Issues

• permissions/branding: low-severity follow-ups from the tenancy-adoption review

  antosubash/simple_module_python#396 · Filter by author antosubash opened on Oct 1, 2026

• Celery workers can't read DB-backed module settings: FileStorageSettings() silently falls back to filesystem defaults

  antosubash/simple_module_python#378 · Filter by author antosubash opened on Oct 1, 2026

• TenantMiddleware does not say whether the tenant came from the user or the header, so a cacheable anonymous read cannot set Vary correctly

  antosubash/simple_module_python#367 · Filter by author antosubash opened on Sep 23, 2026

• ui: PageShell puts page actions in a flex-shrink-0 container, so a module with more than three toolbar buttons overflows the viewport below 1000 px

  antosubash/simple_module_python#354 · Filter by author antosubash opened on Sep 23, 2026

• file_storage: no way to serve a file anonymously, so nothing built on it can show an image on a public page

  antosubash/simple_module_python#353 · Filter by author antosubash opened on Sep 23, 2026

• file_storage: the list endpoint has no search, no content-type filter and no thumbnails, so a picker cannot be built on it

  antosubash/simple_module_python#352 · Filter by author antosubash opened on Sep 23, 2026

• hosting: SetupMiddleware redirects every request to /setup, but no published package or scaffold ships the /setup route

  antosubash/simple_module_python#351 · Filter by author antosubash opened on Sep 22, 2026

• db: SQLite engine lacks the pysqlite SAVEPOINT workaround, so an outermost begin_nested() commits on RELEASE and the outer rollback undoes nothing

  antosubash/simple_module_python#350 · Filter by author antosubash opened on Sep 22, 2026

• hosting: InertiaLayoutDataMiddleware writes the locale into the session on every request, so anonymous API responses carry Set-Cookie and are uncacheable

  antosubash/simple_module_python#349 · Filter by author antosubash opened on Sep 22, 2026

• ui: AlertDialogAction discards a caller's className colour because Button asChild does not tailwind-merge across the slot

  antosubash/simple_module_python#348 · Filter by author antosubash opened on Sep 22, 2026

• hosting: no shared rate limiter for public routes

  antosubash/simple_module_python#347 · Filter by author antosubash opened on Sep 22, 2026

• hosting: unhandled_exception_handler ignores Accept and returns HTML to JSON API clients

  antosubash/simple_module_python#346 · Filter by author antosubash opened on Sep 22, 2026

• hosting: no request-body-size guard in the middleware pipeline

  antosubash/simple_module_python#345 · Filter by author antosubash opened on Sep 22, 2026

• Migrations autogenerated on SQLite are not portable to Postgres, and every check reports them clean

  antosubash/simple_module_python#342 · Filter by author antosubash opened on Sep 21, 2026

• AdminLayout / SidebarLayout: no skip link, five chrome tab stops before the first page control

  antosubash/simple_module_python#341 · Filter by author antosubash opened on Sep 21, 2026

• MenuRegistry: no way to remove items or contribute them dynamically (DB-defined navigation)

  antosubash/simple_module_python#340 · Filter by author antosubash opened on Sep 20, 2026
  1

• AdminLayout mounts no <Toaster>, so toast.*() is silently swallowed on every admin page

  antosubash/simple_module_python#338 · Filter by author antosubash opened on Sep 19, 2026

• Two RequiresPermission classes with different semantics: the hosting one silently ignores per-user grants

  antosubash/simple_module_python#337 · Filter by author antosubash opened on Sep 19, 2026

• Enhancement: a runtime permission source, for modules whose protected resources are defined after boot

  enhancement
  antosubash/simple_module_python#334 · Filter by author antosubash opened on Sep 19, 2026

• alembic downgrade <module>@base walks the whole revision chain — the per-module rollback promised in module-authoring.md does not hold

  documentation
  antosubash/simple_module_python#333 · Filter by author antosubash opened on Sep 19, 2026

• make gen-i18n silently deletes keys for modules that aren't installed in the current venv

  antosubash/simple_module_python#329 · Filter by author antosubash opened on Sep 19, 2026

• Re-verify the 28 hi-fi screens against the current design deck

  documentation
  antosubash/simple_module_python#317 · Filter by author antosubash opened on Sep 5, 2026