063595be31
Covers the matrix laid out in the plan: * bootstrap admin lands as Owner * owner / admin / member access matrices on the default app * bearer pic_ key and cookie session resolve to the same Principal * read-only key cannot write (scope intersection) * bound key cannot escape its app * member listing isolation at SQL for /admin/apps + /admin/scripts * deactivating a user expires every API key for them * mint rejects bound key carrying instance:* scopes (422) * list_active_owners returns the right set for the startup warning Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
44 lines
870 B
TOML
44 lines
870 B
TOML
[package]
|
|
name = "picloud"
|
|
version.workspace = true
|
|
edition.workspace = true
|
|
rust-version.workspace = true
|
|
license.workspace = true
|
|
|
|
[lints]
|
|
workspace = true
|
|
|
|
[lib]
|
|
path = "src/lib.rs"
|
|
|
|
[[bin]]
|
|
name = "picloud"
|
|
path = "src/main.rs"
|
|
|
|
[dependencies]
|
|
picloud-shared.workspace = true
|
|
picloud-executor-core.workspace = true
|
|
picloud-orchestrator-core.workspace = true
|
|
picloud-manager-core.workspace = true
|
|
|
|
tokio.workspace = true
|
|
async-trait.workspace = true
|
|
axum.workspace = true
|
|
tower.workspace = true
|
|
tower-http.workspace = true
|
|
sqlx.workspace = true
|
|
serde.workspace = true
|
|
serde_json.workspace = true
|
|
anyhow.workspace = true
|
|
thiserror.workspace = true
|
|
tracing.workspace = true
|
|
tracing-subscriber.workspace = true
|
|
figment.workspace = true
|
|
|
|
[dev-dependencies]
|
|
axum-test = "17"
|
|
serde.workspace = true
|
|
serde_json.workspace = true
|
|
uuid.workspace = true
|
|
chrono.workspace = true
|