feat(resources): Partner shell (/partner/) + application-partner-perspectives extension point#6270
Merged
Conversation
…-partner-perspectives A third Harmonia shell for external partners (customers, distributors, suppliers), mirroring the My shell: a resources-partner module serving /services/web/partner/, reusing the shared application-core/shell runtime. It aggregates ONLY the new application-partner-perspectives extension point. The separation is the safety property: each shell fetches exactly one extension point, so a perspective appears in the Partner portal iff it explicitly registers on application-partner-perspectives. A personal (my) or application perspective can never leak in - it is never even fetched. A UI meant for both shells registers on both points, deliberately. The separate URI also makes access a single entry-point authz decision. This is the container only: partner-scoping of data, external auth, and partner writes are follow-ups. Verified: /services/web/partner/ serves; the partner perspectives service returns only the 'partner' group; the personal service is unchanged (My Expenses/Vacations/Timesheets), disjoint; Partner is listed in platform-shells. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
A third Harmonia shell for external partners (customers, distributors, suppliers), mirroring the shipped My shell: a
resources-partnermodule serving/services/web/partner/, reusing the sharedapplication-core/shellruntime, aggregating a newapplication-partner-perspectivesextension point.The separation is the safety property. Each shell fetches exactly one extension point, so a perspective appears in the Partner portal iff it explicitly registers on
application-partner-perspectives. A personal (my) or application perspective can never leak in - it is never even fetched. A UI meant for both registers on both points, deliberately. The distinct URI also makes partner access a single entry-point authz decision.Container only - partner-scoping of data, external auth, and partner writes are follow-ups.
Verified on a running instance:
/services/web/partner/serves; the partner perspectives service returns only the emptypartnergroup; the personal service is unchanged and disjoint (My Expenses/Vacations/Timesheets stay in/my/);Partneris listed inplatform-shells.🤖 Generated with Claude Code