golem15/summercms
4
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
1,938 Commits 1 Branch 40 Tags
240457291f77aa0c5694bcbe07dfc19f6066b292
Commit Graph

1207 Commits

Author SHA1 Message Date
Jakub Zych
d18d8f0dc2 docs(19.7): ban and password reset revoke OIDC grants as well as MCP grants (user decision) 2026-10-23 15:46:44 +02:00
Jakub Zych
d763e92650 docs(19.7): gap-closure plans 06-09 for the review findings and the sm-servers-app escalations 2026-10-23 15:44:15 +02:00
Jakub Zych
2527498d03 docs(19.7): gap-closure plan split and release order 2026-10-23 15:03:52 +02:00
Jakub Zych
cee58c0f65 docs(19.7): gap-closure inputs: review findings and two sm-servers-app escalations 2026-10-23 15:02:44 +02:00
Jakub Zych
fef1cbbbbd docs(19.7): add code review report 2026-10-23 14:54:54 +02:00
Jakub Zych
5563df7e68 docs(phase-19.7): update tracking after wave 5 2026-10-23 14:42:11 +02:00
Jakub Zych
d9d2acae88 docs(19.7-05): plan 05 summary; phase gate green, security review done, plugin test commits local 2026-10-23 14:41:38 +02:00
Jakub Zych
4730e37742 docs(19.7-05): security review and contract, deferred items, folded todos closed 
- 19.7-SECURITY-REVIEW.md: T-19.7-01..41 and T-19.7-SC with file, line and
  pinning test; two production fixes (c49983d, 1111828); superuser reach
  accepted as designed with audit and ceiling
- 19.7-SECURITY.md: threats_open 0, accepted risks AR-19.7-01..05
- the frontend permission and account link todos move to todos/done with
  their closing notes
 2026-10-23 14:29:56 +02:00
Jakub Zych
d621ef1b41 docs(19.7-05): validation map filled, Wave 0 complete, Nyquist compliant 2026-10-23 14:24:13 +02:00
Jakub Zych
905111ba72 docs(phase-19.7): update tracking after wave 4 2026-10-23 13:18:15 +02:00
Jakub Zych
81266de77d docs(19.7-04): plan 04 summary; oauthserver v0.1.2 and Journal v0.2.3 released, pinned in the demo 
- SUMMARY with every deviation from the checkpoint report
- deferred items: sm-demo-app push and deploy wait for the user, release
  builds on summercms v0.4.4 lack the cabana subject-event fix, Redis for a
  second instance, the real-client check, the retracted mimetype
 2026-10-23 13:17:36 +02:00
Jakub Zych
9550fe0a9f docs(19.7-04): deferred items from the oauthserver, Journal and demo MCP wiring 2026-10-23 12:56:08 +02:00
Jakub Zych
29ba9a28cb docs: log cabana subject-event fix 2026-10-23 12:44:15 +02:00
Jakub Zych
7c43820afe docs(19.7): cabana subject-event bug resolved 2026-10-23 12:44:09 +02:00
Jakub Zych
5c35f83b9d docs(phase-19.7): update tracking after wave 3 2026-10-23 12:31:00 +02:00
Jakub Zych
607658599f docs(19.7-03): sm-user-plugin v0.1.10 released and pinned in five apps; cabana subject-event bug deferred 
Plan 03 summary: verified account link, Administrators-screen link actions, plugin frontend permissions, user MCP guard and user_me in sm-user-plugin v0.1.10 (requires SummerCMS v0.4.4). deferred-items: cabana fires pact.MCPSubjectChanged as a value inside the transaction while pier listens for a pointer; fix before v0.5.0.
 2026-10-23 12:30:15 +02:00
Jakub Zych
d039350729 docs: record the v0.4.4 and sm-user-plugin v0.1.9 releases 2026-10-23 00:31:56 +02:00
Jakub Zych
e2759d668f docs: user-plugin escalations released in sm-user-plugin v0.1.9, reply ready to send 2026-10-23 00:25:24 +02:00
Jakub Zych
eadd58414d docs(19.7-02): close plan without a release 2026-10-23 00:23:08 +02:00
Jakub Zych
a26ee2b72d docs(quick-261022-x7a): user-plugin golem15.user.password.public_routes switch, login/forgot/reset 404 when false 2026-10-23 00:15:49 +02:00
Jakub Zych
e5dd4579a8 docs: fill item 8 in the external-escalation reply 2026-10-23 00:10:27 +02:00
Jakub Zych
894a3d572f docs(19.7): next v0.4.x release after the quick tasks, v0.5.0 at phase completion 2026-10-23 00:08:10 +02:00
Jakub Zych
d1a15a6f5f docs(19.7): tag v0.5.0 only when phase 19.7 is complete 2026-10-23 00:05:39 +02:00
Jakub Zych
a9e3f2434d docs: tune item 8 password-routes quick after item 7 2026-10-22 23:53:43 +02:00
Jakub Zych
cd90be9de3 docs(quick-261022-wah): user-plugin opt-in token_cookie session cookie and cookie-carried /refresh rotation 2026-10-22 23:51:57 +02:00
Jakub Zych
6a1974c0d2 docs: fill item 7 in the external-escalation reply 2026-10-22 23:45:20 +02:00
Jakub Zych
ec69f547b8 docs: tune item 7 cookie quick after 9-10 2026-10-22 23:14:09 +02:00
Jakub Zych
e9ebf93d36 docs(quick-261022-vfz): user-plugin /login throttle via surf.ClientIP and whole-second tokens_valid_after writers 2026-10-22 23:08:04 +02:00
Jakub Zych
c309a1abe9 docs: tune items 9-10 quick after G4 2026-10-22 22:37:41 +02:00
Jakub Zych
575a110378 docs: fill G4 in the external-escalation reply 2026-10-22 22:36:19 +02:00
Jakub Zych
54ff7bd665 docs(quick-261022-usi): user-plugin jwt blacklist and hooks wired via lagoon.OnDatabase under serve 2026-10-22 22:36:19 +02:00
Jakub Zych
b8bf71c5dd docs: fold G3 leftovers into G4 and login-cookie quicks 2026-10-22 22:00:09 +02:00
Jakub Zych
98a95c9c92 docs(quick-261022-tto): user-plugin session routes accept the session cookies 2026-10-22 21:52:03 +02:00
Jakub Zych
b70abe48e6 docs: fill G3 in the external-escalation reply 2026-10-22 21:46:10 +02:00
Jakub Zych
3ebd78373c docs: hold user-plugin escalations for SummerCMS v0.5.0 2026-10-22 21:37:57 +02:00
Jakub Zych
76694c7cb9 docs: fill G2 in the external-escalation reply 2026-10-22 21:36:43 +02:00
Jakub Zych
3026cf61fb docs(quick-261022-tb4): password login refuses a not-activated account 2026-10-22 21:32:30 +02:00
Jakub Zych
cb33c497be docs(quick-261022-k9k): admin keyboard shortcuts 2026-10-22 21:11:24 +02:00
Jakub Zych
66bb96eebd docs: capture six user-plugin escalation quicks 2026-10-22 21:04:34 +02:00
Jakub Zych
1aff96f58a docs(19.7-02): record deferred items from the pier session router 2026-10-22 18:36:23 +02:00
Jakub Zych
3ea82a1543 docs(19.7-02): decide the MCP Go SDK 
- decision note for go-sdk v1.8.0 and jsonschema-go v0.4.3 with the
  transitive graph, size, govulncheck result and the build-tag containment
- STACK.md rows for both modules naming the note (D-24)
 2026-10-22 18:00:16 +02:00
Jakub Zych
3746675c72 docs(19.7-01): complete framework seams plan 2026-10-22 16:45:12 +02:00
Jakub Zych
a74a218cd9 docs(19.7): mark phase planned after verification 2026-10-22 15:46:30 +02:00
Jakub Zych
3653422572 docs(phase-19.6.1): mark phase complete after UAT and security 2026-10-22 15:36:25 +02:00
Jakub Zych
b28800ad39 docs(phase-19.6.1): add/update security threat verification 2026-10-22 15:27:39 +02:00
Jakub Zych
0a5945d681 test(19.6.1): mark verification passed after UAT retest 2026-10-22 15:24:11 +02:00
Jakub Zych
19c6a65575 test(19.6.1): pass UAT test 2 after relation-label remount fix 2026-10-22 15:24:01 +02:00
Jakub Zych
49ffb395c0 docs(19.7): add pattern map, mark D-36 informational, drop session path from plan 02 2026-10-22 14:59:54 +02:00
Jakub Zych
2f496f6200 test(19.6.1): re-verify after relation-label gap closure 2026-10-22 14:59:34 +02:00
Jakub Zych
43d0f4622c docs(19.7): revise plans after plan check 2026-10-22 14:57:52 +02:00