golem15/summercms
3
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

docs(12.1-02): update state and roadmap after the v0.1.3 tag

Browse Source 
- plan 3 of 5 next; decisions of plan 02 recorded
- pending: push master and v0.1.3; two application inventory tests
This commit is contained in:
Jakub Zych
2026-10-05 12:44:03 +02:00
parent bd4960401d
commit b8cdb7cc92
3 changed files with 19 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
.planning/ROADMAP.md
View File

@@ -649,7 +649,7 @@ Plans:
5. The new code has unit tests, delivered in the phase's last plan. 5. The new code has unit tests, delivered in the phase's last plan.
**Open questions (discuss-phase):** impersonate user in or out of scope (security-sensitive); a separate permission for granting the `admin` group (it makes a site admin); whether convert-guest is needed for the application's data. **Open questions (discuss-phase):** impersonate user in or out of scope (security-sensitive); a separate permission for granting the `admin` group (it makes a site admin); whether convert-guest is needed for the application's data.
**Plans:** 1/5 plans executed **Plans:** 2/5 plans executed
Plans: Plans:
@@ -657,7 +657,7 @@ Plans:
- [x] 12.1-01-PLAN.md — Framework actions (summercms.go): declared bulk actions, record actions, row state and `cabana.ForbiddenError` (403), with READMEs, docs, OpenAPI, TS types, `dist/` and the neutral `acme` fixture - [x] 12.1-01-PLAN.md — Framework actions (summercms.go): declared bulk actions, record actions, row state and `cabana.ForbiddenError` (403), with READMEs, docs, OpenAPI, TS types, `dist/` and the neutral `acme` fixture
**Wave 2** *(blocked on Wave 1 completion)* **Wave 2** *(blocked on Wave 1 completion)*
- [ ] 12.1-02-PLAN.md — Framework preview and form seams (summercms.go): preview context, `permissioneditor`, `password`, form virtual fields, per-operation rules, writable foreign key, locked relation options, `invisible` columns, `preset`; ends with the tag v0.1.3 - [x] 12.1-02-PLAN.md — Framework preview and form seams (summercms.go): preview context, `permissioneditor`, `password`, form virtual fields, per-operation rules, writable foreign key, locked relation options, `invisible` columns, `preset`; ends with the tag v0.1.3
**Wave 3** *(blocked on Wave 2 completion)* **Wave 3** *(blocked on Wave 2 completion)*
- [ ] 12.1-03-PLAN.md — Plugin foundation and the Users screen (sm-user-plugin): additive migrations, permissions, navigation, list, filters, preview, form, bulk and record actions, delete semantics, password and invite, avatar, frontend permission resolver, `last_seen`, and the takeover guard for members of privileged groups (D-30) - [ ] 12.1-03-PLAN.md — Plugin foundation and the Users screen (sm-user-plugin): additive migrations, permissions, navigation, list, filters, preview, form, bulk and record actions, delete semantics, password and invite, avatar, frontend permission resolver, `last_seen`, and the takeover guard for members of privileged groups (D-30)

23
.planning/STATE.md
View File

@@ -4,16 +4,16 @@ milestone: v1.0
current_phase: "12.1" current_phase: "12.1"
current_phase_name: User plugin admin screens current_phase_name: User plugin admin screens
status: executing status: executing
stopped_at: Completed 12.1-01-PLAN.md stopped_at: Completed 12.1-02-PLAN.md
last_updated: "2026-10-04T21:55:37.374Z" last_updated: "2026-10-05T10:43:57.974Z"
last_activity: 2026-10-04 last_activity: 2026-10-04
last_activity_desc: Phase 12.1 execution started last_activity_desc: Phase 12.1 execution started
state_head: 71073bc8a2c5a1f2030a49bbe351bf2baad1a480 state_head: bd4960401df99db7e1e4bb43ba1ab9edcde6f658
progress: progress:
total_phases: 22 total_phases: 22
completed_phases: 11 completed_phases: 11
total_plans: 123 total_plans: 123
completed_plans: 119 completed_plans: 120
milestone_name: milestone milestone_name: milestone
--- ---
@@ -29,7 +29,7 @@ See: .planning/PROJECT.md (updated 2026-09-16)
## Current Position ## Current Position
Phase: 12.1 (User plugin admin screens) — EXECUTING Phase: 12.1 (User plugin admin screens) — EXECUTING
Plan: 2 of 5 Plan: 3 of 5
Status: Ready to execute Status: Ready to execute
Last activity: 2026-10-04 — Phase 12.1 execution started Last activity: 2026-10-04 — Phase 12.1 execution started
@@ -173,6 +173,7 @@ Progress: [██████░░░░] 60%
| Phase 14 P05 | 100min | 3 tasks | 93 files | | Phase 14 P05 | 100min | 3 tasks | 93 files |
| Phase 14 P06 | 132 min | 4 tasks | 26 files | | Phase 14 P06 | 132 min | 4 tasks | 26 files |
| Phase 12.1 P01 | 38min | 4 tasks | 61 files | | Phase 12.1 P01 | 38min | 4 tasks | 61 files |
| Phase 12.1 P02 | 12h 43m | 6 tasks | 77 files |
## Accumulated Context ## Accumulated Context
@@ -540,6 +541,12 @@ Recent decisions affecting current work:
- [Phase 12.1]: 12.1-01: a 403 on save is the forbidden banner (not a toast) for every 403, plugin refusal or framework denial - [Phase 12.1]: 12.1-01: a 403 on save is the forbidden banner (not a toast) for every 403, plugin refusal or framework denial
- [Phase 12.1]: 12.1-01: plugin writes to a soft-deleted record must use tx.Unscoped(); cabana's update write does - [Phase 12.1]: 12.1-01: plugin writes to a soft-deleted record must use tx.Unscoped(); cabana's update write does
- [Phase 12.1]: 12.1-01: RecordActions.vue is unmounted until 12.1-02 adds the preview footer; it emits done with the toast text for its host to show - [Phase 12.1]: 12.1-01: RecordActions.vue is unmounted until 12.1-02 adds the preview footer; it emits done with the toast text for its host to show
- [Phase 12.1]: 12.1-02: v0.1.3 is an annotated local tag on df5cace (user chose tag-local); pushing master and v0.1.3 is a pending release step, and the sm-user-plugin push of plan 05 waits for it
- [Phase 12.1]: 12.1-02: a form with recordActions must declare preview:; preview: {} enables the screen without a status hint and a null preview: stops boot
- [Phase 12.1]: 12.1-02: password, permissioneditor and preset are refused on settings forms and relation forms; a type: password field must be listed in FormVirtualFields
- [Phase 12.1]: 12.1-02: relation locks are enforced on form create and update only; relation-manager link and unlink routes do not ask RelationLockProvider (open for plan 05)
- [Phase 12.1]: 12.1-02: the SPA sends a permissioneditor field on every update reduced to offered codes; a locked code with a stored value outside the mode's set makes every save a 403 (open for plan 05)
- [Phase 12.1]: 12.1-02: pact.FilterOptions keeps its signature and is asked on the admin controller before the model
### Pending Todos ### Pending Todos
@@ -566,6 +573,8 @@ Recent decisions affecting current work:
- Phase 9 (admin schema pipeline / relation manager) is the least-precedented design surface in the research — plan with `--research-phase`. - Phase 9 (admin schema pipeline / relation manager) is the least-precedented design surface in the research — plan with `--research-phase`.
- Phase 11 (River dual-driver split) is documented but unverified against a real build — plan with `--research-phase` and budget a timed-latency test. - Phase 11 (River dual-driver split) is documented but unverified against a real build — plan with `--research-phase` and budget a timed-latency test.
- Phase 8 UI gate: scripts/check-phase8-ui.mjs --final-gate's real Playwright browser matrix (32 UI-SPEC scenarios) is unimplemented (deliberate fatal() at check-phase8-ui.mjs:458, never authored by 08-05); stage_ui_harness must keep failing closed until a Playwright spec is authored. User approved Phase 8 closure on 2026-09-24 with this gap carried forward -- see 08-10-SUMMARY.md and .planning/phases/08-oauth2-1-authorization-server/deferred-items.md. - Phase 8 UI gate: scripts/check-phase8-ui.mjs --final-gate's real Playwright browser matrix (32 UI-SPEC scenarios) is unimplemented (deliberate fatal() at check-phase8-ui.mjs:458, never authored by 08-05); stage_ui_harness must keep failing closed until a Playwright spec is authored. User approved Phase 8 closure on 2026-09-24 with this gap carried forward -- see 08-10-SUMMARY.md and .planning/phases/08-oauth2-1-authorization-server/deferred-items.md.
- Push summercms.go master and tag v0.1.3 to origin (tag is local on df5cace by the user's tag-local choice); the sm-user-plugin push of plan 12.1-05 Task 3 waits until git ls-remote --tags origin v0.1.3 lists the tag
- fonoteka.go plugins/golem15/fonoteka: TestPhase09SecurityRoutes and TestPhase10ControllerCopy fail against framework v0.1.3 (fixed route and message-key lists lack the Phase 12.1 additions); see .planning/phases/12.1-user-plugin-admin-screens/deferred-items.md
### Quick Tasks Completed ### Quick Tasks Completed
@@ -589,6 +598,6 @@ Items acknowledged and carried forward from previous milestone close:
## Session Continuity ## Session Continuity
Last session: 2026-10-04T21:55:36.836Z Last session: 2026-10-05T10:43:39.991Z
Stopped at: Completed 12.1-01-PLAN.md Stopped at: Completed 12.1-02-PLAN.md
Resume file: None Resume file: None

2
.planning/state.json
View File

@@ -99,5 +99,5 @@
"label": "Advance to the next step", "label": "Advance to the next step",
"reason": "Phase 12.1 of 22 · executing" "reason": "Phase 12.1 of 22 · executing"
}, },
"updated_at": "2026-10-04T21:55:31.329Z" "updated_at": "2026-10-05T10:43:37.111Z"
} }