Skip to content

fix: launch readiness — Warden authZ, CORS, entitlements - #25

Closed
coopbri wants to merge 1 commit into
masterfrom
fix/launch-readiness
Closed

coopbri wants to merge 1 commit into
masterfrom
fix/launch-readiness

Conversation

@coopbri

@coopbri coopbri commented Mar 19, 2026

Copy link
Copy Markdown
Contributor

Summary

  • Wire up Warden checkPermission across all REST mutation routes (workflows, plugins, subscriptions) with fail-open for availability
  • Fix CORS config to include credentials: true and allowedHeaders for cross-origin API requests
  • Align free-tier workflow limit to 5 (was 3, mismatched with pricing page)
  • Add max_functions and max_subscriptions entitlement keys
  • Upgrade biome 2.4.6→2.4.8, postgraphile rc.9→rc.10

Test plan

  • bun test passes (28/28, 12 pre-existing DB mock failures unrelated)
  • bun lint clean
  • bun tsc --noEmit clean
  • Playwright MCP tested against prod — entitlement limit properly enforced
  • Verify Warden checks work in prod (fail-open, so safe to deploy)

🤖 Generated with Claude Code

…ement limits

Wire up Warden checkPermission across all REST mutation routes (workflows,
plugins, subscriptions) with fail-open for availability. Fix CORS config
to include credentials and allowed headers for cross-origin API requests.
Align free-tier workflow limit to 5 (matching pricing page). Add
max_functions and max_subscriptions entitlement keys. Upgrade biome and
postgraphile deps.
@coopbri coopbri closed this Mar 19, 2026
@coopbri
coopbri deleted the fix/launch-readiness branch March 19, 2026 07:04
@railway-app
railway-app Bot temporarily deployed to vortex / production March 19, 2026 07:23 Inactive

This branch was previously deployed

1 inactive deployment
vortex / production — 633ff354 Deployed Mar 19, 2026 by railway-app[bot]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant