Danijel Martinek d09b3e2cdd feat(core-shared): auth-gate mutating feature procedures ...

Adds a shared requireAuthenticated tRPC middleware (reads the server-
resolved ctx.user from createTrpcContext) and applies it to every
mutating feature procedure — blog.createArticle and media.deleteMedia
were anonymous-callable (audit finding B7). Read-only queries stay
public; features compose <x>ProtectedProcedure from their error-mapped
base procedure.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

2026-07-10 18:25:46 +02:00

..

src

feat(core-shared): auth-gate mutating feature procedures

2026-07-10 18:25:46 +02:00

tests

refactor: strip Phase/Plan/R-number references from source comments

2026-05-13 09:51:45 +02:00

AGENTS.md

docs(adr): rename ADR-012 — drop Lazar; update title + content + cross-refs

2026-05-13 10:07:37 +02:00

CHANGELOG.md

feat: hybrid versioning + automated CHANGELOG via release-please

2026-05-13 17:17:16 +02:00

eslint.config.js

refactor: rename eslint-config + typescript-config to core-eslint + core-typescript

2026-05-05 10:37:07 +02:00

package.json

build: align @trpc/* on a single workspace version

2026-07-10 18:25:46 +02:00

tsconfig.json

refactor: rename eslint-config + typescript-config to core-eslint + core-typescript

2026-05-05 10:37:07 +02:00

turbo.json

feat(blog): scaffold empty package with feature tag + path aliases

2026-05-04 22:09:58 +02:00

vitest.config.ts

refactor(blog,marketing-pages): wire coverage helper + declare manifest bands

2026-05-13 14:13:08 +02:00