Deploy public beta on PostgreSQL and R2

[computersciencefreshmen]

What changed

• Migrates the Fastify backend from SQLite to asynchronous PostgreSQL with numbered migrations and transactional workflows.
• Adds private S3-compatible object storage with quota reservations, ten-minute presigned uploads, magic-byte/SHA-256 validation, immutable ETag-conditional promotion, signed downloads, and retryable cleanup.
• Hardens production sessions, first-login administrator password reset, exact origin allowlists, proxy trust, health/readiness probes, WebSocket URLs, Gmail configuration, Docker/Railway/Vercel configuration, and encrypted backup/restore operations.
• Updates CI, local PostgreSQL/MinIO development, operational documentation, and cross-role tests.

Why

The public Beta needs durable cloud data and files, first-party HttpOnly cookies through Vercel, a Railway-hosted API/WebSocket service, and production-safe account initialization without importing demo data.

Root cause

The previous implementation used synchronous local SQLite storage and local files, so a Vercel-only deployment could render the SPA but could not provide persistent registration, backend workflows, file storage, or realtime classroom access.

Validation

• pnpm check
• ESLint and Prettier passed
• API integration tests: 60/60 passed on PostgreSQL
• Vite production build passed
• Student, teacher, and administrator Playwright browser smoke tests passed
• Production-mode /health and /ready returned 200 with PostgreSQL and MinIO up
• Production dependency audit reported no known vulnerabilities
• Reused presigned-upload and conditional-promotion attacks were tested against real MinIO

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
international-chinese-platform	Ready	Preview, Comment	Jul 24, 2026 2:08am