golem15/summercms
4
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
1,591 Commits 1 Branch 45 Tags
d785958df239a463b68bc4570f487f320fe722a9
Commit Graph

982 Commits

Author SHA1 Message Date
Jakub Zych
d785958df2 docs(state): Phase 17 UAT and re-verification complete 2026-10-19 12:33:06 +02:00
Jakub Zych
1fca32042b docs(17): re-verify phase 17 — passed, release gap closed 2026-10-19 12:32:43 +02:00
Jakub Zych
c5b6a83299 test(17): complete UAT - 40 passed, 0 issues 2026-10-19 12:24:39 +02:00
Jakub Zych
0827865796 docs(todo): sitemap browser view without XSLT 2026-10-19 12:23:06 +02:00
Jakub Zych
96595633c0 docs(quick-261019-05g): Phase 17 verify-work unblock and console docs example 2026-10-19 00:16:46 +02:00
Jakub Zych
59f57819cc docs(17): shorten the COVERAGE.md opt-out reason and state the goal as a user story 2026-10-19 00:13:45 +02:00
Jakub Zych
eb7e39d335 docs(g15office): map Phase 20 demo, 30 cutover and 31 chat polish tasks 2026-10-18 23:16:37 +02:00
Jakub Zych
4fb9f142df docs(roadmap): reorder — demo at 20, Płytarium cutover 20→30, chat polish 19.2→31 
New Phase 20 is a public demo instance on sm-demo-app with every shared
plugin. Phases 21-29 stay off the roadmap until their goals firm up.
The cutover (closing v1.0) moves to 30; WavePath work starts at 31 with
the former 19.2, Horoskopia follows at 36-40. Seeds, notes and the
30-CONTEXT now point at the new numbers.
 2026-10-18 23:16:08 +02:00
Jakub Zych
6aaaf59f43 docs(phase-19.1): complete phase transition 2026-10-18 19:26:07 +02:00
Jakub Zych
f1ff2f940b docs(19.1): re-verify after review fixes; mark WR-04 and WR-05 fixed 2026-10-18 19:25:32 +02:00
Jakub Zych
62c948f5e6 docs(quick-261018-qbs): fix 19.1 review WR-04 and WR-05, optional-dependency doc note 
Registers T-19.1-13..17 in 19.1-SECURITY.md.
 2026-10-18 19:19:20 +02:00
Jakub Zych
3b0f2c32b8 docs(state): log goldens secret-gate fast task 2026-10-18 18:05:47 +02:00
Jakub Zych
8553cd2afe docs(phase-19.1): close T-19.1-12 after goldens secret gate 2026-10-18 18:05:29 +02:00
Jakub Zych
2785bebd32 docs(phase-19.1): add security threat verification 2026-10-18 18:04:41 +02:00
Jakub Zych
b3f0b6ded0 test(19.1): complete UAT - 1 passed, 0 issues 
Records the accepted userfriends go.mod override in VERIFICATION.md.
 2026-10-18 17:54:54 +02:00
Jakub Zych
ebedba8c94 docs(19.1): persist verification, UAT and review disposition 2026-10-18 16:11:13 +02:00
Jakub Zych
905b035184 docs(19.1): add code review report 2026-10-18 16:10:02 +02:00
Jakub Zych
32617944a9 docs(19.1-06): record plan progress after maps and goldens SUMMARY 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-10-18 16:02:15 +02:00
Jakub Zych
7e51959b14 docs(19.1-06): complete PHP maps, goldens and phase gate plan 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-10-18 16:01:40 +02:00
Jakub Zych
374088eccf docs(19.1-02): complete forum tracer plan 2026-10-18 15:43:18 +02:00
Jakub Zych
1f204f5a6c docs(quick-261018-k9s): add the D-17 module in summercms.go 2026-10-18 14:55:11 +02:00
Jakub Zych
5ccf726e8a docs(19.1-05): record plan progress after chatvideo SUMMARY 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-10-18 14:02:49 +02:00
Jakub Zych
782a6720bf docs(19.1-05): complete chatvideo tracer plan 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-10-18 14:02:02 +02:00
Jakub Zych
43c4040256 docs(19.1-05): record livekit/server-sdk-go/v2 v2.19.0 before import 
Pin github.com/livekit/server-sdk-go/v2 v2.19.0 (Apache-2.0). Flag
pion/media-sdk/buildkit; production talks to RoomAPI only; tests ship a
fake and must not construct lksdk.Room. Operator HTTP uses fetchguard
TrustedMode. Token golden vs PHP LiveKitService.php 80-99; jwt/v5
MapClaims fallback if ToJWT differs.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-10-18 13:52:27 +02:00
Jakub Zych
4f58c8fc2a docs(19.1-04): record plan progress after herald SUMMARY 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-10-18 13:50:31 +02:00
Jakub Zych
0d3ba6517b docs(19.1-04): complete herald tracer plan 
Record proceed, coverage, tea-create of sm-herald-plugin, and Self-Check.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-10-18 13:49:47 +02:00
Jakub Zych
56b4a72a6a docs(19.1-04): record webpush-go v1.4.0 for Herald before import 
Pin github.com/SherClockHolmes/webpush-go v1.4.0 (MIT, jwt/v5 share,
Options.HTTPClient = *fetchguard.Client Do). The in-tree flare module is
the rejected alternative (push.* keys, websockets:generate-vapid-keys).

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-10-18 13:38:06 +02:00
Jakub Zych
f3ca32e486 docs(19.1-03): complete chatbots tracer plan 2026-10-18 13:36:22 +02:00
Jakub Zych
ceabc9ccbc docs(19.1-02): record D-17 Render/Purify halt 
- Task 1 wrote the forum policy note; forum execution waits on the D-17 module
- Do not create sm-forum-plugin until Render and Purify exist

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-10-18 13:24:43 +02:00
Jakub Zych
2740ab276c docs(19.1-02): add forum bluemonday policy note 
- Pin the named forum policy on bluemonday v1.0.27 already in go.mod
- Separate it from seaglass UGC: PHP allow-list, http/https/mailto, nofollow and target blank
- D-17 owns Render/Purify; forum must not vendor goldmark or bluemonday

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-10-18 13:24:18 +02:00
Jakub Zych
eb341147d8 docs(19.1-01): record plan progress after userfriends SUMMARY 
Advance Phase 19.1 to plan 2 of 6 and tick 19.1-01 on the roadmap now that the sibling plugin is on origin/main.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-10-18 13:22:15 +02:00
Jakub Zych
03591e1d6c docs(19.1-01): summarize userfriends tracer, groups, adapter and GDPR 
Record the proceed-and-push lock, sibling repo commits, tea remote, and Task 3 deviations so later 19.1 plans can consume the new plugin.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-10-18 13:21:39 +02:00
Jakub Zych
f984e5e63f docs(19.1-01): patch Phase 19.1 Repos, SC2 and SC3 
- Repos add summercms.go for the Markdown module
- Criterion 2 names webpush-go / LiveKit / bluemonday notes
- Criterion 3 marked already met (Wavepath 182b514)
 2026-10-18 13:13:57 +02:00
Jakub Zych
012a5a2c5a docs(19.1): record planned phase 2026-10-18 12:56:33 +02:00
Jakub Zych
cddf3a5008 docs(19.1): revise phase plans 2026-10-18 12:52:39 +02:00
Jakub Zych
7c7a1ad45d docs(19.1): create phase plan 2026-10-18 12:45:31 +02:00
Jakub Zych
23dfb05b0a docs(state): record phase 19.7 context session 2026-10-18 12:41:48 +02:00
Jakub Zych
b8f90749c7 docs(19.7): capture phase context 2026-10-18 12:41:37 +02:00
Jakub Zych
924618704f docs(19.1): add validation strategy 2026-10-17 23:37:53 +02:00
Jakub Zych
f179ec060c docs(19.1): research phase domain 2026-10-17 23:36:34 +02:00
Jakub Zych
5f76e5bbd2 docs(19.6): capture phase context 2026-10-17 23:27:52 +02:00
Jakub Zych
9bcfa22c6e docs(19.5): capture phase context 2026-10-17 23:15:14 +02:00
Jakub Zych
76d055e720 docs(phase-19): complete Chat and ChatChannels execution 
Gap closure closed the DM write-IDOR and GDPR CASCADE blockers; verification is 26/26.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-10-17 22:42:11 +02:00
Jakub Zych
d69a3d409e test(19): re-verify Chat and ChatChannels after gap closure 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-10-17 22:41:29 +02:00
Jakub Zych
70682b4b27 docs(19-07): complete gap-closure unit tests plan 
Named postgres tests lock teammate DM write-IDOR and creator-delete CASCADE; the phase gate requires those names. Plans 7/7.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-10-17 22:37:47 +02:00
Jakub Zych
d1852f6cda docs(19-06): complete participant-only send and GDPR reassignment plan 
Record CR-01/CR-02 gap closure and mark the 19-06 ROADMAP checkbox. Plugin repos were committed separately and not pushed.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-10-17 22:31:22 +02:00
Jakub Zych
29d06bc70e docs(19): plan gap closure for DM send IDOR and GDPR CASCADE 
Two gap-closure plans close CR-01 participant-only send and CR-02 created_by reassignment.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-10-17 22:27:44 +02:00
Jakub Zych
f3d5db8cba test(19): verify Chat and ChatChannels phase 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-10-17 22:18:23 +02:00
Jakub Zych
aaf75cfb41 docs(19): record code-review disposition as open 
All eight Phase 19 review findings stay open after the advisory gate.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-10-17 22:14:03 +02:00
Jakub Zych
2ddafb8755 docs(19): code review of Chat and ChatChannels 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-10-17 22:13:29 +02:00