Ekklesia

4 Commits

Include renames

Author	SHA1	Message	Date
ekklesia	1363608552	feat: add authorization bootstrap and HTTP enforcement Wires Core's identity and authorization domains into apps/api over one shared, validated PostgreSQL pool; adds an explicit, single-use, concurrency-safe platform-owner bootstrap CLI; adds a smallest-possible immutable permission registry with one Core-owned restricted permission (core.authorization.grants.manage); and adds reusable Hono authorization enforcement plus a narrowly scoped /api/v1/grants HTTP API for managing explicit grants only, gated by an exact trusted Origin on every mutation.	2026-07-23 11:16:32 -05:00
ekklesia	d9b73fd81a	fix: harden identity HTTP transport CI / verify (pull_request) Successful in 25s Details CI / infrastructure-smoke (pull_request) Successful in 20s Details CI / migration-smoke (pull_request) Successful in 25s Details	2026-07-21 23:50:41 -05:00
ekklesia	91d8f5946f	feat: expose core identity transport CI / verify (pull_request) Successful in 27s Details CI / infrastructure-smoke (pull_request) Successful in 19s Details CI / migration-smoke (pull_request) Successful in 26s Details	2026-07-21 19:15:14 -05:00
ekklesiaandClaude Sonnet 5	679a5d225c	feat: establish core identity foundation CI / verify (pull_request) Successful in 25s Details CI / infrastructure-smoke (pull_request) Successful in 12s Details CI / migration-smoke (pull_request) Successful in 22s Details Adds Core-owned identity contracts, a Core-owned Better Auth database schema (ekklesia_core_user/session/account/verification), a first-class Core-owned migration source that coexists with module-owned migrations under the exact existing migration system, and an explicit Better Auth construction boundary. No authentication endpoint or sign-in UI is exposed yet (ADR 0010). Co-Authored-By: Claude Sonnet 5 <[email protected]>	2026-07-21 16:39:15 -05:00