9 Commits

Include renames

Author	SHA1	Message	Date
kyle	1ddcffc511	fix(telemetry): review findings ... - wau/mau trailing scans run hourly and on day finalization, not every tick - exclusion lookup failures cached 30s so an st outage cannot amplify - unverified relation filter dropped; player emptiness checked in js - anonymous unauthenticated read failures no longer logged - alerts and exclusions ensure supertokens init on cold pods	2026-08-25 23:26:34 -07:00
kyle	9f5fac2753	feat(telemetry): exclude configured phones from usage telemetry ... - TELEMETRY_EXCLUDE_PHONES resolves to player ids at runtime, cached 10m - excluded players write no activities, client events, or vitals - their client errors are still captured	2026-08-25 23:04:14 -07:00
kyle	895737febc	style: trim comments to load-bearing invariants only	2026-08-25 22:13:41 -07:00
kyle	e2863c1f6c	feat(telemetry): collections, universal server-fn coverage, beacon, client tracker ... - activities indexes + client_events/client_errors/rollups/alerts collections - global function middleware via createStart; reads skipped on success - actor stash, denial dedup, control-flow error guards - api route logging, auth event overrides, beacon endpoint, web vitals - centralized admin role checks, shared skeletons, award-badges fix - extracted deriveRunState with tests	2026-08-25 21:33:25 -07:00
kyle	58702da156	style: trim narration comments from recent changes	2026-08-23 20:06:05 -07:00
kyle	9fc79dfc07	fix(audit): readable names, single writer, denial rows, redacted args ... The activity log recorded Start's hashed function id (a sha256 URL segment) as the name; the middleware now reads compile-time serverFnMeta.name with the path segment as fallback. toServerResult resolves { success:false } instead of throwing, so the middleware logged failures as successes while toServerResult wrote a duplicate row with its own dead name parser — the middleware is now the single writer and reads the envelope's success flag. Admin denials, which threw before the logging middleware ran, get their own audit row. Arguments are redacted (phone/otp/token keys) and truncated at 2KB. The admin activities search binds its filter parameters (likePattern escaping) instead of interpolating raw input. Adds vitest with node-env tests for the middleware, redaction, and filter utils, and extends logging coverage to mutating fns that lacked it.	2026-08-23 18:27:53 -07:00
kyle	778f0f7994	perf upgrade	2026-07-12 21:26:16 -07:00
kyle	a4e618f327	fix	2026-02-08 22:32:54 -06:00
kyle	63ea515a31	activity logging middleware	2025-09-30 10:47:02 -05:00