Repository navigation

Stage 12A: Sign-in identity and v1-anchored user associations - #3891

Merged

anth-volk merged 45 commits into

masterfrom

feat/stage-12a-user-login-associations

Oct 15, 2026

Merged

Stage 12A: Sign-in identity and v1-anchored user associations#3891
anth-volk merged 45 commits into
masterfrom
feat/stage-12a-user-login-associations

Commits on Oct 12, 2026
- Add user identities and v1-anchored association schema
  
  anth-volk
  and
  claude
  committed
  2bf255c
- Add Auth0 bearer authentication for user-owned routes
  
  anth-volk
  and
  claude
  committed
  6868fc9
- Lock user associations to the signed-in user and add v1-anchored saves
  
  anth-volk
  and
  claude
  committed
  98e27cc
- Register signed-in user route contracts and Postgres identity tests
  
  anth-volk
  and
  claude
  committed
  7b0cf1d
- Add read-only qualification for the user-association reshape
  
  anth-volk
  and
  claude
  committed
  e909054
- Wire user auth settings into deploys and gate staging on signed-in routes
  
  anth-volk
  and
  claude
  committed
  04fa436
- Document Stage 12A user login and propose Cloud Armor throttles
  
  anth-volk
  and
  claude
  committed
  d92bffc
- Describe owner-from-token association queries in the routes skill
  
  anth-volk
  and
  claude
  committed
  292665a
- Keep release-test unsets inline-short and update household reassignment test
  
  anth-volk
  and
  claude
  committed
  89be2b0
- Pass the optional staging Auth0 realm to the live signed-in probe
  
  anth-volk
  and
  claude
  committed
  5864f9d
Commits on Oct 13, 2026
- Keep retired association columns so the previous revision still loads rows
  
  anth-volk
  and
  claude
  committed
  41c4af7
- Scope account imports to one country through shared association helpers
  
  anth-volk
  and
  claude
  committed
  29c5ea8
- Bound single user-route writes and their free-text fields
  
  anth-volk
  and
  claude
  committed
  a496e72
- Type report and policy snapshots in user-route responses
  
  anth-volk
  and
  claude
  committed
  ed55f78
- Log every signed-in user route as Supabase traffic
  
  anth-volk
  and
  claude
  committed
  8b66fb0
- Defer v1 reference checks, log unexpected user-route failures, share the Auth0 client
  
  anth-volk
  and
  claude
  committed
  ee8f47d
- Keep Auth0 Management deletion out of staging deploys
  
  anth-volk
  and
  claude
  committed
  c656ea1
- Cover every signed-in operation with the fail-closed 401 test
  
  anth-volk
  and
  claude
  committed
  76baf1a
- Keep the failure-logging test independent of Alembic's logging config
  
  anth-volk
  and
  claude
  committed
  e0839f3
- Reject NaN and Infinity in user-route floats and JSON values
  
  anth-volk
  and
  claude
  committed
  361a709
- Log persistence failures and publish stored snapshots through lenient shapes
  
  anth-volk
  and
  claude
  committed
  0b72a24
- Obtain Auth0 credentials before deleting an account, and retry a rejected token
  
  anth-volk
  and
  claude
  committed
  91d4669
- Keep compute labels off saved-work requests and describe the size check accurately
  
  anth-volk
  and
  claude
  committed
  4edf9bf
- Require an edge guard before any application rollback with signed-in users
  
  anth-volk
  and
  claude
  committed
  9c00c18
- Exercise the previous revision's table usage against the Stage 12A schema
  
  anth-volk
  and
  claude
  committed
  57553ed
- Report account_created on /v2/me so app v3 imports only for new accounts
  
  anth-volk
  and
  claude
  committed
  fd6b9b9
- Drop account_created from /v2/me now that app v3 imports at every sign-in
  
  anth-volk
  and
  claude
  committed
  7bd6814
- Remove the unused ResolvedUser.provisioned flag
  
  anth-volk
  and
  claude
  committed
  bb02660
- Store no import item whose client_ref repeats in the request
  
  anth-volk
  and
  claude
  committed
  466b803
- Size the proposed import throttle for imports at every sign-in
  
  anth-volk
  and
  claude
  committed
  76c294c
- Warn that the auth issuer must be final before the first sign-in
  
  anth-volk
  and
  claude
  committed
  4f45745
Commits on Oct 14, 2026
- Save signed-out work under unauthenticated users instead of importing it
  
  anth-volk
  and
  claude
  committed
  a5f13a2
- Record signed-out user contracts and accept either credential in the guard
  
  anth-volk
  and
  claude
  committed
  799655a
- Exercise signed-out saving and upgrades in the staging and candidate checks
  
  anth-volk
  and
  claude
  committed
  9aace0b
- Document unauthenticated users, upgrades, and the single write throttle
  
  anth-volk
  and
  claude
  committed
  60c650d
- Merge remote-tracking branch 'origin/master' into feat/stage-12a-user-login-associations
  anth-volk
  committed
  1547071
- Register the Stage 12A sign-in libraries and user-service guard as rules
  
  anth-volk
  and
  claude
  committed
  53d64b3
- Keep a report's budget window on its user-report record
  
  anth-volk
  and
  claude
  committed
  3296a58
- Link a report's compared reform and accept growth settings on provisions
  
  anth-volk
  and
  claude
  committed
  6a22bf9
- Merge remote-tracking branch 'origin/master' into feat/stage-12a-user-login-associations
  anth-volk
  committed
  77dc183
Commits on Oct 15, 2026
- Read a saved report by its link without a credential
  
  anth-volk
  and
  claude
  committed
  75a9058
- Type the shared report route's error responses for mypy
  
  anth-volk
  and
  claude
  committed
  37d57cd
- Merge remote-tracking branch 'origin/master' into feat/stage-12a-user-login-associations
  
  anth-volk
  and
  claude
  committed
  1f3f17c
- Apply ruff groups 1 and 2 to the Stage 12A code
  
  anth-volk
  and
  claude
  committed
  64718ed
- Update PolicyEngine bundle to 6.4.1
  
  anth-volk
  and
  claude
  committed
  3575c62

Commits

Commits on Oct 12, 2026

Commits on Oct 13, 2026

Commits on Oct 14, 2026

Commits on Oct 15, 2026