App Library Reference Public

Module Research Notes

Evidence gathered from the current App Library module files — controllers, models, configs, and migrations — before writing these user guide pages.

Guide version: r1 Module version: 1.0.0 Updated: 2026-07-30 Estimated time: 2 min
You are viewing version r1 of this guide. View the current version
Module Research Notes

App Library

Evidence gathered from the current module files before writing the user guide pages.

Slug: applicationsVersion: 1.0.0Category: SystemReviewed: 2026-07-11

Research Sources Inspected

Source path

modules/Applications

Feature flags marked true

  • Controllers
  • Models
  • Views
  • Language
  • Permissions
  • Left Menu
  • Default Menu
  • Routes
  • Migrations
  • Api Endpoints
  • Helpers

Evidence Summary

Manifest

module.json defines slug applications, version 1.0.0, category System, and the module capability flags used in this guide.

Runtime surface

4 controller file(s), 22 view file(s), and 10 route mapping(s) were found.

Data surface

11 model file(s), 12 declared table(s), and 13 migration file(s) were found.

Operations surface

9 permission key(s), 0 job(s), 1 seeder(s), and 2 test file(s) were found.

Detailed File Evidence

Controllers and methods

  • Applications
  • Applications_admin
  • Applications_api - apps, app, versions, manifest, reviews, categories, tags
  • Applications_euapi - apps, app, versions, manifest, reviews, myDownloads, appDashboard, submitReview, recordDownload

Jobs and schedules

No scheduled module jobs were found.

Routes sampled

RouteTarget
appsApplications/index
apps/catalog_dataApplications/catalog_data
apps/my_downloadsApplications/my_downloads
apps/download/(:num)Applications/download/$1
apps/manageApplications_admin/index
apps/manage/(:any)/(:any)Applications_admin/$1/$2
apps/manage/(:any)Applications_admin/$1
apps/(:any)/manifestApplications/manifest/$1
apps/(:any)/reviewApplications/submit_review/$1
apps/(:any)Applications/view/$1

README topics

  • Layout
  • Make it visible
  • Demo seeder
  • Tests
  • Dual API
  • Integration (Client) API - `GET /api/v1/applications/*` (READ-ONLY, scope `applications:read`)
  • End-User API - `/v1/api/applications/*` (JWT bearer, gated `module_applications`)
  • Wiring & OpenAPI
  • Contracts

Operating Implications

  • Permission coverage is part of the module contract, so every workflow should be tested with a role-limited user and an administrator.
  • The module has migrations, so fresh installs and tenant databases need migration validation before go-live.
  • The module has a public or portal-facing surface, so privacy review and logged-out testing are required.
  • The module has API documentation or routes, so response examples and query filters should stay aligned with user-facing screens.
  • Seeders exist for sample or starter data; operators should know whether seeded records are demo-only or operational defaults.

Known Risks from the Manifest

No explicit known_risks list was found in the module manifest. Keep normal module controls in place and validate permissions, data, and public surfaces during QA.

Report a content problem