814 commits

This branch

This branch

All branches

Author	SHA1	Message	Date
bot-backend	77692b2244	fix(pdf): brand-spoof + median=0 empty-state + SSRF + дисклеймер + sources (Refs #772) ... 5 связанных client-facing+legal дефектов PDF-генерации (audit #7/#8/#9/#13/#33): A (#7): бренд PDF из estimate.created_by (get_brand_for_user), НЕ из ?brand= query — param удалён → brand-spoof невозможен. B (#9): generate_trade_in_pdf гейтит по estimate.insufficient_data → empty-state страница «недостаточно данных» вместо «0,0 млн» + фабрикованной таблицы потерь. C (#8): _build_cover рендерит brand.logo_url (validated) + brand.pdf_disclaimer на обложке (были =None). D (#13): _safe_logo_url/_safe_color + _make_safe_url_fetcher блокирует file://; base_url=None (был file:///) → SSRF closed. logo_url+primary_color валидируются. E (#33): n_with_repair=n_total (убран фабрикованный 40%); sources из estimate.sources_used (не хардкод); None-guard в _examples_rows. report_number не менялся (estimate_id UUID — уникален; смена display сломала бы нумерацию без чёткого спека). brand.py изменений не потребовал. pytest -k 'pdf or brand' 54 pass, ruff clean.	2026-05-30 19:51:14 +03:00
bot-backend	ec84637abf	fix(estimator): expected_sold guard listings_clean → median_price>0 (Refs #773) (#784) ... Co-authored-by: bot-backend <bot-backend@gendsgn.local> Co-committed-by: bot-backend <bot-backend@gendsgn.local>	2026-05-30 16:39:08 +00:00
bot-backend	30ae4841a4	fix(scrapers): yandex area из embedded-state JSON (Refs #775) (#783) ... Co-authored-by: bot-backend <bot-backend@gendsgn.local> Co-committed-by: bot-backend <bot-backend@gendsgn.local>	2026-05-30 16:38:12 +00:00
bot-frontend	fdbd6ed70d	fix(tradein): MapPicker через portal в document.body — z-index конфликт с SourcesProgress (#771) (#782) ... Co-authored-by: bot-frontend <bot-frontend@gendsgn.local> Co-committed-by: bot-frontend <bot-frontend@gendsgn.local>	2026-05-30 16:37:03 +00:00
bot-frontend	238f14a0d7	fix(tradein): account-бренд приоритетен над ?brand= — cross-brand leak (#765) (#780) ... Co-authored-by: bot-frontend <bot-frontend@gendsgn.local> Co-committed-by: bot-frontend <bot-frontend@gendsgn.local>	2026-05-30 16:29:11 +00:00
bot-backend	489666c735	fix(tradein): avito content-block (HTTP-200) не маскируется под end-of-pagination (Refs #754) (#779) ... Co-authored-by: bot-backend <bot-backend@gendsgn.local> Co-committed-by: bot-backend <bot-backend@gendsgn.local>	2026-05-30 16:28:23 +00:00
bot-backend	bcd035034a	fix(tradein): SSRF host-allowlist на admin scrape + удалён dead ADMIN_TOKEN (Refs #756) (#778) ... Co-authored-by: bot-backend <bot-backend@gendsgn.local> Co-committed-by: bot-backend <bot-backend@gendsgn.local>	2026-05-30 16:27:19 +00:00
bot-backend	9954f4962f	fix(tradein): /sales-vs-listings street_only не house_linked (Refs #757) (#777) ... Co-authored-by: bot-backend <bot-backend@gendsgn.local> Co-committed-by: bot-backend <bot-backend@gendsgn.local>	2026-05-30 16:26:08 +00:00
bot-backend	652e0df10f	fix(tradein): cron-scrape.sh log to writable path + graceful tee (Refs #758) (#776) ... Co-authored-by: bot-backend <bot-backend@gendsgn.local> Co-committed-by: bot-backend <bot-backend@gendsgn.local>	2026-05-30 16:25:19 +00:00
bot-backend	79a79004cf	fix(scrapers): stable dedup_hash — drop price_rub + strip URL query (Refs #753) (#761) ... Co-authored-by: bot-backend <bot-backend@gendsgn.local> Co-committed-by: bot-backend <bot-backend@gendsgn.local>	2026-05-30 16:10:27 +00:00
bot-backend	2226b16cd3	fix(scheduler): atomic _claim_run via advisory xact lock (Refs #750) (#752) ... Co-authored-by: bot-backend <bot-backend@gendsgn.local> Co-committed-by: bot-backend <bot-backend@gendsgn.local>	2026-05-30 16:04:33 +00:00
bot-frontend	93f85154a5	fix(tradein): gate «0,00 млн ₽» в не-headline секциях при insufficient_data (#748) (#751) ... Co-authored-by: bot-frontend <bot-frontend@gendsgn.local> Co-committed-by: bot-frontend <bot-frontend@gendsgn.local>	2026-05-30 15:58:19 +00:00
bot-backend	a74591d7cc	fix(tradein): atomic conditional quota increment — close TOCTOU (#747) (#749) ... Co-authored-by: bot-backend <bot-backend@gendsgn.local> Co-committed-by: bot-backend <bot-backend@gendsgn.local>	2026-05-30 15:52:34 +00:00
bot-frontend	1b8e3b1f25	fix(tradein): confidence «средняя» → amber + FIXME для compsTier (#742) (#746) ... Co-authored-by: bot-frontend <bot-frontend@gendsgn.local> Co-committed-by: bot-frontend <bot-frontend@gendsgn.local>	2026-05-30 15:44:37 +00:00
bot-backend	6762a532eb	feat(scrapers): wire N1.ru city sweep — pipeline + scheduler + admin endpoint (#575) (#745) ... Co-authored-by: bot-backend <bot-backend@gendsgn.local> Co-committed-by: bot-backend <bot-backend@gendsgn.local>	2026-05-30 15:43:38 +00:00
bot-frontend	2390c49d12	fix(tradein): guard деления на median=0 в ListingsCard/DealsCard (#741) (#744) ... Co-authored-by: bot-frontend <bot-frontend@gendsgn.local> Co-committed-by: bot-frontend <bot-frontend@gendsgn.local>	2026-05-30 15:40:01 +00:00
bot-frontend	798fb12b4c	feat(tradein): HeroSummary empty-state при insufficient_data (#740) (#743) ... Co-authored-by: bot-frontend <bot-frontend@gendsgn.local> Co-committed-by: bot-frontend <bot-frontend@gendsgn.local>	2026-05-30 15:37:13 +00:00
bot-backend	34a13d71c3	fix(tradein): sync n_analogs to anchor count when anchor drives headline (#695) (#739) ... Co-authored-by: bot-backend <bot-backend@gendsgn.local> Co-committed-by: bot-backend <bot-backend@gendsgn.local>	2026-05-30 15:25:35 +00:00
bot-backend	2b3eb0b23d	fix(tradein): confidence_explanation no longer contradicts counters (#695) (#738) ... Co-authored-by: bot-backend <bot-backend@gendsgn.local> Co-committed-by: bot-backend <bot-backend@gendsgn.local>	2026-05-30 15:10:31 +00:00
bot-backend	83f3d70859	docs(tradein): clarify n_analogs vs analogs[] top-10 cap (#698) (#737) ... Co-authored-by: bot-backend <bot-backend@gendsgn.local> Co-committed-by: bot-backend <bot-backend@gendsgn.local>	2026-05-30 15:00:48 +00:00
lekss361	14541d4951	Merge pull request 'chore(agents): auto-resolver human-proxy persona для needs-human' (#735) from feat/auto-resolver-persona into main ... Reviewed-on: #735	2026-05-30 14:42:17 +00:00
lekss361	bc3ecf80cc	chore(agents): add auto-resolver human-proxy persona for needs-human queue ... Новое окно auto-resolver — снимает блокеры issues с label needs-human, используя capabilities, которых нет у headless-ботов (dev-IP не зафайрволлен, сохранённые куки, Playwright, прямой postgres-tradein/gendesign MCP, SSH на прод). - .claude/agents/auto-resolver.md — persona (full-auto на машине пользователя; классификация блокера A/B/C/D; кат B genuine-decision → AskUserQuestion). - .claude/commands/work-as-resolver.md — skill /work-as-resolver → /loop 15m. - auto-analyst.md + _autonomous_pickup.md FSM — лейбл-контракт needs-human: вешать может analyst/worker/qa, СНИМАТЬ только auto-resolver (anti-race #726/#727).	2026-05-30 17:40:36 +03:00
bot-backend	ef7b5f8c54	feat(tradein): insufficient_data flag on AggregatedEstimate (#697) (#734) ... Co-authored-by: bot-backend <bot-backend@gendsgn.local> Co-committed-by: bot-backend <bot-backend@gendsgn.local>	2026-05-30 14:40:04 +00:00
bot-backend	066fab11d3	fix(tradein): sanitize ДКП deal outliers (floor / ppm²) (#699) (#733) ... Co-authored-by: bot-backend <bot-backend@gendsgn.local> Co-committed-by: bot-backend <bot-backend@gendsgn.local>	2026-05-30 14:31:44 +00:00
bot-backend	e94929159b	fix(scrapers): avito listing_date from sortTimeStamp JSON (#726) (#729) ... Co-authored-by: bot-backend <bot-backend@gendsgn.local> Co-committed-by: bot-backend <bot-backend@gendsgn.local>	2026-05-30 14:13:38 +00:00
bot-frontend	1f3008d59e	feat(tradein): street_only disclaimer in StreetDealsCard (#722) (#725) ... Co-authored-by: bot-frontend <bot-frontend@gendsgn.local> Co-committed-by: bot-frontend <bot-frontend@gendsgn.local>	2026-05-30 13:44:30 +00:00
bot-backend	575d9abbf7	feat(tradein): add data_quality flag to /sales-vs-listings (#721) (#723) ... Co-authored-by: bot-backend <bot-backend@gendsgn.local> Co-committed-by: bot-backend <bot-backend@gendsgn.local>	2026-05-30 13:21:08 +00:00
bot-backend	a79cf7d5e0	fix(tradein): coarse-geo downgrade no longer shielded by Tier C anchor (#693) (#720) ... Co-authored-by: bot-backend <bot-backend@gendsgn.local> Co-committed-by: bot-backend <bot-backend@gendsgn.local>	2026-05-30 12:34:11 +00:00
bot-backend	406ea8365a	feat(health): expose app version in GET /health (#717) (#719) ... Co-authored-by: bot-backend <bot-backend@gendsgn.local> Co-committed-by: bot-backend <bot-backend@gendsgn.local>	2026-05-30 12:15:06 +00:00
bot-backend	0e2bba78b7	fix(tradein): coarse-geo downgrade works without DaData on prod (#693) (#718) ... Co-authored-by: bot-backend <bot-backend@gendsgn.local> Co-committed-by: bot-backend <bot-backend@gendsgn.local>	2026-05-30 12:08:56 +00:00
bot-backend	f148007792	docs(main): add module docstring to backend/app/main.py (#716) ... Co-authored-by: bot-backend <bot-backend@gendsgn.local> Co-committed-by: bot-backend <bot-backend@gendsgn.local>	2026-05-30 11:43:20 +00:00
lekss361	bc9d277309	Merge pull request 'docs(bots): label IDs table (goern add_issue_labels требует id)' (#715) from docs/label-ids into main ... Reviewed-on: #715	2026-05-30 11:36:52 +00:00
lekss361	049966ed6d	docs(bots): label IDs table + goern add_issue_labels требует id не имя	2026-05-30 14:36:30 +03:00
lekss361	db6137edf8	Merge pull request 'feat(qa): tester заводит bug-issue на новые баги' (#713) from fix/qa-creates-bug-tasks into main ... Reviewed-on: #713	2026-05-30 11:23:57 +00:00
lekss361	fe27ad9dce	feat(qa): tester заводит bug-issue на НОВЫЕ баги (не тестируемый issue) ... Раньше qa по правилу НЕ создавал issues (только reopen тестируемого + needs-fix, либо prod_down spike). Побочный/новый баг, замеченный при smoke, терялся. Теперь (симметрично reviewer minor→follow-up): НОВЫЙ баг (не тестируемый issue) → mcp__forgejo__create_issue: scope/X + status/ready + priority/pN + bug, body = work-prompt (Задача/repro/Files/DoD) + screenshot/console → попадёт воркеру в очередь. Проверка дубликатов. По ТЕСТИРУЕМОМУ issue — по-прежнему reopen+needs-fix (не дубль). auto-qa-tester.md (verdict + hard rule) + work-as-qa.md (+ починил stale "(10m)"→"(5m)").	2026-05-30 14:21:11 +03:00
lekss361	3e3112f2c3	Merge pull request 'fix(bots): qa-close bug (Closes→Refs) + minor-verdict → follow-up task' (#712) from fix/worker-pr-refs-not-closes into main ... Reviewed-on: #712	2026-05-30 11:15:34 +00:00
lekss361	627189a3e3	fix(bots): qa-close bug (Closes→Refs) + minor-verdict creates follow-up task ... Найдено живым тестом (reviewer смержил #710 → linked issue #696 закрылся ДО qa). 1. Closes→Refs: worker PR-body писал `Closes #N` → merge авто-закрывал issue → qa-pickup (status/qa & state=open) закрытый не видел → smoke не запускался. FSM: issue закрывает QA на status/done, не merge. Фикс: worker пишет `Refs #N`. - auto-backend.md PR-template + git-pr.md note. 2. MINOR → follow-up task (по запросу): reviewer на 🟡 MINOR теперь, кроме merge, заводит ОДИН consolidated follow-up issue для actionable-minor'ов (scope/X status/ready priority/p3 tech-debt; body = work-prompt + "Follow-up из PR #N"). Косметику (whitespace/naming) не заводит — не флудить очередь. - auto-code-reviewer.md ACT+severity + work-as-reviewer.md. - Заведены labels priority/p3 (id63) + tech-debt.	2026-05-30 14:11:05 +03:00
bot-backend	466774dbd8	fix(tradein): rehydrate POST-only fields on GET /estimate/{id} (#696) (#710) ... Co-authored-by: bot-backend <bot-backend@gendsgn.local> Co-committed-by: bot-backend <bot-backend@gendsgn.local>	2026-05-30 11:05:52 +00:00
lekss361	6e8c19ebe2	Merge pull request 'fix(claude): quote agent descriptions — YAML frontmatter parse break' (#711) from fix/agent-frontmatter-yaml into main ... Reviewed-on: #711	2026-05-30 10:59:05 +00:00
lekss361	9b268e6950	fix(claude): quote agent descriptions — battle YAML frontmatter parse break ... Баг: у code-reviewer/qa-tester/tech-analyst `description:` без кавычек содержал `: ` (двоеточие-пробел, напр. "verdict: ✅", "Проверяет: HTTP", "план: что") → YAML парсил это как вложенный mapping → frontmatter невалиден → агент молча НЕ регистрировался как subagent. Reviewer-окно падало: "Agent type 'code-reviewer' not found"; qa-окно так же не нашло бы qa-tester. Фикс: обернул description в кавычки (code-reviewer/qa-tester → "...", tech-analyst → '...' из-за внутренних "). Проверено pyyaml — теперь парсится. Плюс: добавил postgres-gendesign в .claude/mcp/qa.json — qa-tester ссылается на его tools, без сервера в strict-конфиге qa-окна агент не зарегистрируется. (backend-engineer/deep-code-reviewer не были задеты — у них в description нет ": ".)	2026-05-30 13:56:55 +03:00
bot-backend	cffc91a1d8	test(tradein): fix /houses test broken by IDOR guard — unblock deploy (#690) (#709) ... Co-authored-by: bot-backend <bot-backend@gendsgn.local> Co-committed-by: bot-backend <bot-backend@gendsgn.local>	2026-05-30 09:34:31 +00:00
bot-backend	961a3caf2b	fix(tradein): surface same-building comps as analogs when anchor fires (#694) (#708) ... Co-authored-by: bot-backend <bot-backend@gendsgn.local> Co-committed-by: bot-backend <bot-backend@gendsgn.local>	2026-05-30 09:21:20 +00:00
bot-backend	9d94beae4f	fix(tradein): flag coarse-geo estimates as low-confidence (#693) (#707) ... Co-authored-by: bot-backend <bot-backend@gendsgn.local> Co-committed-by: bot-backend <bot-backend@gendsgn.local>	2026-05-30 08:58:23 +00:00
bot-backend	737599e690	fix(tradein): scope GET /estimate/{id} + /pdf to owner, close IDOR (#690) (#702) ... Co-authored-by: bot-backend <bot-backend@gendsgn.local> Co-committed-by: bot-backend <bot-backend@gendsgn.local>	2026-05-30 08:56:51 +00:00
bot-backend	96de6d8e58	fix(tradein-ui): eliminate mobile horizontal overflow on estimate result (#692) (#705) ... Co-authored-by: bot-backend <bot-backend@gendsgn.local> Co-committed-by: bot-backend <bot-backend@gendsgn.local>	2026-05-30 08:46:29 +00:00
lekss361	690d423c5a	Merge pull request 'chore(bots): тугие /loop каденции под подписку (убрать cost-backoff)' (#706) from chore/loop-cadence-subscription into main ... Reviewed-on: #706	2026-05-30 08:43:20 +00:00
lekss361	261bbc40ec	chore(bots): тугие /loop каденции под подписку (убрать cost-backoff) ... Проблема: idle-backoff в /loop был ради экономии API-стоимости («Opus expensive → 5m + рост до 30-60m»). На подписке поллинг не тарифицируется → backoff лишь тормозил хэндофы (ready→wip→review→qa) до 30-60m, пайплайн становился медленным на ровном месте. Фикс — тугие фиксированные интервалы, без прогрессивного backoff: - reviewer: /loop 5m+backoff→30m → /loop 2m (bottleneck, latency-критичен) - qa: /loop 10m, idle→20m → /loop 5m - backend/frontend: idle sleep 20m → ≤5m (dynamic, без backoff) - analyst: /loop 30m, idle→60m → /loop 15m (сканер inbox, не latency-критичен) - _autonomous_pickup self-throttle: убран min(current*1.5, 60m); тугие интервалы роли, оставлена 24h-эскалация. Реальный потолок теперь — usage-лимиты подписки (Max 5h/weekly), НЕ деньги-за-тик: упёрся → удлинить латентные окна или pause-bots. Задокументировано. Эффект: PR подхватывается за ~1-2 мин вместо до-30m; цепочка issue→done схлопывается с часов ожидания до минут.	2026-05-30 11:42:28 +03:00
bot-backend	f04728297b	fix(tradein): run same-building anchor without radius analogs (#691) (#704) ... Co-authored-by: bot-backend <bot-backend@gendsgn.local> Co-committed-by: bot-backend <bot-backend@gendsgn.local>	2026-05-30 08:34:24 +00:00
bot-backend	10626c21ae	fix(tradein): dedupe last_scraped_at — fix frontend build/deploy (#703) ... Co-authored-by: bot-backend <bot-backend@gendsgn.local> Co-committed-by: bot-backend <bot-backend@gendsgn.local>	2026-05-30 08:32:04 +00:00
lekss361	88a3ce1875	Merge pull request 'chore(analyst): issue = исполняемый work-prompt без разночтений' (#701) from chore/analyst-prompt-quality into main ... Reviewed-on: #701	2026-05-30 08:17:17 +00:00