golem15/summercms
3
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
335 Commits 1 Branch 2 Tags
d70e412138b8932243596d9a1e7b88041bd6f88a
Commit Graph

73 Commits

Author SHA1 Message Date
Jakub Zych
d70e412138 docs(08-06): complete lifecycle and sweeps plan 2026-09-23 21:42:32 +02:00
Jakub Zych
7f37311120 docs(08-05): complete consent plan 2026-09-23 21:11:45 +02:00
Jakub Zych
a459f74897 docs(08-04): complete token-exchange plan 2026-09-23 20:35:49 +02:00
Jakub Zych
33ab188a2e docs(08-03): complete authorize plan 2026-09-23 20:11:54 +02:00
Jakub Zych
ae326b0941 docs(08-02): complete persistence and registration plan 2026-09-23 19:54:54 +02:00
Jakub Zych
deee2cc8d7 docs(08-01): complete metadata RED infrastructure plan 2026-09-23 19:20:35 +02:00
Jakub Zych
e23cbac240 fix(08): revise oauth plans after checker feedback 2026-09-23 17:46:38 +02:00
Jakub Zych
3c6a505c5f fix(08): revise plans based on checker feedback 2026-09-23 17:13:47 +02:00
Jakub Zych
241af16ba7 docs(08): create OAuth authorization server plans 2026-09-23 13:38:58 +02:00
Jakub Zych
b435304570 docs(phase-7): complete phase execution 
Avatar bucket publish closed the last UAT blocker. Phase 7 is 8/8
verified. Next is discuss Phase 8; do not auto-advance.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-09-23 10:53:42 +02:00
Jakub Zych
3a15105a1b docs(state): record 07-08 completion and tracking 
All eight Phase 7 plans have summaries. Avatar bucket publish is the
UAT gap close; phase verification still has to run.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-09-23 10:51:26 +02:00
Jakub Zych
d20f99f2e6 docs(07-07): complete the user-api parity gap plan 
Record the PHP-does-blacklist finding, the accepted Go 401 after logout,
and the 22-ported corpus so later phases do not revive the harness artifact.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-09-23 00:01:18 +02:00
Jakub Zych
f75e3e84db docs(07): plan gap closure for the pending user-api parity routes 2026-09-22 20:22:45 +02:00
Jakub Zych
9446981ffd docs(07-06): complete the unit coverage plan 
The validation contract is signed off and the phase plan count is 6/6. Requirement checkboxes stay open while the user-api routes are still pending.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-09-22 19:21:31 +02:00
Jakub Zych
fa7bdb5f71 docs(07-05): complete the user API parity capture plan 
Record that the 15 user routes stay pending until Go matches the PHP bodies, including the HTML 500 on a bad activation code and the still-valid token after logout.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-09-22 18:44:05 +02:00
Jakub Zych
ecfcd23150 docs(07-04): complete the personal token and locale plan 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-09-22 18:09:31 +02:00
Jakub Zych
4e56ff98b0 docs(07-03): complete the account management plan 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-09-22 16:48:10 +02:00
Jakub Zych
3cf938867c docs(07-02): complete the user session plan 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-09-22 15:15:16 +02:00
Jakub Zych
ae9e11f65d docs(07-01): complete framework auth primitives plan 2026-09-22 13:43:15 +02:00
Jakub Zych
57745e32a2 docs(07): create phase plan 
Six plans for the user plugin and authentication phase:
- 07-01: bouncer JWT lifecycle, password hashing, I18N-02 locale
  override, lagoon.Validate extensions (summercms.go)
- 07-02: User/Throttle schema, core session loop (login/logout/
  fetch/refresh/register) (fonoteka.go)
- 07-03: account management (forgot/reset, activation, update,
  change-password, avatar, mail) (fonoteka.go)
- 07-04: personal API tokens, me/locale, 423-exempt route-table
  proof (fonoteka.go)
- 07-05: parity evidence recording against the isolated PHP
  instance (fonoteka.go)
- 07-06: full unit coverage and validation sign-off (both repos)

Plan count and scope confirmed at the plan-count checkpoint.
 2026-09-22 12:21:15 +02:00
Jakub Zych
fb66398cb9 docs(06-14): complete gap-closure test and review plan 2026-09-21 19:49:47 +02:00
Jakub Zych
54dd60953a docs(06-13): complete fetchguard SSRF gap-closure plan 2026-09-21 19:45:03 +02:00
Jakub Zych
4bad1a43a2 docs(06-12): complete surf/bouncer gap-closure plan 2026-09-21 19:43:51 +02:00
Jakub Zych
ef6d914e4c docs(06-11): update plan tracking 2026-09-21 13:05:11 +02:00
Jakub Zych
7118e4f280 docs(06-10): update plan tracking 2026-09-21 00:28:15 +02:00
Jakub Zych
c9909ce412 docs(06-09): update plan tracking 2026-09-20 21:08:54 +02:00
Jakub Zych
8a265d8372 docs(06-08): update plan tracking 
- Advance phase progress to 8 of 11 plans
- Record transition-address security decisions and execution metrics
- Mark HTTP-07 complete in requirements tracking
 2026-09-20 21:00:45 +02:00
Jakub Zych
3601a0ab09 docs(06-07): update plan tracking 2026-09-20 17:12:31 +02:00
Jakub Zych
47e9c44b2a docs(06): create gap closure plans 2026-09-20 16:14:21 +02:00
Jakub Zych
c187d6f735 docs(06): reopen phase after verification gaps 2026-09-20 14:00:36 +02:00
Jakub Zych
f5fd55f419 docs(06-06): update plan tracking 2026-09-20 13:33:11 +02:00
Jakub Zych
2f90fef830 docs(06): add rate-limit middleware gap plan 2026-09-19 23:07:43 +02:00
Jakub Zych
cb34de4203 docs(phase-06): mark progress table as gaps found 2026-09-19 21:44:36 +02:00
Jakub Zych
59d9a26aad docs(phase-06): record verification gaps and reopen phase 2026-09-19 21:44:26 +02:00
Jakub Zych
b759669f23 docs(06-05): complete unit coverage and security-review plan 2026-09-19 21:21:42 +02:00
Jakub Zych
f61776d0a6 docs(06-03): complete raw groups, wire, CORS, and body-limit plan 
- Operator-confirmed 128MiB body limits (134217728); D-18/T-06-13 closed
- HTTP-06, HTTP-08, HTTP-09 marked complete
 2026-09-19 21:01:07 +02:00
Jakub Zych
42b8295cc1 docs(06-02): complete fixed-window limiter and five-bucket plan 2026-09-19 19:46:28 +02:00
Jakub Zych
ab20ad0f9c docs(06-02): correct HTTP-04 named bucket count to five 
- ROADMAP Phase 6 success criterion 2 and REQUIREMENTS HTTP-04 said seven
- D-01: routes.php defines five fonoteka-* buckets plus inline throttle:N,M
 2026-09-19 19:42:23 +02:00
Jakub Zych
e2aba0ebf0 docs(phase-06): update tracking after wave 1 2026-09-19 19:28:18 +02:00
Jakub Zych
1f56a9ee1c docs(06-01): complete guard registry and dual-group genres plan 2026-09-19 19:24:03 +02:00
Jakub Zych
c4f406bb64 docs(06): create phase plan 2026-09-19 16:58:48 +02:00
Jakub Zych
38cd4c6f50 docs(05-06): record plan close-out in STATE and ROADMAP 
- Phase 5 plan 6 of 6 complete and ready for verification
- Record 23 min / 3 tasks / 12 files and the fill-boundary test decisions
 2026-09-18 20:56:10 +02:00
Jakub Zych
67434f5185 docs(05-05): record plan close-out in STATE and ROADMAP 
- Advance to plan 6 of 6; mark DATA-11 and CLI-03 complete
 2026-09-18 20:28:00 +02:00
Jakub Zych
678b216900 docs(05-04): record plan close-out in STATE and ROADMAP 
- Advance to plan 5 of 6; DATA-08 marked complete
 2026-09-18 20:05:58 +02:00
Jakub Zych
b1b740c333 docs(05-03): record plan close-out in STATE and ROADMAP 2026-09-18 19:44:42 +02:00
Jakub Zych
a46c153480 docs(05-02): record plan close-out in STATE and ROADMAP 
- Advance to plan 3 of 6 and mark DATA-04/05/07/09 complete
 2026-09-18 19:25:21 +02:00
Jakub Zych
06635f21cd docs(05-01): record plan close-out in STATE and ROADMAP 
- Advance to plan 2 of 6; 05-01 marked complete
- DATA-03, DATA-06, DATA-10 checked in REQUIREMENTS.md
 2026-09-18 18:53:33 +02:00
Jakub Zych
c85fa24936 docs(05-01): drop 27-migrations target and move HTTP fuzz to Phase 12 
- DATA-09 and Phase 5 criteria follow D-01 squash and D-07 service-level fuzz
- Phase 12 inherits the write-endpoint DTO fuzz once HTTP exists
 2026-09-18 18:48:08 +02:00
Jakub Zych
29b73b6892 docs(05): create phase plan 2026-09-18 18:06:55 +02:00
Jakub Zych
bbf49a910a fix(05): revise plans based on checker feedback 2026-09-18 17:31:53 +02:00