feat(provisioning): declarative realm provisioning (import / apply / prune / export + per-realm self-service)#107

Merged

windischb merged 21 commits into

developfrom

feat/realm-declarative-provisioning

Jun 30, 2026

Commits on Jun 30, 2026

feat(realms): prod-safe hard-delete that drops the tenant database at runtime

windischb
and
claude
committed
feat(provisioning): RealmManifestApplier.ImportNewRealmAsync (realm + oauth + users)

windischb
and
claude
committed
refactor(apps): extract canonical App create into AppAdminService

windischb
and
claude
committed
feat(provisioning): full-coverage import (apps, roles) with key-based cross-references

windischb
and
claude
committed
feat(provisioning): groups in the applier via a plain tenant-scoped session

windischb
and
claude
committed
refactor(apps,roles): extract canonical Update ops + restore error-code bodies

windischb
and
claude
committed
feat(provisioning): RealmManifestApplier.UpdateRealmAsync (in-place merge)

windischb
and
claude
committed
feat(provisioning): control-plane endpoints for import / apply / hard-delete

windischb
and
claude
committed
feat(provisioning): Modgud.Provisioning.TestKit + drift-guard parity test

windischb
and
claude
committed
feat(provisioning): structure-only realm export + set-password on apply

windischb
and
claude
committed
feat(provisioning): export realm settings (round-trip the full config)

windischb
and
claude
committed
feat(provisioning): nullable OAuth bools so apply patches surgically

windischb
and
claude
committed
refactor(apps,roles,groups): extract canonical delete ops for prune reuse

windischb
and
claude
committed
feat(provisioning): prune in the applier + ?prune=true (full-sync apply)

windischb
and
claude
committed
docs(provisioning): declarative realm provisioning design note

windischb
and
claude
committed
feat(provisioning): served JSON Schema for the realm manifest

windischb
and
claude
committed
dev(provisioning): local app-testing docker stack + recipe

windischb
and
claude
committed
docs(provisioning): user-facing guide for declarative realm provisioning

windischb
and
claude
committed
feat(provisioning): per-realm self-service config (realm:admin, data-plane)

windischb
and
claude
committed
docs(app-testing): agent quickstart for a running instance

windischb
and
claude
committed
docs(app-testing): describe how to GET an instance, not assert one exists

windischb
and
claude
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

feat(provisioning): declarative realm provisioning (import / apply / prune / export + per-realm self-service)#107

feat(provisioning): declarative realm provisioning (import / apply / prune / export + per-realm self-service)#107
windischb merged 21 commits into
developfrom
feat/realm-declarative-provisioning

Commits on Jun 30, 2026

feat(realms): prod-safe hard-delete that drops the tenant database at runtime

feat(provisioning): RealmManifestApplier.ImportNewRealmAsync (realm + oauth + users)

refactor(apps): extract canonical App create into AppAdminService

feat(provisioning): full-coverage import (apps, roles) with key-based cross-references

feat(provisioning): groups in the applier via a plain tenant-scoped session

refactor(apps,roles): extract canonical Update ops + restore error-code bodies

feat(provisioning): RealmManifestApplier.UpdateRealmAsync (in-place merge)

feat(provisioning): control-plane endpoints for import / apply / hard-delete

feat(provisioning): Modgud.Provisioning.TestKit + drift-guard parity test

feat(provisioning): structure-only realm export + set-password on apply

feat(provisioning): export realm settings (round-trip the full config)

feat(provisioning): nullable OAuth bools so apply patches surgically

refactor(apps,roles,groups): extract canonical delete ops for prune reuse

feat(provisioning): prune in the applier + ?prune=true (full-sync apply)

docs(provisioning): declarative realm provisioning design note

feat(provisioning): served JSON Schema for the realm manifest

dev(provisioning): local app-testing docker stack + recipe

docs(provisioning): user-facing guide for declarative realm provisioning

feat(provisioning): per-realm self-service config (realm:admin, data-plane)

docs(app-testing): agent quickstart for a running instance

docs(app-testing): describe how to GET an instance, not assert one exists