Features batch 3: bulk-write audit, worker images, server head, SPA mounts, resource access (#557 #540 #535 #541 #526) by antosubash · Pull Request #574 · antosubash/simple_module_python

feat(core,db,hosting): resource-scoped access — ResourcePolicy, OwnedResourcePolicy, RequiresResource (#526)

antosubash

committed

bd98037

feat(audit): audit bulk, Core and raw DML writes (#557)

antosubash

committed

23fde7f

feat: legacy SPA mounts with deep-link fallback and scoped link interception (#541)

antosubash

committed

9a2380f

Merge branch 'slice/b3-a-bulkaudit' into feat/features-batch-3

antosubash

committed

1570cf7

fix(diagnostics): SPA mount overlap is SM032 (SM031 is the unguarded-API check from #534)

antosubash

committed

ef29f9d

Merge branch 'slice/b3-d-spa' into feat/features-batch-3

antosubash

committed

5f15a08

fix(db): OwnedResourcePolicy.can compares owners exactly as filter does (#526)

antosubash

committed

b38734f

fix(spa-mounts): overlap check sees registered routes, scoped public exemption, private caching for gated mounts (#541)

antosubash

committed

ccdeae3

fix(audit): bulk audit reads real SET targets; every soft-delete shape recorded (#557)

antosubash

committed

ba75933

Merge branch 'slice/b3-a-bulkaudit' into feat/features-batch-3

antosubash

committed

2ae7c6a

Merge branch 'slice/b3-d-spa' into feat/features-batch-3

antosubash

committed

b0bccb0

fix(audit): per-row soft-delete actions; executemany targets union statement values (#557)

antosubash

committed

22edcdb

Merge branch 'slice/b3-a-bulkaudit' into feat/features-batch-3

antosubash

committed

ee14d84

feat(sharing): optional generic share module for resource-scoped access (#526)

antosubash

committed

cd970de

docs: resource access + sharing module pages, migration graph, changelog (#526)

antosubash

committed

0311ad2

Merge branch 'slice/b3-e-resources' into feat/features-batch-3

antosubash

committed

117f2d5

fix(audit): an INSERT is always audited; soft-delete flag is bookkeeping only for UPDATE (#557)

antosubash

committed

2277341

Merge branch 'slice/b3-a-bulkaudit' into feat/features-batch-3

antosubash

committed

62c6569

fix(sharing): keep grantees and user labels inside the active tenant (#526)

antosubash

committed

5d1f577

Merge branch 'slice/b3-e-resources' into feat/features-batch-3

antosubash

committed

fc43fdd

Merge origin/main into feat/features-batch-3

antosubash

committed

83fe8d1

refactor(optimize): drop dead head_markup, share pk formatting, default resource registry; scaffold app excludes SPA mounts

antosubash

committed

12e4870

fix(db): forward execute params to the bulk-audit prefetch; audit planning fails open (#557)

antosubash

committed

b338e8c

fix(head,sharing): drop blank head titles; distinct 403 detail for share refusals

antosubash

committed

e77cb90

style: ruff format

antosubash

committed

84a1b26

Merge remote-tracking branch 'origin/main' into feat/features-batch-3

antosubash

committed

b554ead

Keep _phase_helpers.py under the 300-line cap after merging main

antosubash

committed

80e5701

test(cli): read add-worker errors without terminal styling

antosubash

committed

b5868a6

Navigation Menu

Repository navigation

Features batch 3: bulk-write audit, worker images, server head, SPA mounts, resource access (#557 #540 #535 #541 #526) - #574

Features batch 3: bulk-write audit, worker images, server head, SPA mounts, resource access (#557 #540 #535 #541 #526)#574
antosubash merged 32 commits into
mainfrom
feat/features-batch-3

Commits on Oct 21, 2026

docs: features batch 3 design (#557 #540 #535 #541 #526)

feat(inertia): server-rendered <head> for public pages (#535 step 1)

feat(cli): smpy docker add-worker scaffolds separately built worker images (#540)

Merge branch 'slice/b3-b-workers' into feat/features-batch-3

Commits on Oct 22, 2026

feat(core,db,hosting): resource-scoped access — ResourcePolicy, OwnedResourcePolicy, RequiresResource (#526)

feat(audit): audit bulk, Core and raw DML writes (#557)

feat: legacy SPA mounts with deep-link fallback and scoped link interception (#541)

Merge branch 'slice/b3-a-bulkaudit' into feat/features-batch-3

fix(diagnostics): SPA mount overlap is SM032 (SM031 is the unguarded-API check from #534)

Merge branch 'slice/b3-d-spa' into feat/features-batch-3

fix(db): OwnedResourcePolicy.can compares owners exactly as filter does (#526)

fix(spa-mounts): overlap check sees registered routes, scoped public exemption, private caching for gated mounts (#541)

fix(audit): bulk audit reads real SET targets; every soft-delete shape recorded (#557)

Merge branch 'slice/b3-a-bulkaudit' into feat/features-batch-3

Merge branch 'slice/b3-d-spa' into feat/features-batch-3

fix(audit): per-row soft-delete actions; executemany targets union statement values (#557)

Merge branch 'slice/b3-a-bulkaudit' into feat/features-batch-3

feat(sharing): optional generic share module for resource-scoped access (#526)

docs: resource access + sharing module pages, migration graph, changelog (#526)

Merge branch 'slice/b3-e-resources' into feat/features-batch-3

fix(audit): an INSERT is always audited; soft-delete flag is bookkeeping only for UPDATE (#557)

Merge branch 'slice/b3-a-bulkaudit' into feat/features-batch-3

fix(sharing): keep grantees and user labels inside the active tenant (#526)

Merge branch 'slice/b3-e-resources' into feat/features-batch-3

Merge origin/main into feat/features-batch-3

refactor(optimize): drop dead head_markup, share pk formatting, default resource registry; scaffold app excludes SPA mounts

fix(db): forward execute params to the bulk-audit prefetch; audit planning fails open (#557)

fix(head,sharing): drop blank head titles; distinct 403 detail for share refusals

style: ruff format

Merge remote-tracking branch 'origin/main' into feat/features-batch-3

Keep _phase_helpers.py under the 300-line cap after merging main

test(cli): read add-worker errors without terminal styling