Skip to content

Fix Sanctum cache settlement and restore current parity #484

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
binaryfire merged 14 commits into from
Aug 7, 2026
Merged

Fix Sanctum cache settlement and restore current parity #484

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
14 commits
Select commit Hold shift + click to select a range
6bf8d57
database: bind transaction callbacks to their connection
binaryfire Aug 7, 2026
0c3d1a2
docs: clarify after-commit transaction locality
binaryfire Aug 7, 2026
3ae5014
auth: settle user cache invalidation after commit
binaryfire Aug 7, 2026
0156456
sanctum: make token cache mutations settlement-safe
binaryfire Aug 7, 2026
05c4b92
sanctum: centralize bearer token parsing and lookup
binaryfire Aug 7, 2026
2b7d709
sanctum: tighten testing and static state contracts
binaryfire Aug 7, 2026
2b5dcfd
sanctum: restore configurable routes and guard factories
binaryfire Aug 7, 2026
59eace1
sanctum: validate token pruning input
binaryfire Aug 7, 2026
ccef479
sanctum: complete package metadata and public types
binaryfire Aug 7, 2026
3ef0ce1
docs: document Sanctum guard and cache boundaries
binaryfire Aug 7, 2026
08f5395
docs: record the completed Sanctum audit
binaryfire Aug 7, 2026
5e2698a
docs: add the Sanctum correctness implementation plan
binaryfire Aug 7, 2026
aa332fb
Merge branch '0.4' into audit/sanctum-correctness-lifecycle-parity
binaryfire Aug 7, 2026
f978924
sanctum: pin managerless relation settlement
binaryfire Aug 7, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions composer.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -352,6 +352,7 @@
"Hypervel\\Redis\\RedisServiceProvider",
"Hypervel\\Reverb\\ReverbServiceProvider",
"Hypervel\\Routing\\RoutingServiceProvider",
"Hypervel\\Sanctum\\SanctumServiceProvider",
Comment thread
greptile-apps[bot] marked this conversation as resolved.
"Hypervel\\Server\\ServerServiceProvider",
"Hypervel\\ServerProcess\\ServerProcessServiceProvider",
"Hypervel\\Session\\SessionServiceProvider",
Expand Down
35 changes: 27 additions & 8 deletions docs/plans/2026-07-12-0900-framework-coroutine-state-lifecycle-audit.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -990,9 +990,9 @@ An exceptionally large shared work unit may receive its own linked detail plan w

This compact index routes the completed-work history that must be consulted with the full plan after compaction. Detailed history remains in the [companion ledger](2026-07-12-0915-framework-coroutine-state-lifecycle-audit-ledger.md).

- **Active package or work unit:** None. `translation` is complete; detail plan `2026-08-06-0925-translation-correctness-current-parity-and-worker-lifecycles.md`.
- **Ledger entries required for the active work:** None. The completed Translation work is recorded under `Complete Translation correctness, current parity, and worker lifecycles`, with its cross-package findings recorded at their owning package entries.
- **Pending revalidation carried into the active work:** None. The completed View audit owns `ComponentAttributeBag::data()`; the completed Translation audit owns `__()`'s conditional type.
- **Active package or work unit:** None. `sanctum` is complete; detail plan `2026-08-07-1302-sanctum-correctness-cache-settlement-and-current-parity.md`.
- **Ledger entries required for the active work:** None. The completed Sanctum work is recorded under `Complete Sanctum correctness, cache settlement, and current parity`, with its Database and Auth findings also recorded at their owning package entries.
- **Pending revalidation carried into the active work:** None.

Update these three lines when a package starts, completes, or gains a cross-package dependency. Name exact work-unit headings or shared finding IDs from the companion ledger; never use “see recent entries” or require a full-ledger reread.

Expand Down Expand Up @@ -1053,11 +1053,11 @@ Add one row only for a shared finding or changed lower-level assumption that ano
| `queue-11` | `queue` | `events`, `queue`, and `broadcasting` (revalidation complete) | `Correct event dispatch, queued-consumer isolation, and queue interoperability`; finding `queue-11` |
| `queue-12` | `bus`, `queue` | `events`, `bus`, `queue`, and `broadcasting` (revalidation complete) | `Correct event dispatch, queued-consumer isolation, and queue interoperability`; finding `queue-12` |
| `foundation-01` | `foundation` | `support` and `foundation` (revalidation complete) | `Correct event dispatch, queued-consumer isolation, and queue interoperability`; finding `foundation-01` |
| `support-02` | `support` | `auth` (revalidation complete), `broadcasting` (revalidation complete), `bus` (revalidation complete), `cache` (revalidation complete), `concurrency`, `console` (revalidation complete), `container`, `contracts`, `cookie`, `database` (revalidation complete), `events`, `filesystem` (revalidation complete), `foundation` (revalidation complete), `hashing` (revalidation complete), `horizon` (revalidation complete), `inertia`, `jwt`, `log`, `mail`, `notifications` (revalidation complete), `permission`, `pipeline`, `queue` (revalidation complete), `redis` (revalidation complete), `reverb` (revalidation complete), `routing` (revalidation complete), `sanctum`, `scout`, `session` (revalidation complete), `socialite`, `telescope`, `testbench`; `translation` (revalidation complete); later full remaining consumer audits | `Normalize framework enum identifiers at string boundaries`; finding `support-02`; sibling findings `translation-01` and `reverb-03`; linked detail plan `2026-07-15-0920-framework-enum-identifier-contracts.md` |
| `support-02` | `support` | `auth` (revalidation complete), `broadcasting` (revalidation complete), `bus` (revalidation complete), `cache` (revalidation complete), `concurrency`, `console` (revalidation complete), `container`, `contracts`, `cookie`, `database` (revalidation complete), `events`, `filesystem` (revalidation complete), `foundation` (revalidation complete), `hashing` (revalidation complete), `horizon` (revalidation complete), `inertia`, `jwt`, `log`, `mail`, `notifications` (revalidation complete), `permission`, `pipeline`, `queue` (revalidation complete), `redis` (revalidation complete), `reverb` (revalidation complete), `routing` (revalidation complete), `sanctum` (revalidation complete), `scout`, `session` (revalidation complete), `socialite`, `telescope`, `testbench`; `translation` (revalidation complete); later full remaining consumer audits | `Normalize framework enum identifiers at string boundaries`; finding `support-02`; sibling findings `translation-01` and `reverb-03`; linked detail plan `2026-07-15-0920-framework-enum-identifier-contracts.md` |
| `macroable-03` | `macroable` | `cookie`, `log`, and `notifications` (revalidation complete); later full `jwt` audit | `Complete Macroable callable and test-state handling`; finding `macroable-03` |
| `auth-01` | `support`, `auth` | `auth` (revalidation complete) | `Correct Support utility boundaries and authentication timing isolation`; finding `auth-01` |
| `encryption-03` | `encryption` | `contracts`, `support`, `filesystem`, and `foundation` (revalidation complete) | `Harden encryption rotation, key publication, and global lifecycle state`; finding `encryption-03` |
| `sanctum-01` | `sanctum` | `encryption`; later full `sanctum` audit | `Harden encryption rotation, key publication, and global lifecycle state`; finding `sanctum-01` |
| `sanctum-01` | `sanctum` | `encryption` and `sanctum` (revalidation complete) | `Harden encryption rotation, key publication, and global lifecycle state`; finding `sanctum-01` |
| `process-02` | `process` | `concurrency` (revalidation complete) | `Make Process callbacks and pools failure-safe`; finding `process-02` |
| `server-process-10` | `server-process` | `foundation` (revalidation complete) | `Make custom server processes failure-safe`; finding `server-process-10` |
| `signal-05` | `contracts`, `signal` | `server-process` (revalidation complete) | `Complete Signal handler reliability, public APIs, and deployment guidance`; finding `signal-05` |
Expand Down Expand Up @@ -1110,7 +1110,7 @@ Add one row only for a shared finding or changed lower-level assumption that ano
| `telescope-01` | `telescope` | `redis` (revalidation complete); later full `telescope` audit | `Complete Redis pooling, subscriber transport, topology, parity, and lifecycle safety`; finding `telescope-01` |
| `telescope-02` | `telescope` | `redis` (revalidation complete); later full `telescope` audit | `Complete Redis pooling, subscriber transport, topology, parity, and lifecycle safety`; finding `telescope-02` |
| `sentry-01` | `sentry` | `redis` (revalidation complete); later full `sentry` audit | `Complete Redis pooling, subscriber transport, topology, parity, and lifecycle safety`; finding `sentry-01` |
| `cache-04` | `cache` | `auth` (full-audit revalidation complete), `sanctum` and `testbench` (revalidation complete); later full remaining consumer audits | `Complete Cache parity, cleanup, permanence, and tagged ownership`; finding `cache-04` |
| `cache-04` | `cache` | `auth`, `sanctum`, and `testbench` (revalidation complete); later full remaining consumer audits | `Complete Cache parity, cleanup, permanence, and tagged ownership`; finding `cache-04` |
| `filesystem-12` | `filesystem` | `session` (revalidation complete) | `Complete Session lifecycles, persistence, and current Laravel parity`; finding `filesystem-12` |
| `session-23` | `cache` | `session` (revalidation complete) | `Complete Session lifecycles, persistence, and current Laravel parity`; finding `session-23` |
| `contracts-09` | `contracts` | `foundation` and `broadcasting` (revalidation complete) | `Complete Queue pooling, payload durability, and current Laravel parity`; finding `contracts-09` |
Expand Down Expand Up @@ -1152,7 +1152,26 @@ Add one row only for a shared finding or changed lower-level assumption that ano
| `collections-15` | `collections` | `collections` and `pagination` (revalidation complete) | `Complete Pagination correctness, current parity, and query contracts`; finding `collections-15` |
| `support-32` | `support` | `support` and `pagination` (revalidation complete) | `Complete Pagination correctness, current parity, and query contracts`; finding `support-32` |
| `support-33` | `support` | `support` and `pagination` (revalidation complete) | `Complete Pagination correctness, current parity, and query contracts`; finding `support-33` |
| `sanctum-02` | `sanctum` | `sanctum` (targeted correction complete); later full `sanctum` audit | `Complete Pagination correctness, current parity, and query contracts`; finding `sanctum-02` |
| `sanctum-02` | `sanctum` | `sanctum` (revalidation complete) | `Complete Pagination correctness, current parity, and query contracts`; finding `sanctum-02` |
| `sanctum-03` | `sanctum` | `sanctum` (revalidation complete) | `Complete Sanctum correctness, cache settlement, and current parity`; finding `sanctum-03` |
| `sanctum-04` | `sanctum` | `sanctum` (revalidation complete) | `Complete Sanctum correctness, cache settlement, and current parity`; finding `sanctum-04` |
| `sanctum-05` | `sanctum` | `sanctum` (revalidation complete) | `Complete Sanctum correctness, cache settlement, and current parity`; finding `sanctum-05` |
| `sanctum-06` | `sanctum` | `sanctum` (revalidation complete) | `Complete Sanctum correctness, cache settlement, and current parity`; finding `sanctum-06` |
| `sanctum-07` | `sanctum` | `sanctum` (revalidation complete) | `Complete Sanctum correctness, cache settlement, and current parity`; finding `sanctum-07` |
| `sanctum-08` | `sanctum` | `sanctum` (revalidation complete) | `Complete Sanctum correctness, cache settlement, and current parity`; finding `sanctum-08` |
| `sanctum-09` | `sanctum` | `sanctum` (revalidation complete) | `Complete Sanctum correctness, cache settlement, and current parity`; finding `sanctum-09` |
| `sanctum-10` | `sanctum` | `sanctum` (revalidation complete) | `Complete Sanctum correctness, cache settlement, and current parity`; finding `sanctum-10` |
| `sanctum-12` | `sanctum` | `sanctum` (revalidation complete) | `Complete Sanctum correctness, cache settlement, and current parity`; finding `sanctum-12` |
| `sanctum-13` | `sanctum` | `sanctum` (revalidation complete) | `Complete Sanctum correctness, cache settlement, and current parity`; finding `sanctum-13` |
| `sanctum-14` | `sanctum` | `sanctum` (revalidation complete) | `Complete Sanctum correctness, cache settlement, and current parity`; finding `sanctum-14` |
| `sanctum-15` | `sanctum` | `sanctum` (revalidation complete) | `Complete Sanctum correctness, cache settlement, and current parity`; finding `sanctum-15` |
| `sanctum-16` | `sanctum` | `sanctum` (revalidation complete) | `Complete Sanctum correctness, cache settlement, and current parity`; finding `sanctum-16` |
| `sanctum-17` | `sanctum` | `sanctum` (revalidation complete) | `Complete Sanctum correctness, cache settlement, and current parity`; finding `sanctum-17` |
| `sanctum-18` | `sanctum` | `sanctum` (revalidation complete) | `Complete Sanctum correctness, cache settlement, and current parity`; finding `sanctum-18` |
| `database-26` | `database` | `database`, `auth`, and `sanctum` (revalidation complete) | `Complete Sanctum correctness, cache settlement, and current parity`; finding `database-26` |
| `database-27` | `database` | `database`, `bus`, `foundation`, `queue`, `events`, `mail`, `notifications`, `broadcasting`, `scout`, and `sanctum` (revalidation complete) | `Complete Sanctum correctness, cache settlement, and current parity`; finding `database-27` |
| `database-28` | `database` | `database`, `auth`, and `sanctum` (revalidation complete) | `Complete Sanctum correctness, cache settlement, and current parity`; finding `database-28` |
| `auth-18` | `auth` | `auth` and `sanctum` (revalidation complete) | `Complete Sanctum correctness, cache settlement, and current parity`; finding `auth-18` |
| `api-client-01` | `api-client` | `api-client` (targeted correction complete); later full `api-client` audit | `Complete Pagination correctness, current parity, and query contracts`; finding `api-client-01` |
| `database-24` | `database` | `database` and `pagination` (revalidation complete) | `Complete Pagination correctness, current parity, and query contracts`; finding `database-24` |
| `database-25` | `database` | `database` and `pagination` (revalidation complete) | `Complete Pagination correctness, current parity, and query contracts`; finding `database-25` |
Expand Down Expand Up @@ -1285,7 +1304,7 @@ The order is lower-level first where practical. Hypervel has cross-cutting depen
- [x] `translation`
- [x] `pagination`
- [ ] `socialite`
- [ ] `sanctum`
- [x] `sanctum`
- [ ] `fortify`
- [ ] `passkeys`
- [ ] `permission`
Expand Down
Loading