256 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
lilleman	38ebe40398	Never fail the boot on operator env; drop unusable ADMIN_PERMISSIONS with a warning	2026-08-05 17:36:04 +02:00
lilleman	1f0956dd58	Keep the group-delete confirm in user terms, not tuple mechanics	2026-08-05 15:39:08 +02:00
lilleman	edcd9fefc8	Deleting a group revokes the permissions it granted	2026-08-05 15:39:08 +02:00
lilleman	1787754781	Extend the read-only treatment to OAuth2 clients and write-intent GETs	2026-08-05 15:38:56 +02:00
lilleman	765f349007	Model the read/write split in the UI: read-only views, self-revoke and inherited-grant guards	2026-08-05 15:38:37 +02:00
lilleman	29d654c012	Permissions are a fixed list from plugin code; grant them on Users and Groups	2026-08-05 15:38:21 +02:00
lilleman	fb4382be9d	Enforce the permission-name rule at discovery, for every plugin	2026-08-05 15:38:00 +02:00
lilleman	90cbc47607	Seed the demo admin from the mounted plugins, not the image's empty copy	2026-08-05 15:37:39 +02:00
lilleman	27fee5f8a3	Permission names are <resource>:<action>, replacing the catch-all admin permission	2026-08-05 15:37:39 +02:00
lilleman	9412b90946	More todos	2026-08-05 14:18:09 +02:00
lilleman	225569b08a	More todos	2026-08-05 12:08:09 +02:00
lilleman	32154fbbc0	Record the unpinned Playwright worker pool as an open decision	2026-08-05 11:21:57 +02:00
lilleman	690d67728b	Watch what a beforeAll logs, and record where each message came from	2026-08-05 11:15:37 +02:00
lilleman	e808f87fbd	Fail an E2E test on anything the browser logs, in all three engines	2026-08-05 11:00:25 +02:00
lilleman	e5bdc15262	Prune deleted tags on the GitHub mirror so it stops advertising dropped versions	2026-08-05 10:42:39 +02:00
lilleman	2fb5e695e1	Record the docs-skip and no-release decisions, and blind the guard to comments	2026-08-05 10:34:46 +02:00
lilleman	3ebd1fa507	Gate the auto-release tag job behind an AUTO_RELEASE variable	2026-08-05 10:15:09 +02:00
lilleman	81043edfc6	Count both paths of a rename in the docs-only CI skip	2026-08-05 10:15:09 +02:00
lilleman	6df90f3746	Merge branch 'main' into todo-yo	2026-08-05 08:39:26 +02:00
lilleman	b1b01f8bdc	More todos	2026-08-05 08:35:08 +02:00
lilleman	c54f5e2c51	New todos	2026-08-05 08:33:49 +02:00
lilleman	a8217a4ff8	Merge branch 'main' into renovate/actions-checkout-7.x	2026-08-05 08:31:53 +02:00
lilleman	ea1596eabd	Merge branch 'main' into renovate/actions-checkout-7.x	2026-08-05 08:28:47 +02:00
lilleman	1d4c7c88c4	Merge branch 'main' into menu-outside-click	2026-08-05 08:28:33 +02:00
renovate-bot	612a0ab8f2	Update actions/checkout action to v7 ... Release-Bump: major	2026-08-05 04:20:10 +00:00
renovate-bot	19d90c6323	Update renovate/renovate Docker tag to v44.11.7 ... Release-Bump: patch	2026-08-05 04:17:57 +00:00
lilleman	9cf6c05325	Name the chrome's language menu and guard anchor positioning in the fallback	2026-08-05 02:23:50 +02:00
lilleman	cfeee10fa8	Wrap each popover menu and give it a caller-named id	2026-08-05 01:58:11 +02:00
lilleman	5d9bdebf59	Close the popup menus on an outside click, via the popover API	2026-08-05 01:37:58 +02:00
lilleman	64d1387df2	Scope the profile-menu assertion to the menu itself	2026-08-05 01:08:09 +02:00
lilleman	3c64621515	Remove the dead Profile link from the sidebar profile menu	2026-08-05 01:01:14 +02:00
lilleman	2b09635ed5	Hold the one-verb rule in AGENTS.md instead of a unit test	2026-08-05 00:52:09 +02:00
lilleman	9a9c63e625	Widen the one-verb guard to inflections and drop the last competing English string	2026-08-05 00:43:05 +02:00
lilleman	34b668d49f	Use one verb per action in the English UI: sign in, sign out, create account	2026-08-05 00:34:05 +02:00
lilleman	46548ae758	Narrow the settings-cog test assertions and record the icon-registry contract	2026-08-05 00:20:34 +02:00
lilleman	8f7ab55267	Remove the Settings cog and its Preferences menu from the sidebar footer	2026-08-05 00:08:35 +02:00
lilleman	7948596105	New todos	2026-08-04 23:48:26 +02:00
lilleman	38f4cffa43	Merge branch 'main' into i18n	2026-08-04 19:55:50 +02:00
lilleman	1dc5892290	Merge branch 'main' into renovate/renovate-renovate-44.x	2026-08-04 10:43:13 +02:00
lilleman	c063b71d19	Merge branch 'main' into i18n	2026-08-04 10:43:05 +02:00
lilleman	89a234b841	Add a todo for guarding the double-clicked submit without client JS	2026-08-04 10:40:37 +02:00
lilleman	e03c1d1a2f	Let an operator mount plugin catalogs; document the end-user personas	2026-08-04 10:31:08 +02:00
lilleman	bd76c981ee	Carry the language through sign-in; warn when switching leaves the page; product-review copy fixes	2026-08-04 09:59:00 +02:00
lilleman	37b88b2fe6	Show the language picker on every page, targeting the nearest page that answers GET	2026-08-04 09:37:03 +02:00
renovate-bot	bc659d7d49	Update renovate/renovate Docker tag to v44.11.0 ... Release-Bump: minor	2026-08-04 04:18:10 +00:00
renovate-bot	01abb2f99c	Update Node.js to v24.19.0 ... Release-Bump: minor	2026-08-04 04:17:55 +00:00
lilleman	7e4c6940c9	Escape the values interpolated into the one markup-carrying message	2026-08-04 00:42:54 +02:00
lilleman	18e1a8d29d	Keep the chrome lazy for error pages, guard the guard-error render, split the recovery link	2026-08-04 00:31:19 +02:00
lilleman	93139ea058	Stability round two: no language links on POST-rendered pages, scoped observers, Vary only where it varies	2026-08-04 00:10:31 +02:00
lilleman	be3bc2bdbb	Stability fixes: plugin-scoped contexts for owned pages, absent-href guard, checked locale mounts	2026-08-03 23:51:40 +02:00