-05-17 21:47:10 +00:00
lekss361	ea558b241c	feat(22d): admin endpoint POST /admin/scrape/kn-catalog-objects (#338)	2026-05-17 21:41:53 +00:00
lekss361	76112870e2	fix(pilot): drop pydantic EmailStr — email-validator dep missing → backend startup crash (#337)	2026-05-17 21:32:23 +00:00
lekss361	0567ad2130	feat(22d): domrf_catalog_object scraper — fill ~25 NULL kn_objects cols from SSR __NEXT_DATA__ (#335)	2026-05-17 21:26:22 +00:00
lekss361	c61c8c86af	feat(sf-b1): GET /parcels/by-bbox — map entry endpoint + parcel_user_status table (#336)	2026-05-17 21:25:48 +00:00
lekss361	dbeed80b26	Merge pull request 'feat(sf-b3): POST /pilot/request — lead gen + pilot_requests table (Telegram TODO)' (#330) from feat/sf-b3-pilot-leads into main	2026-05-17 21:14:28 +00:00
lekss361	b013fd886c	feat(sf-b6): GET /parcels/{cad}/poi-score — weighted top-7 (#333)	2026-05-17 21:11:25 +00:00
lekss361	493238447a	feat(sf-b5): extend /parcels/{cad}/analyze with 15 fields (EGRN/encumbrance/red_lines/risks/district prices) (#332)	2026-05-17 21:11:18 +00:00
lekss361	4040cba4c0	feat(sf-b7): GET /parcels/{cad}/snapshot.pdf — 1-page WeasyPrint export (#334)	2026-05-17 21:11:03 +00:00
lekss361	bf55cc9e56	merge: resolve main.py conflict (keep both pilot + users routers)	2026-05-18 00:08:48 +03:00
lekss361	8673290009	feat(sf-b2): GET /users/me/recent-parcels — stub endpoint (auth TODO) (#329)	2026-05-17 21:04:16 +00:00
lekss361	99e55c0bc2	feat(sf-b3): POST /pilot/request + pilot_requests table ... Добавляет endpoint для приёма заявок на пилот (lead-gen). INSERT в pilot_requests, response {id, created_at, status}. Telegram-уведомление — TODO (creds не настроены, #307 SF-B3). Migration: data/sql/118_pilot_requests.sql	2026-05-18 00:01:35 +03:00
lekss361	e872b1ebe4	fix(sf): exclude NULL competitors from aggregate calculations (velocity, market_avg, top_sellers) (#328)	2026-05-17 20:46:07 +00:00
lekss361	0c4d7f1ffb	feat(obj-2): mapping backfill via pre-materialized temp tables (migration 117) (#327)	2026-05-17 20:34:42 +00:00
lekss361	2bd80c5719	fix(obj-2): trim migration 116 to GIST index only — INSERT CTE timed out in deploy (#326)	2026-05-17 20:21:58 +00:00
lekss361	028c6a1356	Merge pull request 'fix(scrape-kn): real documents endpoints (5x) + skip obj_checks + sem 3→8' (#325) from fix/domrf-real-doc-endpoints-skip-checks-sem6 into main	2026-05-17 20:08:50 +00:00
lekss361	7a8d59beb4	feat(obj-3): SF backend migrate to objective_lots ground truth (price 0.3% -> 81%) (#324)	2026-05-17 20:08:17 +00:00
lekss361	2aa33e0eb8	fix(stealth): bump Semaphore 6->8 for higher concurrency in gather ... Per-object 7 endpoints через asyncio.gather упираются в semaphore limit. 6 -> 8 — ещё +33% concurrency для batch fetch'а.	2026-05-17 23:04:51 +03:00
lekss361	0f289c05b1	fix(scrape-kn): real documents endpoints (5x) + skip obj_checks 404 + sem 3->6 ... PR #322 used placeholder URLs: - /api/object/{id}/documents -> 404 (Playwright showed: 5 real endpoints: document/rpd / developer/report / project/documentation / documentation/other / document/permits). Replaced with 5 parallel fetches + merge into single upsert_documents call. - /api/object/{id}/checks -> 404. 6 checkboxes likely inline in bulk kn/object payload; endpoint /checks does not exist. Commented out _fetch_obj_checks_safe with TODO for separate investigation PR. - BrowserSession Semaphore(3) -> Semaphore(6) — double concurrency for intra-object gather. GlitchTip: kn_scrape_failures run #19 showed 40 failures each for both placeholder endpoints across first 30 objects of 1532.	2026-05-17 22:59:44 +03:00
lekss361	79c9a8a034	feat(obj-2): multi-feature mapping backfill (name+dev+district) — 142 → 200+ (#323)	2026-05-17 19:53:50 +00:00
lekss361	f2983c86d7	feat(scrape-kn): parallel Phase B/C + wire obj_checks + documents + is_ekb auto-derive (#322)	2026-05-17 19:40:16 +00:00
lekss361	c80d79e2d4	fix(objective parser): use_float=True in ijson + default=str in json.dumps (#321)	2026-05-17 19:11:25 +00:00
lekss361	d1b721a3be	fix(deploy): trigger workflow on all data/sql/** changes, not only .sql (#320)	2026-05-17 18:51:28 +00:00
lekss361	bb9a003080	fix(objective parser): wrap bytes-iter in file-like reader for ijson (#318)	2026-05-17 17:52:55 +00:00
lekss361	3978aa5905	feat(trade-in): TI-2 PDF export 4-page + frontend enable button (#319)	2026-05-17 17:16:48 +00:00
lekss361	90eb5af883	feat(trade-in): TI-3 frontend /trade-in page + 5 components + hooks (#317)	2026-05-17 16:58:53 +00:00
lekss361	29dbbee2ac	feat(trade-in): TI-1 mock /trade-in/estimate endpoint + Pydantic + SQL migration (#316)	2026-05-17 16:45:06 +00:00
lekss361	389e141ec9	fix(scrape-objective): stream-parse lots_pf via ijson to avoid OOM (#315)	2026-05-17 16:37:30 +00:00
lekss361	fce48a8924	fix(scrape-objective): drop redundant self arg in sync_all_groups loop (#313)	2026-05-17 16:13:41 +00:00
lekss361	fd2b09b806	fix(22k): quartirography — use f.flat_type not f.type (column doesn't exist) (#312)	2026-05-17 16:09:00 +00:00
lekss361	a93bef4147	feat(deploy): inject OBJECTIVE_API_KEY into backend/.env.runtime (#311)	2026-05-17 16:05:13 +00:00
lekss361	f8c382f885	feat(22k): object page — full exposure 9 blocks (sales/quartirography/metro/photos/docs/specs/checks) (#310)	2026-05-17 15:56:39 +00:00
lekss361	4bed58b43c	feat(22d): domrf_catalog.py scraper for per-flat price/status from SSR HTML (#309)	2026-05-17 15:40:01 +00:00
lekss361	b37e011aaa	feat(22c): domrf_kn_flat_plans new table + parser stub (#308)	2026-05-17 15:39:34 +00:00
lekss361	6612c1cd2b	feat(22begh): schema extension — flats+6 / objects+30 / developers+4 / metro_top3 (#306)	2026-05-17 15:26:59 +00:00
lekss361	171a029997	feat(22i): domrf_kn_documents new table + parser (#305)	2026-05-17 15:21:31 +00:00
lekss361	3183abe41b	fix(22j): DEDUP domrf_kn_infrastructure + ON CONFLICT (issue #297) (#304)	2026-05-17 15:15:03 +00:00
lekss361	16e3d5c86d	feat(22f): domrf_obj_checks table — 6 "Проверено на наш.дом.рф" checks (#303)	2026-05-17 15:07:24 +00:00