24 projects
terp-migrations
Terp migrations — Alembic integration for independent per-package histories (terp migrate).
terp-core
Terp platform kernel — base classes, ModuleSpec, errors, pagination, DB session seam, secure-by-default config.
terp-cli
Terp command-line tool — inspect, scaffolding, migrations, checks, api-docs.
terp-cap-webhooks
Terp webhooks capability — reliable, signed, SSRF-guarded outbound webhooks on the jobs/outbox seam.
terp-cap-users
Terp users capability — admin user management over the identity store.
terp-cap-tenancy
Terp tenancy capability — tenant isolation by construction (session-level filter + insert stamp).
terp-cap-sync
Terp sync capability — reconcile a local entity against an external system on the jobs/scheduler seam.
terp-cap-scheduler-celery-beat
Terp Celery-beat adapter — drive catalog schedules from Celery beat, through the jobs seam.
terp-cap-scheduler-apscheduler
Terp APScheduler adapter — fire catalog schedules on their cron in-process, through the jobs seam.
terp-cap-redis
Terp Redis store adapters — shared idempotency, throttling, and cache state for multi-replica deployments.
terp-cap-realtime
Terp realtime capability — typed, policy-gated SSE and WebSocket channels with one-use connection tickets.
terp-cap-outbox
Terp durable outbox — transactional, leased, retrying post-commit delivery for jobs and events.
terp-cap-oidc
Terp OIDC capability — pluggable SSO via the OpenID Connect code flow with PKCE.
terp-cap-leases
Terp lease capability — durable, fenced, expiring custody of work, with a reaper that recovers a crashed worker's claim.
terp-cap-jobs-celery
Terp Celery JobQueue adapter — run catalog jobs on a Celery broker with zero domain change.
terp-cap-identity
Terp identity capability — persisted user store + the authentication backing.
terp-cap-groups
Terp groups capability — admin-managed user groups that bundle access-grant permissions.
terp-cap-files
Terp files capability — owner-scoped file objects with metadata in the platform database and bytes behind a pluggable storage backend.
terp-cap-eventbus
Terp event-bus capability — the in-process dispatcher + handler registry for the core event seam.
terp-cap-auth
Terp auth capability — Argon2 password hashing, JWT access tokens, and the get_principal seam.
terp-cap-audit
Terp audit capability — the durable, append-only sink for the core audit seam.
terp-cap-access
Terp access capability — RBAC permission grants + a fail-closed require_permission dependency.
terp-arch
Terp enforcement harness — secure-by-default fitness rules, shipped as a dependency clients run but cannot edit.
terp-spec
The Terp Standard — stack-neutral rule catalog, violation corpus, finding format, and refused-surface declaration (ADRs 0080/0081).
