lekss361 e3f928b24d fix(tradein): scope GET /history to caller, close cross-pilot data leak (#656) ... GET /history SELECTed latest estimates of ALL users -> cross-pilot leak. Adds trade_in_estimates.created_by (migration 083), populated from X-Authenticated-User on estimate creation. /history now: non-admin forced to own rows (legacy NULL rows excluded); admin sees all or ?account=<user>; 401 if header missing, 403 if user not in roles.yaml. _empty_estimate rows also tagged. tests/test_history_scope.py (5 cases) + estimator regression green. Closes #656		2026-05-29 18:41:54 +03:00
..
api	fix(tradein): scope GET /history to caller, close cross-pilot data leak (#656)	2026-05-29 18:41:54 +03:00
core	feat(tradein): DaData on-demand enrichment в estimate flow (PR Q1)	2026-05-27 18:50:12 +05:00
observability	feat(tradein): enrich GlitchTip SDK init — integrations + PII scrub (#396) (#643)	2026-05-29 09:23:17 +00:00
schemas	feat(tradein): estimator additive expected_sold price (#648 S3) (#661)	2026-05-29 13:37:33 +00:00
services	fix(tradein): scope GET /history to caller, close cross-pilot data leak (#656)	2026-05-29 18:41:54 +03:00
tasks	feat(tradein): daily asking→sold ratio refresh (#648 S4) (#663)	2026-05-29 13:49:36 +00:00
__init__.py	feat: add tradein-mvp subproject (Trade-In Estimator под /trade-in)	2026-05-21 00:25:39 +03:00
main.py	feat(tradein): enrich GlitchTip SDK init — integrations + PII scrub (#396) (#643)	2026-05-29 09:23:17 +00:00