Complete Housekeeping migration and /ase cutover #52

Merged

Simo merged 74 commits from codex/housekeeping-complete into main 2026-08-30 21:27:33 +02:00

Conversation 0 Commits 74 Files Changed 802

+76647 -61358

Simo commented 2026-08-27 20:35:54 +02:00

Collaborator

Copy link

Copy source

English

Summary

This draft completes the Housekeeping Command Deck migration and performs the atomic administration UI cutover to /ase.

• The canonical Housekeeping workspace now lives under /ase.
• The legacy /admin, /mod, and /ase-next UI trees are removed with no redirects.
• Internal /api/admin/* endpoints remain intentionally available behind their permission gates.
• The historical migration matrix retains all 137 routes as an audit record while the physical scanner reports zero legacy UI pages.
• Obsolete preview infrastructure, UI modules, dead files, and unused dependencies were removed.

Final security review fixes

• Logo changes require admin.settings.edit.
• Generic media deletion rejects nested paths and cannot reach favicon/logo namespaces.
• Hierarchy bypasses use the explicit isSuperAdmin capability instead of assuming numeric rank 7.
• Bulk ban/unban require admin.users.ban at both command and service boundaries.
• All bulk user operations load and authorize every target before any mutation.
• Rank IDs are dynamic, must exist in permission_ranks, and are no longer capped at 7.

An independent re-review found no Critical or Important findings and assessed the change as ready to merge. Its two Minor test recommendations were implemented.

Verification

• Node.js toolchain: 26.8.1 aligned
• Migration matrix: 137/137 valid; 0 legacy UI pages
• Runtime parity: 137 discovered / 137 mapped / 137 verified
• Housekeeping suite: 109 files, 843 tests passed
• Full suite: 262 files passed + 3 skipped; 1,649 tests passed + 5 skipped
• TypeScript: passed
• Knip: clean
• Changed-file Biome and git diff --check: passed
• Next.js 16.3.3 production build: compiled, typechecked, 129/129 pages generated
• Forgejo CI check: passed in 35s on cdfae0b9 (run #1140)
• Post-cutover probes: /admin, /admin-next, /ase-next, and /mod return 404; anonymous /ase redirects to /login; /api/health returns 200

Detailed evidence: docs/superpowers/evidence/2026-08-30-housekeeping-final.md.

Known non-blocking environment notes

• Production must provide REDIS_URL; the local build warns about the in-process fallback.
• Turbopack warns about broad filesystem tracing for dynamic translation-file access.
• Repository-wide lint still contains the existing Windows CRLF baseline; all changed files and patch hygiene pass.

This remains a draft PR. Merge and deployment are separate operator decisions.

---

Nederlands

Samenvatting

Deze draft rondt de migratie naar de Housekeeping Command Deck af en voert de atomische omschakeling van de beheerinterface naar /ase uit.

• De canonieke Housekeeping-workspace staat nu onder /ase.
• De oude UI-bomen /admin, /mod en /ase-next zijn verwijderd zonder redirects.
• Interne /api/admin/*-endpoints blijven bewust beschikbaar achter hun permissiecontroles.
• De historische migratiematrix bewaart alle 137 routes als auditregistratie, terwijl de fysieke scanner nul oude UI-pagina's meldt.
• Verouderde preview-infrastructuur, UI-modules, dode bestanden en ongebruikte dependencies zijn verwijderd.

Opgeloste punten uit de laatste securityreview

• Logowijzigingen vereisen admin.settings.edit.
• Generieke mediaverwijdering weigert geneste paden en kan de favicon-/logo-namespaces niet bereiken.
• Hiërarchische uitzonderingen gebruiken de expliciete capability isSuperAdmin in plaats van numerieke rank 7 te veronderstellen.
• Bulk ban/unban vereist admin.users.ban aan zowel de command- als servicegrens.
• Alle bulkgebruikersacties laden en autoriseren elk doel vóór iedere mutatie.
• Rank-ID's zijn dynamisch, moeten bestaan in permission_ranks en zijn niet langer begrensd op 7.

Een onafhankelijke herbeoordeling vond geen Critical- of Important-bevindingen en beoordeelde de wijziging als klaar om te mergen. De twee Minor-testsuggesties zijn uitgevoerd.

Verificatie

• Node.js-toolchain: 26.8.1 uitgelijnd
• Migratiematrix: 137/137 geldig; 0 oude UI-pagina's
• Runtimepariteit: 137 gevonden / 137 gemapt / 137 geverifieerd
• Housekeeping-suite: 109 bestanden, 843 tests geslaagd
• Volledige suite: 262 bestanden geslaagd + 3 overgeslagen; 1.649 tests geslaagd + 5 overgeslagen
• TypeScript: geslaagd
• Knip: schoon
• Biome voor gewijzigde bestanden en git diff --check: geslaagd
• Next.js 16.3.3-productiebuild: gecompileerd, typechecked en 129/129 pagina's gegenereerd
• Forgejo CI-check: geslaagd in 35 seconden op cdfae0b9 (run #1140)
• Probes na de omschakeling: /admin, /admin-next, /ase-next en /mod geven 404; anonieme toegang tot /ase verwijst naar /login; /api/health geeft 200

Gedetailleerd bewijs: docs/superpowers/evidence/2026-08-30-housekeeping-final.md.

Bekende niet-blokkerende omgevingsnotities

• Productie moet REDIS_URL leveren; de lokale build waarschuwt voor de fallback in het procesgeheugen.
• Turbopack waarschuwt voor brede filesystem tracing bij dynamische toegang tot vertaalbestanden.
• De repository-brede lint bevat nog de bestaande Windows CRLF-baseline; alle gewijzigde bestanden en patchcontroles slagen.

Dit blijft een draft-PR. Mergen en deployen zijn afzonderlijke beslissingen van de beheerder.

## English ### Summary This draft completes the Housekeeping Command Deck migration and performs the atomic administration UI cutover to `/ase`. - The canonical Housekeeping workspace now lives under `/ase`. - The legacy `/admin`, `/mod`, and `/ase-next` UI trees are removed with no redirects. - Internal `/api/admin/*` endpoints remain intentionally available behind their permission gates. - The historical migration matrix retains all 137 routes as an audit record while the physical scanner reports zero legacy UI pages. - Obsolete preview infrastructure, UI modules, dead files, and unused dependencies were removed. ### Final security review fixes - Logo changes require `admin.settings.edit`. - Generic media deletion rejects nested paths and cannot reach favicon/logo namespaces. - Hierarchy bypasses use the explicit `isSuperAdmin` capability instead of assuming numeric rank 7. - Bulk ban/unban require `admin.users.ban` at both command and service boundaries. - All bulk user operations load and authorize every target before any mutation. - Rank IDs are dynamic, must exist in `permission_ranks`, and are no longer capped at 7. An independent re-review found no Critical or Important findings and assessed the change as ready to merge. Its two Minor test recommendations were implemented. ### Verification - Node.js toolchain: 26.8.1 aligned - Migration matrix: 137/137 valid; 0 legacy UI pages - Runtime parity: 137 discovered / 137 mapped / 137 verified - Housekeeping suite: 109 files, 843 tests passed - Full suite: 262 files passed + 3 skipped; 1,649 tests passed + 5 skipped - TypeScript: passed - Knip: clean - Changed-file Biome and `git diff --check`: passed - Next.js 16.3.3 production build: compiled, typechecked, 129/129 pages generated - Forgejo CI check: passed in 35s on cdfae0b9 (run #1140) - Post-cutover probes: `/admin`, `/admin-next`, `/ase-next`, and `/mod` return 404; anonymous `/ase` redirects to `/login`; `/api/health` returns 200 Detailed evidence: `docs/superpowers/evidence/2026-08-30-housekeeping-final.md`. ### Known non-blocking environment notes - Production must provide `REDIS_URL`; the local build warns about the in-process fallback. - Turbopack warns about broad filesystem tracing for dynamic translation-file access. - Repository-wide lint still contains the existing Windows CRLF baseline; all changed files and patch hygiene pass. This remains a draft PR. Merge and deployment are separate operator decisions. --- ## Nederlands ### Samenvatting Deze draft rondt de migratie naar de Housekeeping Command Deck af en voert de atomische omschakeling van de beheerinterface naar `/ase` uit. - De canonieke Housekeeping-workspace staat nu onder `/ase`. - De oude UI-bomen `/admin`, `/mod` en `/ase-next` zijn verwijderd zonder redirects. - Interne `/api/admin/*`-endpoints blijven bewust beschikbaar achter hun permissiecontroles. - De historische migratiematrix bewaart alle 137 routes als auditregistratie, terwijl de fysieke scanner nul oude UI-pagina's meldt. - Verouderde preview-infrastructuur, UI-modules, dode bestanden en ongebruikte dependencies zijn verwijderd. ### Opgeloste punten uit de laatste securityreview - Logowijzigingen vereisen `admin.settings.edit`. - Generieke mediaverwijdering weigert geneste paden en kan de favicon-/logo-namespaces niet bereiken. - Hiërarchische uitzonderingen gebruiken de expliciete capability `isSuperAdmin` in plaats van numerieke rank 7 te veronderstellen. - Bulk ban/unban vereist `admin.users.ban` aan zowel de command- als servicegrens. - Alle bulkgebruikersacties laden en autoriseren elk doel vóór iedere mutatie. - Rank-ID's zijn dynamisch, moeten bestaan in `permission_ranks` en zijn niet langer begrensd op 7. Een onafhankelijke herbeoordeling vond geen Critical- of Important-bevindingen en beoordeelde de wijziging als klaar om te mergen. De twee Minor-testsuggesties zijn uitgevoerd. ### Verificatie - Node.js-toolchain: 26.8.1 uitgelijnd - Migratiematrix: 137/137 geldig; 0 oude UI-pagina's - Runtimepariteit: 137 gevonden / 137 gemapt / 137 geverifieerd - Housekeeping-suite: 109 bestanden, 843 tests geslaagd - Volledige suite: 262 bestanden geslaagd + 3 overgeslagen; 1.649 tests geslaagd + 5 overgeslagen - TypeScript: geslaagd - Knip: schoon - Biome voor gewijzigde bestanden en `git diff --check`: geslaagd - Next.js 16.3.3-productiebuild: gecompileerd, typechecked en 129/129 pagina's gegenereerd - Forgejo CI-check: geslaagd in 35 seconden op cdfae0b9 (run #1140) - Probes na de omschakeling: `/admin`, `/admin-next`, `/ase-next` en `/mod` geven 404; anonieme toegang tot `/ase` verwijst naar `/login`; `/api/health` geeft 200 Gedetailleerd bewijs: `docs/superpowers/evidence/2026-08-30-housekeeping-final.md`. ### Bekende niet-blokkerende omgevingsnotities - Productie moet `REDIS_URL` leveren; de lokale build waarschuwt voor de fallback in het procesgeheugen. - Turbopack waarschuwt voor brede filesystem tracing bij dynamische toegang tot vertaalbestanden. - De repository-brede lint bevat nog de bestaande Windows CRLF-baseline; alle gewijzigde bestanden en patchcontroles slagen. Dit blijft een draft-PR. Mergen en deployen zijn afzonderlijke beslissingen van de beheerder.

Simo added 26 commits 2026-08-27 20:35:54 +02:00

docs: define complete housekeeping cutover d42cd2af53

docs: plan complete ase housekeeping cutover 74756dfed2

refactor(housekeeping): adopt ase route namespace f72a2b6c74

fix(housekeeping): avoid ase preview self-redirect a9bdd6bd5d

fix(housekeeping): satisfy ase route types 67cb4b488d

refactor(housekeeping): stabilize service contracts b7edbca043

fix(housekeeping): preserve error correlation IDs cc6bb9a9a3

refactor(housekeeping): reuse request capability context edc165ba8d

test(housekeeping): isolate request capability contexts bdb8f0b02b

feat(housekeeping): add audit and preference storage 7c93d3e766

feat(housekeeping): correlate command audit evidence 89dec9da05

fix(housekeeping): preserve audit failure evidence 21cd88ccfd

fix(housekeeping): restore audit search interpolation 483d5b8c67

fix(housekeeping): preserve frozen operation errors b5957015e7

fix(housekeeping): preserve pathological operation errors 86a2d9d069

feat(housekeeping): persist operator preferences 2eb0456999

Merge branch 'main' of https://gitlab.epicnabbo.nl/remco/EpicNext-Cms into codex/housekeeping-complete 64bb230de5

fix(housekeeping): harden preference persistence 4e0bf598ed

fix(housekeeping): count preference payload bytes 60968409aa

feat(housekeeping): orchestrate partial providers 4c399873d1

fix(housekeeping): contain provider failures ca666d9f90

feat(housekeeping): dispatch audited commands 6aed71a8b2

fix(housekeeping): harden audited command dispatch 796d009c07

fix(housekeeping): harden command dispatch boundaries 00618fb2a3

fix(housekeeping): isolate executable command schemas 7895188b56

fix(housekeeping): close schema reflection escapes 01dceac073

Simo changed title from Complete Housekeeping Command Deck migration to Draft: Complete Housekeeping Command Deck migration 2026-08-27 20:36:23 +02:00

Simo changed title from Draft: Complete Housekeeping Command Deck migration to WIP: Complete Housekeeping Command Deck migration 2026-08-27 20:36:45 +02:00

Simo added 2 commits 2026-08-28 21:11:40 +02:00

Merge branch 'main' of https://gitlab.epicnabbo.nl/remco/EpicNext-Cms into codex/housekeeping-complete 139e8cfc3a

fix(housekeeping): harden readonly schema facade 2970dff563

Simo added 2 commits 2026-08-28 22:02:06 +02:00

feat(housekeeping): dispatch canonical domain routes e5c230ba35

fix(housekeeping): make route matching deterministic 0117b45d74

Simo added 2 commits 2026-08-29 00:33:36 +02:00

feat(housekeeping): deliver system vertical 3788ecd9f1

fix(housekeeping): harden system workflow boundaries c325c53774

Simo added 3 commits 2026-08-29 10:42:34 +02:00

feat(housekeeping): model people workflows e3f8b51d31

fix(housekeeping): harden people read boundaries d1382c839e

fix(housekeeping): complete people read fidelity 7920d4f46c

Simo added 5 commits 2026-08-29 21:15:24 +02:00

feat(housekeeping): deliver people account workflows e1b31ff773

fix(housekeeping): harden people account workflows 25b76437ff

fix(housekeeping): complete people workflow fidelity 91c9efcbb4

fix(housekeeping): correct people partial audit evidence fcd1dfd96e

fix(housekeeping): restore people partial compatibility a6a288d9ff

Simo added 3 commits 2026-08-30 00:16:44 +02:00

Merge branch 'main' of https://gitlab.epicnabbo.nl/remco/EpicNext-Cms into codex/housekeeping-complete 3d385d1869

feat(housekeeping): complete people moderation parity 29fe22297b

fix(housekeeping): address people moderation review 3fa1119f5a

Simo added 7 commits 2026-08-30 12:20:19 +02:00

Merge branch 'main' of https://gitlab.epicnabbo.nl/remco/EpicNext-Cms into codex/housekeeping-complete bdab924bdf

feat(housekeeping): deliver content vertical fd68819d9b

fix(housekeeping): address task 14 review round 1 d09eaa33d6

fix(housekeeping): address task 14 review round 2 c524b305d7

fix(housekeeping): address task 14 review round 3 d1160eb65a

style: satisfy housekeeping biome gate 08358b8aa4

fix(housekeeping): retain admin banner shim b70bd401d1

Simo added 1 commit 2026-08-30 12:28:06 +02:00

test: make media route fixture cross-platform 1ec05cda39

Simo added 1 commit 2026-08-30 13:48:25 +02:00

feat(housekeeping): deliver economy vertical 9c4b973faf

Simo added 2 commits 2026-08-30 14:35:51 +02:00

fix(housekeeping): preserve banner server actions bfc5bd78a1

feat(housekeeping): deliver hotel operations abc707cfb2

Simo added 1 commit 2026-08-30 14:45:06 +02:00

fix(housekeeping): connect hotel asset ownership 020c06f172

Simo added 1 commit 2026-08-30 15:31:00 +02:00

feat(housekeeping): integrate studio operations 2e95a106e0

Simo added 1 commit 2026-08-30 16:01:00 +02:00

feat(housekeeping): add global command deck search bcb0ca977f

Simo added 1 commit 2026-08-30 16:27:32 +02:00

feat(housekeeping): compose operational inbox 300ac0ef95

Simo added 1 commit 2026-08-30 16:56:50 +02:00

feat(housekeeping): personalize command deck 5574e601bb

Simo added 1 commit 2026-08-30 17:25:23 +02:00

feat(housekeeping): compose operations workspace 85ad0452d3

Simo added 2 commits 2026-08-30 18:53:33 +02:00

feat(housekeeping): finish accessible command deck a113e48880

Merge remote-tracking branch 'origin/main' into codex/housekeeping-complete b235ce08ff

Simo added 1 commit 2026-08-30 19:13:48 +02:00

test(housekeeping): prove 137 route parity 8a31556d51

Simo added 5 commits 2026-08-30 19:53:31 +02:00

fix(housekeeping): serialize workspace client props cb77b2d3b9

style: satisfy cumulative biome checks b9c47aa89a

fix(housekeeping): preserve runtime import boundaries 1ae59bcc1a

style: complete cumulative biome checks 65a62867db

test(housekeeping): record pre-cutover verification c9e35cf602

Simo added 5 commits 2026-08-30 21:08:10 +02:00

feat(housekeeping): cut over administration to ase 2b8f73a91d

fix(housekeeping): close final authorization gaps 222535e116

test(housekeeping): finalize release evidence 4d0c8c7e65

docs(housekeeping): record final cutover evidence f249551a2f

Merge remote-tracking branch 'origin/main' into codex/housekeeping-complete 6ae0aef6c0

Simo changed title from WIP: Complete Housekeeping Command Deck migration to WIP: Complete Housekeeping migration and /ase cutover 2026-08-30 21:08:51 +02:00

Simo added 1 commit 2026-08-30 21:13:55 +02:00

fix(ci): stabilize post-cutover checks cdfae0b967

Simo marked the pull request as ready for review 2026-08-30 21:27:22 +02:00

Simo merged commit 488b6e57c4 into main 2026-08-30 21:27:33 +02:00

Simo referenced this issue from a commit 2026-08-30 21:34:12 +02:00

Revert "Merge pull request 'Complete Housekeeping migration and /ase cutover' (#52) from codex/housekeeping-complete into main"

Sign in to join this conversation.

Reviewers

No Reviewers

Labels

No items

No labels

Milestone

No items

No Milestone

Projects

Clear projects

No projects

Assignees

Clear assignees

Simo remco (Remco)

No Assignees

1 Participants

Notifications

Subscribe

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: remco/EpicNext-Cms#52