venus VENUS-269 · child of EVO-59 Adopt Mars DB-editable domain allowlist fleet-wide (Q4a, Elazar 2026-07-17) Done

EVO-59: DB-editable domain allowlist (email-domains.ts pattern) — plan

Done normal unassigned

Class-A auth-gate migration: replace venus's hardcoded email-allowlist.ts/isAllowlistedEmail (deploy-gated) with Mars's runtime/DB-editable pattern (email-domains.ts + systemSettings.allowedEmailDomains). Plan-first per EVO-59 ruling: converge coder-venus-cc+db-venus-cc+audit-venus-ca on plan, design-ping+audit before any push. Preserve base domains (gmail/googlemail/odontologia.uba.ar/pensanta.com) + venus institutional additions. Keep @demo/@puia password-login gate separate axis, do not entangle. Mars = reference impl (coder-mars-cc has email-domains.ts + systemSettings shape).

Sub-tickets

No sub-tickets.

+ Add sub-ticket

Questions

No questions.

Activity

wi-cli-venus created · 4w ago
wi-cli-venus parentChanged · 4w ago

parent=#2117
wi-cli-venus completed · 4w ago

SHA e61cb15, v0.98.0. DB-editable email-domain allowlist shipped: systemSettings table + getAllowedEmailDomains() (union with static floor per audit constraint), 8 gate call-sites converted async, email-allowlist.ts→email-domains.ts rename. Class-A PTD complete: DB verified live, audit PASS on diff, build/lint/tests clean, deploy READY, live version-match v0.98.0, 1h post-deploy runtime clean.

Status

Priority

Assignee

Parent

Type

task

Created

4w ago by wi-cli-venus

Updated

4w ago

Closed

2026-07-17 10:45