refactor(admin): split system settings into section modules

2026-03-30 20:04:06 +02:00
parent a19d2cbae0
commit a36bca7ca7
11 changed files with 1753 additions and 1386 deletions
@@ -21,11 +21,12 @@
 - `resource` is now onboarded as the second real comment entity, reusing the same ownership and staff-visibility rules as the resource detail route
 - comment mention autocomplete now uses a dedicated entity-scoped API route instead of inheriting the narrower `user.listAssignable` audience
 - runtime secret handling is now environment-first end to end: admin updates no longer persist new operational secrets, runtime status is surfaced explicitly, and legacy database secret copies can be cleared through a dedicated cleanup path
+- `apps/web` system settings UI is now decomposed into section components with shared secret/runtime helpers, bringing all files in that slice back under the file-size guardrail

 ## Next Up

-No queued hardening slice is currently pinned in this document.
-Reassess after the current batch so the next item reflects the then-real highest-risk gap instead of stale cleanup residue.
+Pin the next structural cleanup on the API side:
+split `packages/api/src/router/assistant-tools.ts` into domain-oriented tool modules without changing the public tool contract.

 ## Remaining Major Themes

@@ -33,7 +34,7 @@ The small hardening slices are effectively exhausted.
 The remaining work is now structural rather than another quick batch:

 1. secrets and runtime configuration policy
-2. oversized router and UI decomposition
+2. oversized router decomposition
 3. production-grade rate limiting
 4. canonical image-based production delivery
 5. performance hotspot reduction