summercms

01-framework-kernel-foundation

docs: move golem15.user to sm-user-plugin and supersede the Phase 1 extraction deferral

2026-10-02 11:02:07 +02:00

02-api-parity-harness-bootstrap

docs(02): add code review fix report

2026-09-17 14:45:35 +02:00

03-first-vertical-slice-genres-end-to-end

docs(quick-261001-ddh): record per-query collation decision superseding D-06

2026-10-01 09:53:57 +02:00

04-cli-scaffolding-i18n-and-mail

docs(phase-4): complete phase execution

2026-09-18 14:23:56 +02:00

05-data-layer-full-fidelity

docs(05): add code review fix report

2026-09-19 15:41:27 +02:00

06-http-routing-auth-groups-and-rate-limiting

docs(phase-06): add security threat verification

2026-10-12 16:39:03 +02:00

07-user-plugin-and-authentication

docs(phase-07): add security threat verification

2026-09-23 18:19:43 +02:00

08-oauth2-1-authorization-server

docs(phase-08): add security threat verification

2026-10-12 16:40:55 +02:00

09-backend-admin-authentication-and-schema-pipeline

docs(phase-09): add security threat verification

2026-10-12 16:59:46 +02:00

10-admin-vue-spa

docs(10): refresh security review evidence after the DOMPurify fix (T-10-16, T-10-24)

2026-10-12 21:05:09 +02:00

10.1-runtime-admin-extension-point

docs(planning): commit accumulated workflow artifacts

2026-10-06 22:31:37 +02:00

10.2-nest-framework-packages-under-modules-and-write-run-docs

docs(planning): commit accumulated workflow artifacts

2026-10-06 22:31:37 +02:00

11-jobs-realtime-and-search-infrastructure

docs(planning): commit accumulated workflow artifacts

2026-10-06 22:31:37 +02:00

11.1-summercms-documentation-for-humans-and-ai-agents

docs(planning): commit accumulated workflow artifacts

2026-10-06 22:31:37 +02:00

11.2-ready-to-share-summercms-io-website-and-newsletter-plugin

docs(phase-11.2): add security threat verification

2026-11-05 10:09:29 +01:00

12-p-ytarium-api-collections-and-albums

docs(phase-12): add security threat verification

2026-10-12 19:49:41 +02:00

12.1-user-plugin-admin-screens

docs(phase-12.1): add security threat verification

2026-10-12 19:59:46 +02:00

12.2-admin-form-fields-date-file-upload-relation-editing-with-def

docs(12.2): record BM UAT approval after v0.1.2 fixes

2026-10-03 05:59:06 +02:00

13-p-ytarium-api-wishlist-notifications-csv-credentials-public

docs(phase-13): add security threat verification

2026-10-12 18:24:04 +02:00

14-domain-jobs-and-external-integrations

docs(14): record code review disposition

2026-10-04 08:13:29 +02:00

14.1-oauth-identities-and-fonoteka-me-routes

docs(phase-14.1): add security threat verification

2026-10-12 19:38:28 +02:00

14.2-local-fonoteka-frontend-on-local-summercms-backend

docs(14.2): record human verification, D-02 and D-12 amendments

2026-10-12 13:02:13 +02:00

14.2.1-translate-plugin

docs(planning): commit accumulated workflow artifacts

2026-10-06 22:31:37 +02:00

14.3-one-command-app-scaffolding-summer-new-and-summercms-io-new

docs(quick-261008-kdf): summer delegates pass flags through and forward signals

2026-10-08 16:24:54 +02:00

15-journal-plugin

docs(planning): commit accumulated workflow artifacts

2026-10-06 22:31:37 +02:00

16-grzybyfunkcjonalne-pl-on-reusable-blog-views

docs(16-05): complete unit tests and phase gate plan

2026-10-09 20:18:50 +02:00

16.1-journal-admin-urgent-fixes-relation-search-list-state-post-f

docs(16.3): insert phase 16.3 and promote the API tokens todo

2026-10-10 16:21:35 +02:00

16.2-plugin-provided-field-types-and-the-blog-editor-formwidget

docs(phase-16.2): add security threat verification

2026-10-28 13:59:44 +01:00

16.3-backend-admin-personal-api-tokens-with-scopes

docs(phase-16.3): update security threat verification

2026-10-12 16:34:39 +02:00

17-blog-companions

docs(quick-261019-hgw): Translate hook ValidationError phrase keys in the request locale

2026-10-19 12:54:34 +02:00

18-payment-gateway

docs(phase-18): add security threat verification

2026-10-14 01:32:20 +02:00

18.1-payment-gateway-subscriptions

docs(quick-batch-261028-rqa): 6 framework items complete, close their todos, record follow-ups

2026-10-28 21:51:41 +01:00

19-chat-and-chatchannels

docs(phase-19): add security threat verification

2026-10-28 14:01:30 +01:00

19.1-chat-satellites

docs(19.1): re-verify after review fixes; mark WR-04 and WR-05 fixed

2026-10-18 19:25:32 +02:00

19.3-framework-transport-and-infrastructure-for-wavepath

docs(phase-19.3): add security threat verification

2026-11-05 09:33:44 +01:00

19.4-oidc-provider-on-wristband

test(19.4): record the user's push approval in UAT

2026-10-20 00:51:46 +02:00

19.4.1-early-public-demo-on-demo-summercms-io

docs(phase-19.4.1): add security threat verification

2026-11-05 10:12:53 +01:00

19.5-social-login-in-sm-user-plugin

docs(19.5): record the email-proof release and close its todo

2026-10-21 15:33:05 +02:00

19.6-two-factor-auth-and-device-flow-in-sm-user-plugin

docs(phase-19.6): add security threat verification

2026-10-28 14:03:50 +01:00

19.6.1-backend-administrators-screen

docs(phase-19.6.1): add/update security threat verification

2026-10-22 15:27:39 +02:00

19.7-generic-mcp-module

docs(phase-19.7): update validation strategy

2026-10-24 00:39:40 +02:00

19.8-console-commands-overhaul

docs(quick-261028-rqd): record the console info findings as fixed and the earlier gates' consumer names as a todo

2026-10-28 20:57:22 +01:00

20-demo-instance-with-every-shared-plugin

docs(phase-20): add security threat verification

2026-11-05 10:17:05 +01:00

30-cutover

docs(roadmap): reorder — demo at 20, Płytarium cutover 20→30, chat polish 19.2→31

2026-10-18 23:16:08 +02:00

31-chat-polish-against-wavepath-clients

docs(roadmap): reorder — demo at 20, Płytarium cutover 20→30, chat polish 19.2→31

2026-10-18 23:16:08 +02:00

32-seo-foundation

test(32): verification report and human verification items as UAT

2026-10-27 16:12:00 +01:00

32.1-mcp-oauth-for-plugin-apps-declared-scopes-mcp-subject-on-con

docs(quick-261105-eab): OIDC grant flows serialized with revoke

2026-11-05 10:42:26 +01:00

33-seo-output-audit-and-content

docs(33): phase 33 re-verification after the release (human_needed)

2026-11-05 02:32:51 +01:00

34-plugin-marketplace

docs(phase-34): add security threat verification

2026-11-05 09:32:29 +01:00

35-mail-templates-and-layouts-editor

docs(35): capture phase context

2026-11-06 11:02:13 +01:00

999.1-newsletter-plugin-and-signup-on-summercms-io

docs: defer phase 11.3 newsletter to backlog as 999.1

2026-10-02 00:49:47 +02:00

999.2-seo-follow-ups-after-phase-33-for-v0-6-2

docs: add backlog item 999.2, SEO follow-ups after Phase 33 (v0.6.2)

2026-11-05 02:33:31 +01:00