golem15/summercms
4
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
1,563 Commits 1 Branch 33 Tags
782a6720bf2bcdce1dcaa3c1c9a98c69f1d44998
Commit Graph

1563 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Jakub Zych
782a6720bf docs(19.1-05): complete chatvideo tracer plan 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-10-18 14:02:02 +02:00
Jakub Zych
43c4040256 docs(19.1-05): record livekit/server-sdk-go/v2 v2.19.0 before import 
Pin github.com/livekit/server-sdk-go/v2 v2.19.0 (Apache-2.0). Flag
pion/media-sdk/buildkit; production talks to RoomAPI only; tests ship a
fake and must not construct lksdk.Room. Operator HTTP uses fetchguard
TrustedMode. Token golden vs PHP LiveKitService.php 80-99; jwt/v5
MapClaims fallback if ToJWT differs.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-10-18 13:52:27 +02:00
Jakub Zych
4f58c8fc2a docs(19.1-04): record plan progress after herald SUMMARY 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-10-18 13:50:31 +02:00
Jakub Zych
0d3ba6517b docs(19.1-04): complete herald tracer plan 
Record proceed, coverage, tea-create of sm-herald-plugin, and Self-Check.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-10-18 13:49:47 +02:00
Jakub Zych
56b4a72a6a docs(19.1-04): record webpush-go v1.4.0 for Herald before import 
Pin github.com/SherClockHolmes/webpush-go v1.4.0 (MIT, jwt/v5 share,
Options.HTTPClient = *fetchguard.Client Do). The in-tree flare module is
the rejected alternative (push.* keys, websockets:generate-vapid-keys).

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-10-18 13:38:06 +02:00
Jakub Zych
f3ca32e486 docs(19.1-03): complete chatbots tracer plan 2026-10-18 13:36:22 +02:00
Jakub Zych
ceabc9ccbc docs(19.1-02): record D-17 Render/Purify halt 
- Task 1 wrote the forum policy note; forum execution waits on the D-17 module
- Do not create sm-forum-plugin until Render and Purify exist

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-10-18 13:24:43 +02:00
Jakub Zych
2740ab276c docs(19.1-02): add forum bluemonday policy note 
- Pin the named forum policy on bluemonday v1.0.27 already in go.mod
- Separate it from seaglass UGC: PHP allow-list, http/https/mailto, nofollow and target blank
- D-17 owns Render/Purify; forum must not vendor goldmark or bluemonday

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-10-18 13:24:18 +02:00
Jakub Zych
eb341147d8 docs(19.1-01): record plan progress after userfriends SUMMARY 
Advance Phase 19.1 to plan 2 of 6 and tick 19.1-01 on the roadmap now that the sibling plugin is on origin/main.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-10-18 13:22:15 +02:00
Jakub Zych
03591e1d6c docs(19.1-01): summarize userfriends tracer, groups, adapter and GDPR 
Record the proceed-and-push lock, sibling repo commits, tea remote, and Task 3 deviations so later 19.1 plans can consume the new plugin.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-10-18 13:21:39 +02:00
Jakub Zych
f984e5e63f docs(19.1-01): patch Phase 19.1 Repos, SC2 and SC3 
- Repos add summercms.go for the Markdown module
- Criterion 2 names webpush-go / LiveKit / bluemonday notes
- Criterion 3 marked already met (Wavepath 182b514)
 2026-10-18 13:13:57 +02:00
Jakub Zych
36634313af docs: changelog posts read the token from ~/.config/summercms/journal-token 2026-10-18 12:57:58 +02:00
Jakub Zych
012a5a2c5a docs(19.1): record planned phase 2026-10-18 12:56:33 +02:00
Jakub Zych
cddf3a5008 docs(19.1): revise phase plans 2026-10-18 12:52:39 +02:00
Jakub Zych
7c7a1ad45d docs(19.1): create phase plan 2026-10-18 12:45:31 +02:00
Jakub Zych
23dfb05b0a docs(state): record phase 19.7 context session 2026-10-18 12:41:48 +02:00
Jakub Zych
b8f90749c7 docs(19.7): capture phase context 2026-10-18 12:41:37 +02:00
Jakub Zych
bdc4107215 docs: post every pushed release tag to the summercms.io changelog 2026-10-18 12:39:43 +02:00
Jakub Zych
924618704f docs(19.1): add validation strategy 2026-10-17 23:37:53 +02:00
Jakub Zych
f179ec060c docs(19.1): research phase domain 2026-10-17 23:36:34 +02:00
Jakub Zych
5f76e5bbd2 docs(19.6): capture phase context 2026-10-17 23:27:52 +02:00
Jakub Zych
9bcfa22c6e docs(19.5): capture phase context 2026-10-17 23:15:14 +02:00
Jakub Zych
76d055e720 docs(phase-19): complete Chat and ChatChannels execution 
Gap closure closed the DM write-IDOR and GDPR CASCADE blockers; verification is 26/26.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-10-17 22:42:11 +02:00
Jakub Zych
d69a3d409e test(19): re-verify Chat and ChatChannels after gap closure 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-10-17 22:41:29 +02:00
Jakub Zych
70682b4b27 docs(19-07): complete gap-closure unit tests plan 
Named postgres tests lock teammate DM write-IDOR and creator-delete CASCADE; the phase gate requires those names. Plans 7/7.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-10-17 22:37:47 +02:00
Jakub Zych
bd301a1696 test(19-07): require TestTeammateDMWriteIDOR in the phase gate 
The fail-closed postgres list now names the teammate DM write-IDOR case so CR-01 cannot regress silently. TestDeletingCascade stays required.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-10-17 22:37:00 +02:00
Jakub Zych
d1852f6cda docs(19-06): complete participant-only send and GDPR reassignment plan 
Record CR-01/CR-02 gap closure and mark the 19-06 ROADMAP checkbox. Plugin repos were committed separately and not pushed.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-10-17 22:31:22 +02:00
Jakub Zych
29d06bc70e docs(19): plan gap closure for DM send IDOR and GDPR CASCADE 
Two gap-closure plans close CR-01 participant-only send and CR-02 created_by reassignment.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-10-17 22:27:44 +02:00
Jakub Zych
f3d5db8cba test(19): verify Chat and ChatChannels phase 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-10-17 22:18:23 +02:00
Jakub Zych
aaf75cfb41 docs(19): record code-review disposition as open 
All eight Phase 19 review findings stay open after the advisory gate.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-10-17 22:14:03 +02:00
Jakub Zych
2ddafb8755 docs(19): code review of Chat and ChatChannels 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-10-17 22:13:29 +02:00
Jakub Zych
4eecd0f039 docs(19.4): capture phase context 2026-10-17 22:09:14 +02:00
Jakub Zych
953cf25448 docs(19-05): mark goldens and PHP method map plan complete on the roadmap 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-10-17 22:07:22 +02:00
Jakub Zych
4992597f8c docs(19-05): complete goldens and PHP method map plan 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-10-17 22:07:11 +02:00
Jakub Zych
1eb0869b18 chore(19-05): add fail-closed check-phase19.sh for chat plugins 
- Named short tests must pass; a skip, miss or red required test fails.
- No admin or layers stage; postgres is Docker-host only.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-10-17 22:05:18 +02:00
Jakub Zych
afe3e773f2 docs(19-04): mark ChatChannels API plan complete on the roadmap 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-10-17 21:54:45 +02:00
Jakub Zych
9ca67b780b docs(19-04): complete ChatChannels API and users.handle plan 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-10-17 21:54:37 +02:00
Jakub Zych
c7018b41db docs(19-03): mark ChatChannels core plan complete on the roadmap 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-10-17 21:36:18 +02:00
Jakub Zych
935bdcb479 docs(19-03): complete ChatChannels core plan 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-10-17 21:36:02 +02:00
Jakub Zych
c9e5b14e27 docs(19-02): mark Chat HTTP API plan complete on the roadmap 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-10-17 21:22:27 +02:00
Jakub Zych
671a3b65de docs(19-02): complete Chat HTTP API plan 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-10-17 21:22:19 +02:00
Jakub Zych
a2c7366b2a docs(19-01): mark Chat core plan complete on the roadmap 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-10-17 21:00:03 +02:00
Jakub Zych
fd8321d88f docs(19-01): complete Chat core plan 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-10-17 20:59:29 +02:00
Jakub Zych
9404668287 docs(19): unique threat IDs T-19-13 and T-19-14 
Duplicate T-19-04/T-19-06 across plans blocked execute-phase; keep the
originals on 19-01 and 19-03 and give the later plans new registers.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-10-17 20:37:12 +02:00
Jakub Zych
eab4528a5a docs: capture exploration — generic MCP module (phase 19.7, note, two prerequisite todos) 2026-10-17 20:31:25 +02:00
Jakub Zych
f3dcbd6625 docs(19): create phase plan 2026-10-17 01:27:47 +02:00
Jakub Zych
d12adcf19a docs(quick-261016-sz9): main SummerCMS demo instance (sm-demo-app + vue-demo-app) 2026-10-16 21:12:01 +02:00
Jakub Zych
92479ad559 docs(18.1): phase complete - UAT 8/8, security 0 open, released framework v0.2.2, pgsub v0.1.1, pgstripe v0.1.1 2026-10-16 21:08:33 +02:00
Jakub Zych
c02f2724ae docs(18.1): re-verify after quick 261016-s8x (pact.NavigationItem.Visible) - passed, no regression 2026-10-16 21:07:33 +02:00
Jakub Zych
82f2e4a4f6 docs(18.1): release record - framework v0.2.2, pgsub v0.1.1, pgstripe v0.1.1; verification passed 2026-10-16 21:04:44 +02:00