Lemon-miaow 857c73a66a fix(audit): 审计按账号 id 归属并记录来源 IP/UA，登录失败与限速入审计和指标，写入失败计数告警

2026-09-24 16:02:44 +08:00

..

0001_init.sql

feat(core): add naming, RCON, store, config, and image-build libraries

2026-06-26 23:31:58 +09:00

0002_image_submissions.sql

feat(core): add naming, RCON, store, config, and image-build libraries

2026-06-26 23:31:58 +09:00

0003_local_auth.sql

feat(api): local-password authentication backend

2026-06-27 04:22:45 +09:00

0004_player_email_otp.sql

feat(api): add player email OTP verification (spec §B2 onboarding)

2026-06-27 12:29:52 +09:00

0005_account_link_auth_source.sql

feat(api): record account-link auth source (mojang|thirdparty)

2026-06-27 13:01:19 +09:00

0006_player_reclaim.sql

feat(api): reclaim squatted usernames for Mojang-priority players (spec §B3)

2026-06-27 13:41:19 +09:00

0007_webauthn_credentials.sql

feat(api): add passkey enrollment persistence layer

2026-07-01 02:14:28 +09:00

0008_webauthn_cascade_delete.sql

fix(store): cascade-delete passkeys and challenges on user removal

2026-07-02 06:55:21 +09:00

0009_webauthn_credential_flags.sql

feat(passkey): require and record user verification at enrollment

2026-07-02 06:55:21 +09:00

0010_user_management.sql

feat(panel): implement user management administration panel with sessions and minecraft link support

2026-07-04 04:08:14 +08:00

0011_owner_role.sql

feat(panel): implement user management administration panel with sessions and minecraft link support

2026-07-04 04:08:14 +08:00

0012_setup_tokens.sql

feat(auth): migrate console login to passwordless

2026-07-04 21:47:12 +09:00

0013_resource_cache.sql

feat(api): enforce CPU/memory/storage quotas (spec §9.3, §22)

2026-07-05 02:05:44 +08:00

0014_webauthn_discoverable_login.sql

fix(store): renumber discoverable-login migration 0013 -> 0014

2026-07-05 04:31:45 +09:00

0015_account_migration.sql

feat(account): migrate a live account's owned servers to a new account (§B3 inherit)

2026-07-05 20:50:48 +09:00

0016_op_login.sql

feat(auth)!: go fully passwordless and fix cross-check review findings

2026-07-20 04:47:32 +09:00

0017_drop_password.sql

feat(auth)!: go fully passwordless and fix cross-check review findings

2026-07-20 04:47:32 +09:00

0018_recommended_images.sql

feat(images): mark platform-curated images and seed the lobby

2026-07-20 14:31:14 +09:00

0019_recommended_paper.sql

feat(operator): make any Paper image joinable behind the forwarding proxy

2026-07-28 09:13:58 +09:00

0020_verified_email_unique.sql

fix(auth): enforce the verified-email uniqueness that email login assumes

2026-09-23 03:19:35 +08:00

0021_registry_recommended_images.sql

feat(bootstrap): host every built image in the internal registry — GC-durable pulls

2026-09-23 19:02:58 +08:00

0022_otp_failure_budget.sql

fix(auth): 邮箱验证码按账号累计错误次数封顶并通知

2026-09-24 15:37:01 +08:00

0023_audit_attribution.sql

fix(audit): 审计按账号 id 归属并记录来源 IP/UA，登录失败与限速入审计和指标，写入失败计数告警

2026-09-24 16:02:44 +08:00