golem15/summercms
3
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
746 Commits 1 Branch 2 Tags
8818d7b0236115df98af629643bfcba59b516997
Commit Graph

423 Commits

Author SHA1 Message Date
Jakub Zych
d4e9c17816 docs(07): record the phase goal verification 
The six plans are in, and three of the four success criteria hold. AUTH-01 stays blocked because the 15 user API routes are still pending against the recorded PHP bodies.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-09-22 19:27:27 +02:00
Jakub Zych
9446981ffd docs(07-06): complete the unit coverage plan 
The validation contract is signed off and the phase plan count is 6/6. Requirement checkboxes stay open while the user-api routes are still pending.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-09-22 19:21:31 +02:00
Jakub Zych
fa7bdb5f71 docs(07-05): complete the user API parity capture plan 
Record that the 15 user routes stay pending until Go matches the PHP bodies, including the HTML 500 on a bad activation code and the still-valid token after logout.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-09-22 18:44:05 +02:00
Jakub Zych
ecfcd23150 docs(07-04): complete the personal token and locale plan 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-09-22 18:09:31 +02:00
Jakub Zych
4e56ff98b0 docs(07-03): complete the account management plan 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-09-22 16:48:10 +02:00
Jakub Zych
3cf938867c docs(07-02): complete the user session plan 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-09-22 15:15:16 +02:00
Jakub Zych
ae9e11f65d docs(07-01): complete framework auth primitives plan 2026-09-22 13:43:15 +02:00
Jakub Zych
80eaeb87ea docs(07): mark phase planned, annotate roadmap waves 2026-09-22 12:39:05 +02:00
Jakub Zych
3aed5c88c3 docs(07): revise plans after checker review 2026-09-22 12:37:08 +02:00
Jakub Zych
57745e32a2 docs(07): create phase plan 
Six plans for the user plugin and authentication phase:
- 07-01: bouncer JWT lifecycle, password hashing, I18N-02 locale
  override, lagoon.Validate extensions (summercms.go)
- 07-02: User/Throttle schema, core session loop (login/logout/
  fetch/refresh/register) (fonoteka.go)
- 07-03: account management (forgot/reset, activation, update,
  change-password, avatar, mail) (fonoteka.go)
- 07-04: personal API tokens, me/locale, 423-exempt route-table
  proof (fonoteka.go)
- 07-05: parity evidence recording against the isolated PHP
  instance (fonoteka.go)
- 07-06: full unit coverage and validation sign-off (both repos)

Plan count and scope confirmed at the plan-count checkpoint.
 2026-09-22 12:21:15 +02:00
Jakub Zych
0c41151863 docs(07): add pattern map 2026-09-22 11:51:06 +02:00
Jakub Zych
fb16132d21 docs(07): add validation strategy 2026-09-22 02:43:29 +02:00
Jakub Zych
0ef3a47d22 docs(07): research user plugin and authentication phase 2026-09-22 02:42:14 +02:00
Jakub Zych
5548b2fab4 docs(state): record phase 7 context session 2026-09-22 00:24:22 +02:00
Jakub Zych
1979c45083 docs(07): capture phase context 2026-09-22 00:24:21 +02:00
Jakub Zych
2fe5c1e920 docs(06): verify phase 6 passed, mark HTTP-04/06 complete 2026-09-21 19:51:58 +02:00
Jakub Zych
fb66398cb9 docs(06-14): complete gap-closure test and review plan 2026-09-21 19:49:47 +02:00
Jakub Zych
ae817ccbb9 docs(06-14): reopen and re-close phase 6 security review with T-06-28..35 2026-09-21 19:49:30 +02:00
Jakub Zych
54dd60953a docs(06-13): complete fetchguard SSRF gap-closure plan 2026-09-21 19:45:03 +02:00
Jakub Zych
4bad1a43a2 docs(06-12): complete surf/bouncer gap-closure plan 2026-09-21 19:43:51 +02:00
Jakub Zych
46c7e4f98e docs(06): create gap-closure plans 12-14 2026-09-21 19:30:50 +02:00
Jakub Zych
6e9188b5c7 docs(06): record verification gaps 2026-09-21 14:49:52 +02:00
Jakub Zych
c5b412c7e1 docs(06): add code review report 2026-09-21 14:31:47 +02:00
Jakub Zych
ef6d914e4c docs(06-11): update plan tracking 2026-09-21 13:05:11 +02:00
Jakub Zych
2329e1f290 docs(06-11): complete post-gap security review plan 2026-09-21 13:03:41 +02:00
Jakub Zych
829e9989e3 docs(06-11): refresh Phase 6 security review 2026-09-21 13:02:41 +02:00
Jakub Zych
7118e4f280 docs(06-10): update plan tracking 2026-09-21 00:28:15 +02:00
Jakub Zych
943be2353d docs(06-10): complete exact InvScope denial bodies plan 2026-09-21 00:26:51 +02:00
Jakub Zych
c9909ce412 docs(06-09): update plan tracking 2026-09-20 21:08:54 +02:00
Jakub Zych
158df899f6 docs(06-09): complete transactional panic recovery plan 
Tasks completed: 1/1
- Buffer route responses so panic recovery can discard partial output

SUMMARY: .planning/phases/06-http-routing-auth-groups-and-rate-limiting/06-09-SUMMARY.md
 2026-09-20 21:06:51 +02:00
Jakub Zych
8a265d8372 docs(06-08): update plan tracking 
- Advance phase progress to 8 of 11 plans
- Record transition-address security decisions and execution metrics
- Mark HTTP-07 complete in requirements tracking
 2026-09-20 21:00:45 +02:00
Jakub Zych
ac24ddd518 docs(06-08): complete transition-address SSRF closure plan 
Tasks completed: 1/1
- Decode and reclassify embedded IPv4 at the dial-time SSRF boundary

SUMMARY: .planning/phases/06-http-routing-auth-groups-and-rate-limiting/06-08-SUMMARY.md
 2026-09-20 20:58:54 +02:00
Jakub Zych
3601a0ab09 docs(06-07): update plan tracking 2026-09-20 17:12:31 +02:00
Jakub Zych
bc43e9eabd docs(06-07): complete atomic limiter admission plan 
Tasks completed: 1/1
- Make fixed-window admission atomic and inline keys server-controlled

SUMMARY: .planning/phases/06-http-routing-auth-groups-and-rate-limiting/06-07-SUMMARY.md
 2026-09-20 17:10:43 +02:00
Jakub Zych
47e9c44b2a docs(06): create gap closure plans 2026-09-20 16:14:21 +02:00
Jakub Zych
c187d6f735 docs(06): reopen phase after verification gaps 2026-09-20 14:00:36 +02:00
Jakub Zych
dd78e0d6b3 docs(06): record gap-closure re-verification 2026-09-20 13:57:07 +02:00
Jakub Zych
067a3ffb2b docs(06): add code review report 2026-09-20 13:49:19 +02:00
Jakub Zych
3c57a88344 chore(gsd): disable unsupported worktree isolation 2026-09-20 13:33:17 +02:00
Jakub Zych
f5fd55f419 docs(06-06): update plan tracking 2026-09-20 13:33:11 +02:00
Jakub Zych
7f627961b1 docs(06-06): complete personal-token rate-limit gap plan 2026-09-20 13:31:41 +02:00
Jakub Zych
3423da2222 docs(06-06): extend security review through gap closure 2026-09-20 13:30:41 +02:00
Jakub Zych
da8f247065 docs(06): finalize gap-closure plan 2026-09-20 00:19:53 +02:00
Jakub Zych
b20466d2e2 fix(06): revise gap plan security coverage and full gates 2026-09-20 00:14:58 +02:00
Jakub Zych
a61c83e614 fix(06): resolve research questions 2026-09-19 23:13:24 +02:00
Jakub Zych
2f90fef830 docs(06): add rate-limit middleware gap plan 2026-09-19 23:07:43 +02:00
Jakub Zych
cb34de4203 docs(phase-06): mark progress table as gaps found 2026-09-19 21:44:36 +02:00
Jakub Zych
59d9a26aad docs(phase-06): record verification gaps and reopen phase 2026-09-19 21:44:26 +02:00
Jakub Zych
73218c0781 docs(06): add code review report 2026-09-19 21:32:41 +02:00
Jakub Zych
b759669f23 docs(06-05): complete unit coverage and security-review plan 2026-09-19 21:21:42 +02:00