Absorb the roles bricks and ask capabilities - #82

Merged

SirLouen merged 47 commits into

mainfrom

Aug 23, 2026

Commits on Aug 22, 2026

feat(role): let plugins declare the roles a deployment knows
SirLouen
committed
fbd06b6
chore(deps): absorb the gouncer releases that name roles
SirLouen
committed
b71dff2
feat(cmd): take the role createadmin starts an account under
SirLouen
committed
13a0aad
feat(cmd): hand the brick the roles that administer accounts
SirLouen
committed
f3de4b4
feat(cmd): seed each demo account under the role it holds
SirLouen
committed
a013c98
test(cmd): name the role every bootstrap invocation passes
SirLouen
committed
4019c70
feat(graphres): create an account under the narrowest role
SirLouen
committed
54bcff2
test: build the brick's admin config in every harness
SirLouen
committed
556250e
feat(postgres): move every tier onto the account and drop the table
SirLouen
committed
1f32e0f
refactor(server): read the role the identity carries
SirLouen
committed
7413067
feat(graphres): guard every role write behind the caller's reach
SirLouen
committed
2c9f4bb
feat(cmd): give a role to every account holding none
SirLouen
committed
f051697
refactor(cmd): name the seams that carry the privileged cover
SirLouen
committed
a1fc02c
test: drive the role rails through the brick
SirLouen
committed
f9cd441
docs: restore the role column rather than the dropped table
SirLouen
committed
25bb1d4
feat(role): add ErrBeyondReach for role capability violations
SirLouen
committed
23f39c1
feat(role): name every capability the registry holds
SirLouen
committed
d8434c4
feat(graph): let a root field name the capability it needs
SirLouen
committed
6cdead1
feat(graphres): gate every root field on a capability
SirLouen
committed
14a2695
test(graph): refuse a bare admin flag and an unknown capability
SirLouen
committed
6bd5186
feat(graph): answer what the caller may do and may grant
SirLouen
committed
c21be67
feat(sdk): ask a capability rather than compare a role
SirLouen
committed
c1a394f
feat(frontend): offer only the roles the reader may grant
SirLouen
committed
97e7393
test(e2e): prove the role control in a real browser
SirLouen
committed
44932ee
docs: teach plugin authors to ask a capability
SirLouen
committed
d7904f8
feat(graph): answer what the caller may do and may grant
SirLouen
committed
8e56a84
fix(graphres): speak the brick refusals in the deployment's own voice
SirLouen
committed
9b8f5b1
docs: describe the capability model the graph now answers
SirLouen
committed
e12dec8
fix(postgres): keep every role when the move rolls back
SirLouen
committed
659e5c4
fix(cmd): let a command name a role a plugin declared
SirLouen
committed
5a99060
feat(graphres): name the capability a refused caller lacked
SirLouen
committed
c4903f7
test: pin the spoken refusals and the privileged boundary
SirLouen
committed
2cdc030
fix(frontend): refuse a role change while one is in flight
SirLouen
committed
ad2e5da
docs(sdk): say what a role provider returns
SirLouen
committed
c9e8d6f
docs: name the capability extension and restore every role
SirLouen
committed
13476ed
fix(graphres): read a null capability as none declared
SirLouen
committed
bf61d95
fix(cmd): stop the plugin host under its own bounded context
SirLouen
committed
448174b
docs: stream the roles through psql rather than into the container
SirLouen
committed
c075052
docs: say an account may hold no role at all
SirLouen
committed
342ae3c
test(graph): let a plugin name the capabilities it declares
SirLouen
committed
931453b
docs: state the role rules without promising an invariant
SirLouen
committed
86af0e0
docs: stop the role export on the first error
SirLouen
committed
65fd218