• v0.1.2 0b23fbc952

    coreci-bot released this 2026-10-10 01:16:23 +00:00 | 2 commits to main since this release

    Phase 2 (Admin Plane) of milestone v0.1 coreci-broker.

    Delivered

    • Admin session auth: login/logout/whoami, cookie broker_session (HttpOnly, SameSite=Lax), TTL default 300s, lazy expiry + boot cleanup; HTTP Basic accepted on all admin endpoints
    • app_registrations CRUD (UUID validation, 409 duplicate, revoke-keeps-tokens, reinstate)
    • user_allowlist CRUD (optional email, same semantics)
    • Audit query: filters (since/until/user/uuid/action), limit clamp 100-1000, streaming line read, next_since cursor
    • Four-page admin UI + dashboard + persistent nav (server-rendered, no build step): login, app_registrations, user_allowlist, read-only audit (no export)
    • P1 verify findings remediated: 1MiB body cap, handler timeout, thread-safe store, env write fix
    • AC14 line cap amended to <1000 (owner decision D-016)
    • 149 tests green; AC1/AC2/AC3/AC9 acceptance green; verify: no P0, P1/P2 findings routed to P3

    Requirements

    REQ-01, REQ-05, REQ-06, REQ-12, REQ-13 — complete

    Next

    P3 tool auth plane → v0.1.3

    Downloads