Lemon-miaow 34b81ee8fe feat(schedules): 每台服务器可设计划任务，按星期和时区定时发命令、重启、停服、开服或备份，重启和备份前可在游戏内提醒

2026-09-27 22:48:49 +08:00

..

0001_init.sql

feat(core): add naming, RCON, store, config, and image-build libraries

2026-06-26 23:31:58 +09:00

0002_image_submissions.sql

feat(core): add naming, RCON, store, config, and image-build libraries

2026-06-26 23:31:58 +09:00

0003_local_auth.sql

feat(api): local-password authentication backend

2026-06-27 04:22:45 +09:00

0004_player_email_otp.sql

feat(api): add player email OTP verification (spec §B2 onboarding)

2026-06-27 12:29:52 +09:00

0005_account_link_auth_source.sql

feat(api): record account-link auth source (mojang|thirdparty)

2026-06-27 13:01:19 +09:00

0006_player_reclaim.sql

feat(api): reclaim squatted usernames for Mojang-priority players (spec §B3)

2026-06-27 13:41:19 +09:00

0007_webauthn_credentials.sql

feat(api): add passkey enrollment persistence layer

2026-07-01 02:14:28 +09:00

0008_webauthn_cascade_delete.sql

fix(store): cascade-delete passkeys and challenges on user removal

2026-07-02 06:55:21 +09:00

0009_webauthn_credential_flags.sql

feat(passkey): require and record user verification at enrollment

2026-07-02 06:55:21 +09:00

0010_user_management.sql

feat(panel): implement user management administration panel with sessions and minecraft link support

2026-07-04 04:08:14 +08:00

0011_owner_role.sql

feat(panel): implement user management administration panel with sessions and minecraft link support

2026-07-04 04:08:14 +08:00

0012_setup_tokens.sql

feat(auth): migrate console login to passwordless

2026-07-04 21:47:12 +09:00

0013_resource_cache.sql

feat(api): enforce CPU/memory/storage quotas (spec §9.3, §22)

2026-07-05 02:05:44 +08:00

0014_webauthn_discoverable_login.sql

fix(store): renumber discoverable-login migration 0013 -> 0014

2026-07-05 04:31:45 +09:00

0015_account_migration.sql

feat(account): migrate a live account's owned servers to a new account (§B3 inherit)

2026-07-05 20:50:48 +09:00

0016_op_login.sql

feat(auth)!: go fully passwordless and fix cross-check review findings

2026-07-20 04:47:32 +09:00

0017_drop_password.sql

feat(auth)!: go fully passwordless and fix cross-check review findings

2026-07-20 04:47:32 +09:00

0018_recommended_images.sql

feat(images): mark platform-curated images and seed the lobby

2026-07-20 14:31:14 +09:00

0019_recommended_paper.sql

feat(operator): make any Paper image joinable behind the forwarding proxy

2026-07-28 09:13:58 +09:00

0020_verified_email_unique.sql

fix(auth): enforce the verified-email uniqueness that email login assumes

2026-09-23 03:19:35 +08:00

0021_registry_recommended_images.sql

feat(bootstrap): host every built image in the internal registry — GC-durable pulls

2026-09-23 19:02:58 +08:00

0022_otp_failure_budget.sql

fix(auth): 邮箱验证码按账号累计错误次数封顶并通知

2026-09-24 15:37:01 +08:00

0023_audit_attribution.sql

fix(audit): 审计按账号 id 归属并记录来源 IP/UA，登录失败与限速入审计和指标，写入失败计数告警

2026-09-24 16:02:44 +08:00

0024_world_backups_offsite.sql

feat(offsite): 世界归档与数据库备份加密同步到异地 S3，reaper 确认异地副本后才删除世界

2026-09-24 19:25:16 +08:00

0025_context_digest.sql

fix(submit): 审阅绑定上下文 sha256，批准须带摘要，构建只从内部 API 取上下文并校验字节

2026-09-24 22:24:50 +08:00

0026_world_backups_integrity.sql

feat(backup): 归档先写 .partial 再 fsync 改名并记录 sha256，删除原件前回读校验，reaper 抽样巡检与清扫半截归档，保留权限与 mtime，面板标出损坏与已校验

2026-09-25 03:16:06 +08:00

0027_session_devices.sql

feat(api): 会话记录设备与最近活动，账户页可查看并退出任一设备，删除 passkey 或更换邮箱时退出其它设备，staff 会话空闲 30 分钟失效，吊销会话校验所属用户

2026-09-25 14:06:02 +08:00

0028_session_reauth.sql

feat(api): 添加或删除 passkey、修改邮箱前须 5 分钟内用已有因子重新验证，变更后邮件通知账户，面板加确认对话框与修改邮箱入口

2026-09-25 14:47:54 +08:00

0029_challenge_source.sql

fix(api): 登录验证码与 passkey 挑战不再被他人的 start 作废，冷却内重复 start 照常 202，登录挑战按来源限量

2026-09-25 16:37:03 +08:00

0030_op_login_origin.sql

feat(api): op-login 游戏内审批先展示目标账号、邮箱与发起来源，须输入账户名确认，velocity 显示审批卡片

2026-09-25 17:02:43 +08:00

0031_list_paging_indexes.sql

feat(api): 集群列表读改走 informer 缓存，审核队列、我的提交与备份列表改为服务端分页筛选并一次批量查构建，面板三页跟进

2026-09-25 18:13:21 +08:00

0032_image_build_scans.sql

feat(build): 扫描门按可配严重度拦截并可接受已知风险，留存 Trivy 报告与 CycloneDX SBOM，面板构建页展示扫描结果

2026-09-25 21:28:57 +08:00

0033_migration_confirm_session.sql

fix(migrate): 迁移确认只对做确认的会话在 10 分钟内有效，签发和兑换迁移码都给源账户邮箱发通知

2026-09-27 02:14:22 +08:00

0034_allowlist_revoked.sql

fix(allowlist): 唤醒名单可查看、可取消或恢复唤醒权限，换主人时清空

2026-09-27 02:55:30 +08:00

0035_server_retire.sql

fix(servers): 主人可放弃服务器、管理员可删除服务器，由 reaper 归档世界后释放或移除

2026-09-27 03:49:49 +08:00

0036_server_schedules.sql

feat(schedules): 每台服务器可设计划任务，按星期和时区定时发命令、重启、停服、开服或备份，重启和备份前可在游戏内提醒

2026-09-27 22:48:49 +08:00