Sigaint/corvus

Fork 0

refactor #9

Merged

mhahl-a merged 19 commits from refactor into main

2026-08-14 00:18:00 +00:00

mhahl-a commented

2026-08-14 00:17:47 +00:00

Owner

No description provided.

mhahl-a added 19 commits

2026-08-14 00:17:47 +00:00

fix: restore green baseline (machine write role check + policy test path) fade634ab0

- _require_machine_write compares against 'write' (machine_tokens.role
  value), not 'service-write'.
- mt_select policy test reads app/rbac.sql (policies moved there from
  init.sql).

refactor: add config role-name constants and shared lib/ helpers 0fb74671d0

- config: derive RBAC_*_ROLE_NAMES from the dropdowns; routes and rbac_sync
  reuse them instead of inline list comprehensions.
- lib/: datetime_utils (as_utc/iso_utc/coerce_utc) + serialize (json_safe/
  row_to_dict); eso _iso, mgmt _row, audit _as_utc_dt, and secret_kinds.as_utc
  delegate to them.

refactor: add ruff + pre-commit + pyright config, fix lib newline lint 646a7e97e1

refactor(routes): flatten rbac.py register() closure to module-level functions f90f69a053

refactor(routes): flatten register() closures to module-level handlers fa428abf60

docs: clean up AGENTS.md garbled text and lint module list 83e8e90a50

refactor: extract shared is_uuid and user-lookup helpers into app/lib 2ce2544c9f

refactor: use shared lookup_user_id/user_email in remaining route sites 0e6dc0bcea

refactor: extract shared bearer-token classification into lib/auth_tokens dc11a894cb

refactor(audit): split audit.py into a package by concern 64a608ff92

refactor(routes): split secrets.py into a package by concern b2d19fa0cf

refactor(routes): split teams.py into a package by concern 876e803650

refactor(routes): split auth.py into a package by concern 32b3229bca

refactor(routes): split projects.py into a package by concern a37ff29bbb

refactor(routes): split eso.py and mgmt_api.py into packages by concern e4bcd99175

refactor(routes): split admin.py into a package by concern 5b110294a3

feat: versioned SQL migration runner (db/migrations + app/migrations.py) 60e032f230

Replace the idempotent ensure_schema() stmts re-apply loop with a versioned
migration runner:

- db/migrations/*.sql is the sole source of truth for DDL. 0001_init.sql and
  0002_rbac.sql are the non-idempotent baseline (run by docker-entrypoint);
  0003..0021 are additive/idempotent migrations derived from the old stmts list
  (legacy-marked dead code removed, redundant re-applies deduplicated).
- app/migrations.py records version + sha256 checksum in
  private.schema_migrations, detects drift, and seeds the baseline on existing
  volumes so they never re-run baseline DDL.
- app/schema.py is now a thin ensure_schema() wrapper: advisory lock ->
  migrations.apply_pending() -> bootstrap admin promotion.
- compose.yml mounts the baseline migrations; db/init.sql, db/rbac.sql and
  app/rbac.sql are removed (folded into db/migrations/0001_init.sql and
  0002_rbac.sql).

ui: search fields, create dialogs, and shared secrets 3a1cfedf8f

Restore the uncommitted UI session onto refactor: icon search inputs
without Go buttons, add-team/project dialogs, and a Shared secrets
page for non-team grants (migration 0022).

fix: allow shared-secret viewers to write secret_recent

CI / tox py + lint (pull_request) Has been cancelled

Details

9e4c86bb09

secret_recent/secret_pins RLS required can_read_project, so opening a
shared secret aborted the view transaction. Gate on secret-row read
access and isolate the recent upsert in a savepoint.

mhahl-a merged commit 3b8a433d80 into main

2026-08-14 00:18:00 +00:00

mhahl-a referenced this pull request from a commit

2026-08-14 00:18:01 +00:00

Merge pull request 'refactor' (#9) from refactor into main

No reviewers

No labels

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

Sigaint/corvus!9

No description provided.

Rows
Columns