Felis/docs/changes/INDEX.md

Felis change ledger

The index of every functional change to Felis — what it did and which commit records it. This is the durable, in-repo map that git log alone doesn't give: it links substantial changes to their detail docs and flags work that is built and verified but not yet committed.

Convention

• Every functional change (a feature addition, a behaviour change, a bug fix) gets:
  1. a dated detail doc in this directory — docs/changes/YYYY-MM-DD-<slug>.md, covering what it did, why, the files touched, and the verification evidence; and
  2. a row in the ledger below, carrying its commit record (the short SHA).
• A change that is built and verified but not yet committed (e.g. while PGP signing is locked) sits in Pending with commit: pending, and moves into the ledger with its real SHA once committed.
• Pure-cosmetic or non-functional commits (docs, style) still appear in the ledger table for completeness, but do not require a dedicated detail doc.
• The ledger table is generated losslessly from git history and can be regenerated:

  git log --reverse --pretty=format:'| %h | %ad | %s |' --date=short
  

Pending (built + verified, not yet committed)

Change	Detail doc	Status
None.

Committed change ledger

Oldest first (project build order). Commit = short SHA on main. Frontend/panel commits are the collaborator's UI work; backend (Go/Java/K8s) is tracked here as the primary record.

Commit	Date	Change
5b7b38d	2026-06-26	chore: add Go module manifest and ignore rules
5a30aa5	2026-06-26	docs: add OpenAPI 3.1 served-route contract
7fbebfe	2026-06-26	feat(apis): add MinecraftServer CRD types (v1alpha1)
708cdfc	2026-06-26	feat(core): add naming, RCON, store, config, and image-build libraries
43ab921	2026-06-26	feat(backup): add backup, restore, and reaper subsystems
78b8cf6	2026-06-26	feat(operator): add MinecraftServer controller and reconcilers
d39605e	2026-06-26	feat(submit): add user modpack build and approval pipeline
b508fcc	2026-06-26	feat(api): add felis-api service with permissions, modpack lane, and fleet read
47fcd90	2026-06-26	feat(platform): add node orchestration and the felis entrypoint
eee00c2	2026-06-26	feat(panel): add three-sided web console (User, Admin, SysAdmin)
93f143f	2026-06-26	feat(plugins): add Velocity proxy and Fabric/Forge/NeoForge/Paper integration mods
ce0ba76	2026-06-27	chore(api): add kubebuilder object-generation markers to v1alpha1
7d91373	2026-06-27	fix(migrate): honor -config flag placed after the up verb
99de43f	2026-06-27	chore: ignore plugin build artifacts and editor config
58fa4b0	2026-06-27	feat(deploy): add one-line bootstrap installer and container image
af14f02	2026-06-27	feat(api): local-password authentication backend
e108a37	2026-06-27	feat(cli): break-glass emergency console TUI
885c4a9	2026-06-27	feat(panel): local-password login and forced password change
2d0bbb0	2026-06-27	feat(cli): attribute break-glass recovery to the SysAdmin who runs it
dbe34a1	2026-06-27	feat(api): add player email OTP verification (spec §B2 onboarding)
1f8b9bb	2026-06-27	feat(api): record account-link auth source (mojang/thirdparty)
a29571d	2026-06-27	feat(api): reclaim squatted usernames for Mojang-priority players (spec §B3)
53a7664	2026-06-27	feat(cfsetup): recommended Cloudflare Tunnel + Access edge setup
ba13839	2026-06-27	feat(breakglass): optional Cloudflare Tunnel + Access setup in the TUI
a5a6482	2026-06-27	feat: dev mock
dd2fc6f	2026-06-27	feat(panel): i18n
7b458da	2026-06-27	feat(panel): light/dark theme
51c9eab	2026-06-27	docs: CONTRIBUTOR.md
74e7e6e	2026-06-27	docs: CONTRIBUTING.md
b81b334	2026-06-27	Merge branch 'main' of https://github.com/MliroLirrorsIngenuity/Felis
9d13787	2026-06-27	refactor(panel): dashboard
f3521e3	2026-06-27	refactor(panel): uniform margins
18b4be0	2026-06-27	refactor(panel): uniform title icon styles
665841b	2026-06-27	fix(panel): remove internal spec references from user-facing text
cf88bcc	2026-06-27	fix(panel): extract hardcoded security note into i18n keys
061482d	2026-06-27	fix(panel): extract hardcoded Chinese text to i18n keys
cfe126f	2026-06-27	feat(panel): add RCON command input to server console
ae91133	2026-06-27	style(panel): refine button styles with shadow, active scale, toned-down colors
e189265	2026-06-27	refactor(panel): compact server card layout, denser grid
f4df3e2	2026-06-27	feat(panel): pagination for server lists
b512a18	2026-06-27	refactor(panel): adjust margins
a49443c	2026-06-27	refactor(panel): simplify sidebar
86f2ae4	2026-06-28	feat(panel): sidebar foot shows current account + sign-out; reorder Account cards
f5d00f3	2026-06-28	feat(cli): implement felis apply command for direct CRD creation
832b200	2026-06-28	fix(panel): reactive system theme detection
c9cd9dc	2026-06-28	style(panel): unify dialog animation to fade and scale from center
94a3b7b	2026-06-28	fix(deploy): harden bootstrap for RHEL-family Linux
9c46632	2026-06-28	feat(cli): add felis setup first-run console with reclaim protection and cfsetup idempotency
5450c26	2026-06-28	chore: normalize line endings and apply formatting
deaa2f8	2026-06-28	feat(deploy): add zypper support for openSUSE/SLES
318a724	2026-06-28	feat(deploy): add pacman support for Arch Linux
e5f1682	2026-06-29	refactor(deploy)!: TUI
28c3eee	2026-06-30	refactor(deploy): improved TUI walkthrough
116595f	2026-06-30	feat(api): add QR scan-login completion poll on the internal face
a94b001	2026-06-30	feat(deploy): add break-glass Operator account provisioning
346ec68	2026-06-30	refactor(deploy): improved cloudflare walkthrough
563041a	2026-06-30	feat(panel): add fail-closed role-switcher view-mode logic
50b8487	2026-06-30	feat(panel): wire role-switcher into the app shell
75642d9	2026-06-30	feat(metrics): add named felis_* Prometheus collectors
2a93a9e	2026-06-30	feat(metrics): record felis_image_build_failures_total on failed builds
79eae7f	2026-06-30	feat(metrics): publish felis_servers_total from a fleet snapshot
8ac5e64	2026-06-30	feat(metrics): observe felis_start_duration_seconds across the start lifecycle
676407d	2026-06-30	docs(diagrams): align §28 sequence diagrams with implemented routes
ac02c69	2026-06-30	docs(troubleshooting): add operator failure-mode checklist
eb5875a	2026-06-30	feat(felis): add Operator break-glass op behind an operation menu
c14ed17	2026-06-30	fix(docker): keep embedded panel/ and deploy/ in the image build context
2a4a81b	2026-06-30	fix(api): don't burn wake cooldown when refused at capacity
6c3999a	2026-06-30	fix(api): rate-limit email-OTP sends to close the email-bomb vector
9873904	2026-06-30	fix(operator): populate Status.Players from an RCON list probe
879b177	2026-06-30	fix(api): make OTP-start throttle atomic to close concurrent-burst bypass
29f5341	2026-07-01	docs(api): correct cooldownLimiter doc for its OTP reuse
7507cfa	2026-07-01	Revert "feat(panel): wire role-switcher into the app shell"
f2c916d	2026-07-01	feat(api): add passkey enrollment persistence layer
742f15f	2026-07-01	feat(api): add passkey enrollment endpoints
d2de11a	2026-07-01	feat(panel): fleet
0261204	2026-07-01	feat(passkey): add go-webauthn enrollment verifier adapter
fce0fce	2026-07-01	feat(passkey): wire enrollment verifier into felis-api
2810fe8	2026-07-01	fix(cfsetup): repoint stale DNS record when routing a tunnel hostname
7d3be64	2026-07-01	feat(cfsetup): start the tunnel connector as a setup step
a531f5e	2026-07-01	fix(cfsetup): keep connector install in the host apply layer only
e058a64	2026-07-01	feat(edge): close the panel NodePort to the public after the tunnel is up
c01f133	2026-07-01	feat(updates): add pure decision core for component self-update
fe2ece0	2026-07-01	feat(api): add public Bind-Code onboarding for the player console
3673af6	2026-07-01	feat(api): add admin API for the SysAdmin-set auto-update maintenance window
7464fa7	2026-07-01	fix(updates): tag Window JSON so the persisted maintenance window round-trips
e035142	2026-07-01	feat(passkey): add WebAuthn login/assertion crypto adapter
f34711c	2026-07-01	docs(api): record passkey login-handler deferral rationale
7a51c1d	2026-07-01	fix(api): bound concurrent login bcrypt to shed CPU-pin floods
164ac44	2026-07-01	fix(api): validate inbound X-Request-Id before echo and audit persist
c6c0772	2026-07-01	fix(api): set read/idle timeouts on the felis-api listeners
3c1d647	2026-07-01	fix(api): cap concurrent SSE streams per principal
d6e3189	2026-07-01	fix(api): bound SSE relay writes with a deadline to sever stalled readers
2c56d17	2026-07-01	docs(api): record the quota-claim TOCTOU as a KNOWN-LIMITATION (audit #4)
8f41a00	2026-07-01	fix(api): clear the SSE write deadline on return so it can't leak to a reused connection
15c58d9	2026-07-01	feat(panel): player management
8ae65ae	2026-07-02	feat(panel): backup management
a15ff55	2026-07-02	refactor(panel): optimize player list layout and horizontal operations
149f01a	2026-07-02	fix(panel): change console button to outline variant on my servers page
4ecaf3c	2026-07-02	refactor(panel): set defaultOpen parameter of whitelist card to false
a9dbc8b	2026-07-02	feat(panel): add search and status filtering to my servers page
fa7bab5	2026-07-02	style(panel): refine search and filter layout to align with header
70d17a0	2026-07-02	feat(panel): align my servers page search layout with fleet table
5a8eff1	2026-07-02	feat(panel): remove developer comment footer cards from my servers and server admin pages
92770ea	2026-07-02	style(panel): adjust pagination padding to pt-3 for balanced spacing
6e43a46	2026-07-02	fix(panel): pin sidebar navigation and enable independent content scroll
3b4298d	2026-07-02	refactor(panel): unify servers cockpit layout, resolve duplicate pages and adjust spacing
c0d333b	2026-07-02	feat(panel): support full server config edit dialog with status prefilling
6368ab1	2026-07-02	fix(api): coalesce MyServers owned flag so ownerless rows do not 500
cdbb5ab	2026-07-02	fix(api): record credential id in passkey-register audit event
9953275	2026-07-02	fix(api): bound webauthn_challenges growth by superseding all prior rows
20e31fb	2026-07-02	fix(store): cascade-delete passkeys and challenges on user removal
7278cd7	2026-07-02	feat(passkey): require and record user verification at enrollment
54bc6ef	2026-07-02	fix(api): clear bound passkeys on password change to close a takeover foothold
19f500b	2026-07-02	style(panel): update destructive red color and rename wake to start
e0bc288	2026-07-02	feat(panel): implement image build pipeline and admin whitelist with mock dev api
8594622	2026-07-02	feat(panel): implement email OTP verification and passkey registration management
9bed51b	2026-07-02	feat(config): add [velocity] login_image/lobby_image for system servers
9ef817f	2026-07-02	feat(naming): system-server names, validation, and service-token identifiers
159107b	2026-07-02	feat(api): HTTP readiness knob on MinecraftServer and login-gate fallback default
dc23cb5	2026-07-02	feat(operator): system-server pod readiness probe and login service-token env
3fdb3d0	2026-07-02	feat(platform): internal API base-URL helper and single-sourced token secret
f554d52	2026-07-02	feat(cli): provision login/lobby system servers with login env and token replica
a63f49d	2026-07-02	feat(panel): steer WeChat/QQ in-app browsers to the system browser for passkey
241fe21	2026-07-02	feat(limbo): felis-limbo in-game login flow over the shared account-link client
c7315e4	2026-07-02	feat(deploy): login-limbo and lobby images with game-port pinning
191640c	2026-07-02	feat(panel): implement admin submission approval and reject queue
598f3d3	2026-07-02	feat(submit): local + S3 backends for modpack upload contexts, installer-selectable
adf0d99	2026-07-02	feat(panel): implement user-side modpack submissions with drag & drop context upload
d9e866f	2026-07-03	fix(deploy): make the lobby image actually build
b84debf	2026-07-03	feat(deploy): one-shot demo bring-up wrapper
73d6ec1	2026-07-03	feat(mock): add mock submissions for owner account
5427bc7	2026-07-03	feat(servers): support claiming servers directly from ServersPage list
55592ed	2026-07-03	feat(auth): support public auth bind endpoint
804459c	2026-07-03	feat(panel): implement admin maintenance window settings page
dd7dff6	2026-07-03	feat(panel): support importing parameters from submission with owner-restricted unapproved entries
a8701c1	2026-07-03	fix(panel): prevent automatic wake during server claim in mock api
f749c2c	2026-07-03	style(panel): resolve double borders and uneven padding in server console
5f402b1	2026-07-03	fix(panel): force dark mode and pure black bg on server console card
b7d8000	2026-07-03	feat(panel): implement dedicated LuckPerms permissions and groups management sub-page
e60784b	2026-07-04	fix(panel): eliminate page collapse and scroll shifts during LuckPerms query reload
439f19e	2026-07-04	fix(panel): prevent page collapse and scroll shifts in players and bans management sections during reload
83e57b4	2026-07-04	fix(panel): implement two-step confirmation for claiming a server to prevent accidental operations
3347cc0	2026-07-04	feat(panel): implement user management administration panel with sessions and minecraft link support
67b4e19	2026-07-04	fix(panel): override generic already_exists error message during user creation and profile editing
2c95da8	2026-07-04	fix(panel/i18n): add missing users_col_user key to translation files
627883e	2026-07-04	fix(panel): refine reset password messages and fix empty email placeholder in mock api response
0c1cc59	2026-07-04	feat(auth): migrate console login to passwordless
3b43f05	2026-07-04	refactor(api): drop dead login concurrency limiter and reconcile passwordless comments
4f59d51	2026-07-04	feat(auth): add owner-tier passkey-unbind remediation endpoint
c20b12c	2026-07-04	refactor(api): drop dead password-era ResetMailer, reconcile passkey-unbind docs
0a2accd	2026-07-04	chore: stop tracking Autohand-generated AGENTS.md
96b3cc9	2026-07-04	feat(updater): wire updates.Run to a caller with PaperMC v3 release discovery
9896fe1	2026-07-05	docs(updater): correct PaperMC UA/fixture overclaims, re-tier the boundary
7d27640	2026-07-05	feat(updater): add GitHub Releases source and route felis-api/k3s/cloudflared
bd49313	2026-07-05	refactor(panel): 抽取 10 个公共组件，消除 ~150 处重复代码
91bfa27	2026-07-05	feat(operator): implement idle auto-stop (spec §8)
e574749	2026-07-05	feat(api): enforce CPU/memory/storage quotas (spec §9.3, §22)
7db57b9	2026-07-05	feat(updater): add VersionGatherer extraction core and CLI gather seam
ec468ba	2026-07-05	feat(auth): add discoverable (usernameless) passkey login
154002e	2026-07-05	docs(auth): cite MultiLogin reference for UUID-keyed reclaim split
0dbd557	2026-07-05	fix(store): renumber discoverable-login migration 0013 -> 0014
9e1df12	2026-07-05	feat(passkey): advance sign_count, reject clone-warned assertions
7f7e459	2026-07-05	fix(operator): enforce startup and readiness timeouts (§5, §8)
7becb38	2026-07-05	fix(api): implement /readyz with real DB + K8s API + CRD checks (§7)
9079a2c	2026-07-05	feat(panel): implement email otp and passkey login interface
cfe68ae	2026-07-05	fix(panel): align status distribution order to put Stopped at the end
bbcfaeb	2026-07-05	refactor(panel): remove redundant voxel network topology description subtitle
fdb6efb	2026-07-05	feat(account): migrate a live account's owned servers to a new account (§B3 inherit)
abad137	2026-07-06	style(panel): unify vertical spacing below PageHeader across pages
c2ee21a	2026-07-06	feat(breakglass): add halt-a-server op to the recovery console (§B4)
c1aa38b	2026-07-06	feat(velocity): add /felis migrate to open an account migration (§B3 inherit)
7a7c0d5	2026-07-07	feat(api): add on-demand world backup endpoint and Job executor (§B4 Sync)