Claus Lohmar f5e4fd0055 refactor(config): drop the dead secrets.session_key ... REVIEW-001 (M0) L1c/L2s: secrets.session_key was validated and generated by the wizard but never read by any code path — dead config (KISS). Remove the field, its validation entry and its generation; the example notes that a placeholder is replaced at startup in setup mode (M1s) as well as by the wizard's finish.		2026-10-14 11:30:06 +00:00
..
audit	feat(core): add the store, identity plumbing and the door (SPEC-003/004)	2026-10-14 10:53:51 +00:00
auth	fix(auth): judge the passkey nudge by the configured origin	2026-10-14 11:29:58 +00:00
config	refactor(config): drop the dead secrets.session_key	2026-10-14 11:30:06 +00:00
httpx	fix(security): harden httpx — XFF hops, __Host- cookie, isolation headers	2026-10-14 11:29:52 +00:00
mail	feat(core): add the store, identity plumbing and the door (SPEC-003/004)	2026-10-14 10:53:51 +00:00
middleware	fix(security): prune and cap the rate limiter state	2026-10-14 11:30:03 +00:00
module	feat(module): add the module registry, discovery and the home module (SPEC-008)	2026-10-14 10:53:57 +00:00
recovery	fix(security): deliver /access notifications off the request path	2026-10-14 11:30:01 +00:00
routing	feat(routing): add the pure routing model (SPEC-002)	2026-10-14 10:53:48 +00:00
server	feat(core): add the store, identity plumbing and the door (SPEC-003/004)	2026-10-14 10:53:51 +00:00
setup	refactor(config): drop the dead secrets.session_key	2026-10-14 11:30:06 +00:00
store	feat(core): add the store, identity plumbing and the door (SPEC-003/004)	2026-10-14 10:53:51 +00:00
users	feat(core): add the store, identity plumbing and the door (SPEC-003/004)	2026-10-14 10:53:51 +00:00
web	feat(web): add the web shell and the PWA (SPEC-009)	2026-10-14 10:53:57 +00:00