feat(iac/admin): host-side infra.admin module + handler library + wfctl CLI#791

Merged

intel352 merged 34 commits into

mainfrom

feat/infra-admin-host-module-2026-05-27T1534

May 27, 2026

Commits on May 27, 2026

feat(iac/wfctlhelpers): lift resolveStateStore for shared module+CLI use

intel352
and
claude
committed
refactor(iac/wfctlhelpers): consolidate writeEnvResolvedConfig + infra/container type predicates (spec F2)

intel352
and
claude
committed
test(iac/wfctlhelpers): cover panic invariants + env-resolve branch + plugin loader seam; fix sanitizeStateID divergence (code-review I-1..I-3, M-1..M-3)

intel352
and
claude
committed
feat(iac/wfctlhelpers): lift loadIaCProviderFromConfig for shared module+CLI use

intel352
and
claude
committed
feat(iac/wfctlhelpers): LoadAllIaCProvidersFromConfig multi-provider helper

intel352
and
claude
committed
test(iac/wfctlhelpers): cover ExpandEnvInMap + empty-provider-skip + init() wiring (code-review I-1..I-3, M-1)

intel352
and
claude
committed
docs(iac/wfctlhelpers): rollback close-error + unique-Name invariant comments (T3 code-review M-1, M-3)

intel352
and
claude
committed
feat(iac/admin): proto contracts for typed admin service

intel352
and
claude
committed
feat(iac/admin/catalog): T7a package skeleton + FieldSpecCatalog type

intel352
and
claude
committed
docs(iac/admin/proto): envelope doc comments + reserved tag ranges (T4 code-review M-1, M-2)

intel352
and
claude
committed
docs(iac/admin/catalog): fix T7b reassignment mechanism in seam comments (T7a spec-review nit)

intel352
and
claude
committed
feat(iac/admin/ui_dist): asset pages resources/resource/new (T10-T12)
intel352
committed
feat(iac/admin/catalog): T7b fill 13 typed Configs + freeform audit
intel352
committed
feat(iac/admin/catalog): T8 region + engine catalogs
intel352
committed
feat(iac/admin/handler): T5 — ListResources + GetResource

intel352
and
claude
committed
feat(iac/admin): T9 vendor infra.proto + parity test + Makefile target
intel352
committed
fix(iac/admin/catalog): T7b spec-review F1 + F2
intel352
committed
fix(iac/admin/ui_dist): T10-T12 code-review I-1 + I-2 in new.js
intel352
committed
feat(iac/admin/handler): T6 — ListResourceTypes + ListProviders + GenerateConfig

intel352
and
claude
committed
test(iac/admin/handler): refactor mask via secrets.MaskSensitiveOutputs + IsZero time guards + nil-config test (T5 code-review I-1, M-1..M-3, M-5)

intel352
and
claude
committed
feat(cmd/wfctl): T19 + T20 wfctl infra admin CLI + parity test
intel352
committed
feat(iac/admin): T13 embed.FS asset surface + T14 audit JSONL writer

intel352
and
claude
committed
chore(cmd/wfctl): use $USER as infra admin audit subject when set
intel352
committed
fix(iac/admin): T6 F1 provider_type from YAML config + F2 config_message_fqn correct package + acronyms

intel352
and
claude
committed
fix(cmd/wfctl): wire providerTypeByModule into wfctl admin deps (T6 F1 callsite update)

intel352
and
claude
committed
test(cmd/wfctl): refresh T20 parity fixture FQN per T6 F2 fix
intel352
committed
fix(iac/admin/audit + cmd/wfctl): T14 F1 align Entry to AdminAuditEntry proto; T19 I-2 protojson decoder

intel352
and
claude
committed
feat(module + engine): T15 host infra.admin module + T16 unit tests + T18 engine factory

intel352
and
claude
committed
test(module + Makefile): T17 host-module integration test with live admin plugin subprocess

intel352
and
claude
committed
fix(module/infra_admin): T15 F1 audit-tail query params + F2 denied result + F3 status code (spec-review)

intel352
and
claude
committed
test(module): T17 v2 — real engine boot + external plugin load + HTTP assertions (spec-review F1)

intel352
and
claude
committed
test(module): T17 v3 — switch to plugins/all.LoadAll + broaden skip predicate

intel352
and
claude
committed
test(module): T17 v4 — lighter harness w/ live admin plugin subprocess; all 4 assertions PASS

intel352
and
claude
committed
fix(module/infra_admin): T15 follow-up — auth middleware on routes (security gap)

intel352
and
claude
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

feat(iac/admin): host-side infra.admin module + handler library + wfctl CLI#791

feat(iac/admin): host-side infra.admin module + handler library + wfctl CLI#791
intel352 merged 34 commits into
mainfrom
feat/infra-admin-host-module-2026-05-27T1534

Commits on May 27, 2026

feat(iac/wfctlhelpers): lift resolveStateStore for shared module+CLI use

refactor(iac/wfctlhelpers): consolidate writeEnvResolvedConfig + infra/container type predicates (spec F2)

test(iac/wfctlhelpers): cover panic invariants + env-resolve branch + plugin loader seam; fix sanitizeStateID divergence (code-review I-1..I-3, M-1..M-3)

feat(iac/wfctlhelpers): lift loadIaCProviderFromConfig for shared module+CLI use

feat(iac/wfctlhelpers): LoadAllIaCProvidersFromConfig multi-provider helper

test(iac/wfctlhelpers): cover ExpandEnvInMap + empty-provider-skip + init() wiring (code-review I-1..I-3, M-1)

docs(iac/wfctlhelpers): rollback close-error + unique-Name invariant comments (T3 code-review M-1, M-3)

feat(iac/admin): proto contracts for typed admin service

feat(iac/admin/catalog): T7a package skeleton + FieldSpecCatalog type

docs(iac/admin/proto): envelope doc comments + reserved tag ranges (T4 code-review M-1, M-2)

docs(iac/admin/catalog): fix T7b reassignment mechanism in seam comments (T7a spec-review nit)

feat(iac/admin/ui_dist): asset pages resources/resource/new (T10-T12)

feat(iac/admin/catalog): T7b fill 13 typed Configs + freeform audit

feat(iac/admin/catalog): T8 region + engine catalogs

feat(iac/admin/handler): T5 — ListResources + GetResource

feat(iac/admin): T9 vendor infra.proto + parity test + Makefile target

fix(iac/admin/catalog): T7b spec-review F1 + F2

fix(iac/admin/ui_dist): T10-T12 code-review I-1 + I-2 in new.js

feat(iac/admin/handler): T6 — ListResourceTypes + ListProviders + GenerateConfig

test(iac/admin/handler): refactor mask via secrets.MaskSensitiveOutputs + IsZero time guards + nil-config test (T5 code-review I-1, M-1..M-3, M-5)

feat(cmd/wfctl): T19 + T20 wfctl infra admin CLI + parity test

feat(iac/admin): T13 embed.FS asset surface + T14 audit JSONL writer

chore(cmd/wfctl): use $USER as infra admin audit subject when set

fix(iac/admin): T6 F1 provider_type from YAML config + F2 config_message_fqn correct package + acronyms

fix(cmd/wfctl): wire providerTypeByModule into wfctl admin deps (T6 F1 callsite update)

test(cmd/wfctl): refresh T20 parity fixture FQN per T6 F2 fix

fix(iac/admin/audit + cmd/wfctl): T14 F1 align Entry to AdminAuditEntry proto; T19 I-2 protojson decoder

feat(module + engine): T15 host infra.admin module + T16 unit tests + T18 engine factory

test(module + Makefile): T17 host-module integration test with live admin plugin subprocess

fix(module/infra_admin): T15 F1 audit-tail query params + F2 denied result + F3 status code (spec-review)

test(module): T17 v2 — real engine boot + external plugin load + HTTP assertions (spec-review F1)

test(module): T17 v3 — switch to plugins/all.LoadAll + broaden skip predicate

test(module): T17 v4 — lighter harness w/ live admin plugin subprocess; all 4 assertions PASS

fix(module/infra_admin): T15 follow-up — auth middleware on routes (security gap)