tasks(bookva-tenant-cutover-prep): 🟢 closed 6/7 (Step 6 delayed by design)

Все ops-шаги VDS-side выполнены в одну сессию:
- 7 Gitea secrets (incl. BOOKVA_OVERLAY_TOKEN scope=read:repository)
- 9/10 Portainer stacks (ozon-mcp deferred — image отсутствует в registry)
- 6 volumes created, 4 populated; bookva-db-data (4.7G) + bookva-mongo-data
  (517M) через cp -a (downtimes 59s + 5s)
- bookva-db login-gate (3 users scrambled), books-db verified untouched
- DNS уже резолвилось (closed by inspection)
- books-web embed-api live (Portainer stack 24 + books deploy/web.compose.yml)

User-facing bookva stacks stopped post-create (Status=2) —
bookseller.kzntsv.site = 000 pre-cutover state. db/mongo/es оставлены
running (internal, useful для testing).

Cross-repo: bookva-overlay 6 commits (templates aligned, mariadb:10.6,
mongo:4.2, api internal-only, depends_on removed, .env.example v3
hostnames). books 2 commits (secret rename + web.compose embed-api refs).

Handoff to `bookva-tenant-cutover` micro-task when user скажет «поднимаем
Bookva»: re-start 6 stopped stacks + MinIO mc cp + ES snapshot/restore +
books-api stop после 24-48ч soak.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

.tasks/bookva-tenant-cutover-prep.md

@@ -130,11 +130,35 @@ NUXT_PUBLIC_BOOKS_API_KEY=         # удалить (legacy)
 
 ## Status
 
-paused (4/7 steps done — остальное ждёт maintenance window)
+closed 2026-05-26 — 6/7 done in одну сессию. Step 6 delayed by design (1-2 нед до cutover).
+
+## Closure note
+
+Scope полностью выполнен per acceptance кроме Step 6 (delayed by design) и одной дискретной деференции (bookva-ozon-mcp stack — image отсутствует в registry, требует build в victor/books). Все остальные шаги closed:
+
+- **Step 1** ✅ 7 Gitea secrets созданы (BOOKVA_OVERLAY_TOKEN scope=read:repository, HEALTHCHECK_BOOKVA_{API,WEB}_URL, PORTAINER_STACK_ID_BOOKVA_{API,WEB,SCHEDULER,OPS_MCP}).
+- **Step 2** ✅ 9/10 Portainer stacks (ozon-mcp deferred). User-facing stopped pre-cutover (Status=2), infra (db/mongo/es) активны.
+- **Step 3** ✅ 6 volumes + 4 populated из corrected overlay templates. bookva-db-data (4.7G), bookva-mongo-data (517M) cp -a с downtimes 59s + 5s. MinIO bucket copy deferred (cutover-time через `mc cp books bookva`).
+- **Step 4** ✅ bookva-db login-gate `UPDATE users SET password=UUID() WHERE id_user NOT IN (1,2)` — 3 users (id≥3) scrambled, books-db verified untouched.
+- **Step 5** ✅ DNS bookseller.kzntsv.site pre-existed (closed by inspection).
+- **Step 6** 🔵 delayed — выставить `NUXT_PUBLIC_BOOKVA_REDIRECT_URL` за 1-2 нед до cutover.
+- **Step 7** ✅ books-web embed-api live (Portainer stack 24 PUT + books `75ea320` push). bookva.kzntsv.site/api/* via embed. books-api stack fallback 24-48ч soak до stop micro-task'и.
+
+Discovered + fixed cross-repo (bookva-overlay 4 commits, books 2 commits):
+- bookva-overlay `5b173de` — config-templates align prod shape + design v3 hostname
+- bookva-overlay `264373d` — .env.example design v3 hostnames
+- bookva-overlay `23eb374` — db.compose.yml mariadb:10.11 → 10.6 (match books-db для cp -a)
+- bookva-overlay `93c2ea2` — mongo.compose.yml mongo:7 → 4.2 (WiredTiger format compat)
+- bookva-overlay `2b20a3e` — api.compose.yml remove traefik (internal-only per v3)
+- bookva-overlay `8bffd68` — depends_on dropped (per-stack model)
+- books `2f7b539` — secrets.GITEA_TOKEN → BOOKVA_OVERLAY_TOKEN (Gitea reserved prefix)
+- books `75ea320` — deploy/web.compose.yml embed-api refs (NUXT_AUTH_TOKEN + NUXT_JWT_SECRET_KEY)
+
+Workflow E2E verified: dispatch tenant=bookva, all 4 svc deploy gracefully — BOOKVA_OVERLAY_TOKEN clone bookva-overlay OK, скип per-svc если stack_id отсутствовал (до записи).
 
 ## Where I stopped
 
-2026-05-26 — Steps 1, 5, 7 done; Step 3 partial (6 empty volumes + 4 populated из corrected templates). Steps 2, 3-rest (Mongo/MariaDB/MinIO), 4 deferred к coordinated maintenance window с user'ом. Step 6 delayed по spec (1-2 нед до cutover).
+closed — handoff to `bookva-tenant-cutover` task (когда user скажет «давай поднимать Bookva»). Cutover task должна: re-start stopped Portainer stacks (api/web/scheduler/task-runner/ops-mcp/ntfy), `mc cp books bookva` MinIO bucket, ES snapshot+restore from shared kzntsv → bookva-es (Phase 2), smoke с двух сетей, books-api stack stop после 24-48ч soak post-Step-7.
 
 ## Decisions log