feat(auth-gateway): a declared module route admits a host-minted operation context with no bearer, decided by accounts by saurabhmaheshwari-obin · Pull Request #1251 · codefly-dev/module-saas-starter

fix(accounts): a person's capability stays sealed to its audience's installation

saurabhmaheshwari-obin

and

claude

committed

2d85773

feat(auth-gateway): a declared module route admits a headless operation context with no bearer

saurabhmaheshwari-obin

and

claude

committed

24fa55d

fix(auth-gateway): the bearer-less arm admits one capability and reads every target row

saurabhmaheshwari-obin

and

claude

committed

840a391

fix(accounts): classify every mint by where it seals, and allow-list child owner kinds

saurabhmaheshwari-obin

and

claude

committed

de9a971

contracts: accounts owns installation_listing.proto, and the gateway vendors it verbatim

saurabhmaheshwari-obin

and

claude

committed

fb7d279

fix(auth-gateway): refuse a seal on the alias's module principal, read from accounts

saurabhmaheshwari-obin

and

claude

committed

f942a7e

fix(accounts): say which installations carry no registry principal, and pin a solution's

saurabhmaheshwari-obin

and

claude

committed

8c34f38

chore(saas-sdk): 0.3.36, for the moved installation listing types

saurabhmaheshwari-obin

and

claude

committed

6cef5de

feat(accounts): AdmitWorkloadOperation, the issuer's allow-list for the bearer-less module arm

saurabhmaheshwari-obin

and

claude

committed

c81b616

fix(auth-gateway): the bearer-less module arm admits what the issuer admits, not what the seal suggests

saurabhmaheshwari-obin

and

claude

committed

7e0d0b0

fix(accounts): drop Installation.registry_principal_id, which nothing reads now

saurabhmaheshwari-obin

and

claude

committed

c1e2be2

fix(tools): the naming gate reads text files up to 1 MiB

saurabhmaheshwari-obin

and

claude

committed

bcec7e3

fix(accounts): AdmitWorkloadOperation reads the capability back and answers the target's installation too

saurabhmaheshwari-obin

and

claude

committed

da1d474

fix(auth-gateway): one issuer call per bearer-less request, no stamped installation header

saurabhmaheshwari-obin

and

claude

committed

1b4c1df

revert(contracts): installation_listing.proto goes back into installations.proto

saurabhmaheshwari-obin

and

claude

committed

31f50c9

fix(tools): the naming gate's size refusal names raising the cap for generated text

saurabhmaheshwari-obin

and

claude

committed

23517b2

docs(accounts): say which refusal a seal the owner no longer holds is

saurabhmaheshwari-obin

and

claude

committed

3b16ae2

Navigation Menu

Repository navigation

feat(auth-gateway): a declared module route admits a host-minted operation context with no bearer, decided by accounts - #1251

feat(auth-gateway): a declared module route admits a host-minted operation context with no bearer, decided by accounts#1251
saurabhmaheshwari-obin merged 17 commits into
codefly-dev:mainfrom
saurabhmaheshwari-obin:s6/b2-main

Commits on Oct 24, 2026

fix(accounts): a person's capability stays sealed to its audience's installation

feat(auth-gateway): a declared module route admits a headless operation context with no bearer

fix(auth-gateway): the bearer-less arm admits one capability and reads every target row

fix(accounts): classify every mint by where it seals, and allow-list child owner kinds

contracts: accounts owns installation_listing.proto, and the gateway vendors it verbatim

fix(auth-gateway): refuse a seal on the alias's module principal, read from accounts

fix(accounts): say which installations carry no registry principal, and pin a solution's

chore(saas-sdk): 0.3.36, for the moved installation listing types

feat(accounts): AdmitWorkloadOperation, the issuer's allow-list for the bearer-less module arm

fix(auth-gateway): the bearer-less module arm admits what the issuer admits, not what the seal suggests

fix(accounts): drop Installation.registry_principal_id, which nothing reads now

fix(tools): the naming gate reads text files up to 1 MiB

fix(accounts): AdmitWorkloadOperation reads the capability back and answers the target's installation too

fix(auth-gateway): one issuer call per bearer-less request, no stamped installation header

revert(contracts): installation_listing.proto goes back into installations.proto

fix(tools): the naming gate's size refusal names raising the cap for generated text

docs(accounts): say which refusal a seal the owner no longer holds is