4 Commits

Include renames

Author	SHA1	Message	Date
bvandeusen	3898ce7be4	fix(audit-g1): six one-liner drift fixes from 2026-06-02 audit ... - BACKFILL_TIMEOUT_SECONDS 1800→1170: keep the subprocess timeout 30s below Celery's hard time_limit=1200 so SIGKILL doesn't beat TimeoutExpired (matched the tick 870s/900s rationale). Backfill runs that hit the cap let the next tick continue via the archive. - recover_interrupted_tasks orphan UPDATE now stamps finished_at; without it cleanup_old_tasks' WHERE finished_at<cutoff never reaped orphan-swept rows. recover_stalled_task_runs also now sets duration_ms (matches celery_signals.finalize's millisecond math). - ExtensionService.quick_add_source arms NEW_SOURCE_BACKFILL_RUNS=3 on Source creation, mirroring SourceService.create. Without it, Firefox quick-add on a creator with >20 unsynced posts walked the full feed until subprocess timeout. Renamed the constant from _NEW_SOURCE_BACKFILL_RUNS so it can be imported cross-module. - gallery_dl.verify() accepts TIER_LIMITED as auth-success alongside NO_NEW_CONTENT — the download path (line 712) already does, and TIER_LIMITED proves auth reached the post and was told it was tier-gated. Verify endpoint previously showed red on this and prompted operators to rotate working cookies. - prune_unused_tags now runs a single DELETE with the NOT-IN predicate find_unused_tags uses, instead of SELECT-ids → DELETE-WHERE-IN. Removes the psycopg 65535-param cliff that would have surfaced on a tag explosion (>65k unused tags). - credentials.upload() reflects the returned record into the store cache (`.set(platform, rec)`) instead of evicting it; previously the card briefly rendered "no credential" between upload and loadAll().	2026-06-02 11:24:05 -04:00
bvandeusenandClaude Opus 4.7	a37dad33c7	refactor(dry-F1): shared useAsyncAction lifecycle helper for stores ... New composables/useAsyncAction.js owns the loading/error/try-finally lifecycle. Migrated 11 stores: credentials, downloads, sources, posts (error=raw) + ml, artistDirectory, tagDirectory, showcase, suggestions, seriesReader, modal (error=message). The errorAs option preserves each store's existing error shape so store.error keeps the same type for components (~50 consumption sites unchanged). Stores whose catch also reset data (suggestions/seriesReader/modal) clear it upfront instead. Deliberately NOT migrated (special control flow, would change behavior): artist (conditional 404 catch + dual loading states), migration (rethrows), gallery (inflight-id stale-response guard), and the Shape-B no-catch / loaded-guard / keyed-cache stores. Net -77 lines. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-05-28 12:53:57 -04:00
bvandeusen	56970fb66d	feat(credentials+downloads): real credential Verify button + live download-activity polling ... Operator-flagged 2026-05-28, two asks. **1. Credential Verify (was missing vs GS — and now actually verifies).** GS's Verify was a stub (`TODO: implement actual verification` — just stamped last_verified). FC does a real check, which matters given the recent auth pain (subscribestar age cookie, HF host-only PHPSESSID): - GalleryDLService.verify(url, platform, cookies_path, auth_token) runs gallery-dl in `--simulate --range 1-1` mode (no download) against the URL with the materialized credentials, then reuses _categorize_error: returncode 0 / NO_NEW_CONTENT → valid; AUTH_ERROR → invalid; other → inconclusive (reason surfaced). 45s timeout. - POST /api/credentials/<platform>/verify picks an enabled Source for the platform to probe, runs verify, and on success stamps credential.last_verified (new CredentialService.mark_verified). Returns {valid: bool|null, reason, last_verified?}. valid=null means untestable (no credential, or no enabled source to point at). - CredentialCard gains a Verify button (on credentialed cards) + a result chip (Verified ✓ / Failed / Untestable) and a toast with the reason. SettingsTab reloads on @verified so last_verified refreshes. **2. Live download-activity feedback.** The Downloads tab was static — no way to tell if downloads were succeeding without manually hitting Refresh. It now auto-polls: stats every 4s, and the event list too while anything is queued/running. Polling pauses when the tab is backgrounded (document.hidden) and the list reload is skipped on idle ticks to stay light. A pulsing "● live" indicator next to the stat chips shows when auto-refresh is active (queued+running > 0); honors prefers-reduced-motion. Tests: verify endpoint — untestable with no credential, untestable with no enabled source, valid+stamped on success (gallery-dl mocked), and auth-failure reported without stamping.	2026-05-28 07:52:20 -04:00
bvandeusenandClaude Opus 4.7	e83747b085	feat(fc3b): platforms + credentials Pinia stores + vitests ... Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-05-20 18:37:45 -04:00