Vyasa Extension Refactor Audit and Execution Plan

Current Contract ViolationsURL copied

Routes Are Still Core-OwnedURL copied

Observed in vyasa/core.py:

• login routes

• Google OAuth routes

• admin impersonation route

• RBAC admin route

• sidebar routes

• raw markdown route

• search routes

• post static/json/download routes

• annotation route registration

• bookmark route registration

• slides route

• post detail route

• index route

• home feed route

• catch-all route

Required:

• Core should build app, runtime context, auth/RBAC policy, and extension app.

• Route extensions register route prefixes through app.routes.add(...).

• Core validates route conflicts before app startup.