-
v0.1.2 — admin plane Stable
released this
2026-10-10 01:16:23 +00:00 | 2 commits to main since this releasePhase 2 (Admin Plane) of milestone v0.1 coreci-broker.
Delivered
- Admin session auth: login/logout/whoami, cookie broker_session (HttpOnly, SameSite=Lax), TTL default 300s, lazy expiry + boot cleanup; HTTP Basic accepted on all admin endpoints
- app_registrations CRUD (UUID validation, 409 duplicate, revoke-keeps-tokens, reinstate)
- user_allowlist CRUD (optional email, same semantics)
- Audit query: filters (since/until/user/uuid/action), limit clamp 100-1000, streaming line read, next_since cursor
- Four-page admin UI + dashboard + persistent nav (server-rendered, no build step): login, app_registrations, user_allowlist, read-only audit (no export)
- P1 verify findings remediated: 1MiB body cap, handler timeout, thread-safe store, env write fix
- AC14 line cap amended to <1000 (owner decision D-016)
- 149 tests green; AC1/AC2/AC3/AC9 acceptance green; verify: no P0, P1/P2 findings routed to P3
Requirements
REQ-01, REQ-05, REQ-06, REQ-12, REQ-13 — complete
Next
P3 tool auth plane → v0.1.3
Downloads