Repository navigation
Conversation
…D, Terraform - All 98 operations in docs/openapi.yaml (routes generated by oapi-codegen; bodies hand-written for exact nulls/PATCH presence), one transaction per request with RLS test/live isolation, idempotency, rate limits, ETag, audit + webhook outbox in the same transaction, access.* flip events. - Postgres schema (migrations/0001_init.sql), pgx and RDS Data API drivers behind one interface, in-repo migration runner. - Webhook delivery (signing, retries, health), Stripe billing + sync, scheduled jobs (sweep, erasure cascade, archival, seat sync, cleanup), stateless MCP server generated from the spec. - Lambda entry points, devserver, admin bootstrap, Quickstart script. - Integration + contract tests against real Postgres (every response validated against openapi.yaml); unit tests; race-clean; lint-clean. - ci.yml / deploy.yml / rollback.yml; Terraform bootstrap + prod. - openapi.yaml drift fixes found by contract tests (nullable fields, RE2-incompatible slug pattern, undeclared documented filters). Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
- README: Status (implemented, not deployed), stack table and layout as built, real local ports, devserver/jobs/keys behavior, the two database backends as implemented, make targets, and a concrete one-time setup. - DECISIONS.md #32-#37 (Proposed — confirm): org/tenant RLS semantics, inline Stripe processing, JWKS without CloudFront, seat cap on scope changes, test mode and seats, audit immutability via trigger. - PLAN.md build status; DEPLOYMENT.md pointers to #33/#34. - Changelog: the openapi.yaml fixes the contract tests found. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
On Linux, Go's nanosecond clock could round a fresh grant's starts_at up past the request's own now, resolving it as scheduled and skipping access.granted. macOS clocks tick in microseconds, which hid it locally. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Implements the full Platform API specified in
docs/, and documents it.What's here
docs/openapi.yaml(98), with Conventions behavior (errors, pagination, PATCH semantics, ETag/If-Match, idempotency, rate limits,me), Access Control, audit + webhook outbox in the same transaction, andaccess.*flip events.scripts/quickstart.sh.openapi.yaml), unit tests, race- and lint-clean.ci.yml,deploy.yml(skips until AWS is bootstrapped),rollback.yml; Terraformbootstrap/andprod/(validated, not applied).openapi.yamldrift fixes found by the contract tests (listed in the Changelog).Not done (needs a person)
mainruleset andproductionenvironment in GitHub.Merge with "Create a merge commit".
🤖 Generated with Claude Code