chore: save iqon static deploy snapshot

This commit is contained in:
Sergei Vasilev
2026-05-20 17:21:42 +03:00
parent 497f2450e9
commit c023fe5d8d
121 changed files with 3211 additions and 24373 deletions
@@ -0,0 +1,60 @@
---
task: Проверить память проекта iqon.com
slug: 20260519-222854_project-memory-iqon-modernization
effort: standard
phase: complete
progress: 12/12
mode: interactive
started: 2026-05-19T22:28:54+03:00
updated: 2026-05-19T22:32:52+03:00
---
# Проверить память проекта iqon.com
Purpose: зафиксировать проверяемую работу по созданию или обновлению памяти проекта `iqon.com`.
## Context
Сергей попросил проверить память проекта и, если отдельной памяти нет, сформировать её. Текущий рабочий каталог: `/Users/svmac/development/iqon`. Ключевой контекст от пользователя: здесь модернизируется `www.iqon.com`. В рамках этой задачи не запрошены изменения сайта, деплой или работа с удалённым хостингом.
### Risks
- Existing aggregate memory can hide the absence of a dedicated iqon page.
- Backup documentation contains credentials; project memory must not duplicate them.
- Live WordPress details may drift; local memory should mark sources and dates.
## Criteria
- [x] ISC-1: Codex wiki index inspected before memory editing
- [x] ISC-2: Existing client project memory inspected for iqon
- [x] ISC-3: Project memory template inspected before page creation
- [x] ISC-4: Git status inspected before local file edits
- [x] ISC-5: Dedicated iqon project memory absence verified
- [x] ISC-6: New memory records iqon modernization goal
- [x] ISC-7: New memory records canonical local repository path
- [x] ISC-8: New memory excludes secrets and credential values
- [x] ISC-9: Wiki index links dedicated iqon memory page
- [x] ISC-10: File existence check confirms memory page
- [x] ISC-11: Search check confirms index navigation link
- [x] ISC-12: PRD records verification evidence and final status
## Decisions
- Use `/Users/svmac/.codex/memories/wiki/projects/iqon-com.md` for canonical project memory.
- Keep existing `/Users/svmac/.codex/memories/wiki/projects/client-projects.md` as aggregate context.
- Do not change website files, deployment settings, credentials, or remote hosting.
### Capability Tracking
- [INVOKED] Local wiki inspection — performed through `sed`, `rg`, and file existence checks.
- [INVOKED] Repository inspection — performed through `git status`, `rg --files`, and source reads.
- [INVOKED] Targeted file editing — creating project memory and index link.
- [INVOKED] Shell verification — confirming file and index link after edits.
## Verification
- `test -f /Users/svmac/.codex/memories/wiki/projects/iqon-com.md` exited 0.
- `rg -n "projects/iqon-com\\.md" /Users/svmac/.codex/memories/wiki/index.md` returned line 58.
- `rg -n "www\\.iqon\\.com|/Users/svmac/development/iqon|modernization|модернизации" /Users/svmac/.codex/memories/wiki/projects/iqon-com.md` returned modernization goal and canonical path lines.
- `rg -n "iqon-com\\.md" /Users/svmac/.codex/memories/wiki/projects/client-projects.md` returned line 21.
- `rg -n "password|парол|token|secret|credential" /Users/svmac/.codex/memories/wiki/projects/iqon-com.md` returned only warning/reference lines, not credential values.
@@ -0,0 +1,58 @@
---
task: Проверить и обновить память iqon.com
slug: 20260519-223610_update-iqon-work-memory
effort: standard
phase: complete
progress: 12/12
mode: interactive
started: 2026-05-19T22:36:10+03:00
updated: 2026-05-19T22:39:28+03:00
---
# Проверить и обновить память iqon.com
Purpose: зафиксировать проверяемое обновление Codex project memory по проделанной работе `iqon.com`.
## Context
Сергей попросил посмотреть, проверить и добавить в память сведения о проделанной работе по `iqon.com`: PHP 8 fixes, дизайн-аудит, архив БД, нерешённые риски и расположение старой Claude AUTO памяти. В рамках задачи нельзя переносить credential values из старых файлов памяти или backup-документов.
### Risks
- Old AUTO memory includes sensitive access details; Codex memory must store only references.
- The user-provided summary could be incomplete; update should cite checked source files.
- Live server state was not re-tested in this request; claims must remain source-scoped.
## Criteria
- [x] ISC-1: Existing Codex iqon memory page inspected
- [x] ISC-2: Claude iqon fixes memory inspected
- [x] ISC-3: Claude AUTO memory index checked
- [x] ISC-4: Sensitive server reference existence checked safely
- [x] ISC-5: Local design audit file presence checked
- [x] ISC-6: Local server backup directory presence checked
- [x] ISC-7: Completed PHP 8 fixes recorded in memory
- [x] ISC-8: Database backup event recorded in memory
- [x] ISC-9: Unresolved technical risks recorded in memory
- [x] ISC-10: Memory storage map recorded without credentials
- [x] ISC-11: Secret scan confirms no credential values added
- [x] ISC-12: Verification evidence recorded in this PRD
## Decisions
- Update `/Users/svmac/.codex/memories/wiki/projects/iqon-com.md` only.
- Do not read or copy raw credential values from `reference_iqon_server.md`.
- Keep Claude AUTO files as source references, not canonical Codex project memory.
### Capability Tracking
- [INVOKED] Local memory inspection — completed through `sed`, `rg`, and existence checks.
- [INVOKED] Targeted wiki editing — update `projects/iqon-com.md`.
- [INVOKED] Secret-safe verification — run focused `rg` checks after editing.
## Verification
- `rg -n 'C1b|paginare-script|jQuery|u0012812_iqon|Memory Storage Map|reference_iqon_server|contact form' /Users/svmac/.codex/memories/wiki/projects/iqon-com.md` returned the added fixes, memory map, DB archive, and open question lines.
- `rg -n 'Ds7|Dih|TTSQ|password value|пароль:|token=' /Users/svmac/.codex/memories/wiki/projects/iqon-com.md` exited 1, confirming known credential substrings were not added.
- `rg -n 'password|парол|token|secret|credential' /Users/svmac/.codex/memories/wiki/projects/iqon-com.md` returned only warning/reference lines, not credential values.
- `rg -n 'Updated: 19 May 2026, 22:38|Critical PHP 8 Fixes|DB archive' /Users/svmac/.codex/memories/wiki/projects/iqon-com.md` returned updated timestamp and new sections.
@@ -0,0 +1,75 @@
---
task: Полный аудит iqon.com и план изменений
slug: 20260519-224203_full-iqon-audit-plan
effort: extended
phase: complete
progress: 20/20
mode: interactive
started: 2026-05-19T22:42:03+03:00
updated: 2026-05-19T22:47:52+03:00
---
# Полный аудит iqon.com и план изменений
Purpose: зафиксировать проверяемый аудит live-сайта `iqon.com` и план изменений с опорой на Open Design.
## Context
Сергей попросил сделать полный аудит `iqon.com`, использовать skill `opendesign` и подготовить план необходимых изменений. В доступном списке нет skill с точным именем `opendesign`; использованы Open Design skill entries `design-review` и `frontend-design`. В рамках задачи не запрошены live-изменения, деплой, доступ к админке или перенос секретов.
### Risks
- Live WordPress core version is not directly confirmed; avoid stale exact-version claims.
- Visual audit is based on HTML/CSS evidence, not browser screenshots.
- Security recommendations must not imply remote changes were performed.
## Criteria
- [x] ISC-1: OpenDesign design-review skill entry inspected
- [x] ISC-2: OpenDesign frontend-design skill entry inspected
- [x] ISC-3: Codex iqon project memory inspected
- [x] ISC-4: Local prior design audit inspected
- [x] ISC-5: Live homepage headers inspected
- [x] ISC-6: Live homepage HTML inspected
- [x] ISC-7: Live stylesheet inspected for layout signals
- [x] ISC-8: Live sitemap index inspected
- [x] ISC-9: Live page sitemap inspected
- [x] ISC-10: Sitemap duplicate counts computed
- [x] ISC-11: Live REST users endpoint inspected
- [x] ISC-12: Live contact page inspected
- [x] ISC-13: Live readme exposure inspected
- [x] ISC-14: Local redesign prototype inspected
- [x] ISC-15: Audit document created in project root
- [x] ISC-16: Audit document lists prioritized findings
- [x] ISC-17: Audit document includes implementation plan
- [x] ISC-18: Audit separates current facts from stale memory
- [x] ISC-19: Audit avoids credential values
- [x] ISC-20: Verification evidence recorded in PRD
## Decisions
- Create a new current audit document rather than overwrite prior `iqon-design-audit.md`.
- Treat prior WP 4.9.13 claim as historical until core version is separately confirmed.
- Recommend static/light redesign path unless WordPress editing must remain a hard requirement.
### Plan
1. Create a current audit markdown document in the project root.
2. Separate verified live findings from stale/historical memory.
3. Prioritize quick hardening, SEO/accessibility cleanup, and full redesign work.
4. Include verification commands and expected signals for each phase.
### Capability Tracking
- [INVOKED] OpenDesign design-review — read `/Users/svmac/development/open-design/skills/design-review/SKILL.md`.
- [INVOKED] OpenDesign frontend-design — read `/Users/svmac/development/open-design/skills/frontend-design/SKILL.md`.
- [INVOKED] Live HTTP inspection — checked homepage, headers, sitemap, REST, contact.
- [INVOKED] Local repository inspection — checked memory, old audit, root and new redesign.
- [INVOKED] Targeted audit document editing — create current audit artifact.
## Verification
- `test -f iqon-full-audit-2026-05-19.md` exited 0.
- `rg -n "P0|P1|Phase 1|Phase 3|Open Design|WordPress 4\\.9\\.13|66 URLs|29 sitemap|3 duplicated|admin|iqnadm01" iqon-full-audit-2026-05-19.md` returned expected audit sections and evidence lines.
- `rg -n "password|парол|token|secret|Ds7|Dih|TTSQ|credential" iqon-full-audit-2026-05-19.md` exited 1, confirming credential terms/substrings are absent.
- `python3 -c` document check returned `has_purpose True`, `has_toc True`, `has_plan True`, `has_dates True`.
@@ -0,0 +1,56 @@
---
task: Продолжить аудит iqon.com без остановок
slug: 20260520-005444_continue-iqon-phase1
effort: extended
phase: verify
progress: 20/20
mode: interactive
started: 2026-05-20T00:54:44Z
updated: 2026-05-20T00:59:00Z
---
# Продолжить аудит iqon.com без остановок
Purpose: превратить полный аудит `iqon.com` в локальный Phase 1 hardening-пакет без записи на live-сайт.
## Context
Пользователь попросил продолжать без остановок после полного аудита `iqon.com`. Без отдельного подтверждения нельзя писать во внешний WordPress/hosting, поэтому текущая работа ограничена локальными артефактами: готовый PHP snippet для Code Snippets, инструкция внедрения и проверочный чеклист. Источники: `iqon-full-audit-2026-05-19.md`, `/Users/svmac/.codex/memories/wiki/projects/iqon-com.md`, live-проверки из предыдущего шага.
## Criteria
- [x] ISC-1: Git status inspected before local file edits.
- [x] ISC-2: Existing iqon audit document read before implementation.
- [x] ISC-3: Project memory page read before implementation.
- [x] ISC-4: Development memory routing check completed successfully.
- [x] ISC-5: Remote live writes excluded from this pass.
- [x] ISC-6: WordPress hardening snippet file exists locally.
- [x] ISC-7: Snippet blocks public REST user endpoint.
- [x] ISC-8: Snippet disables XML-RPC through WordPress filter.
- [x] ISC-9: Snippet includes install documentation fallback block.
- [x] ISC-10: Snippet sends missing defensive security headers.
- [x] ISC-11: Snippet injects viewport when absent.
- [x] ISC-12: Snippet rewrites known HTTP iqon URLs.
- [x] ISC-13: Snippet rewrites known HTTP maps URLs.
- [x] ISC-14: Snippet fixes Yoast site-name metadata.
- [x] ISC-15: Snippet removes WordPress generator output.
- [x] ISC-16: Snippet adds emergency responsive CSS.
- [x] ISC-17: Deployment document describes non-secret installation steps.
- [x] ISC-18: Deployment document lists live verification commands.
- [x] ISC-19: PHP syntax verification attempted on snippet.
- [x] ISC-20: Created artifacts contain no credential values.
## Decisions
- Use a local snippet package, not a live deployment.
- Prefer defensive, reversible WordPress filters before redesign.
- Keep secrets out of new files and final response.
## Verification
- `git status --short` confirms worktree awareness.
- `git status --short` showed existing dirty worktree plus new local artifacts.
- `rg --files wp-snippets` showed `iqon-phase1-hardening.php` and `README.md`.
- `php -l wp-snippets/iqon-phase1-hardening.php` was attempted; local PHP CLI is missing.
- `rg -n "password|passwd|token|BEGIN RSA|BEGIN OPENSSH|api[_-]?key|private_key" wp-snippets` returned no output.
- Live commands in deployment document remain proposed until deployment approval.
@@ -0,0 +1,10 @@
---
task: fix codex mcp startup warnings
slug: 20260520-100503_fix-codex-mcp-startup
effort: standard
phase: observe
progress: 0/0
mode: interactive
started: 2026-05-20T10:05:03Z
updated: 2026-05-20T10:05:03Z
---
@@ -0,0 +1,10 @@
---
task: explain telegram prefix routing options
slug: 20260520-103700_telegram-prefix-options
effort: standard
phase: observe
progress: 0/0
mode: interactive
started: 2026-05-20T10:37:00Z
updated: 2026-05-20T10:37:00Z
---
@@ -0,0 +1,10 @@
---
task: Stop hook failure diagnosis
slug: 20260520-125837_stop-hook-failure-diagnosis
effort: standard
phase: observe
progress: 0/0
mode: interactive
started: 2026-05-20T12:58:37+03:00
updated: 2026-05-20T12:58:37+03:00
---
@@ -0,0 +1,78 @@
---
task: Обновить контакты, записать решения, подготовить deployment-пакет
slug: 20260520-163012_static-deploy-contact-decisions
effort: standard
phase: complete
progress: 10/10
mode: interactive
started: 2026-05-20T15:00:00+03:00
updated: 2026-05-20T16:30:12+03:00
---
# Обновить контакты, записать решения, подготовить deployment-пакет
Purpose: зафиксировать работу по обновлению контактных данных, записи решений владельца и подготовке deployment-пакета для `iqon.com`.
## Context
Сергей ответил на 4 открытых вопроса проекта iqon.com: каноничные контакты (Бухарест/Алматы, phone→@infobidgebot, fax убрать), EN-only, static, reg.ru upload. Затем дал команду «прод continued» для подготовки deployment-пакета. Затем записал SSL-сертификат reg.ru в ~/certs/.
### Owner Decisions Recorded
| Question | Answer | Recorded In |
|----------|--------|-------------|
| Каноничные контакты | Бухарест; телефон → @infobidgebot; fax убрать | iqon-com.md, contact/index.html, index.html, new_redesign/index.html |
| Языковая политика | EN only | iqon-com.md, site-structure-brief |
| Платформа | Static HTML/CSS/JS | iqon-com.md |
| Деплой-маршрут | reg.ru file upload | iqon-com.md |
### Risks
- reg.ru shared hosting: .htaccess может обрабатываться Apache за nginx — проверить после деплоя.
- Сертификат self-signed, CN пустой — только для внутренних соединений с reg.ru.
- WordPress файлы нужно перемещать, а не удалять, при деплое.
- Русские URL редиректы через .htaccess — процент-кодированные пути могут вести себя по-разному на reg.ru nginx+Apache; проверить после деплоя.
## Criteria
- [x] ISC-1: Телефон и fax удалены из index.html, contact/index.html, new_redesign/index.html
- [x] ISC-2: @infobidgebot добавлен во все контактные места
- [x] ISC-3: contact/index.html переработан: Email + Telegram + Office
- [x] ISC-4: 4 решения владельца записаны в iqon-com.md Decisions
- [x] ISC-5: 3 открытых вопроса закрыты в iqon-com.md Open Questions
- [x] ISC-6: site-structure-brief обновлён с resolved items
- [x] ISC-7: deploy/.htaccess создан: 129 строк, 44 редиректа, security headers, WP blocking
- [x] ISC-8: deploy/404.html и deploy/403.html созданы
- [x] ISC-9: deploy/README.md с пошаговой инструкцией деплоя
- [x] ISC-10: SSL-сертификат ~/certs/ записан в infrastructure.md, client-projects.md, iqon-com.md
## Decisions
- Контакты: office@iqon.com + @infobidgebot (Telegram) + Bucharest address; без телефона и fax.
- Платформа: статическая замена WordPress (Phase 1 hardening становится interim).
- Деплой: reg.ru file manager upload.
- .htaccess: Apache mod_rewrite для редиректов + security headers + WP surface blocking.
- Сертификат ~/certs/: self-signed RSA 2048, /C=ru/ST=mo/L=moscow, valid до 2036-05-17.
## Files Changed
| File | Change |
|------|--------|
| `index.html` | Phone→@infobidgebot, fax removed (footer) |
| `contact/index.html` | Full rework: Email+Telegram+Office panels, nav CTA→@infobidgebot |
| `new_redesign/index.html` | Phone→@infobidgebot, fax removed |
| `deploy/.htaccess` | NEW: 129 lines, 44 redirects, security headers, WP block |
| `deploy/404.html` | NEW: custom error page |
| `deploy/403.html` | NEW: custom error page |
| `deploy/README.md` | NEW: step-by-step deployment guide |
| `content/site-structure-brief-2026-05-20.md` | Resolved: contacts, language, platform, deploy |
| `wiki/projects/iqon-com.md` | 4 decisions, 3 closed questions, Phase 5, cert path |
| `wiki/projects/client-projects.md` | iqon section updated: hosting, Telegram, SSL, platform, deploy, language |
| `wiki/infrastructure.md` | NEW section: SSL/TLS Certificates |
## Verification
- `rg -rn "261 2600|261 2608|F \+4|T \+4" iqon/ --glob '!server-backup*' --glob '!legacy*' --glob '!iqon-full-audit*'` → 0 matches
- `rg -n "infobidgebot" index.html contact/index.html` → matches in all expected locations
- `openssl x509 -in ~/certs/my.crt -noout -subject -dates` → subject=/C=ru/ST=mo/L=moscow, valid 20262036
- `rg "certs|my\.crt" wiki/infrastructure.md wiki/projects/iqon-com.md wiki/projects/client-projects.md` → all three updated
@@ -0,0 +1,47 @@
---
task: Save iqon memory and git snapshot
slug: 20260520-171600_memory-git-save
effort: standard
phase: complete
progress: 8/8
mode: interactive
started: 2026-05-20T17:16:00+03:00
updated: 2026-05-20T17:16:00+03:00
---
# Save iqon memory and git snapshot
Purpose: зафиксировать сохранение проектной памяти и подготовку git snapshot после локальной готовности static deploy-пакета `iqon.com`.
## Context
Сергей попросил сделать сохранение памяти и git. Перед коммитом проверен рабочий статус, добавлен `.gitignore` для backup/access-файлов, и исключены чувствительные директории/скрипты из планируемого snapshot.
## Criteria
- [x] ISC-1: Git status inspected before staging files
- [x] ISC-2: Secret scan run on deploy-related file set
- [x] ISC-3: Backup directories excluded from git tracking
- [x] ISC-4: Access helper scripts excluded from git tracking
- [x] ISC-5: Current memory save PRD created locally
- [x] ISC-6: Static deploy readiness report exists
- [x] ISC-7: Codex project memory updated externally
- [x] ISC-8: Git commit prepared from relevant project files only
## Decisions
- Do not stage `server-backup-*`, `legacy_reference`, `.cursor`, `.cursorrules`, `check_ssh*.exp`, or `.mhtml`.
- Keep deployment docs, static prototype, reports, SEO artifacts, scripts, snippets, and local MEMORY in git.
- Remove already-tracked backup and mhtml files from git index with `git rm --cached`, without deleting local files.
## Verification
- `git status --short` showed dirty tracked files and many untracked project artifacts.
- Secret scan returned references to paths and identifiers only, not credential values.
- `.gitignore` now excludes backup/access/helper artifacts.
- `git rm --cached -r server-backup-20260518 server71.hosting.reg.ru_1500.mhtml` removed sensitive backup artifacts from git tracking only.
---
*Created: 2026-05-20*
*Updated: 2026-05-20*