golem15/summercms
4
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
2,023 Commits 1 Branch 43 Tags
ea4680eebe4e828db2f258087c3c2eb709f85622
Commit Graph

71 Commits

Author SHA1 Message Date
Jakub Zych
d3b1636ac7 docs(19.6-03): complete WebAuthn and adoption plan 
sm-demo-app mounts golem15.mfa v0.1.0 at user v0.1.12, sociallogin v0.1.4
and the two-factor UI (0eb1f60..bb24207, pushed with the 19 earlier
commits as 18597e5..bb24207, not deployed). The summary records the
"proceed" reply, the push checks and the tests. deferred-items.md gains the
private sm-mfa-plugin repository's effect on the demo's release build, and
a pending todo tracks the demo's leftover journal and oauthserver moves.
 2026-10-26 13:47:45 +01:00
Jakub Zych
4730e37742 docs(19.7-05): security review and contract, deferred items, folded todos closed 
- 19.7-SECURITY-REVIEW.md: T-19.7-01..41 and T-19.7-SC with file, line and
  pinning test; two production fixes (c49983d, 1111828); superuser reach
  accepted as designed with audit and ceiling
- 19.7-SECURITY.md: threats_open 0, accepted risks AR-19.7-01..05
- the frontend permission and account link todos move to todos/done with
  their closing notes
 2026-10-23 14:29:56 +02:00
Jakub Zych
e2759d668f docs: user-plugin escalations released in sm-user-plugin v0.1.9, reply ready to send 2026-10-23 00:25:24 +02:00
Jakub Zych
e5dd4579a8 docs: fill item 8 in the external-escalation reply 2026-10-23 00:10:27 +02:00
Jakub Zych
a9e3f2434d docs: tune item 8 password-routes quick after item 7 2026-10-22 23:53:43 +02:00
Jakub Zych
6a1974c0d2 docs: fill item 7 in the external-escalation reply 2026-10-22 23:45:20 +02:00
Jakub Zych
ec69f547b8 docs: tune item 7 cookie quick after 9-10 2026-10-22 23:14:09 +02:00
Jakub Zych
e9ebf93d36 docs(quick-261022-vfz): user-plugin /login throttle via surf.ClientIP and whole-second tokens_valid_after writers 2026-10-22 23:08:04 +02:00
Jakub Zych
c309a1abe9 docs: tune items 9-10 quick after G4 2026-10-22 22:37:41 +02:00
Jakub Zych
575a110378 docs: fill G4 in the external-escalation reply 2026-10-22 22:36:19 +02:00
Jakub Zych
b8bf71c5dd docs: fold G3 leftovers into G4 and login-cookie quicks 2026-10-22 22:00:09 +02:00
Jakub Zych
b70abe48e6 docs: fill G3 in the external-escalation reply 2026-10-22 21:46:10 +02:00
Jakub Zych
3ebd78373c docs: hold user-plugin escalations for SummerCMS v0.5.0 2026-10-22 21:37:57 +02:00
Jakub Zych
76694c7cb9 docs: fill G2 in the external-escalation reply 2026-10-22 21:36:43 +02:00
Jakub Zych
66bb96eebd docs: capture six user-plugin escalation quicks 2026-10-22 21:04:34 +02:00
Jakub Zych
422bd1e01f test(19.6.1): complete UAT - 24 passed, 1 issue 2026-10-22 13:17:34 +02:00
Jakub Zych
88ec4df2b3 docs(todo): user logout fix released in sm-user-plugin v0.1.8 2026-10-22 10:45:14 +02:00
Jakub Zych
ee5b8844bf docs(todo): user logout bug confirmed, fixed in the plugin and the demo frontend 2026-10-22 04:57:09 +02:00
Jakub Zych
1e9927fa4b docs(19.8): map phase and its todos to g15office tasks 2026-10-22 04:41:51 +02:00
Jakub Zych
f5e9ee508b docs(todo): user plugin logout leaves the session cookie valid 2026-10-22 04:21:27 +02:00
Jakub Zych
a48afbd11e docs(19.8): re-review fixes recorded, IN-10..IN-13 and the exit-130 suggestion deferred 2026-10-22 04:10:42 +02:00
Jakub Zych
d311d029c3 docs(19.8): review fixes recorded, info findings captured as a todo 
- CR-01..CR-03 and WR-01..WR-08 fixed with their commits (19.8-05)
- IN-01..IN-09 deferred to one pending todo (minor, framework)
 2026-10-22 02:43:48 +02:00
Jakub Zych
c1f5ded59d docs: capture todo - Quiet plugin boot logs on console commands like --help 2026-10-21 15:34:02 +02:00
Jakub Zych
99b6df44d6 docs(19.5): record the email-proof release and close its todo 2026-10-21 15:33:05 +02:00
Jakub Zych
ff0e3a6c69 docs(19.5): record the last UAT answers (prohibitions, CR-02 wording) 2026-10-21 15:06:40 +02:00
Jakub Zych
e819f7b865 docs(19.5): link the email-proof release todo to g15office sqnwn1zi 2026-10-21 14:53:11 +02:00
Jakub Zych
20ecc4167d docs(19.5): capture the email-proof release todo 2026-10-21 14:51:30 +02:00
Jakub Zych
80fae5c279 docs(19.8): close the duplicate command names todo 2026-10-21 12:13:29 +02:00
Jakub Zych
52f17e41fc docs(19.5): capture the OAuth password-bootstrap todo 2026-10-21 01:28:24 +02:00
Jakub Zych
464f7fa0bb docs(19.5): close user-plugin console database todo 2026-10-20 23:07:22 +02:00
Jakub Zych
c1ae1bb571 docs(todos): link the purge-env consumer todo to g15office az6inuma 2026-10-20 22:48:48 +02:00
Jakub Zych
95ae878bd3 docs(todos): purge token rename follow-up for grzybyfunkcjonalne 2026-10-20 21:14:35 +02:00
Jakub Zych
a8f0122041 docs(todos): close journal-author-profile-fields; reload-on-deploy progress from Phase 19.4.1 2026-10-20 19:28:17 +02:00
Jakub Zych
8c01e41297 docs(quick-261020-42e): branded HTML error pages for browsers 2026-10-20 03:17:09 +02:00
Jakub Zych
7c2b7fcb79 docs(todo): branded error pages for browsers 2026-10-20 02:54:51 +02:00
Jakub Zych
8a1d413b7d docs: capture todo - Record PHP OIDC parity against WavePath before the OIDC cutover 2026-10-19 20:25:27 +02:00
Jakub Zych
811124259c docs(19.4): close neutral wristband resource todo 2026-10-19 18:32:10 +02:00
Jakub Zych
0827865796 docs(todo): sitemap browser view without XSLT 2026-10-19 12:23:06 +02:00
Jakub Zych
eab4528a5a docs: capture exploration — generic MCP module (phase 19.7, note, two prerequisite todos) 2026-10-17 20:31:25 +02:00
Jakub Zych
6878be4e6a docs: todo - audit-log admin action runs (18.1 AR-18.1-03) 2026-10-16 20:17:21 +02:00
Jakub Zych
374834b307 docs(17-05): link the site cache purge todo to g15office zugdxorb 2026-10-12 18:57:21 +02:00
Jakub Zych
7290d8f47b docs(17-05): todo for a site cache purge on menu and FAQ saves 2026-10-12 18:34:02 +02:00
Jakub Zych
ad1fa5abfa docs(14.2-01): todo for sm-user-plugin commands that need a published database 2026-10-11 17:41:29 +02:00
Jakub Zych
3f9d3b4f11 docs: sync todos with g15office and map phases to milestone tasks 
Tag the 17 open todos with their g15office task IDs, close 7 todos that
are already done or promoted to Phase 16.3, and record the sync rules
and the phase-to-task map in .planning/G15OFFICE.md.
 2026-10-11 02:01:50 +02:00
Jakub Zych
4d107f4ccb docs: capture todo - uploads keep the client extension (stored XSS, g15office bemfi2zs) 2026-10-11 01:35:37 +02:00
Jakub Zych
1821f92bee docs: capture todo - prompt open tabs to reload when a new version is deployed 2026-10-11 01:05:05 +02:00
Jakub Zych
9652834ca0 docs(16.3): insert phase 16.3 and promote the API tokens todo 2026-10-10 16:21:35 +02:00
Jakub Zych
6ff7d5da3e docs(16-03): todo for Journal HTML content re-save 2026-10-09 18:45:59 +02:00
Jakub Zych
65d577b828 docs(todos): capture plugin-registered cabana field types 2026-10-09 18:45:14 +02:00
Jakub Zych
7c5b8a8cb7 docs(quick-261009-mys): subtitle, avatar and My account page for backend users 2026-10-09 18:01:43 +02:00