Maurice 22ee0bafdc Bring the module guide in line with the guards ...

The guard section still said BE-Phase 2 was in progress and listed
TripAccessGuard, default-deny and the MFA policy as open. All three landed on
this branch, and two of them changed how a contributor is supposed to write a
controller, so the file that tells them how needs to say it: what
GlobalAuthGuard does with a declared @UseGuards chain, why places splits along
"does this handler take a DTO-typed body" rather than along the domain, and
why TripOwnerGuard must not go near PermissionsService.

It also still pointed at middleware/mfaPolicy.ts in two places, which this
branch deleted.

2026-08-10 13:38:26 +02:00

..

assets

v3.4.1 (#1606)

2026-07-19 19:00:40 +02:00

public

v3.0.16 — bug fixes (#964)

2026-05-06 21:38:40 +02:00

scripts

Split PluginsModule into four, and gate coverage per domain

2026-08-09 18:44:59 +02:00

src

Bring the module guide in line with the guards

2026-08-10 13:38:26 +02:00

tests

Pin the request body ceiling instead of inheriting it

2026-08-10 13:38:26 +02:00

.env.example

feat(db): make the SQLite journal mode configurable (#1675)

2026-07-29 17:02:56 +02:00

.gitignore

Release 3.1.0 (#1185)

2026-06-16 22:22:45 +02:00

.prettierrc

Release 3.1.0 (#1185)

2026-06-16 22:22:45 +02:00

eslint.config.mjs

Add a decorator kit for the plugin RPC surface

2026-08-09 11:58:56 +02:00

package.json

Make the plugin permission facts live in one place

2026-08-09 00:52:05 +02:00

reset-admin.js

feat(db): make the SQLite journal mode configurable (#1675)

2026-07-29 17:02:56 +02:00

tsconfig.build.json

Release 3.1.0 (#1185)

2026-06-16 22:22:45 +02:00

tsconfig.json

Release 3.1.0 (#1185)

2026-06-16 22:22:45 +02:00

vitest.config.ts

Split the trip aggregate root into its parts

2026-08-10 13:38:26 +02:00