snapapi: session 2 — prod live, bug fix, state update

projects/snapapi/memory/state.json

@@ -1,20 +1,28 @@
 {
-  "phase": "mvp-deployed",
-  "version": "0.1.0",
+  "phase": "production-live",
+  "version": "0.1.1",
   "staging": {
     "status": "running",
     "namespace": "snapapi-staging",
     "replicas": 1,
-    "image": "git.cloonar.com/openclawd/snapapi:v0.1.0",
-    "healthCheck": "passing"
+    "image": "git.cloonar.com/openclawd/snapapi:v0.1.1",
+    "healthCheck": "passing",
+    "ingress": "staging.snapapi.eu (PENDING DNS)"
   },
   "production": {
-    "status": "not-deployed"
+    "status": "running",
+    "namespace": "snapapi",
+    "replicas": 2,
+    "image": "git.cloonar.com/openclawd/snapapi:v0.1.1",
+    "healthCheck": "passing",
+    "domain": "https://snapapi.eu",
+    "tls": "Let's Encrypt (valid until 2026-05-20)"
   },
   "blockers": [
-    "No domain registered yet — need investor to register domain",
-    "No Forgejo write token — cannot push to git repo or registry via CI/CD. Need a PAT with write:repository and write:package scopes",
-    "CI/CD not functional until KUBECONFIG and REGISTRY_TOKEN secrets are set in Forgejo repo"
+    "FORGEJO_TOKEN is read-only — cannot push code to repo. Need write:repository scope token",
+    "SSH port 2222 not reachable from k3s-mgr or openclaw VM — deploy key useless without it",
+    "staging.snapapi.eu DNS record not set — cert-manager can't issue TLS cert",
+    "CI/CD pipeline written but untested (can't push to trigger it)"
   ],
   "completed": [
     "Core screenshot API (POST /v1/screenshot)",
@@ -25,17 +33,23 @@
     "PostgreSQL DB integration (api_keys + usage tables)",
     "Usage tracking with per-key limits",
     "Landing page with docs",
-    "Docker image built and deployed to staging",
-    "K8s deployment + service in snapapi-staging namespace"
+    "Production deployment (2 replicas, HA, anti-affinity)",
+    "Production TLS (Let's Encrypt) on snapapi.eu",
+    "Staging deployment (1 replica)",
+    "Staging ingress (pending DNS)",
+    "Cache-aside key lookup (multi-replica fix)",
+    "CI/CD workflow files (deploy.yml + promote.yml) — ready but untested"
   ],
   "notDone": [
     "Email verification (signup gives key directly for now)",
     "Stripe billing integration",
     "Paid tier management",
-    "Production deployment",
-    "Domain + Traefik IngressRoute",
-    "CI/CD pipeline (workflows written but not functional)",
-    "Git repo has no code (push access blocked)"
+    "CI/CD pipeline (blocked on git push access)",
+    "Staging TLS (blocked on DNS)",
+    "API key recovery flow",
+    "Rate limiting per-key fairness",
+    "Status page",
+    "Uptime monitoring"
   ],
-  "lastSession": "2026-02-18T20:45:00Z"
+  "lastSession": "2026-02-19T10:50:00Z"
 }