lekss361 e3f928b24d fix(tradein): scope GET /history to caller, close cross-pilot data leak (#656) ... GET /history SELECTed latest estimates of ALL users -> cross-pilot leak. Adds trade_in_estimates.created_by (migration 083), populated from X-Authenticated-User on estimate creation. /history now: non-admin forced to own rows (legacy NULL rows excluded); admin sees all or ?account=<user>; 401 if header missing, 403 if user not in roles.yaml. _empty_estimate rows also tagged. tests/test_history_scope.py (5 cases) + estimator regression green. Closes #656		2026-05-29 18:41:54 +03:00
..
exporters	feat(tradein): expected-sold price in estimate PDF (#648 S5b — final) (#665)	2026-05-29 14:09:46 +00:00
matching	feat(tradein): same-building матчинг аналогов по house_id (#6)	2026-05-28 13:55:51 +05:00
scrapers	feat(tradein): infer repair_state from listing description text (#622) (#632)	2026-05-28 15:37:34 +00:00
__init__.py	feat: add tradein-mvp subproject (Trade-In Estimator под /trade-in)	2026-05-21 00:25:39 +03:00
account_quota.py	feat(tradein): аккаунт praktika + лимит 15 оценок/мес, чистка PRINZIP в UI (#635)	2026-05-28 22:04:58 +00:00
brand.py	feat: add tradein-mvp subproject (Trade-In Estimator под /trade-in)	2026-05-21 00:25:39 +03:00
cache.py	feat(tradein): Phase 3.2 — /api/v1/search endpoint + Redis cache (#479)	2026-05-23 14:44:22 +00:00
cian_session.py	fix(tradein): CIAN_REQUIRED_COOKIES — add real auth cookies (DMIR_AUTH + Cian session) (#480)	2026-05-23 14:52:24 +00:00
dadata.py	feat(tradein): DaData /suggest tier в /suggest endpoint (PR Q2)	2026-05-27 19:08:58 +05:00
estimator.py	fix(tradein): scope GET /history to caller, close cross-pilot data leak (#656)	2026-05-29 18:41:54 +03:00
geocoder.py	feat(tradein): DaData /suggest tier в /suggest endpoint (PR Q2)	2026-05-27 19:08:58 +05:00
house_metadata.py	feat(tradein): postgres_fdw live read of gendesign.cad_buildings (replaces snapshot) (#493)	2026-05-24 08:57:30 +00:00
image_sanitizer.py	fix(tradein-photos): sanitize uploaded images via Pillow re-encode (#511)	2026-05-24 11:32:04 +00:00
scheduler.py	feat(tradein): daily asking→sold ratio refresh (#648 S4) (#663)	2026-05-29 13:49:36 +00:00
scrape_pipeline.py	feat(scheduler): dormant Yandex Realty city-sweep (#561) (#642)	2026-05-29 08:50:10 +00:00
scrape_runs.py	fix(tradein/avito): anti-bot hardening — sleep + abort + shared session (#487)	2026-05-23 20:08:40 +00:00
scraper_settings.py	feat(tradein): global scraper delay setting (applies across all scrapers) (#485)	2026-05-23 15:43:28 +00:00
search_query.py	feat(tradein): Phase 3.2 — /api/v1/search endpoint + Redis cache (#479)	2026-05-23 14:44:22 +00:00