Files

giles 838ec982eb Phase 7: Replace render_template() with s-expression rendering in all POST/PUT/DELETE routes

Eliminates all render_template() calls from POST/PUT/DELETE handlers across
all 7 services. Moves sexp_components.py into sexp/ packages per service.

- Blog: like toggle, snippets, cache clear, features/sumup/entry panels,
  create/delete market, WYSIWYG editor panel (render_editor_panel)
- Federation: like/unlike/boost/unboost, follow/unfollow, actor card,
  interaction buttons
- Events: ticket widget, checkin, confirm/decline/provisional, tickets
  config, posts CRUD, description edit/save, calendar/slot/ticket_type
  CRUD, payments, buy tickets, day main panel, entry page
- Market: like toggle, cart add response
- Account: newsletter toggle
- Cart: checkout error pages (3 handlers)
- Orders: checkout error page (1 handler)

Remaining render_template() calls are exclusively in GET handlers and
internal services (email templates, fragment endpoints).

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-02-28 01:15:29 +00:00

alembic

Decouple per-service Alembic migrations and fix cross-DB queries

2026-02-26 12:07:24 +00:00

Phase 7: Replace render_template() with s-expression rendering in all POST/PUT/DELETE routes

2026-02-28 01:15:29 +00:00

config

Monorepo: consolidate 7 repos into one

2026-02-24 19:44:17 +00:00

models

Monorepo: consolidate 7 repos into one

2026-02-24 19:44:17 +00:00

services

Decouple all cross-app service calls to HTTP endpoints

2026-02-25 03:01:38 +00:00

sexp

Phase 7: Replace render_template() with s-expression rendering in all POST/PUT/DELETE routes

2026-02-28 01:15:29 +00:00

templates

Show per-app actor in follow notifications on Hub

2026-02-25 09:17:34 +00:00

__init__.py

Monorepo: consolidate 7 repos into one

2026-02-24 19:44:17 +00:00

.gitignore

Monorepo: consolidate 7 repos into one

2026-02-24 19:44:17 +00:00

alembic.ini

Decouple per-service Alembic migrations and fix cross-DB queries

2026-02-26 12:07:24 +00:00

app.py

Phase 7: Replace render_template() with s-expression rendering in all POST/PUT/DELETE routes

2026-02-28 01:15:29 +00:00

Dockerfile

Split cart into 4 microservices: relations, likes, orders, page-config→blog

2026-02-27 09:03:33 +00:00

entrypoint.sh

Fix alembic path in entrypoints for both Docker and dev

2026-02-26 12:13:03 +00:00

path_setup.py

Monorepo: consolidate 7 repos into one

2026-02-24 19:44:17 +00:00

README.md

Update app READMEs for monorepo

2026-02-24 20:13:00 +00:00

README.md

Federation App

OAuth2 authorization server and ActivityPub social hub for the Rose Ash cooperative. Handles user authentication, fediverse federation, and social features (timeline, compose, follow, notifications).

Structure

app.py                  # Application factory (create_base_app + blueprints)
path_setup.py           # Adds project root + app dir to sys.path
entrypoint.sh           # Container entrypoint (optional migrations, Redis flush, start)
bp/
  auth/                 #   Login, magic link, logout, OAuth2 authorize endpoint
  identity/             #   Actor profile management
  social/               #   Timeline, compose, search, follow/unfollow,
                        #   like/boost, notifications, following/followers lists
  fragments/            #   Fragment endpoints
models/                 # Re-export stubs pointing to shared/models/
services/               # register_domain_services() — wires all domains
templates/              # Federation-specific templates (override shared/)

OAuth2 SSO

Federation is the authorization server for all Rose Ash apps:

/oauth/authorize — authorization endpoint (PKCE supported)
Magic link login (passwordless email)
All client apps auto-get /auth/login, /auth/callback, /auth/logout via shared/infrastructure/oauth.py
Per-app first-party session cookies (Safari ITP compatible)

ActivityPub

Per-app actors: each app has its own AP actor (virtual projection of the same keypair)
Actor endpoints: webfinger, actor profile, inbox, outbox, followers
Social features: timeline, compose, search, follow/unfollow, like/boost, notifications
Activities emitted to ap_activities table, processed by EventProcessor
HTTP signatures + IPFS content addressing

Cross-domain communication

services.blog.* — post queries for content federation
services.calendar.* — event queries
services.market.* — product queries
services.cart.* — cart summary for context processor