3386cbef83
docs(19.4): defer PHP OIDC parity recording to the WavePath cutover
...
The user skipped the parity recording at 19.4-03 Task 5 and decided the
phase passes without it. D-14 in this phase is the fail-closed harness;
recording WavePath and a green replay move to the WavePath cutover phase
(todo 2026-10-19-record-php-oidc-parity-against-wavepath).
2026-10-19 20:26:05 +02:00
8a1d413b7d
docs: capture todo - Record PHP OIDC parity against WavePath before the OIDC cutover
2026-10-19 20:25:27 +02:00
1e37926ee9
docs(19.4-02): record plan state and roadmap progress
2026-10-19 19:28:09 +02:00
8171eb25ef
docs(19.4-02): complete sm-oauthserver-plugin plan
2026-10-19 19:27:30 +02:00
1c0d22a216
docs(19.4-01): record plan state and self-check
2026-10-19 18:36:18 +02:00
49e772afb8
docs(19.4-01): complete OIDC provider on wristband plan
2026-10-19 18:35:37 +02:00
811124259c
docs(19.4): close neutral wristband resource todo
2026-10-19 18:32:10 +02:00
756a97c181
docs(19.4): decide OIDC on wristband with golang-jwt
...
- Extend the hand-written wristband with an OIDC flavour; reject zitadel/oidc v3 (D-06, D-09, D-14)
- golang-jwt/jwt/v5 v5.3.1 signs id_tokens; JWKs encoded with the standard library
- go-oidc v3.21.0 and x/oauth2 v0.37.0 test-only in sm-oauthserver-plugin
- STACK.md zitadel/oidc row marked superseded
2026-10-19 18:06:54 +02:00
95051d26ce
docs(state): sync state.json after phase 19.4 planning
2026-10-19 18:00:09 +02:00
cf8d48c092
docs(19.4): create phase plan
2026-10-19 17:59:57 +02:00
df0d8c1d55
docs(phase-19.4): add research and validation strategy
2026-10-19 17:06:42 +02:00
10992ea1a5
docs(quick-261019-hgw): Translate hook ValidationError phrase keys in the request locale
2026-10-19 12:54:34 +02:00
d785958df2
docs(state): Phase 17 UAT and re-verification complete
2026-10-19 12:33:06 +02:00
1fca32042b
docs(17): re-verify phase 17 — passed, release gap closed
2026-10-19 12:32:43 +02:00
c5b6a83299
test(17): complete UAT - 40 passed, 0 issues
2026-10-19 12:24:39 +02:00
0827865796
docs(todo): sitemap browser view without XSLT
2026-10-19 12:23:06 +02:00
96595633c0
docs(quick-261019-05g): Phase 17 verify-work unblock and console docs example
2026-10-19 00:16:46 +02:00
59f57819cc
docs(17): shorten the COVERAGE.md opt-out reason and state the goal as a user story
2026-10-19 00:13:45 +02:00
eb7e39d335
docs(g15office): map Phase 20 demo, 30 cutover and 31 chat polish tasks
2026-10-18 23:16:37 +02:00
4fb9f142df
docs(roadmap): reorder — demo at 20, Płytarium cutover 20→30, chat polish 19.2→31
...
New Phase 20 is a public demo instance on sm-demo-app with every shared
plugin. Phases 21-29 stay off the roadmap until their goals firm up.
The cutover (closing v1.0) moves to 30; WavePath work starts at 31 with
the former 19.2, Horoskopia follows at 36-40. Seeds, notes and the
30-CONTEXT now point at the new numbers.
2026-10-18 23:16:08 +02:00
Jakub Zych
6aaaf59f43
docs(phase-19.1): complete phase transition
2026-10-18 19:26:07 +02:00
Jakub Zych
f1ff2f940b
docs(19.1): re-verify after review fixes; mark WR-04 and WR-05 fixed
2026-10-18 19:25:32 +02:00
Jakub Zych
62c948f5e6
docs(quick-261018-qbs): fix 19.1 review WR-04 and WR-05, optional-dependency doc note
...
Registers T-19.1-13..17 in 19.1-SECURITY.md.
2026-10-18 19:19:20 +02:00
Jakub Zych
3b0f2c32b8
docs(state): log goldens secret-gate fast task
2026-10-18 18:05:47 +02:00
Jakub Zych
8553cd2afe
docs(phase-19.1): close T-19.1-12 after goldens secret gate
2026-10-18 18:05:29 +02:00
Jakub Zych
2785bebd32
docs(phase-19.1): add security threat verification
2026-10-18 18:04:41 +02:00
Jakub Zych
b3f0b6ded0
test(19.1): complete UAT - 1 passed, 0 issues
...
Records the accepted userfriends go.mod override in VERIFICATION.md.
2026-10-18 17:54:54 +02:00
Jakub Zych
ebedba8c94
docs(19.1): persist verification, UAT and review disposition
2026-10-18 16:11:13 +02:00
Jakub Zych
905b035184
docs(19.1): add code review report
2026-10-18 16:10:02 +02:00
Jakub Zych
32617944a9
docs(19.1-06): record plan progress after maps and goldens SUMMARY
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-10-18 16:02:15 +02:00
Jakub Zych
7e51959b14
docs(19.1-06): complete PHP maps, goldens and phase gate plan
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-10-18 16:01:40 +02:00
Jakub Zych
374088eccf
docs(19.1-02): complete forum tracer plan
2026-10-18 15:43:18 +02:00
Jakub Zych
1f204f5a6c
docs(quick-261018-k9s): add the D-17 module in summercms.go
2026-10-18 14:55:11 +02:00
Jakub Zych
5ccf726e8a
docs(19.1-05): record plan progress after chatvideo SUMMARY
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-10-18 14:02:49 +02:00
Jakub Zych
782a6720bf
docs(19.1-05): complete chatvideo tracer plan
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-10-18 14:02:02 +02:00
Jakub Zych
43c4040256
docs(19.1-05): record livekit/server-sdk-go/v2 v2.19.0 before import
...
Pin github.com/livekit/server-sdk-go/v2 v2.19.0 (Apache-2.0). Flag
pion/media-sdk/buildkit; production talks to RoomAPI only; tests ship a
fake and must not construct lksdk.Room. Operator HTTP uses fetchguard
TrustedMode. Token golden vs PHP LiveKitService.php 80-99; jwt/v5
MapClaims fallback if ToJWT differs.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-10-18 13:52:27 +02:00
Jakub Zych
4f58c8fc2a
docs(19.1-04): record plan progress after herald SUMMARY
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-10-18 13:50:31 +02:00
Jakub Zych
0d3ba6517b
docs(19.1-04): complete herald tracer plan
...
Record proceed, coverage, tea-create of sm-herald-plugin, and Self-Check.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-10-18 13:49:47 +02:00
Jakub Zych
56b4a72a6a
docs(19.1-04): record webpush-go v1.4.0 for Herald before import
...
Pin github.com/SherClockHolmes/webpush-go v1.4.0 (MIT, jwt/v5 share,
Options.HTTPClient = *fetchguard.Client Do). The in-tree flare module is
the rejected alternative (push.* keys, websockets:generate-vapid-keys).
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-10-18 13:38:06 +02:00
Jakub Zych
f3ca32e486
docs(19.1-03): complete chatbots tracer plan
2026-10-18 13:36:22 +02:00
Jakub Zych
ceabc9ccbc
docs(19.1-02): record D-17 Render/Purify halt
...
- Task 1 wrote the forum policy note; forum execution waits on the D-17 module
- Do not create sm-forum-plugin until Render and Purify exist
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-10-18 13:24:43 +02:00
Jakub Zych
2740ab276c
docs(19.1-02): add forum bluemonday policy note
...
- Pin the named forum policy on bluemonday v1.0.27 already in go.mod
- Separate it from seaglass UGC: PHP allow-list, http/https/mailto, nofollow and target blank
- D-17 owns Render/Purify; forum must not vendor goldmark or bluemonday
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-10-18 13:24:18 +02:00
Jakub Zych
eb341147d8
docs(19.1-01): record plan progress after userfriends SUMMARY
...
Advance Phase 19.1 to plan 2 of 6 and tick 19.1-01 on the roadmap now that the sibling plugin is on origin/main.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-10-18 13:22:15 +02:00
Jakub Zych
03591e1d6c
docs(19.1-01): summarize userfriends tracer, groups, adapter and GDPR
...
Record the proceed-and-push lock, sibling repo commits, tea remote, and Task 3 deviations so later 19.1 plans can consume the new plugin.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-10-18 13:21:39 +02:00
Jakub Zych
f984e5e63f
docs(19.1-01): patch Phase 19.1 Repos, SC2 and SC3
...
- Repos add summercms.go for the Markdown module
- Criterion 2 names webpush-go / LiveKit / bluemonday notes
- Criterion 3 marked already met (Wavepath 182b514)
2026-10-18 13:13:57 +02:00
Jakub Zych
012a5a2c5a
docs(19.1): record planned phase
2026-10-18 12:56:33 +02:00
Jakub Zych
cddf3a5008
docs(19.1): revise phase plans
2026-10-18 12:52:39 +02:00
Jakub Zych
7c7a1ad45d
docs(19.1): create phase plan
2026-10-18 12:45:31 +02:00
Jakub Zych
23dfb05b0a
docs(state): record phase 19.7 context session
2026-10-18 12:41:48 +02:00
Jakub Zych
b8f90749c7
docs(19.7): capture phase context
2026-10-18 12:41:37 +02:00
