Добавлены уведомления

2026-07-27 17:36:53 +03:00
parent a072005164
commit 958fba5f3e
149 changed files with 6371 additions and 110 deletions
@@ -68,6 +68,7 @@ docker compose --env-file .env config --quiet

 - [ ] Token pairs match, PG verifies TLS, public URLs are HTTPS.
 - [ ] Mock OTP risk is accepted and all secrets are unique >=128-bit values.
+- [ ] `NOTIFICATIONS_TOKEN_PRODUCER_TEST` is unique and supplied only through secret/env; the `producer_test` source seed stores only its hash.
 - [ ] `FRONTEND_DEV_PROXY_ENABLED=false` and Safety/nginx timeout budgets match.

 ## Gate 7 — images and static frontend
@@ -143,12 +144,15 @@ docker compose up -d redis
 docker compose up -d keycloak otel-collector
 docker compose up -d message-safety
 docker compose up -d api-backend
+docker compose up -d delivery-worker safety-recovery-worker cleanup-worker \
+  notification-expire-worker notification-draft-cleanup-worker
 docker compose up -d bitrix-local-app bitrix-sync
 docker compose up -d nginx
 docker compose ps
 ```

 - [ ] No restart loop/OOM; critical readiness is green.
+- [ ] `notification-expire-worker` runs daily closure with an advisory lock; `notification-draft-cleanup-worker` removes expired drafts/S3 objects. Both entrypoints exist in the installed image.
 - [ ] Only documented Bitrix not-installed/sync-stub degradation remains.
 - [ ] External `/internal/*` is 404 and OTEL accepts telemetry.

@@ -169,6 +173,8 @@ deployment/scripts/smoke.sh
 - [ ] Safety allow/deny/pending/timeout and one concurrent slow poll pass.
 - [ ] File quarantine/promote/delete, owner-only download and audit pass.
 - [ ] WS reconnect plus REST reconciliation, ownership 404, idempotency and 429 pass.
+- [ ] Closed-network `producer_test` Create/Cancel smoke passes; identical Create returns `200`, changed payload returns `409`, and the external internal route returns `404`.
+- [ ] Expire advisory locking and first download of any linked document are verified; hiding is one-time and an existing `date_expired` is preserved.
 - [ ] Logs contain no PII, message body, token or presigned query.

 ## Gate 15 — observability