Separate Zapier, web, API, and leaf access planes with NATS authz
Some checks are pending
offline / test (push) Waiting to run

Zapier is one ingress. Direct web, customer API, and S2S leaf nodes are their own services. Every hop to an internal subject must pass verae.access.authz.check (default deny by plane).
This commit is contained in:
George Lambert 2026-09-11 16:05:05 -04:00
commit 1b199ca4d4

View file

@ -26,6 +26,11 @@ PACKAGES = [
("zappier-customer-service", ROOT / "packages" / "zappier-customer-service" / "src", (".js",)),
("zappier-sales-pricing", ROOT / "packages" / "zappier-sales-pricing" / "src", (".js",)),
("zappier-accounting-export", ROOT / "packages" / "zappier-accounting-export" / "src", (".js",)),
("verae-access-authz", ROOT / "packages" / "verae-access-authz" / "src", (".js",)),
("verae-access-web", ROOT / "packages" / "verae-access-web" / "src", (".js",)),
("verae-access-api", ROOT / "packages" / "verae-access-api" / "src", (".js",)),
("verae-access-leaf", ROOT / "packages" / "verae-access-leaf" / "src", (".js",)),
("verae-access-zapier", ROOT / "packages" / "verae-access-zapier" / "src", (".js",)),
]
REPO_READMES = [
@ -48,6 +53,11 @@ REPO_READMES = [
"zappier-customer-service",
"zappier-sales-pricing",
"zappier-accounting-export",
"verae-access-authz",
"verae-access-web",
"verae-access-api",
"verae-access-leaf",
"verae-access-zapier",
]
SKIP_PARTS = {"test", "tests", "node_modules", "dist"}