cb4b0a9c75
fix(16.3): disable Create token until a scope is selected
...
Client-side canSubmit now matches the 422 rule so Submit stays disabled
with an empty scope set (WR-02).
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-10-11 13:53:32 +02:00
55999b2984
test(16.3-04): full SPA coverage for API tokens panel and dialog
...
Pin list states, row anatomy, revoke paths and create-dialog step 1/2
behaviours from the UI-SPEC, including plaintext lifetime backstops.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-10-11 13:36:17 +02:00
91830e506f
test(16.3-04): pin deny-by-default contract at every layer
...
Scope match/Allows tables, route classification for every phase09Routes
entry, SPA plaintext lifetime backstops, and Postgres owner lifecycle.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-10-11 13:17:41 +02:00
e17207a00d
feat(16.3-02): dialog rules smoke tests and My account API tokens docs
...
Cover scope *, 422 focus, clipboard copy/fallback, close-without-copy
guard, and document the SPA tokens card on My account.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-10-11 02:06:43 +02:00
1c930b6ff7
feat(16.3-02): list states, show-revoked toggle, and revoke via ConfirmDialog
...
Add skeleton/empty/error coverage, revoked-row handling, ConfirmDialog
overflow wrap for long names, and rebuild boardwalk dist.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-10-11 02:04:54 +02:00
5a6a190e7f
feat(16.3-02): tracer — API tokens card on My account with show-once create
...
Wire ApiTokensPanel after the profile form, add the two-step create dialog,
phrase keys, smoke tracer, and rebuilt boardwalk dist.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-10-11 02:02:44 +02:00
