golem15/summercms
4
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Commit Graph

  • 44835e4c6b fix(cabana): safe account action URLs, per-section isolation and the prompted record action contract (B-WR-03, B-WR-05, B-WR-06) Jakub Zych 2026-10-23 16:24:34 +02:00
  • 24cf6cd931 fix(pier): end only the revoked token's or client's MCP sessions and log the client address (B-WR-04, B-IN-04) Jakub Zych 2026-10-23 16:21:37 +02:00
  • 0ec00f7f69 docs(19.7-07): record the member token scope design decision (E-2, P-30) Jakub Zych 2026-10-23 16:15:43 +02:00
  • 9eedfbbb29 feat(pact): add HasFrontendTokenScopes and the shared ValidTokenScopeName rule (E-2) Jakub Zych 2026-10-23 16:15:25 +02:00
  • c14238b94b feat(bouncer): stamp auth_time at sign-in and carry it unchanged through refresh (C-CR-02) Jakub Zych 2026-10-23 16:13:49 +02:00
  • 60a86677f2 docs(phase-19.7): update tracking after gap wave 1 Jakub Zych 2026-10-23 16:11:17 +02:00
  • 6ca9e1706d docs(19.7-06): complete lane A gap-closure plan in pier Jakub Zych 2026-10-23 16:10:52 +02:00
  • 95f177b1e0 docs(cooler): give KeyPrefix and keyPrefix their own doc comments (A-IN-02) Jakub Zych 2026-10-23 16:08:27 +02:00
  • 211cec11b0 fix(pact): add MCPPrompt.Writes so a write-directing prompt sits under the read/write ceiling Jakub Zych 2026-10-23 16:08:27 +02:00
  • 104db9959f fix(pier): refuse path values the mux never delivers and harden dispatch Jakub Zych 2026-10-23 16:05:32 +02:00
  • 240457291f fix(pier): widen returning identities, warm the Redis store, end stateless listen streams, refuse personal tokens without a TokenID Jakub Zych 2026-10-23 15:59:54 +02:00
  • c1c0c77ddc fix(pier): reserve session slots atomically and build servers outside router locks Jakub Zych 2026-10-23 15:56:57 +02:00
  • 2bf9dca603 fix(pier): reap stateful sessions whose store record expired Jakub Zych 2026-10-23 15:50:04 +02:00
  • d18d8f0dc2 docs(19.7): ban and password reset revoke OIDC grants as well as MCP grants (user decision) Jakub Zych 2026-10-23 15:46:44 +02:00
  • d763e92650 docs(19.7): gap-closure plans 06-09 for the review findings and the sm-servers-app escalations Jakub Zych 2026-10-23 15:44:15 +02:00
  • 2527498d03 docs(19.7): gap-closure plan split and release order Jakub Zych 2026-10-23 15:03:52 +02:00
  • cee58c0f65 docs(19.7): gap-closure inputs: review findings and two sm-servers-app escalations Jakub Zych 2026-10-23 15:02:44 +02:00
  • fef1cbbbbd docs(19.7): add code review report Jakub Zych 2026-10-23 14:54:54 +02:00
  • 5563df7e68 docs(phase-19.7): update tracking after wave 5 Jakub Zych 2026-10-23 14:42:11 +02:00
  • d9d2acae88 docs(19.7-05): plan 05 summary; phase gate green, security review done, plugin test commits local Jakub Zych 2026-10-23 14:41:38 +02:00
  • 4730e37742 docs(19.7-05): security review and contract, deferred items, folded todos closed Jakub Zych 2026-10-23 14:29:47 +02:00
  • 0b8e027b81 test(19.7-05): security review pins for the MCP endpoint's outer layers Jakub Zych 2026-10-23 14:26:26 +02:00
  • d621ef1b41 docs(19.7-05): validation map filled, Wave 0 complete, Nyquist compliant Jakub Zych 2026-10-23 14:24:13 +02:00
  • a94bdc199d test(19.7-05): gate stages plugins, consumers, docker and docs Jakub Zych 2026-10-23 14:24:13 +02:00
  • f14eae96dd test(19.7-05): framework unit tests for every validation row and the gate's admin stage Jakub Zych 2026-10-23 14:04:16 +02:00
  • 1111828e8a fix(pier): an ended session is never written back by a request still in flight Jakub Zych 2026-10-23 13:55:04 +02:00
  • c29d2289d0 fix(pier): a tools/call without arguments or with null arguments is an empty object Jakub Zych 2026-10-23 13:33:24 +02:00
  • 3bbbe6c11e test(19.7-05): phase gate with the go and marker stages, pier test helpers, TestToolsList and TestDispatchMarker Jakub Zych 2026-10-23 13:31:41 +02:00
  • c49983d3f8 fix(cabana): the backend middleware refuses a dispatch marker carrying a frontend principal Jakub Zych 2026-10-23 13:27:25 +02:00
  • 905111ba72 docs(phase-19.7): update tracking after wave 4 Jakub Zych 2026-10-23 13:18:15 +02:00
  • 81266de77d docs(19.7-04): plan 04 summary; oauthserver v0.1.2 and Journal v0.2.3 released, pinned in the demo Jakub Zych 2026-10-23 13:17:36 +02:00
  • 9550fe0a9f docs(19.7-04): deferred items from the oauthserver, Journal and demo MCP wiring Jakub Zych 2026-10-23 12:56:08 +02:00
  • 29ba9a28cb docs: log cabana subject-event fix Jakub Zych 2026-10-23 12:44:15 +02:00
  • 7c43820afe docs(19.7): cabana subject-event bug resolved Jakub Zych 2026-10-23 12:44:09 +02:00
  • d96c726d6c fix(cabana): backend subject events reach pier as *pact.MCPSubjectChanged, fired after the transaction commits Jakub Zych 2026-10-23 12:44:09 +02:00
  • 5c35f83b9d docs(phase-19.7): update tracking after wave 3 Jakub Zych 2026-10-23 12:31:00 +02:00
  • 607658599f docs(19.7-03): sm-user-plugin v0.1.10 released and pinned in five apps; cabana subject-event bug deferred Jakub Zych 2026-10-23 12:30:15 +02:00
  • d039350729 docs: record the v0.4.4 and sm-user-plugin v0.1.9 releases Jakub Zych 2026-10-23 00:31:56 +02:00
  • e2759d668f docs: user-plugin escalations released in sm-user-plugin v0.1.9, reply ready to send v0.4.4 Jakub Zych 2026-10-23 00:25:24 +02:00
  • eadd58414d docs(19.7-02): close plan without a release Jakub Zych 2026-10-23 00:23:08 +02:00
  • a26ee2b72d docs(quick-261022-x7a): user-plugin golem15.user.password.public_routes switch, login/forgot/reset 404 when false Jakub Zych 2026-10-23 00:15:49 +02:00
  • e5dd4579a8 docs: fill item 8 in the external-escalation reply Jakub Zych 2026-10-23 00:10:27 +02:00
  • 894a3d572f docs(19.7): next v0.4.x release after the quick tasks, v0.5.0 at phase completion Jakub Zych 2026-10-23 00:08:10 +02:00
  • d1a15a6f5f docs(19.7): tag v0.5.0 only when phase 19.7 is complete Jakub Zych 2026-10-23 00:05:39 +02:00
  • a9e3f2434d docs: tune item 8 password-routes quick after item 7 Jakub Zych 2026-10-22 23:53:43 +02:00
  • cd90be9de3 docs(quick-261022-wah): user-plugin opt-in token_cookie session cookie and cookie-carried /refresh rotation Jakub Zych 2026-10-22 23:51:57 +02:00
  • 6a1974c0d2 docs: fill item 7 in the external-escalation reply Jakub Zych 2026-10-22 23:45:20 +02:00
  • ec69f547b8 docs: tune item 7 cookie quick after 9-10 Jakub Zych 2026-10-22 23:14:09 +02:00
  • e9ebf93d36 docs(quick-261022-vfz): user-plugin /login throttle via surf.ClientIP and whole-second tokens_valid_after writers Jakub Zych 2026-10-22 23:08:04 +02:00
  • c309a1abe9 docs: tune items 9-10 quick after G4 Jakub Zych 2026-10-22 22:37:41 +02:00
  • 575a110378 docs: fill G4 in the external-escalation reply Jakub Zych 2026-10-22 22:36:19 +02:00
  • 54ff7bd665 docs(quick-261022-usi): user-plugin jwt blacklist and hooks wired via lagoon.OnDatabase under serve Jakub Zych 2026-10-22 22:36:19 +02:00
  • b8bf71c5dd docs: fold G3 leftovers into G4 and login-cookie quicks Jakub Zych 2026-10-22 22:00:09 +02:00
  • 98a95c9c92 docs(quick-261022-tto): user-plugin session routes accept the session cookies Jakub Zych 2026-10-22 21:52:03 +02:00
  • b70abe48e6 docs: fill G3 in the external-escalation reply Jakub Zych 2026-10-22 21:46:10 +02:00
  • 3ebd78373c docs: hold user-plugin escalations for SummerCMS v0.5.0 Jakub Zych 2026-10-22 21:37:57 +02:00
  • 76694c7cb9 docs: fill G2 in the external-escalation reply Jakub Zych 2026-10-22 21:36:43 +02:00
  • 3026cf61fb docs(quick-261022-tb4): password login refuses a not-activated account Jakub Zych 2026-10-22 21:32:30 +02:00
  • cb33c497be docs(quick-261022-k9k): admin keyboard shortcuts Jakub Zych 2026-10-22 21:11:24 +02:00
  • 604fee757e chore(quick-261022-k9k): rebuild embedded admin dist Jakub Zych 2026-10-22 21:08:31 +02:00
  • 058738efdf test(quick-261022-k9k): keyboard shortcut coverage Jakub Zych 2026-10-22 21:07:40 +02:00
  • 66bb96eebd docs: capture six user-plugin escalation quicks Jakub Zych 2026-10-22 21:04:34 +02:00
  • 101cad0365 feat(quick-261022-k9k): Esc, slash and help shortcuts, settings, account and modal save keys Jakub Zych 2026-10-22 21:03:30 +02:00
  • 49accf675e feat(quick-261022-k9k): admin save shortcuts and Create and new on record forms Jakub Zych 2026-10-22 21:00:57 +02:00
  • 1aff96f58a docs(19.7-02): record deferred items from the pier session router Jakub Zych 2026-10-22 18:36:23 +02:00
  • 8c6c0a3654 feat(19.7-02): identity kinds, ceilings, prompts and the MCP services page Jakub Zych 2026-10-22 18:34:39 +02:00
  • 806e87c510 feat(19.7-02): Redis sessions, event fan-out, stateless protocol path and resource metadata Jakub Zych 2026-10-22 18:23:43 +02:00
  • cfdbaf0e47 feat(19.7-02): pier MCP module tracer with in-process dispatch and sessions Jakub Zych 2026-10-22 18:15:59 +02:00
  • 3ea82a1543 docs(19.7-02): decide the MCP Go SDK Jakub Zych 2026-10-22 18:00:16 +02:00
  • 3746675c72 docs(19.7-01): complete framework seams plan Jakub Zych 2026-10-22 16:45:12 +02:00
  • fab99e0a00 chore(19.7-01): rebuild the embedded admin for account contributions and prompted actions Jakub Zych 2026-10-22 16:38:37 +02:00
  • 9a5f27e86c feat(19.7-01): admin SPA account contributions and prompted record actions Jakub Zych 2026-10-22 16:38:37 +02:00
  • 9f14cf603c feat(19.7-01): account contributions, prompted record actions and backend subject events Jakub Zych 2026-10-22 16:31:29 +02:00
  • 6887abf575 feat(19.7-01): SDK-free pact contracts for MCP, account contributions and prompted actions Jakub Zych 2026-10-22 16:16:35 +02:00
  • 5c15dea569 feat(19.7-01): streaming routes, MCP mount hook, configurable authorize scopes Jakub Zych 2026-10-22 16:11:37 +02:00
  • 1bd91a4522 feat(19.7-01): in-process dispatch marker and compiled handler lookup Jakub Zych 2026-10-22 16:00:19 +02:00
  • a74a218cd9 docs(19.7): mark phase planned after verification Jakub Zych 2026-10-22 15:46:30 +02:00
  • 3653422572 docs(phase-19.6.1): mark phase complete after UAT and security Jakub Zych 2026-10-22 15:36:25 +02:00
  • b28800ad39 docs(phase-19.6.1): add/update security threat verification Jakub Zych 2026-10-22 15:27:39 +02:00
  • 0a5945d681 test(19.6.1): mark verification passed after UAT retest Jakub Zych 2026-10-22 15:24:11 +02:00
  • 19c6a65575 test(19.6.1): pass UAT test 2 after relation-label remount fix Jakub Zych 2026-10-22 15:24:01 +02:00
  • 49ffb395c0 docs(19.7): add pattern map, mark D-36 informational, drop session path from plan 02 Jakub Zych 2026-10-22 14:59:54 +02:00
  • 2f496f6200 test(19.6.1): re-verify after relation-label gap closure Jakub Zych 2026-10-22 14:59:34 +02:00
  • 43d0f4622c docs(19.7): revise plans after plan check Jakub Zych 2026-10-22 14:57:52 +02:00
  • 587f9ddf2f docs(19.6.1): review persist relation labels Jakub Zych 2026-10-22 14:51:39 +02:00
  • ed7da85f46 docs(19.6.1-05): mark phase ready for verification Jakub Zych 2026-10-22 14:44:14 +02:00
  • 1e3b006c5d docs(19.6.1-05): record plan position and decision Jakub Zych 2026-10-22 14:44:02 +02:00
  • 007c68bab2 docs(19.6.1-05): complete persist relation labels plan Jakub Zych 2026-10-22 14:43:34 +02:00
  • 51e1a1ea6e chore(19.6.1-05): rebuild embedded admin dist Jakub Zych 2026-10-22 14:42:18 +02:00
  • d47d6182f0 docs(19.7): create phase plans (5 plans: seams, pier, user plugin, oauthserver+journal+demo, tests and security review) Jakub Zych 2026-10-22 14:41:30 +02:00
  • 14baafb27c feat(19.6.1-05): persist picked relation labels across FormView tab remount Jakub Zych 2026-10-22 14:40:35 +02:00
  • ba0501c274 test(19.6.1): complete UAT - 25 passed, 1 issue Jakub Zych 2026-10-22 14:30:13 +02:00
  • 51d088a3b2 docs(quick-261022-imo): settings section panel scoped to the current category Jakub Zych 2026-10-22 13:54:08 +02:00
  • 80bb5aee3d chore(quick-261022-imo): rebuild embedded admin dist Jakub Zych 2026-10-22 13:53:06 +02:00
  • 85476fa3fe test(quick-261022-imo): settings section panel coverage Jakub Zych 2026-10-22 13:52:20 +02:00
  • 834ef98572 feat(quick-261022-imo): settings section panel scoped to the current category Jakub Zych 2026-10-22 13:50:39 +02:00
  • a97743a39f test(19.6.1): persist human verification items as UAT Jakub Zych 2026-10-22 13:48:03 +02:00
  • d7dc2a385a docs(19.6.1): record gap-closure code review Jakub Zych 2026-10-22 13:44:02 +02:00
  • 6bd2506db6 docs(19.6.1-04): complete gap-closure plan Jakub Zych 2026-10-22 13:37:26 +02:00
  • e62086084b chore(19.6.1-04): require CR-01 and WR-03 tests in the phase gate Jakub Zych 2026-10-22 13:36:12 +02:00