7 Commits

Author	SHA1	Message	Date
Gabriel Kaszewski	bcaf49cc81	perf: scale fixes for 1M+ photo libraries ... Indexes: share_targets.target_id, duplicate_groups.status, GIN on stacks members + duplicate candidates JSONB, composite (owner_user_id, created_at DESC) on assets. N+1 elimination: batch metadata loading via find_by_assets(ids) using WHERE asset_id = ANY($1), used in timeline + sidecar export. Visibility: cache find_targets_for_user per request via OnceCell, extract filter_visible helper to reduce duplication. Streaming: FileStoragePort.open_file() returns (DataStream, u64), LocalFileStorage uses ReaderStream instead of loading full file. serve_file/serve_derivative use Body::from_stream(). Unbounded queries: sidecar full_export/import batched in 500-row chunks instead of u32::MAX. find_unresolved paginated with limit/offset. list_duplicates API accepts pagination params.	2026-05-31 22:40:25 +02:00
Gabriel Kaszewski	c6f82090d2	feat: auth hardening + codebase quality sweep ... Refresh tokens: RefreshToken entity, PostgresRefreshTokenRepository, login returns refresh token, POST /auth/refresh (rotation), POST /auth/logout, JWT expiry 24h→1h, configurable via with_expiry(). Route protection: require_auth middleware on protected routes, public routes split (register, login, refresh, sharing/access). Authorization: caller_id added to ReadAssetFileQuery, ReadDerivativeQuery, GetStackQuery, DeleteStackCommand with ownership checks. Admin-only gates on processing, storage, sidecar, duplicates handlers. Quality fixes: visibility filtering bypass in search(), unwrap panics in date parsing, DRY auth header parsing, centralized parsers module, email validation via email_address crate, value objects (Username, MimeType, RelativePath), domain events (UserCreated, UserDeleted, AlbumCreated, TagCreated, DuplicateDetected), postgres error mapping for constraint violations, OptionExt::or_not_found helper, in_memory_repo! macro, GetStackQuery moved to queries, album add_entry 200→201.	2026-05-31 22:26:02 +02:00
Gabriel Kaszewski	0b2237860e	refactor: introduce IngestTransaction port to reduce IngestAssetHandler from 7 to 4 ports	2026-05-31 18:44:51 +02:00
Gabriel Kaszewski	c2ebca0da0	style: cargo fmt --all	2026-05-31 05:31:42 +02:00
Gabriel Kaszewski	4b31a0f74b	app: add sidecar sync commands (export, detect, import, resolve, full export/import)	2026-05-31 05:29:03 +02:00
Gabriel Kaszewski	4549d746c3	app: add storage commands/queries + missing in-memory test repos	2026-05-31 05:11:02 +02:00
Gabriel Kaszewski	294626db72	app: add in-memory test fakes for all critical ports	2026-05-31 04:25:40 +02:00