Danijel Martinek d09b3e2cdd feat(core-shared): auth-gate mutating feature procedures ...

Adds a shared requireAuthenticated tRPC middleware (reads the server-
resolved ctx.user from createTrpcContext) and applies it to every
mutating feature procedure — blog.createArticle and media.deleteMedia
were anonymous-callable (audit finding B7). Read-only queries stay
public; features compose <x>ProtectedProcedure from their error-mapped
base procedure.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

2026-07-10 18:25:46 +02:00

..

__contracts__

fix(blog): return the exact window for non-aligned offsets

2026-07-10 17:29:06 +02:00

__factories__

fix: drop .js extensions from remaining relative imports

2026-05-26 12:04:44 +02:00

__seeds__

fix: drop .js extensions from remaining relative imports

2026-05-26 12:04:44 +02:00

application

refactor: strip Phase/Plan/R-number references from source comments

2026-05-13 09:51:45 +02:00

di

fix(di): drop .js extensions from bind-dev-seed imports

2026-05-26 11:45:37 +02:00

entities

fix(errors): set this.name in every domain error constructor (R6)

2026-05-06 15:33:28 +02:00

infrastructure/repositories

fix(blog): return the exact window for non-aligned offsets

2026-07-10 17:29:06 +02:00

integrations

feat(core-shared): auth-gate mutating feature procedures

2026-07-10 18:25:46 +02:00

interface-adapters/controllers

style(blog): add section dividers + drop redundant presenter comment

2026-05-06 15:10:16 +02:00

ui

refactor(core-trpc): break the core-api package cycle

2026-07-10 18:25:46 +02:00

feature.manifest.ts

refactor(blog,marketing-pages): wire coverage helper + declare manifest bands

2026-05-13 14:13:08 +02:00

index.ts

refactor: strip Phase/Plan/R-number references from source comments

2026-05-13 09:51:45 +02:00