fix(accounts,frontend): the follow-ups from the reviews of #1115 and #1116, and a module identity minted for one tenant by antoinetoussaint-byte · Pull Request #1122 · codefly-dev/module-saas-starter

fix(frontend): validate the generated plugin allowlist at load, confirm every non-GET playground row, and probe the capability handshake under the mount prefix

antoinetoussaint-byte

and

claude

committed

17c0622

fix(accounts,frontend): a declared trigger names only a delegation its executor can use, the stopgap sweep has a switch and a visible phase, and a refused pass enqueues nothing

antoinetoussaint-byte

and

claude

committed

029342c

feat(accounts,frontend): name, bound and expose the module identity minted for ONE tenant

antoinetoussaint-byte

and

claude

committed

0d0b0b4

test(accounts): pin the moved page's derived access boundary in the route-set fixture

antoinetoussaint-byte

and

claude

committed

03c5bb6

Merge remote-tracking branch 'origin/main' into issue-1121-follow-ups-and-per-tenant-module-identity

antoinetoussaint-byte

committed

1ab2695

chore(frontend): move the two kit packages whose published bytes changed

antoinetoussaint-byte

and

claude

committed

39ac774

fix(frontend): move the reference composition's kit pins with the packages

antoinetoussaint-byte

and

claude

committed

52cde7c

style(accounts): goimports' alignment on the struct the sweep switch joined

antoinetoussaint-byte

and

claude

committed

eafdbd4

fix(frontend,docs): the identity page obeys the read-outcome rules, and the SDK-gap diagnosis is withdrawn

antoinetoussaint-byte

and

claude

committed

5c4ef93

fix(accounts,frontend): a self-addressed delegation is a candidate, not the executor — and the sweep's state reaches the wire

antoinetoussaint-byte

and

claude

committed

2cda10b

fix(frontend): the schedules panel reports this host's sweep for every source, and claims nothing about who else fires

antoinetoussaint-byte

and

claude

committed

120a6c7

docs(accounts): the backfill and the declaration say self-addressed holder, never proven executor

antoinetoussaint-byte

and

claude

committed

d2d3810

fix(frontend): one source's row classifies its own declaration read, and says "nothing due" rather than a pass with no time

antoinetoussaint-byte

and

claude

committed

b3d01c3

test(frontend): close every declaration read state, and say so in the playground card too

antoinetoussaint-byte

and

claude

committed

6d331a1

fix(frontend): a refused read deletes the key it was refused, and no other

antoinetoussaint-byte

and

claude

committed

90733da

fix(frontend): a superseded refusal is stale news, and a pending declaration claims no identity

antoinetoussaint-byte

and

claude

committed

678d810

fix(frontend): the supersession guard counts generations, not milliseconds

antoinetoussaint-byte

and

claude

committed

e62ebd1

test(frontend): the deletion holds on the two lifecycle paths the test harness hid

antoinetoussaint-byte

and

claude

committed

08273d3

fix(frontend): a paused read has not answered, in all three views that read one

antoinetoussaint-byte

and

claude

committed

95b6259

fix(frontend): the children card and the occurrence button stop asserting an absence they cannot see

antoinetoussaint-byte

and

claude

committed

174b6ad

fix(frontend): "has this read answered?" is asked once, in the read seam

antoinetoussaint-byte

and

claude

committed

62e007e

Navigation Menu

Repository navigation

fix(accounts,frontend): the follow-ups from the reviews of #1115 and #1116, and a module identity minted for one tenant - #1122

fix(accounts,frontend): the follow-ups from the reviews of #1115 and #1116, and a module identity minted for one tenant#1122
antoinetoussaint-byte wants to merge 21 commits into
mainfrom
issue-1121-follow-ups-and-per-tenant-module-identity

Commits on Oct 13, 2026

fix(frontend): validate the generated plugin allowlist at load, confirm every non-GET playground row, and probe the capability handshake under the mount prefix

fix(accounts,frontend): a declared trigger names only a delegation its executor can use, the stopgap sweep has a switch and a visible phase, and a refused pass enqueues nothing

feat(accounts,frontend): name, bound and expose the module identity minted for ONE tenant

test(accounts): pin the moved page's derived access boundary in the route-set fixture

Merge remote-tracking branch 'origin/main' into issue-1121-follow-ups-and-per-tenant-module-identity

chore(frontend): move the two kit packages whose published bytes changed

fix(frontend): move the reference composition's kit pins with the packages

style(accounts): goimports' alignment on the struct the sweep switch joined

fix(frontend,docs): the identity page obeys the read-outcome rules, and the SDK-gap diagnosis is withdrawn

fix(accounts,frontend): a self-addressed delegation is a candidate, not the executor — and the sweep's state reaches the wire

fix(frontend): the schedules panel reports this host's sweep for every source, and claims nothing about who else fires

docs(accounts): the backfill and the declaration say self-addressed holder, never proven executor

fix(frontend): one source's row classifies its own declaration read, and says "nothing due" rather than a pass with no time

test(frontend): close every declaration read state, and say so in the playground card too

fix(frontend): a refused read deletes the key it was refused, and no other

fix(frontend): a superseded refusal is stale news, and a pending declaration claims no identity

fix(frontend): the supersession guard counts generations, not milliseconds

test(frontend): the deletion holds on the two lifecycle paths the test harness hid

fix(frontend): a paused read has not answered, in all three views that read one

fix(frontend): the children card and the occurrence button stop asserting an absence they cannot see

fix(frontend): "has this read answered?" is asked once, in the read seam