golem15/summercms
4
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
1,554 Commits 1 Branch 33 Tags
03591e1d6c90cc9953054214de2c4e0836c376cd
Commit Graph

1554 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Jakub Zych
03591e1d6c docs(19.1-01): summarize userfriends tracer, groups, adapter and GDPR 
Record the proceed-and-push lock, sibling repo commits, tea remote, and Task 3 deviations so later 19.1 plans can consume the new plugin.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-10-18 13:21:39 +02:00
Jakub Zych
f984e5e63f docs(19.1-01): patch Phase 19.1 Repos, SC2 and SC3 
- Repos add summercms.go for the Markdown module
- Criterion 2 names webpush-go / LiveKit / bluemonday notes
- Criterion 3 marked already met (Wavepath 182b514)
 2026-10-18 13:13:57 +02:00
Jakub Zych
36634313af docs: changelog posts read the token from ~/.config/summercms/journal-token 2026-10-18 12:57:58 +02:00
Jakub Zych
012a5a2c5a docs(19.1): record planned phase 2026-10-18 12:56:33 +02:00
Jakub Zych
cddf3a5008 docs(19.1): revise phase plans 2026-10-18 12:52:39 +02:00
Jakub Zych
7c7a1ad45d docs(19.1): create phase plan 2026-10-18 12:45:31 +02:00
Jakub Zych
23dfb05b0a docs(state): record phase 19.7 context session 2026-10-18 12:41:48 +02:00
Jakub Zych
b8f90749c7 docs(19.7): capture phase context 2026-10-18 12:41:37 +02:00
Jakub Zych
bdc4107215 docs: post every pushed release tag to the summercms.io changelog 2026-10-18 12:39:43 +02:00
Jakub Zych
924618704f docs(19.1): add validation strategy 2026-10-17 23:37:53 +02:00
Jakub Zych
f179ec060c docs(19.1): research phase domain 2026-10-17 23:36:34 +02:00
Jakub Zych
5f76e5bbd2 docs(19.6): capture phase context 2026-10-17 23:27:52 +02:00
Jakub Zych
9bcfa22c6e docs(19.5): capture phase context 2026-10-17 23:15:14 +02:00
Jakub Zych
76d055e720 docs(phase-19): complete Chat and ChatChannels execution 
Gap closure closed the DM write-IDOR and GDPR CASCADE blockers; verification is 26/26.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-10-17 22:42:11 +02:00
Jakub Zych
d69a3d409e test(19): re-verify Chat and ChatChannels after gap closure 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-10-17 22:41:29 +02:00
Jakub Zych
70682b4b27 docs(19-07): complete gap-closure unit tests plan 
Named postgres tests lock teammate DM write-IDOR and creator-delete CASCADE; the phase gate requires those names. Plans 7/7.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-10-17 22:37:47 +02:00
Jakub Zych
bd301a1696 test(19-07): require TestTeammateDMWriteIDOR in the phase gate 
The fail-closed postgres list now names the teammate DM write-IDOR case so CR-01 cannot regress silently. TestDeletingCascade stays required.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-10-17 22:37:00 +02:00
Jakub Zych
d1852f6cda docs(19-06): complete participant-only send and GDPR reassignment plan 
Record CR-01/CR-02 gap closure and mark the 19-06 ROADMAP checkbox. Plugin repos were committed separately and not pushed.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-10-17 22:31:22 +02:00
Jakub Zych
29d06bc70e docs(19): plan gap closure for DM send IDOR and GDPR CASCADE 
Two gap-closure plans close CR-01 participant-only send and CR-02 created_by reassignment.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-10-17 22:27:44 +02:00
Jakub Zych
f3d5db8cba test(19): verify Chat and ChatChannels phase 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-10-17 22:18:23 +02:00
Jakub Zych
aaf75cfb41 docs(19): record code-review disposition as open 
All eight Phase 19 review findings stay open after the advisory gate.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-10-17 22:14:03 +02:00
Jakub Zych
2ddafb8755 docs(19): code review of Chat and ChatChannels 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-10-17 22:13:29 +02:00
Jakub Zych
4eecd0f039 docs(19.4): capture phase context 2026-10-17 22:09:14 +02:00
Jakub Zych
953cf25448 docs(19-05): mark goldens and PHP method map plan complete on the roadmap 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-10-17 22:07:22 +02:00
Jakub Zych
4992597f8c docs(19-05): complete goldens and PHP method map plan 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-10-17 22:07:11 +02:00
Jakub Zych
1eb0869b18 chore(19-05): add fail-closed check-phase19.sh for chat plugins 
- Named short tests must pass; a skip, miss or red required test fails.
- No admin or layers stage; postgres is Docker-host only.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-10-17 22:05:18 +02:00
Jakub Zych
afe3e773f2 docs(19-04): mark ChatChannels API plan complete on the roadmap 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-10-17 21:54:45 +02:00
Jakub Zych
9ca67b780b docs(19-04): complete ChatChannels API and users.handle plan 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-10-17 21:54:37 +02:00
Jakub Zych
c7018b41db docs(19-03): mark ChatChannels core plan complete on the roadmap 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-10-17 21:36:18 +02:00
Jakub Zych
935bdcb479 docs(19-03): complete ChatChannels core plan 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-10-17 21:36:02 +02:00
Jakub Zych
c9e5b14e27 docs(19-02): mark Chat HTTP API plan complete on the roadmap 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-10-17 21:22:27 +02:00
Jakub Zych
671a3b65de docs(19-02): complete Chat HTTP API plan 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-10-17 21:22:19 +02:00
Jakub Zych
a2c7366b2a docs(19-01): mark Chat core plan complete on the roadmap 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-10-17 21:00:03 +02:00
Jakub Zych
fd8321d88f docs(19-01): complete Chat core plan 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-10-17 20:59:29 +02:00
Jakub Zych
9404668287 docs(19): unique threat IDs T-19-13 and T-19-14 
Duplicate T-19-04/T-19-06 across plans blocked execute-phase; keep the
originals on 19-01 and 19-03 and give the later plans new registers.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-10-17 20:37:12 +02:00
Jakub Zych
eab4528a5a docs: capture exploration — generic MCP module (phase 19.7, note, two prerequisite todos) 2026-10-17 20:31:25 +02:00
Jakub Zych
f3dcbd6625 docs(19): create phase plan 2026-10-17 01:27:47 +02:00
Jakub Zych
d12adcf19a docs(quick-261016-sz9): main SummerCMS demo instance (sm-demo-app + vue-demo-app) 2026-10-16 21:12:01 +02:00
Jakub Zych
92479ad559 docs(18.1): phase complete - UAT 8/8, security 0 open, released framework v0.2.2, pgsub v0.1.1, pgstripe v0.1.1 2026-10-16 21:08:33 +02:00
Jakub Zych
c02f2724ae docs(18.1): re-verify after quick 261016-s8x (pact.NavigationItem.Visible) - passed, no regression 2026-10-16 21:07:33 +02:00
Jakub Zych
82f2e4a4f6 docs(18.1): release record - framework v0.2.2, pgsub v0.1.1, pgstripe v0.1.1; verification passed 2026-10-16 21:04:44 +02:00
Jakub Zych
450c535452 docs(quick-261016-s8x): PaymentGateway: banner bottom margin and hide disabled sections from admin navigation v0.2.2 2026-10-16 20:42:06 +02:00
Jakub Zych
ab9f385db8 chore(quick-261016-s8x): rebuild embedded admin dist 2026-10-16 20:35:13 +02:00
Jakub Zych
2dd5fb3bbb fix(quick-261016-s8x): space below a callout that a sibling follows in a partial 
- .summer-partial .summer-callout:not(:last-child) gets margin-bottom: 12px,
  so a feature-off callout no longer touches the stats strip under it
- scoped to rendered partials: FormField.vue's field notice and the hint
  partials, whose callout is the last child, are unchanged
 2026-10-16 20:34:41 +02:00
Jakub Zych
06e2e60ce1 feat(quick-261016-s8x): pact.NavigationItem.Visible hides navigation entries at request time 
- pact.NavigationItem gains Visible func(ctx) bool (json:"-"); nil keeps the
  entry always listed
- cabana.Registry.Metadata runs it after the permission check, drops a main
  item (with its side menu) or a side item that answers false, and relinks a
  parent whose controller is a hidden child's to its first visible openable
  child
- TestNavigationHidesInvisibleItemsAndRepointsTarget covers the rules
- pact and cabana READMEs, users-and-permissions and admin-controllers docs
  describe the hook
 2026-10-16 20:34:26 +02:00
Jakub Zych
90b2d4e23b test(18.1): duplicates 2 and 3 settled by tests 6 and 7 2026-10-16 20:17:28 +02:00
Jakub Zych
6878be4e6a docs: todo - audit-log admin action runs (18.1 AR-18.1-03) 2026-10-16 20:17:21 +02:00
Jakub Zych
5f1245f1e4 docs(phase-18.1): add security threat verification 2026-10-16 20:17:21 +02:00
Jakub Zych
0e5c56b5ae docs(18.1): re-verify after quick 261016-myi and 261016-nqk - human_needed (release go-ahead) 2026-10-16 17:46:58 +02:00
Jakub Zych
0dbf5e14b0 test(18.1): complete UAT - 6 passed, 2 skipped duplicates, 3 gaps resolved 2026-10-16 17:34:36 +02:00