promote: dev history slice 1 of 4 - #29

Merged

BeforeLights merged 33 commits into

mainfrom

promote/dev-20260803-01

Aug 3, 2026

Commits on Aug 2, 2026

docs(plans): orchestrate Luna Max delivery batches
BeforeLights
committed
62e10cd
docs(operations): record Luna Max handoff
BeforeLights
committed
eeb0853
feat(api): compose audit and entitlement foundations
BeforeLights
committed
1ebdc1e
feat(aud): add tenant-scoped Prisma audit persistence
BeforeLights
committed
db436ce
feat(bua): add durable entitlement and usage persistence
BeforeLights
committed
ff69724
feat(iam): add versioned PKCE boundary
BeforeLights
committed
0f46d16
feat(iam): add versioned CSRF boundary
BeforeLights
committed
0124139
feat(iam): add durable credential lookup
BeforeLights
committed
46c2ee5
refactor(iam): make session principal lookup async
BeforeLights
committed
881b5d5
feat(iam): add durable session lifecycle
BeforeLights
committed
a10e443
feat(iam): persist personal identity bootstrap
BeforeLights
committed
5360c15
fix(iam): resolve organization memberships for sign-in
BeforeLights
committed
54cc494
feat(iam): persist MFA factors and recovery codes
BeforeLights
committed
5f7c58f
feat(iam): persist tenant-scoped memberships
BeforeLights
committed
3c90475
feat(api): enforce browser CSRF boundary
BeforeLights
committed
7ff5bd4
feat(iam): add secure session cookie boundary
BeforeLights
committed
9f140f1
feat(iam): keep browser refresh credentials in cookies
BeforeLights
committed
a909d9c
fix(iam): accept rotating refresh token cookie values
BeforeLights
committed
305fdec
feat(iam): rotate refresh sessions through HTTP
BeforeLights
committed
3af9101
feat(iam): revoke sessions through HTTP
BeforeLights
committed
15d7018
feat(iam): persist access-token lookup digests
BeforeLights
committed
5dc1779
feat(iam): derive tenant context from live sessions
BeforeLights
committed
0b19a0b
test(iam): verify protected tenant context integration
BeforeLights
committed
152eae3
feat(iam): compose durable MFA service
BeforeLights
committed
7852402
feat(iam): expose authenticated MFA lifecycle
BeforeLights
committed
02c1822
test(iam): verify MFA HTTP lifecycle
BeforeLights
committed
676c632
feat(aud): expose authenticated immutable audit reads
BeforeLights
committed
293ed25
feat(bua): expose scoped entitlement reads
BeforeLights
committed
dc045fd
feat(iam): expose current session identity
BeforeLights
committed
39dc6e0
fix(iam): preserve MFA state in session context
BeforeLights
committed
559124f
fix(ci): satisfy strict TypeScript lint gates
BeforeLights
committed
fa3795f
fix(ci): normalize repository formatting
BeforeLights
committed
238ce52
Merge pull request #24 from DatabreezeService/feat/foundation-identity-completion
BeforeLights
authored
86f25c8