Adopt Mars DB-editable domain allowlist fleet-wide (Q4a, Elazar 2026-07-17)
Elazar ruling Q4a: make Mars's runtime/DB-editable DOMAIN-based email allowlist (src/lib/email-domains.ts + systemSettings.allowedEmailDomains, changeable without a code deploy) the FLEET STANDARD. Pluto + venus currently use a hardcoded code-file allowlist (email-allowlist.ts / isAllowlistedEmail) that requires a deploy to change - they adopt Mars's DB-editable pattern. Class-A (auth gate): plan-first, per-app design-ping + audit + full-team before push, base domains preserved (gmail/googlemail/odontologia.uba.ar/pensanta.com), per-project institutional additions kept. Also update commons Auth section to make the DB-editable domain allowlist canonical (resolves the email-allowlist.ts-vs-email-domains.ts doc drift coder-mars-cc flagged). Mars is reference impl, no Mars code change needed.
Sub-tickets — 2/2 done
Questions
Activity
-
Q4a COMPLETE fleet-wide: DB-editable domain allowlist adopted on all 3 apps. mars=reference impl (email-domains.ts), venus VENUS-269 (e61cb15/v0.98.0), pluto PLUTO-597 (c34a1aa/v2.20.6 + migration 075/481645d). Commons §Auth canonical (f14fe90), legacy email-allowlist.ts superseded. Allowed email domains now changeable via systemSettings DB without a code deploy on all 3. All audit PASS + Class-A PTD clean.