feat: expose verifiable deployment release

server/index.js

@@ -65,6 +65,7 @@ import { subscribe, list as listSubs, remove as removeSub, deliveryQueue, resolv
 import { bildirimleriIsle } from './notifier.mjs';
 import { scanSite } from './site-scan.mjs';
 import { createDetailCache } from './detail-cache.mjs';
+import { releaseInfo } from './release-info.mjs';
 
 // ilan.gov.tr sunucusu ara sertifikayı (GeoTrust TLS RSA CA G1) göndermiyor;
 // zinciri tamamlamak için PEM'i yerelden ekliyoruz.
@@ -75,6 +76,7 @@ const CA_BUNDLE = [...tls.rootCertificates, EXTRA_CA];
 const PORT = process.env.PORT || 3001;
 const ILAN_BASE = 'https://www.ilan.gov.tr';
 const CORS_ORIGINS = String(process.env.CORS_ORIGINS || '').split(',').map(value => value.trim()).filter(Boolean);
+const RUNTIME_RELEASE = releaseInfo();
 
 function readiness() {
   const directories = {
@@ -1732,6 +1734,7 @@ const server = http.createServer(async (req, res) => {
     }
 
     if (url.pathname === '/api/health') return json(res, 200, { ok: true });
+    if (url.pathname === '/api/version') return json(res, 200, { ok: true, ...RUNTIME_RELEASE });
     if (url.pathname === '/api/ready') {
       const status = readiness();
       return json(res, status.ready ? 200 : 503, { ok: status.ready, ...status });