From 905111ba7240828f2434bf313439d5c8af0c78d1 Mon Sep 17 00:00:00 2001 From: Jakub Zych Date: Fri, 23 Oct 2026 13:18:15 +0200 Subject: [PATCH] docs(phase-19.7): update tracking after wave 4 --- .planning/ROADMAP.md | 6 +++--- .planning/STATE.md | 12 ++++++------ 2 files changed, 9 insertions(+), 9 deletions(-) diff --git a/.planning/ROADMAP.md b/.planning/ROADMAP.md index 00d76e4b..2a841266 100644 --- a/.planning/ROADMAP.md +++ b/.planning/ROADMAP.md @@ -1454,7 +1454,7 @@ Plans: 3. `tools/list` lists only the tools the session's principals may call (frontend permissions through the merged group/user permissions, backend permissions and token scope through cabana), and a call runs through the route's own middleware. 4. An editor signs in once through `wristband` OAuth as a frontend user; with a verified link to a backend user, backend-guarded tools such as Journal's run as that admin, and removing the link or the grant removes them. The phase gets a security review; the MCP SDK dependency has a decision note before code lands; unit tests are the last plan. -**Plans:** 3/5 plans executed +**Plans:** 4/5 plans executed Plans: **Wave 1** @@ -1467,7 +1467,7 @@ Plans: - [x] 19.7-03-PLAN.md — sm-user-plugin: verified account link, Administrators-screen link actions, plugin frontend permission codes, the `user` MCP guard and `user_me` tool, plugin release and app pointer bumps **Wave 4** *(blocked on Wave 3 completion)* -- [ ] 19.7-04-PLAN.md — sm-oauthserver-plugin `backend` scope, `oas_at_` verifier and MCP consent JSON; Journal tools; vue-demo-app `/connect` and `/link-admin`; sm-demo-app wiring, e2e and deploy notes; plugin releases +- [x] 19.7-04-PLAN.md — sm-oauthserver-plugin `backend` scope, `oas_at_` verifier and MCP consent JSON; Journal tools; vue-demo-app `/connect` and `/link-admin`; sm-demo-app wiring, e2e and deploy notes; plugin releases **Wave 5** *(blocked on Wave 4 completion)* - [ ] 19.7-05-PLAN.md — Unit tests across six repos, `scripts/check-phase19.7.sh`, the filled validation map and the security review @@ -1607,7 +1607,7 @@ Phases execute in numeric order: 1 → 2 → 3 → 4 → 5 → 6 → 7 → 8 → | 19.5. Social login in sm-user-plugin | 5/5 | Complete | 2026-10-21 | | 19.6. Two-factor auth and device flow in sm-user-plugin | 0/TBD | Not started | - | | 19.6.1. Backend Administrators screen (INSERTED) | 5/5 | Complete | 2026-10-22 | -| 19.7. Generic MCP module | 3/5 | In Progress| | +| 19.7. Generic MCP module | 4/5 | In Progress| | | 19.8. Console commands overhaul (INSERTED) | 6/6 | In Progress| | | 20. Demo instance with every shared plugin | 0/TBD | Not started | - | | 30. Płytarium cutover | 0/TBD | Not started | - | diff --git a/.planning/STATE.md b/.planning/STATE.md index 7c4b5aca..6dad6679 100644 --- a/.planning/STATE.md +++ b/.planning/STATE.md @@ -4,11 +4,11 @@ milestone: v1.0 current_phase: "19.7" current_phase_name: Generic MCP module (INSERTED) status: executing -stopped_at: Completed 19.7-03-PLAN.md -last_updated: "2026-10-23T10:44:15.418Z" +stopped_at: Completed 19.7-04-PLAN.md +last_updated: "2026-10-23T11:18:15.153Z" last_activity: 2026-10-23 -last_activity_desc: "Completed 19.7-03: sm-user-plugin v0.1.10 released, five apps bumped" -state_head: 7c43820afe1177230e0e07f08fcf222ecfdaad96 +last_activity_desc: "Completed 19.7-04: oauthserver v0.1.2, Journal v0.2.3, demo MCP wiring" +state_head: 81266de77d84180e1158f477d9d6f3467f231303 progress: total_phases: 45 completed_phases: 37 @@ -30,7 +30,7 @@ See: .planning/PROJECT.md (updated 2026-10-22) ## Current Position Phase: 19.7 (Generic MCP module (INSERTED)) — EXECUTING -Plan: 4 of 5 +Plan: 5 of 5 Status: Ready to execute Last activity: 2026-10-23 — Phase 19.7 execution started @@ -1068,5 +1068,5 @@ Items acknowledged and carried forward from previous milestone close: ## Session Continuity Last session: 2026-10-22T22:22:57.128Z -Stopped at: Completed 19.7-03-PLAN.md +Stopped at: Completed 19.7-04-PLAN.md Resume file: None