golem15/summercms
3
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
242 Commits 1 Branch 2 Tags
ac24ddd51864eebdd824b47d0a2159c3ce4bd45f
Commit Graph

142 Commits

Author SHA1 Message Date
Jakub Zych
ac24ddd518 docs(06-08): complete transition-address SSRF closure plan 
Tasks completed: 1/1
- Decode and reclassify embedded IPv4 at the dial-time SSRF boundary

SUMMARY: .planning/phases/06-http-routing-auth-groups-and-rate-limiting/06-08-SUMMARY.md
 2026-09-20 20:58:54 +02:00
Jakub Zych
3601a0ab09 docs(06-07): update plan tracking 2026-09-20 17:12:31 +02:00
Jakub Zych
bc43e9eabd docs(06-07): complete atomic limiter admission plan 
Tasks completed: 1/1
- Make fixed-window admission atomic and inline keys server-controlled

SUMMARY: .planning/phases/06-http-routing-auth-groups-and-rate-limiting/06-07-SUMMARY.md
 2026-09-20 17:10:43 +02:00
Jakub Zych
47e9c44b2a docs(06): create gap closure plans 2026-09-20 16:14:21 +02:00
Jakub Zych
c187d6f735 docs(06): reopen phase after verification gaps 2026-09-20 14:00:36 +02:00
Jakub Zych
dd78e0d6b3 docs(06): record gap-closure re-verification 2026-09-20 13:57:07 +02:00
Jakub Zych
067a3ffb2b docs(06): add code review report 2026-09-20 13:49:19 +02:00
Jakub Zych
3c57a88344 chore(gsd): disable unsupported worktree isolation 2026-09-20 13:33:17 +02:00
Jakub Zych
f5fd55f419 docs(06-06): update plan tracking 2026-09-20 13:33:11 +02:00
Jakub Zych
7f627961b1 docs(06-06): complete personal-token rate-limit gap plan 2026-09-20 13:31:41 +02:00
Jakub Zych
3423da2222 docs(06-06): extend security review through gap closure 2026-09-20 13:30:41 +02:00
Jakub Zych
da8f247065 docs(06): finalize gap-closure plan 2026-09-20 00:19:53 +02:00
Jakub Zych
b20466d2e2 fix(06): revise gap plan security coverage and full gates 2026-09-20 00:14:58 +02:00
Jakub Zych
a61c83e614 fix(06): resolve research questions 2026-09-19 23:13:24 +02:00
Jakub Zych
2f90fef830 docs(06): add rate-limit middleware gap plan 2026-09-19 23:07:43 +02:00
Jakub Zych
cb34de4203 docs(phase-06): mark progress table as gaps found 2026-09-19 21:44:36 +02:00
Jakub Zych
59d9a26aad docs(phase-06): record verification gaps and reopen phase 2026-09-19 21:44:26 +02:00
Jakub Zych
73218c0781 docs(06): add code review report 2026-09-19 21:32:41 +02:00
Jakub Zych
b759669f23 docs(06-05): complete unit coverage and security-review plan 2026-09-19 21:21:42 +02:00
Jakub Zych
74d1eb37a0 docs(06-05): map every T-06-xx threat to a passing test or restated accept 
- 19-row register T-06-01 through T-06-18 plus T-06-SC
- mitigate rows name file:TestName; accept rows copy originating rationale
- grep: no bearer/hash logging; inv.must-change-password only in HouseMiddlewares
 2026-09-19 21:15:24 +02:00
Jakub Zych
f61776d0a6 docs(06-03): complete raw groups, wire, CORS, and body-limit plan 
- Operator-confirmed 128MiB body limits (134217728); D-18/T-06-13 closed
- HTTP-06, HTTP-08, HTTP-09 marked complete
 2026-09-19 21:01:07 +02:00
Jakub Zych
42b8295cc1 docs(06-02): complete fixed-window limiter and five-bucket plan 2026-09-19 19:46:28 +02:00
Jakub Zych
ab20ad0f9c docs(06-02): correct HTTP-04 named bucket count to five 
- ROADMAP Phase 6 success criterion 2 and REQUIREMENTS HTTP-04 said seven
- D-01: routes.php defines five fonoteka-* buckets plus inline throttle:N,M
 2026-09-19 19:42:23 +02:00
Jakub Zych
e2aba0ebf0 docs(phase-06): update tracking after wave 1 2026-09-19 19:28:18 +02:00
Jakub Zych
bc17c3decb chore: merge executor worktree (worktree-agent-01a0ba96) 2026-09-19 19:26:53 +02:00
Jakub Zych
1f56a9ee1c docs(06-01): complete guard registry and dual-group genres plan 2026-09-19 19:24:03 +02:00
Jakub Zych
cca4ec3a8b docs(06-04): complete SSRF-guarded fetch helper plan 
- Record fetchguard.Fetch dial-time SSRF helper, typed reasons, and TDD commits
 2026-09-19 19:03:20 +02:00
Jakub Zych
ecab09c37a docs(06): finalize phase plan after verification 2026-09-19 17:16:58 +02:00
Jakub Zych
ad3d6f7f84 docs(06): revision pass 1 - resolve Limiter naming collision and add plugin-facing house-middleware capability 2026-09-19 17:13:02 +02:00
Jakub Zych
c4f406bb64 docs(06): create phase plan 2026-09-19 16:58:48 +02:00
Jakub Zych
6a9f5e1b47 docs(05): add code review fix report 2026-09-19 15:41:27 +02:00
Jakub Zych
c0b2b6db08 docs(phase-6): add validation strategy 2026-09-19 15:36:23 +02:00
Jakub Zych
e9c2f25ebe docs(06): research HTTP routing, auth groups and rate limiting 2026-09-19 15:35:20 +02:00
Jakub Zych
07df9b1e74 docs(state): record phase 6 context session 2026-09-19 14:04:36 +02:00
Jakub Zych
820d17c6c3 docs(06): capture phase context 2026-09-19 14:04:36 +02:00
Jakub Zych
ab4ac856da docs(05): add code review report 2026-09-19 00:20:17 +02:00
Jakub Zych
bbee45c5f4 docs(05): add code review fix report 2026-09-18 23:53:21 +02:00
Jakub Zych
ba8a822149 docs(phase-5): evolve PROJECT.md after phase completion 2026-09-18 21:11:43 +02:00
Jakub Zych
0056c35cb0 docs(phase-5): complete phase execution 2026-09-18 21:11:43 +02:00
Jakub Zych
cd546dae1d docs(05): add code review report 2026-09-18 21:11:11 +02:00
Jakub Zych
38cd4c6f50 docs(05-06): record plan close-out in STATE and ROADMAP 
- Phase 5 plan 6 of 6 complete and ready for verification
- Record 23 min / 3 tasks / 12 files and the fill-boundary test decisions
 2026-09-18 20:56:10 +02:00
Jakub Zych
ba3efccadd docs(05-06): complete fill-fuzz hidden-marshal security-review plan 
- Record fuzz, hidden-marshal, public_token, attach, and security-review outcomes
- Note module-boundary placement of the models.All() walk
 2026-09-18 20:54:10 +02:00
Jakub Zych
e0a11c3ea0 docs(05-06): security review of fill and encryption boundaries 
- Map T-05-01 through T-05-24 to a passing test or restated accept rationale
- Enumerate every .Reveal() call site; none are on log or serialize paths
- Confirm zero AutoMigrate production calls and no Association Mode pivot writes
 2026-09-18 20:51:35 +02:00
Jakub Zych
67434f5185 docs(05-05): record plan close-out in STATE and ROADMAP 
- Advance to plan 6 of 6; mark DATA-11 and CLI-03 complete
 2026-09-18 20:28:00 +02:00
Jakub Zych
62f3ae563f docs(05-05): complete remaining-models schema-diff fixture plan 
- Record Task 1-3 commits, D-02 allow-list, and DATA-11 fixture isolation
 2026-09-18 20:26:41 +02:00
Jakub Zych
678b216900 docs(05-04): record plan close-out in STATE and ROADMAP 
- Advance to plan 5 of 6; DATA-08 marked complete
 2026-09-18 20:05:58 +02:00
Jakub Zych
690aed2ea6 docs(05-04): complete attachments system_files blob and thumb plan 
Tasks completed: 3/3
- Task 1: File, Thumb, bucket, system_files migration
- Task 2: delete lifecycle and static handler
- Task 3: Album/Collection MorphName

SUMMARY: .planning/phases/05-data-layer-full-fidelity/05-04-SUMMARY.md
 2026-09-18 20:04:39 +02:00
Jakub Zych
b1b740c333 docs(05-03): record plan close-out in STATE and ROADMAP 2026-09-18 19:44:42 +02:00
Jakub Zych
76852e2d55 docs(05-03): complete secrets-slice encrypted credentials plan 
- AES-256-GCM Encrypted, key:generate, Laravel helper, organisations, OAuth tables
 2026-09-18 19:43:02 +02:00
Jakub Zych
a46c153480 docs(05-02): record plan close-out in STATE and ROADMAP 
- Advance to plan 3 of 6 and mark DATA-04/05/07/09 complete
 2026-09-18 19:25:21 +02:00