Remove encryption; user-data filters; SQLite safety; recovery, retention, scheduler

- No client-side encryption: plaintext content-addressed remote (SHA-256
  names), no backup key, no cryptography dependency (server disk encryption
  is the trust model).
- Filters back user data: images, archives, databases, PDFs accepted; 10 MiB
  cap; binary sniffing removed; temp names hardened (~$, #..#, .temp).
- SQLite zero-error policy: backup-API snapshots + integrity_check, journal
  folding, locked/corrupt loud skips, verified restores.
- Recovery: reindex from manifests, remote adopt, on-demand blob fetch,
  5-day retention + thinning, GC, date-guarded remote purge, metrics.
- Scheduler with WebDAV quota signal and 70% pressure backstop (floor kept).
- 37 tests incl. live-monitor capture safety and DB safety.

This commit is contained in:

retoor

2026-10-10 03:41:36 +02:00

parent 7e05e3d26c

commit 3499f6cda0

35 changed files with 3148 additions and 203 deletions

									
										pyproject.toml
									
		-1
	
												View File
												
				@@ -12,7 +12,6 @@ dependencies = [

				    "fastapi>=0.110",

				    "uvicorn>=0.29",

				    "httpx>=0.27",

				    "cryptography>=42",

				]

				[project.optional-dependencies]