feat: a contract declares which procedures need an authenticated caller - #73

Merged

btravers merged 38 commits into

mainfrom

feat/cross-cutting-concerns

Aug 20, 2026

Commits on Aug 18, 2026

feat(contract): a contract-level marker for an authenticated procedure
btravers
committed
ee3c028
chore: the ninth package joins the fixed group, the docs build and the surface table
btravers
committed
92b18e3

Commits on Aug 19, 2026

feat(http): a marked contract types its handler's principal
btravers
committed
7727c3d
feat(http): resolve a marked procedure's principal from an Authenticator port
btravers
committed
58ac55d
fix(http): a marked contract root installs the auth middleware, and a bare mark fails closed
btravers
committed
b516d10
feat(http): the authenticator a marked contract needs is an HttpModule option
btravers
committed
9c0e4e7
docs(http): the auth type test's two gates are different gates, at different calls
btravers
committed
ca8864f
feat(http): forward oRPC handler plugins from http() and HttpModule
btravers
committed
1b8039b
feat(http): security headers on the listener, covering the runtime's own 404
btravers
committed
a59371f
feat(example): the orders fragment declares an authenticated principal
btravers
committed
6b2d18c
feat(example): order-api authenticates its callers through the starter's port
btravers
committed
cd9a90a
docs(example): the prose says what the marked contract actually does
btravers
committed
782c2ea
docs: the auth marker, the authenticator, plugins and security headers
btravers
committed
aeef138
docs: the cross-cutting-concerns and transaction decisions, and the changeset
btravers
committed
e8236b2
fix(http): a rejected caller's reason stays in the process
btravers
committed
28c8557
docs(http): plugins is an escape hatch, and the README states the non-goals
btravers
committed
1f280ea
docs(http): the non-goals bullet agrees with the plugins bullet
btravers
committed
1b35a15
fix(http): the keyed router form composes a root-marked contract
btravers
committed
81f226f
fix(contract): one marker registry per install, not per copy
btravers
committed
6861480
fix(example): a marked fragment names no tenant on its input
btravers
committed
40699f5
test(http): a custom securityHeaders record is applied verbatim
btravers
committed
8ec3bb6
docs: the http spec count the branch left stale
btravers
committed
49a8343
fix(http): hoist the security-header entries out of the request path
btravers
committed
a792fe8
refactor(example): the contract declares the minimum, the authenticator resolves more
btravers
committed
69230c3
feat(http): httpAuth mints controller, router and authenticator on one identity
btravers
committed
3ddad2b
test(http): the factory's identity, in the types and through a real request
btravers
committed
7ff784a
refactor(example): the order API mints its controllers from httpAuth
btravers
committed
393556a
docs(http): the identity factory, and the rule it states
btravers
committed
418890e
feat(contract)!: the marker says whether, not who
btravers
committed
3a1b490
feat(http)!: the gate pairs the router's identity with the authenticator's
btravers
committed
29fcc9a
refactor(example): the contract marks the route, auth.ts names the identity
btravers
committed
77c2299
docs: the contract says whether, the factory says what
btravers
committed
3f5d015
docs: the site and the changesets on the collapsed marker
btravers
committed
f6e6d06
chore: untrack the SQLite shadow database committed by accident
btravers
committed
7573776
refactor: cut what the marker and the factory did not need
btravers
committed
76d607f
fix(docs): the samples compile, and the README stops admitting empty tokens
btravers
committed
dfe5014

Commits on Aug 20, 2026