197 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
lilleman	076d1f6926	Record the authorization vocabulary decision in AGENTS.md	2026-08-03 17:04:17 +02:00
lilleman	925debbd51	Rename the coarse gate from role to permission, matching RBAC	2026-08-03 17:02:47 +02:00
lilleman	41c568796c	Cut the security-model threat table down to what the code cannot show	2026-08-03 13:28:56 +02:00
lilleman	f7d70cfff8	Rename the Keto User namespace to Identity, matching Kratos	2026-08-03 12:19:12 +02:00
lilleman	ca3d49ec45	Document the users, groups and roles model in README	2026-08-03 11:39:26 +02:00
lilleman	acce2d2556	Rename the plugin-API permission gate to role	2026-08-03 11:31:04 +02:00
lilleman	702e42de09	Reflow the security-model prose to the file's wrap width	2026-08-02 17:34:57 +02:00
lilleman	98bdd2c1b5	Record the open CSRF token-binding decision as a todo item	2026-08-02 17:33:44 +02:00
lilleman	12913402a6	Add the seeded admin login to the production secrets checklist	2026-08-02 17:33:04 +02:00
lilleman	7dee80a976	Review fixes: denylist-conditional revoke, Ory secret wiring, exp guard test	2026-08-02 17:25:07 +02:00
lilleman	c0fe8b0a82	Review fixes: re-mint path, real session lifetime, full secret checklist	2026-08-02 17:14:20 +02:00
lilleman	fb7d20a7db	Document the auth security model in README	2026-08-02 17:03:09 +02:00
lilleman	0919adf4ef	Review fixes: plain depends_on merge, positive secret assertion	2026-08-02 16:10:35 +02:00
lilleman	f5f4455b81	Browser E2E for the admin OAuth2-clients screen	2026-08-02 16:03:30 +02:00
lilleman	3f30f889c3	README: note GITHUB_ secret-name prefix is rejected too	2026-08-02 15:48:04 +02:00
lilleman	ae1479f55b	Renovate: set GITHUB_COM_TOKEN for authenticated github.com lookups	2026-08-02 15:43:38 +02:00
lilleman	bb6021adf7	Update lockfile for typescript 7.0.2	2026-08-02 15:29:13 +02:00
renovate-bot	c4e6212189	chore(deps): update dependency typescript to v7 ... Release-Bump: major	2026-08-02 15:29:03 +02:00
lilleman	6f6aafad39	Import ejs as default export — the v6 ESM build exports only default	2026-08-02 15:25:51 +02:00
lilleman	4aada6eed9	Update lockfile for ejs 6.0.1	2026-08-02 15:25:51 +02:00
renovate-bot	a574effb37	fix(deps): update dependency ejs to v6 ... Release-Bump: major	2026-08-02 15:25:51 +02:00
lilleman	c259497627	Update lockfile for @types/node 24.13.3	2026-08-02 15:22:25 +02:00
renovate-bot	8e74532a77	chore(deps): update node.js to v24.18.1 ... Release-Bump: minor	2026-08-02 15:22:25 +02:00
lilleman	62f95afe63	Merge branch 'main' into remove-stability-auto-review	2026-08-02 15:19:13 +02:00
lilleman	ffeec70f8f	Update lockfile and regenerate icons.ejs for lucide-static 1.28.0	2026-08-02 15:15:12 +02:00
renovate-bot	62d4c8b7cd	fix(deps): update dependency lucide-static to v1.28.0 ... Release-Bump: minor	2026-08-02 15:15:12 +02:00
lilleman	12cc2d54c2	Clarify todo.md reference and record manual review policy	2026-08-02 15:12:22 +02:00
lilleman	bb6adc40af	Remove stability reviewer auto-run from AGENTS.md	2026-08-02 15:06:48 +02:00
lilleman	c64156a9d5	Update e2e-tests lockfile for @playwright/test 1.62.1	2026-08-02 15:06:47 +02:00
renovate-bot	de2ad42f5a	chore(deps): update playwright to v1.62.1 ... Release-Bump: minor	2026-08-02 15:06:47 +02:00
lilleman	9213e5a0de	Make the CI web-image rebuild its own step; note the shared-workspace image-tag race	2026-08-02 15:06:21 +02:00
lilleman	45054db5e6	Build the web image in ci.sh so typecheck and tests run the branch's own deps	2026-08-02 15:06:21 +02:00
lilleman	23bafd247d	Fix typos in the AGENTS.md comment rules	2026-08-02 15:00:56 +02:00
lilleman	7c66599f35	Todo and agents updates	2026-08-02 14:11:33 +02:00
lilleman	6db0f57bf4	Trim README and workflow prose that restates the code	2026-08-02 13:55:50 +02:00
lilleman	175717f04d	Move the docs-only decision into ci.sh so it runs locally	2026-08-02 13:38:32 +02:00
lilleman	6c850b8923	Skip the test gate on docs-only branches	2026-08-02 13:31:07 +02:00
renovate-bot	af4a70d904	chore(deps): update renovate/renovate docker tag to v44.6.0 ... Release-Bump: minor v0.1.2	2026-08-02 04:18:00 +00:00
renovate-bot	a0244a32cd	chore(deps): update renovate/renovate docker tag to v44.5.3 ... Release-Bump: minor v0.1.1	2026-08-01 04:18:15 +00:00
renovate-bot	6559f40142	chore(deps): update renovate/renovate docker tag to v44 ... Release-Bump: major v0.1.0	2026-07-31 04:18:12 +00:00
renovate-bot	d3154819f8	chore(deps): update renovate/renovate docker tag to v43.288.0 ... Release-Bump: minor v0.0.12	2026-07-30 04:17:51 +00:00
renovate-bot	1cba6d470c	chore(deps): update axllent/mailpit docker tag to v1.30.6 ... Release-Bump: patch v0.0.11	2026-07-29 04:18:24 +00:00
renovate-bot	194c090bd1	chore(deps): update renovate/renovate docker tag to v43.285.3 ... Release-Bump: minor v0.0.10	2026-07-28 04:17:59 +00:00
renovate-bot	ff5094f7e9	chore(deps): update renovate/renovate docker tag to v43.281.1 ... Release-Bump: minor v0.0.9	2026-07-27 04:18:12 +00:00
renovate-bot	419ee1750b	chore(deps): update renovate/renovate docker tag to v43.280.5 ... Release-Bump: patch v0.0.8	2026-07-26 04:18:07 +00:00
renovate-bot	cedac950be	chore(deps): update renovate/renovate docker tag to v43.280.4 ... Release-Bump: minor v0.0.7	2026-07-25 04:17:42 +00:00
renovate-bot	ff455f1ef2	chore(deps): update axllent/mailpit docker tag to v1.30.5 ... Release-Bump: patch v0.0.6	2026-07-25 01:02:53 +00:00
renovate-bot	5bd26d773d	chore(deps): update renovate/renovate docker tag to v43.270.0 ... Release-Bump: minor v0.0.5	2026-07-19 04:17:22 +00:00
renovate-bot	4f60bad119	chore(deps): update axllent/mailpit docker tag to v1.30.4 ... Release-Bump: patch v0.0.4	2026-07-18 21:13:02 +00:00
renovate-bot	aea568ea1c	chore(deps): update renovate/renovate docker tag to v43.252.1 ... Release-Bump: minor v0.0.3	2026-07-06 04:17:39 +00:00