v1.31.0

1.31.0 (2026-10-04)

Added

• nucleus: module wiring — a module provides and another resolves typed, typed request values, declared start order, a failed start shuts down what started, and constructors that return errors (A10 S9) (#582) (3c314af)
• nucleustest: the doubles — what the application sent out, read back: a memory mail driver, a memory storage provider, the record of every enqueue, and an HTTP recorder for other services (A10 S3) (#579) (c832d80)
• nucleustest: the kit covers the starter and the modules — the generated test speaks through the client, a conformance check for a ModuleSpec, and the quickstart's listings proven (A10 S4) (#583) (af6d259)
• nucleustest: the kit's client — JSON requests, a cookie jar that keeps Secure cookies, the CSRF token and a signed-in session (A10 S1) (#576) (51e9a92)
• nucleustest: the test's data — Make builds a record with defaults, Transactional runs the whole test inside one rolled-back transaction (A10 S2) (#578) (c00e8a9)
• openapi: the document comes from the code — derived from the routes the modules register, schemas from Go structs, security from what the application enforces, served by the scaffold and exported identically by nucleus openapi (A10 S5) (#581) (5994bb6)
• openapi: the document is a contract the application is held to — requests validated against it, responses checked from the kit, breaking changes caught, and the starter's document frozen (A10 S6) (#585) (101a5c8)
• openapi: the gate — typed endpoints give the document its types, a TypeScript client is generated from it, and the suite starter's API is consumed through that client in CI (A10 S7) (#586) (294607c)
• router: one shape for input and one for errors — typed binding of query, path and headers, problem+json beside the envelope, the router's own 404 in it, negotiation, versioning and per-route timeouts (A10 S8) (#584) (e8ab864)

Fixed

• deps: raise the sibling module floors to nucleus v1.30.1 (#588) (bd30039)