steve a13acedd90 Admin-gated Settings: runtime model selection, is_admin enforced (#90) ...

Closes #79. Agent model + on/off move into an admin-only Settings section, and
is_admin is enforced for the first time. The live Runner is hot-swapped behind an
atomic.Pointer with routes always registered, so a settings change takes effect
with no restart; /capabilities reads the pointer. Secrets stay in the env, never
the DB. Precedence: Settings → env → default. Verified live: swap on/off/model,
bad spec → 400, race-clean. Gadfly blocking round addressed (dead code removed,
error-swallowing fixed, frontend 503 handling, holder dedup).

2026-07-22 02:53:55 +00:00

..

agent_holder.go

Address Gadfly findings on #90 (blocking round)

2026-07-21 22:17:25 -04:00

agent_test.go

Admin-gated Settings: runtime model selection, enforce is_admin (#79)

2026-07-21 20:27:36 -04:00

agent.go

Admin-gated Settings: runtime model selection, is_admin enforced (#90)

2026-07-22 02:53:55 +00:00

api.go

Admin-gated Settings: runtime model selection, is_admin enforced (#90)

2026-07-22 02:53:55 +00:00

auth_test.go

Address Gadfly review on #4: TOCTOU, sliding cookie, CSRF, argon2

2026-07-18 17:04:35 -04:00

auth.go

Address Gadfly review on #7: garden cap, dim validation, shared errors

2026-07-18 18:39:27 -04:00

errors.go

Seed provenance + inventory: source links and seed lots (#50) (#64)

2026-07-21 05:39:24 +00:00

gardens_test.go

Copy a garden (deep duplicate) from the gardens list (#46)

2026-07-21 03:58:39 +00:00

gardens.go

Copy a garden (deep duplicate) from the gardens list (#46)

2026-07-21 03:58:39 +00:00

history_test.go

Revision history: change sets + revisions + revert — the undo substrate (#48) (#61)

2026-07-21 05:07:30 +00:00

history.go

Revision history: change sets + revisions + revert — the undo substrate (#48) (#61)

2026-07-21 05:07:30 +00:00

journal_test.go

Journal UI: write and read season notes where you're already looking (#53) (#67)

2026-07-21 05:55:45 +00:00

journal.go

Journal UI: write and read season notes where you're already looking (#53) (#67)

2026-07-21 05:55:45 +00:00

objects_test.go

Configurable grid + snap-to-grid in the layout system (#45)

2026-07-19 07:07:14 +00:00

objects.go

Season view: filter the editor to a year (#54) (#66)

2026-07-21 05:47:34 +00:00

oidc_test.go

Add OIDC login via Authentik: PKCE, JIT provisioning, email linking (#5)

2026-07-18 17:13:47 -04:00

oidc.go

Address Gadfly review on #5: OIDC identity guard, verified-email, timeouts

2026-07-18 17:33:25 -04:00

ops_test.go

Address second round of Gadfly findings on #89

2026-07-21 22:12:00 -04:00

ops.go

Address second round of Gadfly findings on #89

2026-07-21 22:12:00 -04:00

plantings_test.go

Plantings backend: plop CRUD, derived counts, removed_at (#14)

2026-07-19 02:41:22 +00:00

plantings.go

Seed provenance + inventory: source links and seed lots (#50) (#64)

2026-07-21 05:39:24 +00:00

plants_test.go

Plant catalog backend: CRUD + seeded built-ins (#12)

2026-07-19 01:48:22 +00:00

plants.go

Seed provenance + inventory: source links and seed lots (#50) (#64)

2026-07-21 05:39:24 +00:00

public_test.go

Public read-only share link (no login / no OIDC) (#41) (#43)

2026-07-19 06:18:31 +00:00

public.go

Public read-only share link (no login / no OIDC) (#41) (#43)

2026-07-19 06:18:31 +00:00

seed_lots_test.go

Use objectPlantingsPath helper instead of inline URL (#88)

2026-07-21 22:06:57 -04:00

seed_lots.go

Seed provenance + inventory: source links and seed lots (#50) (#64)

2026-07-21 05:39:24 +00:00

settings_test.go

Admin-gated Settings: runtime model selection, enforce is_admin (#79)

2026-07-21 20:27:36 -04:00

settings.go

Address Gadfly findings on #90 (blocking round)

2026-07-21 22:17:25 -04:00

shares_test.go

Sharing backend: shares CRUD + ACL enforcement everywhere (#16)

2026-07-19 03:49:54 +00:00

shares.go

Sharing backend: shares CRUD + ACL enforcement everywhere (#16)

2026-07-19 03:49:54 +00:00

spa_test.go

Address Gadfly review findings on Phase 0

2026-07-18 15:19:30 -04:00

spa.go

Address Gadfly review findings on Phase 0

2026-07-18 15:19:30 -04:00

sse_deadline_test.go

Test the deadline is refreshed per-frame, not just extended (#87)

2026-07-21 20:49:57 -04:00