Repository navigation

Deliver through composition and validate generated permissions before execution - #1128

Merged

antoinetoussaint-byte merged 62 commits into

mainfrom

delivery/through-the-composition-interface

Oct 25, 2026

Merged

Deliver through composition and validate generated permissions before execution#1128
antoinetoussaint-byte merged 62 commits into
mainfrom
delivery/through-the-composition-interface

Commits on Oct 23, 2026
- run: a native run delivers through codefly.dev/composition when the host implements it
  
  AntoineToussaint
  and
  claude
  committed
  6aa43fc
- run: the delivery carries the authority's signed method policies
  
  AntoineToussaint
  and
  claude
  committed
  13f7a3e
Commits on Oct 24, 2026
- fix(run): an excluded workspace configuration group is not rendered either
  
  AntoineToussaint
  and
  claude
  committed
  b24ed0d
- feat(run): deliver a module's scope ceilings in the authority's document
  
  AntoineToussaint
  and
  claude
  committed
  ffdbddc
- gitops: a module serving HTTP delivers its routes' policies from its OpenAPI contract
  
  AntoineToussaint
  and
  claude
  committed
  6faa4b7
- generate contracts: a REST face's contract is its service's OpenAPI document
  
  AntoineToussaint
  and
  claude
  committed
  0eed329
- Merge origin/main into delivery/through-the-composition-interface
  
  AntoineToussaint
  and
  claude
  committed
  12a0bdd
- run: a local run generates the secrets its environment declares
  
  AntoineToussaint
  and
  claude
  committed
  c8f68fe
- gitops: a binding that names its calls carries what the callee declares for them
  
  AntoineToussaint
  and
  claude
  committed
  db32f87
- gitops: a module's foreign methods are delivered with its method policies
  
  AntoineToussaint
  and
  claude
  committed
  c18e661
- chore(deps): core 6710b5ac, the kit's foreign-method fixtures as its assistant module
  
  AntoineToussaint
  and
  claude
  committed
  c2bb934
- generate client: a Python library declares what its bindings import
  
  AntoineToussaint
  and
  claude
  committed
  a6d816f
- gitops: a proto method's HTTP routes are policy rows too
  
  AntoineToussaint
  and
  claude
  committed
  87ebf73
- gitops: a route template is spelled one variable per segment
  
  AntoineToussaint
  and
  claude
  committed
  867a089
- generate client: a local endpoint's contract takes its package from the protos
  
  AntoineToussaint
  and
  claude
  committed
  c1b8f96
- generate: a contract route's path is the route's own
  
  AntoineToussaint
  and
  claude
  committed
  c263903
- generate client: a connect endpoint is a contract source
  
  AntoineToussaint
  and
  claude
  committed
  392d72d
- generate client: the connect-endpoint test builds endpoints the way the loader does
  
  AntoineToussaint
  and
  claude
  committed
  b7c01a8
- generate client: a service vendoring foreign protos takes the descriptor path
  
  AntoineToussaint
  and
  claude
  committed
  b0db235
- delivery: a solution's roles travel in the authority's document
  
  AntoineToussaint
  and
  claude
  committed
  761ea31
Commits on Oct 25, 2026
- deps: core with the managed import path for codefly's own protos
  
  AntoineToussaint
  and
  claude
  committed
  88c5174
- feat: generate typed permissions and preflight selected compositions
  antoinetoussaint-byte
  committed
  101e1e2
- generate runnable-bindings: the run's naming scope and a declared call endpoint
  
  AntoineToussaint
  and
  claude
  committed
  ff909d7
- generate permissions: the default lands in each service's code tree
  
  AntoineToussaint
  and
  claude
  committed
  8df6849
- fix: preserve declared Buf inputs during proto generation
  antoinetoussaint-byte
  committed
  a097b27
- run: a reference to a composed service outside the run is dropped with a warning
  
  authored and
  antoinetoussaint-byte
  committed
  2672ee3
- deps: core where an unimplemented interface dependency stays unbound
  
  AntoineToussaint
  and
  claude
  committed
  51a28d9
- generate permissions: a module with Python services generates its Go tables
  
  AntoineToussaint
  and
  claude
  committed
  3fd9335
- render: an optional binding the composition leaves unfilled is omitted and logged
  
  AntoineToussaint
  and
  claude
  committed
  ea939d2
- fix: detect stale permission source before delivery effects
  antoinetoussaint-byte
  committed
  d7dbfce
- deps: core where Buf owns only its own output and a service's Go owns no foreign file
  
  AntoineToussaint
  and
  claude
  committed
  436478b
- fix: cancel native delivery through the run lifecycle
  antoinetoussaint-byte
  committed
  0dcbb75
- fix: isolate detailed logs by CLI invocation
  antoinetoussaint-byte
  committed
  d6858f1
- fix: omit live authority policies from signed withdrawals
  antoinetoussaint-byte
  committed
  fffafc0
- fix: observe withdrawal through the composition interface
  antoinetoussaint-byte
  committed
  cf1e3c5
- render: a binding addressed to a list of audiences is delivered once per audience
  
  AntoineToussaint
  and
  claude
  committed
  2694c2c
- fix: reserve native generations for complete policy deliveries
  antoinetoussaint-byte
  committed
  6173ce5
- fix: avoid copying binding declarations in delivery diagnostics
  antoinetoussaint-byte
  committed
  ec9470d
- gitops: a solution's roles are read from core's module contract
  
  AntoineToussaint
  and
  claude
  committed
  9563d2b
- deps: core where a proto is foreign to Go by its go_package; a Go library imports the hop by it
  
  AntoineToussaint
  and
  claude
  committed
  3883e97
- gitops: an unmarked method is refused only where method policies are consumed
  
  AntoineToussaint
  and
  claude
  committed
  85e856f
- generate: an environment declares where its runnable calls go
  
  AntoineToussaint
  and
  claude
  committed
  a18c303
- gitops: a module's method policies are the methods its endpoints serve
  
  AntoineToussaint
  and
  claude
  committed
  4d150d3
- ci: read the authority's libraries with the CI reader app
  
  AntoineToussaint
  and
  claude
  committed
  0c15593
- gitops: the host's own module is not held to the policies it receives
  
  AntoineToussaint
  and
  claude
  committed
  3a72953
- gitops: the host's own module is the module of host.delivery
  
  AntoineToussaint
  and
  claude
  committed
  b138edd
- render: a binding addressed to the module itself is delivered at its principal
  
  authored and
  antoinetoussaint-byte
  committed
  fd5b489
- generate: a Python client owns only the root files a protoc plugin wrote
  
  authored and
  antoinetoussaint-byte
  committed
  1d1bab1
- fix: gate local agent starts and observe test dependency readiness
  antoinetoussaint-byte
  committed
  088c402
- feat: separate declared workload membership from ready native routes
  antoinetoussaint-byte
  committed
  23ad484
- feat: deliver a service's declared egress as the generated egress group
  
  AntoineToussaint
  and
  claude
  committed
  78e48dd
- generate contracts: an http endpoint publishes the OpenAPI document its service carries
  
  authored and
  antoinetoussaint-byte
  committed
  327803c
- generate contracts: a refused manifest names itself and the artifact root it lacks
  
  antoinetoussaint-byte
  and
  claude
  committed
  5bcb601
- run: a producer several dependencies bind to is handed out once
  
  antoinetoussaint-byte
  and
  claude
  committed
  af71053
- run: manifests go where host.delivery points, whatever else the host implements
  
  antoinetoussaint-byte
  and
  claude
  committed
  fc7118c
- run: a host route with no answer leaves the module's delivery standing
  
  antoinetoussaint-byte
  and
  claude
  committed
  e60bce3
- run: an endpoint the producer does not declare is named as missing
  
  antoinetoussaint-byte
  and
  claude
  committed
  608561e
- fix: publish implemented interface procedures and extend imported groups
  antoinetoussaint-byte
  committed
  8de0f66
- fix(run): build declared frontend remotes before delivery
  antoinetoussaint-byte
  committed
  61824c6
- fix(run): refresh workload credentials by wall-clock expiry
  antoinetoussaint-byte
  committed
  9d782b1
- fix(ci): use configured authority reader and pin Core 88f4434c
  antoinetoussaint-byte
  committed
  c632692
- Merge main and resolve secret rotation generator ownership
  antoinetoussaint-byte
  committed
  625e66f

Commits

Commits on Oct 23, 2026

Commits on Oct 24, 2026

Commits on Oct 25, 2026