4 Commits

Author	SHA1	Message	Date
Jakub Zych	1541cd4167	test(admin): import the untested SPA modules directly for check-phase10 hygiene ... - mlLocale: type predicates, localeRecord, the ML_LOCALE_CHANGE broadcast - MLField: locale switch, whole-map emit, broadcast follow, content-locale - FileCaptionModal: prefill, save via FileRoutes.update, 422 stays, danger toast - ApiTokensPanel and ApiTokenCreateDialog mounted directly next to the app tests	2026-10-11 16:13:19 +02:00
Jakub Zych	cb4b0a9c75	fix(16.3): disable Create token until a scope is selected ... Client-side canSubmit now matches the 422 rule so Submit stays disabled with an empty scope set (WR-02). Co-authored-by: Cursor <cursoragent@cursor.com>	2026-10-11 13:53:32 +02:00
Jakub Zych	55999b2984	test(16.3-04): full SPA coverage for API tokens panel and dialog ... Pin list states, row anatomy, revoke paths and create-dialog step 1/2 behaviours from the UI-SPEC, including plaintext lifetime backstops. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-10-11 13:36:17 +02:00
Jakub Zych	91830e506f	test(16.3-04): pin deny-by-default contract at every layer ... Scope match/Allows tables, route classification for every phase09Routes entry, SPA plaintext lifetime backstops, and Postgres owner lifecycle. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-10-11 13:17:41 +02:00