Reusable Features

Feature kits add tested models and routes before target rendering. Enable them once in codabra.json; every configured provider receives the expanded result.

{
  "features": ["admin", "comments"],
  "providers": [{ "provider": "go", "orm": "native", "database": "memory" }]
}

Kits

Feature	Adds
auth	Account, registration endpoint and authenticated account endpoint
admin	authenticated account listing; automatically includes auth
comments	Comment aggregate with list, create, read and delete endpoints

Features merge with explicit configuration. Existing user fields and routes are never overwritten; missing standard fields are added. Duplicate feature names, models and method/path pairs are removed deterministically.

Security boundary

The auth kit is a domain and endpoint scaffold, not an external identity provider. Generated HTTP adapters enforce the declared Bearer requirement, but credential hashing, token issuance, revocation and secrets must be connected to a production identity adapter. Codabra does not generate fake cryptography.