6301 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Marc-André Bombeck	ba3be7ba9b	feat: distinguish managed record access	2026-08-06 04:18:05 +02:00
Marc-André Bombeck	908897cc6b	test: cover shared record modes	2026-08-06 04:17:58 +02:00
Marc-André Bombeck	afae57207c	feat: scope shared record navigation	2026-08-06 04:13:59 +02:00
Marc-André Bombeck	cb15100341	test: cover scoped record navigation	2026-08-06 04:13:54 +02:00
Marc-André Bombeck	2ccd022410	test: update notification sender attempt mocks ... - Exercise identity-aware delivery attempt recording\n- Keep self-delivery assertions explicit	2026-08-06 04:05:33 +02:00
Marc-André Bombeck	201a24e404	Merge managed record settings	2026-08-06 04:05:16 +02:00
Marc-André Bombeck	437d916fc6	fix: guard managed setting label inventories ... - Treat inherited property names as unavailable settings - Preserve legacy tile aliases only for declared entries	2026-08-06 04:01:00 +02:00
Marc-André Bombeck	d9b675f993	feat: attribute notification delivery attempts	2026-08-06 03:59:08 +02:00
Marc-André Bombeck	e4993af909	test: cover notification diagnostic attribution	2026-08-06 03:57:55 +02:00
Marc-André Bombeck	906118f86e	fix: resolve notification delivery identity	2026-08-06 03:57:23 +02:00
Marc-André Bombeck	24c5c49be3	fix: remove unused managed setting labels ... - Keep closed display inventories as the only rendered labels	2026-08-06 03:55:37 +02:00
Marc-André Bombeck	6a1d1dd6e8	fix: preserve managed target defaults ... - Return effective threshold ranges after managed updates\n- Localize closed Coach and Insights display inventories	2026-08-06 03:52:49 +02:00
Marc-André Bombeck	913a41b37d	test: cover notification delivery identity	2026-08-06 03:49:49 +02:00
Marc-André Bombeck	3bb9349171	test: cover notification attribution constraints	2026-08-06 03:49:42 +02:00
Marc-André Bombeck	6108a71d80	feat: separate notification subjects and recipients	2026-08-06 03:46:57 +02:00
Marc-André Bombeck	5a9f8a0df6	Merge managed profile lifecycle	2026-08-06 03:44:16 +02:00
Marc-André Bombeck	6771b9060f	test: cover notification attribution persistence	2026-08-06 03:43:35 +02:00
Marc-André Bombeck	247ac8494c	fix: complete managed record settings ... - Expose canonical defaults and reject invalid settings families\n- Localize Guardian controls and refresh dependent caches	2026-08-06 03:40:13 +02:00
Marc-André Bombeck	e788675b82	feat: configure managed record settings ... - Scope writable settings to the selected managed record\n- Render typed Guardian controls with separated audit attribution	2026-08-06 03:21:02 +02:00
Marc-André Bombeck	389f2a042b	fix: complete managed Guardian invitation lifecycle	2026-08-06 03:19:34 +02:00
Marc-André Bombeck	493437207e	test: cover managed Guardian invitation lifecycle	2026-08-06 03:14:47 +02:00
Marc-André Bombeck	32380b1935	fix: clear revoked Guardian sessions ... Return a removed Guardian's browsers to their own record.	2026-08-06 03:08:51 +02:00
Marc-André Bombeck	ffe3225639	fix: complete managed Guardian lifecycle ... Use locked Guardian membership and transactional lifecycle audits.\n\nKeep acceptance and marker changes atomic.	2026-08-06 03:05:19 +02:00
Marc-André Bombeck	55291ad32d	test: cover managed Guardian lifecycle races ... Exercise cookie routes, transaction rollback, and record-serialized races.	2026-08-06 03:01:12 +02:00
Marc-André Bombeck	523ab3220b	fix: serialize managed profile Guardians ... Protect every Guardian-reducing lifecycle transition with a record lock.\n\nReturn a recoverable refusal when the final Guardian remains.	2026-08-06 02:50:30 +02:00
Marc-André Bombeck	b639b064f9	test: register managed record settings routes ... - Freeze the guardian-only settings endpoints\n- Require an explicit purpose for both routes	2026-08-06 02:42:01 +02:00
Marc-André Bombeck	03ee01ba56	feat: show managed integration status ... - Render a record-keyed status view for managed profiles\n- Refuse shared Settings links before actor controls mount\n- Localize intentional unavailable states	2026-08-06 02:38:54 +02:00
Marc-André Bombeck	5059bc9b69	test: cover managed profile Guardian races ... - Exercise concurrent final-Guardian reductions against Postgres\n- Cover recoverable account and profile deletion paths	2026-08-06 02:36:08 +02:00
Marc-André Bombeck	e5e3590ca3	feat: add managed profile Guardians ... - Keep the ordinary invitation consent flow for a second Guardian\n- Clear managed Guardian expiry when the invitation is accepted	2026-08-06 02:32:59 +02:00
Marc-André Bombeck	665f223dc4	test: cover managed profile Guardian consent ... - Pin ordinary second-Guardian acceptance\n- Pin non-expiring accepted Guardian grants	2026-08-06 02:29:55 +02:00
Marc-André Bombeck	54cd3e3959	test: cover managed integration status ... - Require the record-scoped status query\n- Keep integration controls out of the managed view	2026-08-06 02:29:04 +02:00
Marc-André Bombeck	58434a2b44	feat: create managed profiles atomically ... - Require a fresh cookie MFA proof before creation\n- Create the credential-less profile and initial Guardian grant together	2026-08-06 02:28:56 +02:00
Marc-André Bombeck	d95c48f48d	feat: classify managed record settings ... - Inventory every Settings destination as an explicit access class\n- Fail closed for unknown deep-link destinations	2026-08-06 02:28:29 +02:00
Marc-André Bombeck	d965076609	test: cover settings classification ... - Require a literal settings inventory\n- Limit Guardian configuration to the approved subset	2026-08-06 02:27:27 +02:00
Marc-André Bombeck	009de7cb5f	feat: add record keyed settings ... - Separate managed record settings from actor identity\n- Limit integration reads to the active managed record	2026-08-06 02:26:44 +02:00
Marc-André Bombeck	1eb0d22285	test: add record settings contract ... - Cover record-keyed DTO and cache behavior\n- Pin actor identity separately from the active record	2026-08-06 02:25:53 +02:00
Marc-André Bombeck	51cbbae17f	test: cover managed profile creation ... - Prove truthful profile attributes and the initial Guardian grant\n- Prove grant-write failure rolls the profile transaction back	2026-08-06 02:25:19 +02:00
Marc-André Bombeck	c3125078b9	chore: resolve sharing lint checks ... Keep attribution and provider-work tests lint-clean.	2026-08-06 02:13:50 +02:00
Marc-André Bombeck	d404d8275a	fix: preserve import job wipe ownership ... Keep durable actor attribution from deleting record-owned jobs. Align provider and idempotency coverage with fail-closed behavior.	2026-08-06 02:11:01 +02:00
Marc-André Bombeck	f5ca810643	chore: format sharing authority controls ... Apply repository formatting to provider and import coverage.	2026-08-06 02:05:24 +02:00
Marc-André Bombeck	a620a730b9	test: extend sharing boundary guards ... Cover provider work authority and import actor attribution.	2026-08-06 02:04:04 +02:00
Marc-André Bombeck	620817b10b	fix: retain import actor attribution ... Persist record and actor identities through job completion.\nWrite one bounded transactional completion audit per job.	2026-08-06 02:00:35 +02:00
Marc-André Bombeck	adb932052c	fix: keep managed system work operator-scoped ... Resolve managed record credentials through the operator policy for system work.	2026-08-06 01:53:04 +02:00
Marc-André Bombeck	2b2080f48c	test: pin import actor attribution ... Cover durable record and actor attribution across completion retries.	2026-08-06 01:52:43 +02:00
Marc-André Bombeck	e209db24f4	fix: block delegated provider egress ... Carry bounded work authority through queues and revalidate it at dispatch.\nResolve shared records without personal credentials.	2026-08-06 01:49:33 +02:00
Marc-André Bombeck	f7a06df2bc	test: pin provider origin controls	2026-08-06 01:38:35 +02:00
Marc-André Bombeck	60b842f614	fix: reauthorize delegated replay ... - Recheck the live grant before returning cached delegated responses - Refuse cached replay when the acting record cannot be resolved safely	2026-08-06 01:29:07 +02:00
Marc-André Bombeck	f8b05d541e	test: pin delegated replay revocation ... - Cover active, revoked, and own-record cache replay against Postgres	2026-08-06 01:22:33 +02:00
Marc-André Bombeck	09ff1fb23d	feat: enforce managed sharing boundaries	2026-08-06 01:16:18 +02:00
Marc-André Bombeck	d86358f3e4	fix: recover managed sharing boundaries	2026-08-06 00:19:35 +02:00