체인지로그

✨ dual-touch cross-property attribution journey (SPEC-2026-07-23)

• 🔧 docs+test(analytics): M-1c P2-iii/P2-iv — per-isolate dedup comment + N-different-panel fixture

🔧 [AUTO-CHECKPOINT] clinic-os 2026-07-23T16:18:20+09:00 (5 files)

🐛 drop locals.adminAuth?.error reference (owner-IV catch)

• 🐛 dedupe admin API-key D1 lookups, drop redundant re-checks

✨ raw mail viewer modal for leads (replaces dead page-route link)

• 🔧 [AUTO-CHECKPOINT] clinic-os 2026-07-23T14:12:34+09:00 (1 files)
• 🔧 [AUTO-CHECKPOINT] clinic-os 2026-07-23T14:02:30+09:00 (5 files)
• 🔧 [AUTO-CHECKPOINT] clinic-os 2026-07-23T13:37:23+09:00 (4 files)
• 🔧 [AUTO-CHECKPOINT] clinic-os 2026-07-23T13:32:21+09:00 (5 files)
• 🔧 [AUTO-CHECKPOINT] clinic-os 2026-07-23T13:27:20+09:00 (4 files)
• 🔧 [AUTO-CHECKPOINT] clinic-os 2026-07-23T13:17:18+09:00 (1 files)

🐛 pivot to mechanism (b) -- CON-1 disqualified mechanism (a)

• ✅ add committed fixture coverage for the cross-cutting route protection
• 🐛 protect cross-cutting _local guide route from category exclude shadow

🔧 [AUTO-CHECKPOINT] clinic-os 2026-07-23T12:06:57+09:00 (1 files)

🔧 re-derive MAX_BACKFILL_DAYS_PER_RUN from measured cost (5 -> 20)

🐛 replace session-id IN-list params with subqueries in rollup backfill

🐛 batch _backfillDay's per-row insert loops (Amendment 6)

🐛 reconcile-bots must not report success on per-day failures

• 🔧 [AUTO-CHECKPOINT] clinic-os 2026-07-23T02:00:14+09:00 (3 files)
• 🔧 [AUTO-CHECKPOINT] clinic-os 2026-07-23T01:55:13+09:00 (1 files)
• 📝 note analytics_config went live (AMU-confirmed intentional) during deploy window
• ✨ owner/cron invocation surface for is_bot reconciliation
• ✨ deterministic bot/ops classification + audience dimensions
• 🐛 reconcile topics.deprecated_at (SPEC-2026-07-22)
• ✨ Amendment 5 — success-path log...

🔧 [AUTO-CHECKPOINT] clinic-os 2026-07-23T01:55:13+09:00 (1 files)

• 📝 note analytics_config went live (AMU-confirmed intentional) during deploy window

✨ owner/cron invocation surface for is_bot reconciliation

• ✨ deterministic bot/ops classification + audience dimensions
• 🐛 reconcile topics.deprecated_at (SPEC-2026-07-22)

✨ Amendment 5 — success-path logging for ensureRollup (instrumentation only)

• 🔧 [AUTO-CHECKPOINT] clinic-os 2026-07-22T17:18:50+09:00 (1 files)
• 🔧 [AUTO-CHECKPOINT] clinic-os 2026-07-22T16:23:40+09:00 (2 files)

🐛 sargable KST-day predicate for rollup backfill (Amendment 4)

✨ background the rollup backfill call site (Amendment 3)

• 🐛 replace unsound COUNT migration-parity check with filename set-diff
• 🐛 close 4-for-4 recurring cut-time defect cluster

🐛 detect core/-nested tenant topology, fix astro cwd

• ✨ materialize top-6 D1 query-classes for admin/analytics/web (Amendment 2)
• 🐛 restore per-position tuple typing on runChunked
• 🐛 bound buildWebAnalyticsVM with a 30s total-deadline (companion XS)

🐛 chunk the top-level 5-way fan-out for wide-range requests

• 🐛 spawn astro dev directly, bypass dev-start.js preflight

🐛 semantic HTTP-verb filter + any-depth admin exclusion for _local .ts injector

🐛 extend _local route injector to .ts/.tsx endpoint files

🐛 resolve D1 concurrency contention via scheduling, not query cost

• 🐛 capture dev-server boot output on login-smoke exit-2
• ✨ add topic_conditions hub + generic tenant extension point
• 🐛 NULL-condition_id FAQ URLs fall back to bare topic hub, not topic+faq_slug
• 🐛 global-recency FAQ highlight ranking, not topic-alpha-then-break
• 🐛 guard non-numeric ?page= against NaN propagation
• ✨ zero-omission enumeration for posts/FAQ/condition pages (AMU HARD completeness)
• 🔧 [AUTO-CHECKPOINT...

✨ add topic_conditions hub + generic tenant extension point

🐛 NULL-condition_id FAQ URLs fall back to bare topic hub, not topic+faq_slug

• 🐛 global-recency FAQ highlight ranking, not topic-alpha-then-break
• 🐛 guard non-numeric ?page= against NaN propagation
• ✨ zero-omission enumeration for posts/FAQ/condition pages (AMU HARD completeness)
• 🔧 [AUTO-CHECKPOINT] clinic-os 2026-07-21T16:16:52+09:00 (1 files)
• 🐛 AC-P4 dormancy guard + spec residual + env-tunable timeout
• 🔧 [AUTO-CHECKPOINT] clinic-os 2026-07-21T13:56:23+09:00 (4 files)

🐛 wire CLOUDFLARE_ACCOUNT_ID from ~/.claude/lib/cf-env.sh (ORG-FINDING #360)

• 🔧 [AUTO-CHECKPOINT] clinic-os 2026-07-21T12:00:44+09:00 (3 files)
• 🐛 fail-closed on unset CLOUDFLARE_ACCOUNT_ID (DG16, #360)
• ✨ faq_items.slug NOT NULL + schema-drift reconciliation migrations
• 🐛 propagate package.json dependencies to starter-kit root
• 🔧 [AUTO-CHECKPOINT] clinic-os 2026-07-21T09:35:01+09:00 (3 files)
• 🔧 [AUTO-CHECKPOINT] clinic-os 2026-07-21T09:30:00+09:00 (6 files)

✨ default-deny allowlist gate for /api/* + phased rollout

🐛 WAVE-2 gate high-severity unauth endpoints (shipping PII, patient images, plugin mgmt, PATCH gaps, analytics)

🐛 route-class D1 facade timeout — privileged 30s, public 3s

🐛 gate obvious admin-write methods (anonymous write/delete)

🐛 TIER0 remove unauth DB-mutation junk + TIER1 gate patient-PII GETs

🐛 gate analytics/details + channel-explorer-detail behind admin auth (PII containment)

🐛 align pre-commit + cut-time script classification gates (SPEC-2026-07-17-gate-stack-parity-alignment)

• ⚡ parallelize mutually-independent D1 reads (P1 fast-follow)
• 🐛 register amendment-3 selftests in shared-file-lists MASTER_ONLY
• 🐛 bound orphaned-pending dedup + unbounded FAQ/condition IN-lists (amendment-3)
• 🐛 MERGE .docking/config.yaml instead of REPLACE (ORG-FINDING #350)
• 🔧 [AUTO-CHECKPOINT] clinic-os 2026-07-17T15:18:54+09:00 (1 files)
• 🐛 gate programs edge-cache exclude ...

🐛 register amendment-3 selftests in shared-file-lists MASTER_ONLY

• 🐛 bound orphaned-pending dedup + unbounded FAQ/condition IN-lists (amendment-3)
• 🐛 MERGE .docking/config.yaml instead of REPLACE (ORG-FINDING #350)
• 🔧 [AUTO-CHECKPOINT] clinic-os 2026-07-17T15:18:54+09:00 (1 files)

🐛 gate programs edge-cache exclude on category-index static coverage (AC-8)

• ✅ add durable non-vacuous PC harness for edge-cache budget ordering
• 🐛 compute programs edge-cache budget post-consolidation (AC-6)
• ✨ safety-gated edge-cache exclude + header for prerendered /programs leaves

🐛 mirror amendment-2 homepage grace to [locale] twin

• ✨ D1-timeout facade net + targeted content grace (amendment-2)

🐛 wrap pre-page SSR D1 reads with per-read timeout degrade

🐛 SSR D1 fail-fast timeout + graceful degrade (P1 amplification fix)

• ♻️ extract TERMINAL_BASE_STATUSES SOT for admin write/read terminal status (#118)
• ✨ gate the STARTER∧master_only contradiction (last 13-gap drift shape)
• 🔧 refresh drained ratchet label (stale '13-entry' text)
• 🐛 drain 12-entry master-only manifest gap ratchet to 0

🐛 map D1 client-query errors to 400 with actionable hint

🐛 assert non-empty slug per row before emitting INSERT

🐛 reject slug-absent/empty/whitespace writes at write-time

✨ 웹챗 고객 오프라인 감지 배지 + 오프라인 시 문자 자동무장

🐛 restore E2E gate — chromium self-heal + admin-login policy-exclusion

🐛 include today's walk-ins in 처리 완료 count/modal

• 📝 add pre-workshop payment-method registration tip

🐛 relabel stat as 오늘 유입, add 문의발생 1:1 mirror caption

🐛 board today-gate includes today-created terminals with NULL closed_at

🐛 reclassify check-core-imports.js MASTER_ONLY->STARTER (deploy-guard dep)

• 🔧 [AUTO-CHECKPOINT] clinic-os 2026-07-16T10:38:00+09:00 (2 files)

🐛 exclude local_prefixes from core-import scan

• 🔧 [AUTO-CHECKPOINT] clinic-os 2026-07-16T10:17:57+09:00 (2 files)

🐛 guard naver idempotency query against malformed lead_events.content

• 🐛 resolve survey links against merged D1+library list

🐛 register shared-file-lists.js master_only + add parity gate (#236/#281/#293)

✨ actor-based inclusion + within-booking exact threading + re-arm (Phase 1)

🐛 resolve survey link against D1-merged list, fail-fast 400 (remote_disease_intake 500)

🐛 harden public-page JSON-LD set:html against breakout

• 🔧 [AUTO-CHECKPOINT] clinic-os 2026-07-15T14:40:26+09:00 (3 files)
• 🔧 [AUTO-CHECKPOINT] clinic-os 2026-07-15T14:35:25+09:00 (2 files)
• 🐛 harden all set:html JSON blobs against breakout (stored XSS)
• ✨ merge D1-registered surveys into patient popup launch list
• 🐛 generous configurable build timeout (was unsatisfiable 300s)
• 🐛 fail-safe public-prefix default incl assets/ (P0 Option A, arch-confirmed)
• 🔧 [AU...