docs: add Metrics page for the new optional Prometheus support
New Metrics.md covers enabling/auth, the fork-safety design (mirroring
Scheduling.md's own multi-worker writeup), the full metric reference
table, and cardinality rationale for action_type-only labels. Linked
from Home.md/_Sidebar.md, cross-referenced from HTTP-API-Reference.md
(JSON vs text-exposition routes), Architecture-Internals.md (module map
+ fork-safety note), Security.md (auth model, what's exposed), and
Scheduling.md (reciprocal link -- same category of fork-safety problem,
different solution).
docs: add Dashboard page for the new read-only web dashboard
New Dashboard.md covers pages/routes, the ?key= auth model and its
browser-history trade-off, rules-view availability, and current
scope limits (read-only, no auto-refresh). Linked from Home.md and
_Sidebar.md; cross-referenced from HTTP-API-Reference.md (JSON vs HTML
routes), Architecture-Internals.md (module map), and Security.md
(key reuse + access-log suppression note).
Document the internal cron scheduler (v0.6.0)
New Scheduling page covering config, job lifecycle, the no-misfire-
catchup behavior, and the multi-worker fork-safety guarantee (verified
empirically against a real Gunicorn deployment, not just claimed).
Cross-linked from Architecture Internals (module map, request
lifecycle, process boundaries) and In-Depth Configuration (new
schedule: config.yml section).
Claude-Session: https://claude.ai/code/session_01RmGXvFTXNX36azVbVKMHLL
Add HTTP API Reference page
New page documenting all 7 server.py endpoints (execute, jobs list/get/
cancel, health, stats, version) -- request params, response shapes, job
lifecycle, a polling pattern, and the error format -- verified directly
against server.py and sqlite_queue.py rather than ported from the main
repo's now-retired docs/API.md. Cross-linked from Contexts, Architecture
Internals, and Home; added to the sidebar under Core Concepts.
Claude-Session: https://claude.ai/code/session_01RmGXvFTXNX36azVbVKMHLL
Add first-class Security section and a For Developers section
Security content was scattered — a subsection buried in Advanced-Topics,
plus a production lesson about magnet-link metadata timing tucked into
Contexts. Pull it all into a standalone Security page (threat model, API
auth, network exposure, credential management, content-safety rules,
the metadata-timing limitation, log hygiene, vulnerability reporting)
and give it its own sidebar category instead of hiding it in
Configuration.
Also split codebase-facing content out of Advanced-Topics (an
end-user page) into a proper Developers section: Architecture Internals
(module map, process boundaries, request lifecycle), Extending the
Engine (custom operators/actions, moved out wholesale), a Testing Guide
grounded in the real pytest layout and markers, and a Release Process
page grounded in the actual bump-version.sh/release.yml/docker-build.yml
pipeline. Contributing now cross-links into these instead of standing
alone.
Claude-Session: https://claude.ai/code/session_01RmGXvFTXNX36azVbVKMHLL