PR #187 schematics: phase 0 stack (03/15)

Glinte force-pushed the schematics-phase-0-stack-02 branch from c47a9a84 to a90c18e6 8 days ago

Glinte force pushed from 72b82a63 to 1478ae71 8 days ago

docs: home the two review items no plan owned

da2944df

auth: write down why credential digests are keyed SHA-256

39823f8e

api: pin the 422 reason phrase in the exported contract

951f6b50

auth: make permission patterns a validated value

bee66dbc

voting: resolve Discord members through discord.py's rate limiter

4de30907

sync: name the reconciliation queue after what it is

6b6740ac

builds: move visibility and edit authority into the services

bdd9fb74

docs: plan de-privileging Discord in the account system

2b77db1b

api: type the errors and the mappings the routes produce

5eb5ac77

schematics: page in the service and name downloads by their format

e7e25205

api: rename Principal to Caller

eb815be6

records: rename ActiveRecord to PublishedRecord

0257dfe3

tags: rename numeric_quantum to numeric_step

871b8a0e

docs: replace "-neutral" with the claim it stood in for

f331e1f2

docs: record what implementing the API/auth/records/sync plan found

a4f518a2

tests: fix the three failures left over from earlier work

6802a08d

docs: amend the Discord de-privileging plan for the plan 11 renames

9e486eb8

docs: record that the pre-existing test failures are fixed

a0f92646

persistence: give the work queues a claim token and a retry clock

ee84e212

persistence: claim through a database-minted fencing token

46473f73

search: fence projection acknowledgement inside the caller's session

099a99c0

records: fence the recompute lease on its claim tokens

25940577

worker: generate the queue-health query from the queue specs

6afb660c

notifications: use the shared visibility timeout and backoff

fc3a64e2

events: claim deliveries through the shared protocol

d06f230b

docs: record what implementing the durable-queues plan found

2984e395

alembic: linearize the heads the rebase re-split

aea35143

squid: adopt the 3.14 annotation and except syntax the rebase left be…

2e0f1884

docs: add more bugs

514312bb

docker: fix log files permission error

f3a70ac2

bot: log the bot's username on Discord gateway ready

9032e2a7

accounts: validate identity subjects in the domain

32d4f9fe

accounts: key the account service on identities, not Discord

0d8d5c79

voting: resolve vote actors by account

31e7f212

tags: attribute definitions to accounts

06b3b840

schematics: attribute uploads to accounts

850c2802

builds: own submissions by account

d68a1282

api: key write authorization on the account, not on Discord

d83a1a0d

notifications: gate staff items on a permission node

a3a29001

auth: route browser login through a provider adapter

5e45c223

api: template the browser authorization path over the provider

e6eada5d

web: build the sign-in URL in one place

61924264

api: drop the Discord snowflake from the HTTP caller

87f56d7e

docs: record that Discord is one provider among several

0f7e6b3b

tests: narrow the discord_id ratchet with a match

04158e32

schematics: type the render preparation outcome

36fb8fe7

schematics: tell moderators why a build has no preview

20c594fe

schematics: name the inputs an ambiguous simulation could use

1b7ce6e6

schematics: give every worker stderr pump an owner

5b4c2017

docs: record what implementing the rendering/simulation plan found

e9b4f4eb

docs: name pyrefly as the local type checker

711f0a5c

docs: point the unfinished plans at pyrefly

d368b828

observability: buffer log lines under their correlation ID

c16d3c9a

bot: give every command one correlation ID

8af847a2

diagnostics: store unexpected failures under their reference

9ef91d30

diagnostics: capture failures from every surface that has one

54c500e1

api: serve stored error reports by reference

1522e99d

bot: add a command to read a stored error

7704a2be

cli: read stored error reports

62473c8e

i18n: refresh the message catalogs

27d57c93

docs: describe stored error reports

dc3ec29b

tests: close the seam between capturing and reading a report

eaf99d59

schematics: render a build's schematic on demand

37d71511

bootstrap: let the API and bot ask for renders

02cea87e

api: serve schematic renders over HTTP

4eff0ca5

bot: add /build schematic render

e467f9d7

tests: clear the standing pyrefly errors

aaf91765

bot: rename the owner's deliberate failure to raise-error

87168e99

diagnostics: follow the logs, so worker failures are stored too

28f194b4

diagnostics: mark the failures that abandoned work

e96224b0

builds: read submission_status back as a Status member

730f5667

deps: add stubs for docker, psycopg2 and markdown

5805b700

types: return Generator from contextmanager helpers

c7344816

voting: match delete-log cards on enum members

b4d1e2cd

types: drop conversions of already-typed values

ef060245

tests: import docker.errors explicitly and steady the nesting loop

2b1362bb

edit: pair the change markers by fill

3e817a32

edit: render saved changes through the interaction webhook

5d784200

submit: keep the guided form alive until the build is saved

6cd55fcc

voting: treat a missing vote channel as a setup gap

08375e09

search: scope the mention fallback before asserting

e53a08df

compose: make the api service's published port configurable

57980732

docs: clear the fixed bug list

60fe2ba7

config: exempt Compose-only keys from the unknown-key audit

d93949e6

tests: derive the expected image interpreter from requires-python

5712afd7

tests: require structured errors in application and domain layers

e8fa41c0

records: adopt structured application errors

236a35c5

submissions: use structured validation errors

e20d58e0

errors: migrate application and domain failures

0833f678

errors: close structured error migration

04b7c214

docs: redesign the consent and verification UX plan

ad2e406f

todo: give creator profiles a surface outside the REST API

57b9c1f0

bugs: record verification-code key exhaustion and missing index

c5c59460

docs: correct plan 01 anchors after the structured-error commits

a4466655

accounts: harden the verification code

f7ec2d64

accounts: let a verification code be held before it is spent

4ee06147

bot: preview the link a consent prompt is asking for

3a622e53