golem15/summercms
4
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
2,142 Commits 1 Branch 44 Tags
f3f87f3cc4e28bcbb6a48e7d0a089ca387e5a233
Commit Graph

79 Commits

Author SHA1 Message Date
Jakub Zych
825a3fd2da docs(quick-261028-r16): close the two lagoon todos, record the fonoteka.go and S3 follow-ups 2026-10-28 19:47:44 +01:00
Jakub Zych
8c9c967c88 docs: close todo and debug session - user logout leaves the session cookie valid 2026-10-28 19:24:43 +01:00
Jakub Zych
1a487bc644 docs(quick-261028-pq8): fix the four internal/build scaffolder todos 2026-10-28 19:18:29 +01:00
Jakub Zych
2bef465ecd docs: capture todo - make:plugin drops the vendor namespace 2026-10-28 18:24:53 +01:00
Jakub Zych
bd23a82f22 docs(todos): close FAQ port, site-cache purge, sitemap XSLT; drop sitemap port 2026-10-28 13:19:06 +01:00
Jakub Zych
1769e15fbd docs(19.6): record code review disposition and the WR-05 todo 2026-10-26 16:43:41 +01:00
Jakub Zych
a70dbb6ff0 docs(todos): link two 19.6 todos to their g15office tasks 2026-10-26 15:36:59 +01:00
Jakub Zych
07f4632dc2 docs(19.6): v0.1.1 release recorded, finding F-1 deferred 
- security review: T-19.6-37 closed by sm-mfa-plugin v0.1.1, F-1 deferred
  with the corrected reason for the activate-by-code mint path
- validation map: plan 04 Tasks 5 and 6 green
- todo for F-1; deferred items: tag message resolved, F-1 deferred
 2026-10-26 15:34:38 +01:00
Jakub Zych
d3b1636ac7 docs(19.6-03): complete WebAuthn and adoption plan 
sm-demo-app mounts golem15.mfa v0.1.0 at user v0.1.12, sociallogin v0.1.4
and the two-factor UI (0eb1f60..bb24207, pushed with the 19 earlier
commits as 18597e5..bb24207, not deployed). The summary records the
"proceed" reply, the push checks and the tests. deferred-items.md gains the
private sm-mfa-plugin repository's effect on the demo's release build, and
a pending todo tracks the demo's leftover journal and oauthserver moves.
 2026-10-26 13:47:45 +01:00
Jakub Zych
4730e37742 docs(19.7-05): security review and contract, deferred items, folded todos closed 
- 19.7-SECURITY-REVIEW.md: T-19.7-01..41 and T-19.7-SC with file, line and
  pinning test; two production fixes (c49983d, 1111828); superuser reach
  accepted as designed with audit and ceiling
- 19.7-SECURITY.md: threats_open 0, accepted risks AR-19.7-01..05
- the frontend permission and account link todos move to todos/done with
  their closing notes
 2026-10-23 14:29:56 +02:00
Jakub Zych
e2759d668f docs: user-plugin escalations released in sm-user-plugin v0.1.9, reply ready to send 2026-10-23 00:25:24 +02:00
Jakub Zych
e5dd4579a8 docs: fill item 8 in the external-escalation reply 2026-10-23 00:10:27 +02:00
Jakub Zych
a9e3f2434d docs: tune item 8 password-routes quick after item 7 2026-10-22 23:53:43 +02:00
Jakub Zych
6a1974c0d2 docs: fill item 7 in the external-escalation reply 2026-10-22 23:45:20 +02:00
Jakub Zych
ec69f547b8 docs: tune item 7 cookie quick after 9-10 2026-10-22 23:14:09 +02:00
Jakub Zych
e9ebf93d36 docs(quick-261022-vfz): user-plugin /login throttle via surf.ClientIP and whole-second tokens_valid_after writers 2026-10-22 23:08:04 +02:00
Jakub Zych
c309a1abe9 docs: tune items 9-10 quick after G4 2026-10-22 22:37:41 +02:00
Jakub Zych
575a110378 docs: fill G4 in the external-escalation reply 2026-10-22 22:36:19 +02:00
Jakub Zych
b8bf71c5dd docs: fold G3 leftovers into G4 and login-cookie quicks 2026-10-22 22:00:09 +02:00
Jakub Zych
b70abe48e6 docs: fill G3 in the external-escalation reply 2026-10-22 21:46:10 +02:00
Jakub Zych
3ebd78373c docs: hold user-plugin escalations for SummerCMS v0.5.0 2026-10-22 21:37:57 +02:00
Jakub Zych
76694c7cb9 docs: fill G2 in the external-escalation reply 2026-10-22 21:36:43 +02:00
Jakub Zych
66bb96eebd docs: capture six user-plugin escalation quicks 2026-10-22 21:04:34 +02:00
Jakub Zych
422bd1e01f test(19.6.1): complete UAT - 24 passed, 1 issue 2026-10-22 13:17:34 +02:00
Jakub Zych
88ec4df2b3 docs(todo): user logout fix released in sm-user-plugin v0.1.8 2026-10-22 10:45:14 +02:00
Jakub Zych
ee5b8844bf docs(todo): user logout bug confirmed, fixed in the plugin and the demo frontend 2026-10-22 04:57:09 +02:00
Jakub Zych
1e9927fa4b docs(19.8): map phase and its todos to g15office tasks 2026-10-22 04:41:51 +02:00
Jakub Zych
f5e9ee508b docs(todo): user plugin logout leaves the session cookie valid 2026-10-22 04:21:27 +02:00
Jakub Zych
a48afbd11e docs(19.8): re-review fixes recorded, IN-10..IN-13 and the exit-130 suggestion deferred 2026-10-22 04:10:42 +02:00
Jakub Zych
d311d029c3 docs(19.8): review fixes recorded, info findings captured as a todo 
- CR-01..CR-03 and WR-01..WR-08 fixed with their commits (19.8-05)
- IN-01..IN-09 deferred to one pending todo (minor, framework)
 2026-10-22 02:43:48 +02:00
Jakub Zych
c1f5ded59d docs: capture todo - Quiet plugin boot logs on console commands like --help 2026-10-21 15:34:02 +02:00
Jakub Zych
99b6df44d6 docs(19.5): record the email-proof release and close its todo 2026-10-21 15:33:05 +02:00
Jakub Zych
ff0e3a6c69 docs(19.5): record the last UAT answers (prohibitions, CR-02 wording) 2026-10-21 15:06:40 +02:00
Jakub Zych
e819f7b865 docs(19.5): link the email-proof release todo to g15office sqnwn1zi 2026-10-21 14:53:11 +02:00
Jakub Zych
20ecc4167d docs(19.5): capture the email-proof release todo 2026-10-21 14:51:30 +02:00
Jakub Zych
80fae5c279 docs(19.8): close the duplicate command names todo 2026-10-21 12:13:29 +02:00
Jakub Zych
52f17e41fc docs(19.5): capture the OAuth password-bootstrap todo 2026-10-21 01:28:24 +02:00
Jakub Zych
464f7fa0bb docs(19.5): close user-plugin console database todo 2026-10-20 23:07:22 +02:00
Jakub Zych
c1ae1bb571 docs(todos): link the purge-env consumer todo to g15office az6inuma 2026-10-20 22:48:48 +02:00
Jakub Zych
95ae878bd3 docs(todos): purge token rename follow-up for grzybyfunkcjonalne 2026-10-20 21:14:35 +02:00
Jakub Zych
a8f0122041 docs(todos): close journal-author-profile-fields; reload-on-deploy progress from Phase 19.4.1 2026-10-20 19:28:17 +02:00
Jakub Zych
8c01e41297 docs(quick-261020-42e): branded HTML error pages for browsers 2026-10-20 03:17:09 +02:00
Jakub Zych
7c2b7fcb79 docs(todo): branded error pages for browsers 2026-10-20 02:54:51 +02:00
Jakub Zych
8a1d413b7d docs: capture todo - Record PHP OIDC parity against WavePath before the OIDC cutover 2026-10-19 20:25:27 +02:00
Jakub Zych
811124259c docs(19.4): close neutral wristband resource todo 2026-10-19 18:32:10 +02:00
Jakub Zych
0827865796 docs(todo): sitemap browser view without XSLT 2026-10-19 12:23:06 +02:00
Jakub Zych
eab4528a5a docs: capture exploration — generic MCP module (phase 19.7, note, two prerequisite todos) 2026-10-17 20:31:25 +02:00
Jakub Zych
6878be4e6a docs: todo - audit-log admin action runs (18.1 AR-18.1-03) 2026-10-16 20:17:21 +02:00
Jakub Zych
374834b307 docs(17-05): link the site cache purge todo to g15office zugdxorb 2026-10-12 18:57:21 +02:00
Jakub Zych
7290d8f47b docs(17-05): todo for a site cache purge on menu and FAQ saves 2026-10-12 18:34:02 +02:00