feat: permissions, a scoped console, and catalog management #7

Merged
dhkatz merged 3 commits from feat/console-permissions into main 2026-11-05 13:13:42 +00:00
3 Commits
Author SHA1 Message Date
dhkatz 8efed4a992 Merge remote-tracking branch 'origin/main' into feat/console-permissions
Pull request / title (pull_request) Successful in 1s
CI / test (pull_request) Successful in 1m2s
CI / image (apps/api/Dockerfile, t5de-hub-api) (pull_request) Skipped
CI / image (apps/web/Dockerfile, t5de-hub-web) (pull_request) Skipped
# Conflicts:
#	docs/design.md
2026-11-05 05:10:37 -08:00
dhkatzandClaude Opus 5.5 370ae0646a feat: permissions, a console for everyone who manages something, and catalog management
Pull request / title (pull_request) Successful in 1s
CI / test (pull_request) Successful in 1m1s
CI / image (apps/api/Dockerfile, t5de-hub-api) (pull_request) Skipped
CI / image (apps/web/Dockerfile, t5de-hub-web) (pull_request) Skipped
Phase 1 of docs/console.md: permissions as resource:action strings in role
bundles at a scope; the console for anyone controlling a catalog, product
or room, with a tagged audit log scoped by permission and filters;
catalog settings (rating ceiling, upload policy), key rotation, operators,
membership (approval, invitations, bans) enforced when getting and
wearing products, delisting, suspension, and the catalogs' changes feed.

Co-Authored-By: Claude Opus 5.5 <[email protected]>
2026-11-04 23:19:15 -08:00
dhkatzandClaude Opus 5.5 76497c9b41 docs: permissions, console and imported IMVU products
Pull request / title (pull_request) Successful in 1s
CI / test (pull_request) Successful in 58s
CI / image (apps/api/Dockerfile, t5de-hub-api) (pull_request) Skipped
CI / image (apps/web/Dockerfile, t5de-hub-web) (pull_request) Skipped
Design for managing products, catalogs and importers: permissions as
resource:action strings bundled into roles at a scope, one console scoped
by permission, a tagged audit log, cases, notifications, API tokens and
charts (console.md); catalogs importing IMVU products with their
creators' grants (imports.md); and the contract changes (products.md).

Co-Authored-By: Claude Opus 5.5 <[email protected]>
2026-11-04 22:56:15 -08:00