302 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
lilleman	03d14b1a20	Merge remote-tracking branch 'origin/main' into plugin-storage ... # Conflicts: # package-lock.json # package.json	2026-08-19 20:34:30 +02:00
renovate-bot	19b3fbc802	Update dependency lucide-static to v1.32.0 ... Release-Bump: minor	2026-08-19 04:18:11 +00:00
lilleman	47541ae97b	Warn rather than refuse on a storage URL mismatch, and scrub the provisioning DSN before discovery	2026-08-19 01:03:40 +02:00
lilleman	c5c9cce2b6	Keep role re-assertion within a non-superuser provisioner's rights, and test the second boot	2026-08-19 00:44:49 +02:00
lilleman	6db14a2205	Isolate the storage CI stack, prove least-privilege provisioning, drop the secret before discovery	2026-08-19 00:20:17 +02:00
lilleman	ae8f105360	Confine the Postgres driver to bootstrap, bound plugin connections, and gate the storage DDL	2026-08-19 00:08:35 +02:00
lilleman	bba048e38f	Refuse a throwaway plugin storage secret in bootstrap, before any role is created	2026-08-18 23:24:34 +02:00
lilleman	bf638dfb19	Give a plugin a Postgres database of its own	2026-08-18 23:12:13 +02:00
lilleman	5cc6c3d93e	Todo: note the code-field hint landed, the paste fix did not	2026-08-18 22:07:21 +02:00
lilleman	04af61a5e5	Hint the code field's digits-only rule, so the browser's refusal isn't bare	2026-08-18 22:07:12 +02:00
lilleman	a64a60644d	Todo: record the flow-POST proxy findings for the verification-code fix	2026-08-18 22:00:31 +02:00
lilleman	950eb5a911	Todo: record the manifest-over-.env decision for plugin config	2026-08-18 21:55:35 +02:00
lilleman	091011cfe5	Let Renovate reach the example plugins' manifests	2026-08-18 21:55:35 +02:00
lilleman	d55898eb8c	Refuse a stray package.json or node_modules in config/ by name	2026-08-18 21:55:32 +02:00
lilleman	f992cb6b2c	Merge branch 'main' into plugin-dependencies	2026-08-18 18:33:24 +02:00
lilleman	7d1f7750d3	Refuse a node_modules at the plugins/ root, where it outranks the host's	2026-08-18 08:14:21 +02:00
lilleman	3f9787df48	Follow symlinked plugin folders, and keep a plugin .npmrc out of the image	2026-08-18 07:49:51 +02:00
renovate-bot	a261570796	Update renovate/renovate Docker tag to v44.32.6 ... Release-Bump: minor	2026-08-18 04:18:04 +00:00
lilleman	77343e859a	Fail loud on a null package.json and a stray plugins/package.json	2026-08-17 22:50:29 +02:00
lilleman	616040fda6	Refuse a shadowing barrel copy, and record the packaging contract	2026-08-17 22:34:56 +02:00
lilleman	fee4fe632b	Let a plugin carry its own package.json and npm dependencies	2026-08-17 22:23:53 +02:00
lilleman	1ba6dbdc51	Merge branch 'main' into prose-diet	2026-08-17 21:05:29 +02:00
renovate-bot	09ab2fcb85	Update renovate/renovate Docker tag to v44.31.0 ... Release-Bump: minor	2026-08-17 04:17:51 +00:00
renovate-bot	a977ecf1c7	Update renovate/renovate Docker tag to v44.30.3 ... Release-Bump: minor	2026-08-15 04:18:17 +00:00
renovate-bot	04a508c169	Update postgres Docker tag to v18.6 ... Release-Bump: minor	2026-08-14 04:18:05 +00:00
renovate-bot	d74989c4e0	Update renovate/renovate Docker tag to v44.27.0 ... Release-Bump: minor	2026-08-13 04:18:02 +00:00
renovate-bot	43d7062d9e	Update renovate/renovate Docker tag to v44.24.3 ... Release-Bump: minor	2026-08-12 04:18:15 +00:00
renovate-bot	d5ee0353d4	Update renovate/renovate Docker tag to v44.23.0 ... Release-Bump: minor	2026-08-11 04:17:48 +00:00
renovate-bot	137c35478d	Update dependency lucide-static to v1.31.0 ... Release-Bump: minor	2026-08-10 04:17:44 +00:00
renovate-bot	352f2f2794	Update axllent/mailpit Docker tag to v1.30.7 ... Release-Bump: patch	2026-08-09 04:18:09 +00:00
renovate-bot	3b6f2c1ed3	Update renovate/renovate Docker tag to v44.14.10 ... Release-Bump: patch	2026-08-08 04:18:02 +00:00
renovate-bot	f99a029bc5	Update renovate/renovate Docker tag to v44.14.3 ... Release-Bump: minor	2026-08-07 04:18:27 +00:00
renovate-bot	1daa2b1777	Update renovate/renovate Docker tag to v44.13.3 ... Release-Bump: minor	2026-08-06 04:18:26 +00:00
lilleman	8a5d2dfd6c	Make the two persona references self-contained now that the section is gone	2026-08-05 23:42:58 +02:00
lilleman	a005acb93d	Cut non-essential prose from docs and comments, and require the same of every future change ... README loses the competitor comparison, the personas and the repeated philosophy; the five near-identical E2E command blocks become a table plus one command, and the file map a clause per entry. AGENTS.md keeps every decision but drops the narrative around them. todo.md's completed items collapse to their task line — git holds the rest. Comments lose restatement, README duplication and history ("used to", "originally", dated notes). AGENTS.md gains a Prose discipline section making this a standing pass on every change rather than a one-off cleanup. src/compose.test.ts now expects 6 documented E2E run commands, not 10, since the README states the command once instead of per suite.	2026-08-05 23:41:12 +02:00
lilleman	f5240ef7f6	Record macOS as a supported dev host and the commands still unverified there	2026-08-05 22:55:48 +02:00
lilleman	78f5f72151	Correct the artifacts upgrade runbook and the bootstrap exception's stated reason	2026-08-05 22:46:05 +02:00
lilleman	1cf34a0d45	Harden the artifact-ownership guards and document the root-owned upgrade trap	2026-08-05 22:40:36 +02:00
lilleman	073ec294e9	Run the E2E runner as the invoking user so its artifacts aren't root-owned	2026-08-05 22:25:17 +02:00
lilleman	e8b91ecd09	Compress AGENTS.md and add a standing rule to trim it on every edit	2026-08-05 21:52:56 +02:00
lilleman	ab5c24deb7	Cut the node_modules prose to one home each; drop a stray tracked file	2026-08-05 19:52:09 +02:00
lilleman	3d3313c0ee	Document the shadowing risk and the leftover dir; close two holes in the mount guard	2026-08-05 19:17:07 +02:00
lilleman	bcf4d7fb1f	Install deps above WORKDIR so no root-owned node_modules lands in the checkout	2026-08-05 18:18:49 +02:00
lilleman	2852722873	Record the stale-copy trap as accepted until the apiVersion freeze lifts	2026-08-05 18:00:38 +02:00
lilleman	45b16824f1	Point a failed discovery at the stale plugins/ copy, and document upgrading	2026-08-05 17:52:43 +02:00
lilleman	f76cd2a267	Todo updates	2026-08-05 17:48:55 +02:00
lilleman	38ebe40398	Never fail the boot on operator env; drop unusable ADMIN_PERMISSIONS with a warning	2026-08-05 17:36:04 +02:00
lilleman	1f0956dd58	Keep the group-delete confirm in user terms, not tuple mechanics	2026-08-05 15:39:08 +02:00
lilleman	edcd9fefc8	Deleting a group revokes the permissions it granted	2026-08-05 15:39:08 +02:00
lilleman	1787754781	Extend the read-only treatment to OAuth2 clients and write-intent GETs	2026-08-05 15:38:56 +02:00