Release: signup outage fix (#11524), self-serve account deletion (#11519) and develop since 10-26

Merged
EV
17d ago
+22412-3434

Production promotion stage → master, the owner's release ("cascade all for Gauzy to live"). It is claimed in the homelab MAINTENANCE board. The owner approved merging now, so the prod images build while stage is verified. If stage verification fails, the prod build is cancelled or the current prod digest is pinned before Image Updater rolls prod.

Fixes the production signup outage (every signup since 2026-10-27 04:37Z): #11524.

Also carries:

  • #11519: self-serve account deletion, hardened after an independent security review.
  • The develop work since the 10-26 release (see #11527).
  • The egress-audit fixes the promotion needed: #11528, #11529, #11530.

Migrations (all additive):

  • 1791000003410-AddTaskSyncScope
  • 1791000003430-RecountProjectMembersOfWorkingEmployees
  • 1791000003440-NormalizeProjectAndTeamArchiveFlags
  • 1791000003450-CreateAccountDeletionRequestTable

Backups are verified: nightly 20261028T020003 completed, and WAL was archived at 12:50Z.

Known reds, not blockers:

  • Snyk: yarn.lock alerts misattributed; the package versions are unchanged from stage.
  • DeepScan: 6 new code-quality issues, visible only in its dashboard.

Follow-up after this lands: set BASELINE_REWALK back to 'false' (see #11530).

🤖 Generated with Claude Code

Summary by cubic

Promotes stage → master, fixing the production signup outage that began 2026-10-27 and carrying self-serve account deletion plus develop work since the 10-26 release.

Key changes

  • Signups: Jitsu analytics events go through a bounded queue (4 in flight, 1,000 queued) so onboarding no longer stalls the event loop with thousands of TLS connections; a retry finishes a tenant a failed attempt left behind instead of creating another empty one.
  • Account deletion: email-link /api/account-deletion/{request,verify,confirm} flow plus signed-in /account-deletion/me; new delete-account pages and Danger Zone updates. Deleting a user now clears created/updated/deleted-by references instead of cascading deletion of rows other members own.
  • Develop also brings: former employees dropped from member lists and project counts, project/team archive and unarchive, per-task integration sync scope, Plane proxy calls over loopback, and GHCR image push that survives a Docker Hub failure.

Migrations (all additive)

  • 1791000003410 (task sync scope), 1791000003430 (project member recount), 1791000003440 (project/team archive flags), 1791000003450 (account-deletion request table).

Known non-blockers: Snyk yarn.lock alerts are misattributed (versions unchanged) and DeepScan reports 6 new code-quality issues. Set BASELINE_REWALK back to 'false' after this lands.