golem15/summercms
4
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
1,542 Commits 1 Branch 33 Tags
9bcfa22c6e9a44b69969597f13c27ed6facd3db6
Commit Graph

1542 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Jakub Zych
9bcfa22c6e docs(19.5): capture phase context 2026-10-17 23:15:14 +02:00
Jakub Zych
76d055e720 docs(phase-19): complete Chat and ChatChannels execution 
Gap closure closed the DM write-IDOR and GDPR CASCADE blockers; verification is 26/26.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-10-17 22:42:11 +02:00
Jakub Zych
d69a3d409e test(19): re-verify Chat and ChatChannels after gap closure 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-10-17 22:41:29 +02:00
Jakub Zych
70682b4b27 docs(19-07): complete gap-closure unit tests plan 
Named postgres tests lock teammate DM write-IDOR and creator-delete CASCADE; the phase gate requires those names. Plans 7/7.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-10-17 22:37:47 +02:00
Jakub Zych
bd301a1696 test(19-07): require TestTeammateDMWriteIDOR in the phase gate 
The fail-closed postgres list now names the teammate DM write-IDOR case so CR-01 cannot regress silently. TestDeletingCascade stays required.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-10-17 22:37:00 +02:00
Jakub Zych
d1852f6cda docs(19-06): complete participant-only send and GDPR reassignment plan 
Record CR-01/CR-02 gap closure and mark the 19-06 ROADMAP checkbox. Plugin repos were committed separately and not pushed.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-10-17 22:31:22 +02:00
Jakub Zych
29d06bc70e docs(19): plan gap closure for DM send IDOR and GDPR CASCADE 
Two gap-closure plans close CR-01 participant-only send and CR-02 created_by reassignment.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-10-17 22:27:44 +02:00
Jakub Zych
f3d5db8cba test(19): verify Chat and ChatChannels phase 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-10-17 22:18:23 +02:00
Jakub Zych
aaf75cfb41 docs(19): record code-review disposition as open 
All eight Phase 19 review findings stay open after the advisory gate.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-10-17 22:14:03 +02:00
Jakub Zych
2ddafb8755 docs(19): code review of Chat and ChatChannels 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-10-17 22:13:29 +02:00
Jakub Zych
4eecd0f039 docs(19.4): capture phase context 2026-10-17 22:09:14 +02:00
Jakub Zych
953cf25448 docs(19-05): mark goldens and PHP method map plan complete on the roadmap 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-10-17 22:07:22 +02:00
Jakub Zych
4992597f8c docs(19-05): complete goldens and PHP method map plan 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-10-17 22:07:11 +02:00
Jakub Zych
1eb0869b18 chore(19-05): add fail-closed check-phase19.sh for chat plugins 
- Named short tests must pass; a skip, miss or red required test fails.
- No admin or layers stage; postgres is Docker-host only.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-10-17 22:05:18 +02:00
Jakub Zych
afe3e773f2 docs(19-04): mark ChatChannels API plan complete on the roadmap 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-10-17 21:54:45 +02:00
Jakub Zych
9ca67b780b docs(19-04): complete ChatChannels API and users.handle plan 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-10-17 21:54:37 +02:00
Jakub Zych
c7018b41db docs(19-03): mark ChatChannels core plan complete on the roadmap 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-10-17 21:36:18 +02:00
Jakub Zych
935bdcb479 docs(19-03): complete ChatChannels core plan 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-10-17 21:36:02 +02:00
Jakub Zych
c9e5b14e27 docs(19-02): mark Chat HTTP API plan complete on the roadmap 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-10-17 21:22:27 +02:00
Jakub Zych
671a3b65de docs(19-02): complete Chat HTTP API plan 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-10-17 21:22:19 +02:00
Jakub Zych
a2c7366b2a docs(19-01): mark Chat core plan complete on the roadmap 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-10-17 21:00:03 +02:00
Jakub Zych
fd8321d88f docs(19-01): complete Chat core plan 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-10-17 20:59:29 +02:00
Jakub Zych
9404668287 docs(19): unique threat IDs T-19-13 and T-19-14 
Duplicate T-19-04/T-19-06 across plans blocked execute-phase; keep the
originals on 19-01 and 19-03 and give the later plans new registers.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-10-17 20:37:12 +02:00
Jakub Zych
eab4528a5a docs: capture exploration — generic MCP module (phase 19.7, note, two prerequisite todos) 2026-10-17 20:31:25 +02:00
Jakub Zych
f3dcbd6625 docs(19): create phase plan 2026-10-17 01:27:47 +02:00
Jakub Zych
d12adcf19a docs(quick-261016-sz9): main SummerCMS demo instance (sm-demo-app + vue-demo-app) 2026-10-16 21:12:01 +02:00
Jakub Zych
92479ad559 docs(18.1): phase complete - UAT 8/8, security 0 open, released framework v0.2.2, pgsub v0.1.1, pgstripe v0.1.1 2026-10-16 21:08:33 +02:00
Jakub Zych
c02f2724ae docs(18.1): re-verify after quick 261016-s8x (pact.NavigationItem.Visible) - passed, no regression 2026-10-16 21:07:33 +02:00
Jakub Zych
82f2e4a4f6 docs(18.1): release record - framework v0.2.2, pgsub v0.1.1, pgstripe v0.1.1; verification passed 2026-10-16 21:04:44 +02:00
Jakub Zych
450c535452 docs(quick-261016-s8x): PaymentGateway: banner bottom margin and hide disabled sections from admin navigation v0.2.2 2026-10-16 20:42:06 +02:00
Jakub Zych
ab9f385db8 chore(quick-261016-s8x): rebuild embedded admin dist 2026-10-16 20:35:13 +02:00
Jakub Zych
2dd5fb3bbb fix(quick-261016-s8x): space below a callout that a sibling follows in a partial 
- .summer-partial .summer-callout:not(:last-child) gets margin-bottom: 12px,
  so a feature-off callout no longer touches the stats strip under it
- scoped to rendered partials: FormField.vue's field notice and the hint
  partials, whose callout is the last child, are unchanged
 2026-10-16 20:34:41 +02:00
Jakub Zych
06e2e60ce1 feat(quick-261016-s8x): pact.NavigationItem.Visible hides navigation entries at request time 
- pact.NavigationItem gains Visible func(ctx) bool (json:"-"); nil keeps the
  entry always listed
- cabana.Registry.Metadata runs it after the permission check, drops a main
  item (with its side menu) or a side item that answers false, and relinks a
  parent whose controller is a hidden child's to its first visible openable
  child
- TestNavigationHidesInvisibleItemsAndRepointsTarget covers the rules
- pact and cabana READMEs, users-and-permissions and admin-controllers docs
  describe the hook
 2026-10-16 20:34:26 +02:00
Jakub Zych
90b2d4e23b test(18.1): duplicates 2 and 3 settled by tests 6 and 7 2026-10-16 20:17:28 +02:00
Jakub Zych
6878be4e6a docs: todo - audit-log admin action runs (18.1 AR-18.1-03) 2026-10-16 20:17:21 +02:00
Jakub Zych
5f1245f1e4 docs(phase-18.1): add security threat verification 2026-10-16 20:17:21 +02:00
Jakub Zych
0e5c56b5ae docs(18.1): re-verify after quick 261016-myi and 261016-nqk - human_needed (release go-ahead) 2026-10-16 17:46:58 +02:00
Jakub Zych
0dbf5e14b0 test(18.1): complete UAT - 6 passed, 2 skipped duplicates, 3 gaps resolved 2026-10-16 17:34:36 +02:00
Jakub Zych
6e14522a84 docs(quick-261016-nqk): plan and summary for UAT gaps G-18.1-7 and G-18.1-4; D-21 amended, COVERAGE cancel_at row 2026-10-16 17:24:12 +02:00
Jakub Zych
17398fe87c chore(quick-261016-nqk): rebuild embedded admin dist 2026-10-16 17:19:54 +02:00
Jakub Zych
013890c3d6 feat(quick-261016-nqk): admin heads form and preview with meta.title (G-18.1-4) 2026-10-16 17:19:54 +02:00
Jakub Zych
bc5685eb93 feat(quick-261016-nqk): ListExtendRecords and FormRecordTitle admin hooks (G-18.1-4) 
pact.ListExtendRecords fills unstored fields of one list page before its
columns are read (WinterCMS listExtendRecords); such columns compile
unsortable and refuse sortable/searchable. pact.FormRecordTitle names a
record; the show, create and update responses send it as meta.title.
 2026-10-16 17:19:54 +02:00
Jakub Zych
9890aff66d test(18.1): UAT 4 part E passed 2026-10-16 17:05:12 +02:00
Jakub Zych
bad37d1d3d test(18.1): UAT diagnosed 2026-10-16 17:03:03 +02:00
Jakub Zych
6ae1c1c077 test(18.1): complete UAT - 3 passed, 3 issues (2 resolved by gap closure pending) 2026-10-16 17:02:58 +02:00
Jakub Zych
8a04416b0c test(18.1): UAT progress - 1, 5 passed; 2, 3 duplicates; boot-order gap found and fixed 2026-10-16 16:47:08 +02:00
Jakub Zych
9098c87d04 docs(quick-261016-myi): Phase 18.1 re-review warnings fixed; disposition, coverage, summary 2026-10-16 16:46:24 +02:00
Jakub Zych
1788c50a85 docs(18.1): shorten two COVERAGE.md reasons for the api-coverage gate 2026-10-16 16:26:58 +02:00
Jakub Zych
52d149b8f1 docs(18.1): re-verification after gap closure 2026-10-16 14:15:52 +02:00
Jakub Zych
f56ebd0828 docs(18.1): add code review report 2026-10-16 14:06:44 +02:00