dorfteich/apps
Claude Fable 5 1314096c94 Add account/session endpoints and typed instance settings with admin API
Server halves of #17/#18/#19: PATCH /users/me and change-password
(verifies the current password, logs out every other session),
GET/DELETE /users/me/sessions with current-session flag and protection
against revoking oneself; InstanceSettingsService as a typed, cached,
Zod-validated registry over instance_settings (schema-default fallback
for invalid stored values, audit-logged writes) consumed by the signup
flow; /admin/settings behind the new SiteAdminGuard with strict
unknown-key rejection. SessionsService moves to its own module to keep
Auth/Users acyclic. Three new e2e suites bring the api to 42 tests.

Part of #17, #18, #19

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-07-05 05:26:45 +02:00
..
api Add account/session endpoints and typed instance settings with admin API 2026-07-05 05:26:45 +02:00
collab Scaffold pnpm monorepo with lint, format, and test tooling 2026-07-04 19:06:27 +02:00
web Keep Playwright specs out of Vitest collection 2026-07-05 00:28:28 +02:00