Refactor/composable features - #305

Draft

igorbenav wants to merge 90 commits into

mainfrom

refactor/composable-features

Commits on Sep 28, 2026

import the app through one root everywhere
igorbenav
committed
d50afdb
document the worker and image paths the single root needs
igorbenav
committed
7bad5fb
build the image from the repository root in every documented example
igorbenav
committed
8e58d9a

Commits on Sep 29, 2026

let any module declare permissions without depending on rbac
igorbenav
committed
7366903
let each feature own its settings and compose them in the wiring
igorbenav
committed
89983ee
let features contribute their own startup, routers and installers
igorbenav
committed
864cb62
ask the wiring where permissions come from instead of the role tables
igorbenav
committed
88a391a
let the throttle ask the wiring for a limit instead of reading tiers
igorbenav
committed
155bea4
let tiers and their limits own what they add to users
igorbenav
committed
6d89258
let each feature say what its own errors tell a client
igorbenav
committed
28daeab
give each feature its own fixtures and stop assuming every user has a tier
igorbenav
committed
1f50ef0
run the seeders the wiring lists and let the validator skip absent features
igorbenav
committed
a6c058b
prove each feature can be removed, and fix what that turned up
igorbenav
committed
c4321ea
keep the caller-resolving dependencies with accounts, and have the drill catch what is left behind
igorbenav
committed
da37575
stop a changed address inheriting the old one's verification, and keep it out of the logs
igorbenav
committed
2e9af40
log where a request failed to validate, never what it carried
igorbenav
committed
b8bcaaf
refuse to seed a superuser rather than guess credentials or promote a stranger
igorbenav
committed
308e7a4
store addresses the way crudauth looks them up, and keep the admin session to the admin
igorbenav
committed
4b1d26b
allow no cross-origin request rather than every one when none is configured
igorbenav
committed
d178f1f
hash api keys off the event loop and make revoking one final
igorbenav
committed
25e73e8
honour the startup table setting, and answer whether the app is ready to serve
igorbenav
committed
6ac1451
escape credentials in every url the app builds, and read the migration gate from settings
igorbenav
committed
9e4b9a7
tell the app it sits behind a proxy, and stop shipping root and a baked url
igorbenav
committed
38052fa
default the cache to the backend the compose files actually run
igorbenav
committed
0f5ee1d
ask the validator for its findings instead of reading its logs, and stop refusing good keys
igorbenav
committed
debb7ae
refuse a null for a column the row requires instead of failing the write
igorbenav
committed
71d1a51
count a request against the route it matched, not the path it typed
igorbenav
committed
fa57fcb
bound and order every listing, and stop a deleted tier following users around
igorbenav
committed
53ca49e
detect pytest without promising an environment the cast rejects
igorbenav
committed
723c3c2
hand the factory its wiring and let the api metadata settings decide
igorbenav
committed
9cfd281
delete what nothing reads, and route the plugin warnings that were being dropped
igorbenav
committed
7069a94
declare the line length the repository is written in
igorbenav
committed
33ccb4f
run the removal drills in ci, and pin what the checks depend on
igorbenav
committed
071450f
describe the composition root, and hold the login lockout to failing closed
igorbenav
committed
06d05d2

Commits on Sep 30, 2026

Commits on Oct 1, 2026

Commits on Oct 2, 2026

Commits on Oct 3, 2026

Commits on Oct 4, 2026

Commits on Oct 5, 2026