tasks(bookva-tenant-cutover-prep): 🟡 progress 4/7 — Steps 1+3-partial+5+7

Session 2026-05-26 закрыто: Steps 1+5+7 done, Step 3 partial (6 volumes
+ 4 populated из corrected templates).

Cross-repo work этой сессии:
- victor/books `2f7b539` — deploy.yml secret rename (`GITEA_TOKEN` → `BOOKVA_OVERLAY_TOKEN`,
  т.к. Gitea резервирует `GITEA_*` prefix для repo secrets).
- victor/books `75ea320` — deploy/web.compose.yml embed-api refs
  (NUXT_AUTH_TOKEN + NUXT_JWT_SECRET_KEY вместо NUXT_PUBLIC_BOOKS_API_KEY).
  Portainer stack 24 уже PUT'нут (env+compose atomic), container recreated,
  smoke green.
- victor/bookva-overlay `5b173de` — config-templates aligned to prod shape
  (jobs[], jobs-new[], docker, mailSettings, ntfy) + design v3 hostname
  (bookseller.kzntsv.site). task-runner template added (был missing).

Pass entry added: `gitea/victor-books-ci-bookva-overlay` (PAT scope=read:repository,
для BOOKVA_OVERLAY_TOKEN secret в victor/books).

Maintenance-window items deferred: Step 2 stacks, Step 3 stateful
(Mongo/MariaDB/MinIO), Step 4 login-gate. Step 6 delayed по spec (1-2 нед).

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

.tasks/STATUS.md

@@ -1,4 +1,6 @@
 # Admin Task Board
+_Updated: 2026-05-26 (вечер) — `bookva-tenant-cutover-prep` 🟡 paused, 4/7 steps done в этой сессии: Steps 1+5+7 closed, Step 3 partial (6 empty volumes + 4 populated). Maintenance-window remaining: Step 2 stacks, Step 3 stateful (Mongo/MariaDB/MinIO), Step 4 login-gate. bookva-overlay templates align'нуты к prod shape + design v3 (commit `5b173de` pushed). books `75ea320` pushed (deploy/web.compose.yml embed-api refs). Pass entry `gitea/victor-books-ci-bookva-overlay` added._
+
 _Updated: 2026-05-26 — заведена `bookva-tenant-cutover-prep` ⚪ (7-step prep на books VDS перед поднятием Bookva стека). Code-side done в victor/books master: embed-api с zod^4 fix, ES endpoint per-tenant, PWA redirect banner, deploy.yml per-tenant, overlay-репо finalize, ntfy per-tenant. Осталась только Portainer/Gitea-secrets/VDS работа._
 
 _Updated: 2026-05-25 (`iis-migration-to-ruvds` 🟢 closed Phase 1 per user decision — 9/24 hostnames live на RUVDS, source IIS оставлен running. `migrate-elasticsearch-to-books-vds` 🟢 closed ранее сегодня. 16 IIS hostnames + LE renewal pipeline + decommission — descoped в Closure note, не отдельные tracker tasks.)_
@@ -15,20 +17,24 @@ _Updated: 2026-05-25 (`iis-migration-to-ruvds` 🟢 closed Phase 1 per user deci
 
 ---
 
-## ⚪ [bookva-tenant-cutover-prep] — 7-step prep на books VDS перед поднятием Bookva стека
+## 🟡 [bookva-tenant-cutover-prep] — 7-step prep на books VDS перед поднятием Bookva стека (4/7 done)
 
 Gitea secrets + Portainer bookva stacks + volume create/copy (Mongo/ES/MinIO/configs — beyond MariaDB из stateful-split-volume-copy) + bookva-db login-gate + DNS `bookseller.kzntsv.site` + PWA redirect env в books-web + books-web embedded-api env (pending step из embed-api). После — отдельной задачей `bookva-tenant-cutover` (compose up).
 
-**Контекст dev-source:** victor/books `.wiki/concepts/tenant-split.md` rev v3. Code-side closed master: `5e28fd1` embed-api+zod^4, `4a9cafc` ES endpoint, `c1e58cf` PWA redirect, `88df172` deploy.yml per-tenant. Overlay-repos: bookva-overlay/main `58d4295`, slovo-overlay/main `bca6bbc`.
+**Контекст dev-source:** victor/books `.wiki/concepts/tenant-split.md` rev v3. Code-side closed master: `5e28fd1` embed-api+zod^4, `4a9cafc` ES endpoint, `c1e58cf` PWA redirect, `88df172` deploy.yml per-tenant. Overlay-repos: bookva-overlay/main `5b173de` (templates aligned), slovo-overlay/main `bca6bbc`.
+
+**Done в сессии 2026-05-26:**
+- ✅ Step 5 DNS (pre-existed) | ✅ Step 1 (`BOOKVA_OVERLAY_TOKEN` secret + books `2f7b539`) | ✅ Step 7 (Portainer stack 24 PUT + books `75ea320`, smoke green) | 🟡 Step 3 partial (6 volumes + 4 populated из corrected templates)
 
 **Acceptance:** все 7 шагов выполнены (см. task-файл), но `compose up bookva-*` ещё не запущен — это отдельная задача.
 
-**Status:** ready
-**Where I stopped:** (not started — все dev-side prep closed)
-**Next action:** Step 1 в Gitea UI — добавить bookva secrets (placeholder values). Шаги 2-7 по порядку.
-**Blocker:** —
-**Branch:** main
+**Status:** paused (mid-task, MW slot needed)
+**Where I stopped:** Steps 1+5+7+3-partial closed. Maintenance-window items deferred — координация slot'а с user'ом нужна для stateful-split-volume-copy + Step 2 + Step 4.
+**Next action:** Coordinate 1-2h MW → execute `stateful-split-volume-copy` playbook (MariaDB+Mongo `cp -a`) → Step 2 Portainer stacks create → Step 1 finish (stack IDs → Gitea secrets) → Step 4 login-gate SQL. Step 6 — за 1-2 нед до cutover отдельный заход.
+**Blocker:** `stateful-split-volume-copy` not started (MariaDB+Mongo volumes отсутствуют → Step 2 deploy fail). Maintenance window needs user signoff.
+**Branch:** master
 <!-- created-by: vitya / 2026-05-26 / Phase 2 cutover prep после tenant-split code-side done -->
+<!-- progress-2026-05-26: Steps 1+3-partial+5+7 closed; bookva-overlay templates fixed; victor/books deploy.yml + web.compose.yml + Portainer stack 24 updated -->
 
 ---