26.09.1 — response schemas, an error page, a dashboard that browses your data, and five security fixes - #1

Merged

ancongui merged 31 commits into

mainfrom

fix/uncached-boot

Sep 4, 2026

Commits on Sep 3, 2026

fix(boot): make the uncached boot work — every Category-B manifest now self-resolves
Andres Contreras
committed
933c08e
fix(security): make the expression evaluator re-entrant — it failed OPEN
Andres Contreras
committed
cc514ad
feat(web): add the #[Controller] stereotype, HTML rendering, and a real welcome page
Andres Contreras
committed
d3c94cc
design(skeleton): rebuild the welcome page — warm, simple, paths first
Andres Contreras
committed
d855e53
fix(observability): make metrics survive the request that recorded them
Andres Contreras
committed
5cbd4f2
fix: repair the confirmed critical and high defects across seven packages
Andres Contreras
committed
fd446c2
chore: drop a stray design screenshot and ignore local review artifacts
Andres Contreras
committed
c4a3445
fix(gitignore): scope the screenshot ignore to the repo root
Andres Contreras
committed
3186a16
feat(admin): add firefly/admin — a browser dashboard over the actuator
Andres Contreras
committed
8563df9
fix(actuator): honour * in exposure.exclude, and render an empty body as {}
Andres Contreras
committed
9044b94
feat: finish the plan — OpenAPI 3.1, CLI archetypes, nested body hydration, config reference
Andres Contreras
committed
ad9c457
feat(admin,openapi): rebuild the dashboard and the API reference
Andres Contreras
committed
d1c4f29
feat(skeleton): the welcome page now shows what is actually running
Andres Contreras
committed
987990d
feat: official Swagger UI, a bean graph explorer, and a parametrizable dashboard
Andres Contreras
committed
592fe07
feat: Spring-style API annotations, a management port, and a stale-manifest fix
Andres Contreras
committed
03b1ee7
fix(admin): the bean graph was structurally incapable of showing framework wiring
Andres Contreras
committed
3b67187

Commits on Sep 4, 2026

feat(admin): a Django-admin-style data browser, wired into the dashboard
Andres Contreras
committed
e9ede70
fix(skeleton): a created project actually ships the dashboard, the API docs and a working REST resource
Andres Contreras
committed
e1d867b
fix(admin): the dashboard stops overflowing the viewport on narrow screens
Andres Contreras
committed
3a62fae
feat(openapi): document what an endpoint RETURNS, and the collections it accepts
Andres Contreras
committed
093021b
feat(web): a LaraFly error page for browsers, in the framework's own design
Andres Contreras
committed
df37e40
feat(admin): a datasource page, entity relations you can walk, and a numeric column type
Andres Contreras
committed
6f37a22
feat(admin,web): full CRUD and real filtering in the explorer; overridable error pages
Andres Contreras
committed
6c4afd2
fix(admin): the data grid's columns line up again, plus multi-condition filters and a real pager
Andres Contreras
committed
6f9e9fd
feat(admin): a feature-switch console and a connection wizard, both gated like the hazards they are
Andres Contreras
committed
38a7f72
docs: the reference documents every key again, and a test keeps it that way
Andres Contreras
committed
5aa82d8
docs(book): both editions carry this session's work, and the listings still lint
Andres Contreras
committed
a9a207e
fix(web): an unrouted API path answers JSON instead of Laravel's page
Andres Contreras
committed
3f6b2f9
fix(admin): three security defects an adversarial review of this branch found
Andres Contreras
committed
2505ad7
fix: the rest of what the pre-release review confirmed
Andres Contreras
committed
04ecd5c
fix(ci): the branch used PHP 8.4 syntax in a framework that supports 8.3
Andres Contreras
committed
a73d656