202 Commits

Author	SHA1	Message	Date
lilleman	53ab35bfb8	A page is a document: drop the sticky chrome and the bounded-frame opt-out	2026-09-10 16:16:35 +02:00
lilleman	cb4f8d6e98	Name the table's local after the class it applies, and let a broken chain show itself	2026-09-10 16:16:35 +02:00
lilleman	696da397e7	Split the fill seam where ownership splits: the shell bounds, the page fills	2026-09-10 16:16:35 +02:00
lilleman	7f2c0cc2c2	Name the bounded frame: fill:true on the shell, and the contract minor that ships it	2026-09-10 16:16:35 +02:00
lilleman	b9129fba08	Scroll the document by default; a bounded region is a page's own opt-in	2026-09-10 16:16:35 +02:00
lilleman	54956fe627	Release the gate change as 0.3.0, and start a changelog	2026-09-03 17:58:09 +02:00
lilleman	390ac5f112	Say where the one-gate rule applies, and record why allows stays open	2026-09-02 14:03:06 +02:00
lilleman	6a0d11d9d3	Name exactly one gate on every declaration, and own a shift by identity id	2026-09-02 14:00:04 +02:00
lilleman	5d1e8f2309	Say the gate rule once, and key the example's shifts by the identifier it scopes on	2026-09-02 08:50:44 +02:00
lilleman	bf146c07e7	Bump the contract for the new gate, and close the ways it could read as open	2026-09-02 08:36:16 +02:00
lilleman	8da75b4ca7	Gate a route or nav node on a session, not only a permission	2026-09-02 07:36:08 +02:00
lilleman	c702a347dc	Offer a long filter list as a popover multi-select instead of a wall of chips	2026-08-25 09:10:23 +02:00
lilleman	fa7cad1d65	Declare plugin settings in the manifest, resolve them from the environment	2026-08-23 13:17:03 +02:00
lilleman	47f4498fff	Use one Docker Hub credential for images and the overview	2026-08-22 14:27:31 +02:00
lilleman	bcff5967ad	Name the scope the overview actually needs	2026-08-22 14:21:14 +02:00
lilleman	cbf55bebae	Give each version mismatch its own remedy, and stop publishing a moving bare-major tag	2026-08-22 12:27:43 +02:00
lilleman	9e0cb26b3e	Refuse a 0.x minor mismatch, and republish the overview from the named release's tree	2026-08-22 12:13:41 +02:00
lilleman	8fd492e544	Scope the sidecar trailer by package so a mixed branch cannot lose it	2026-08-22 12:01:35 +02:00
lilleman	f416abf936	Manage the published quick start's pins, and fail closed on every release-tooling edge	2026-08-22 11:45:46 +02:00
lilleman	e44b86f532	Gate the overview's manual trigger on the same contract check as a tag	2026-08-22 11:27:35 +02:00
lilleman	bfcf4ed072	Trim the prose to what is true now	2026-08-22 11:24:16 +02:00
lilleman	a3d9a3df5f	Keep the release at v0.1.0 — nothing consumed the old contract	2026-08-22 11:21:42 +02:00
lilleman	d545445ea8	Release this as v0.2.0, and give the Hub overview its own job, token and template	2026-08-20 23:32:10 +02:00
lilleman	c35ba3fb4e	Make the plugin contract version the release version, and publish the Docker Hub overview from CI	2026-08-20 23:16:11 +02:00
lilleman	27a8cdc385	Release nothing when no Renovate commit reached the app	2026-08-20 23:02:21 +02:00
lilleman	4b48bc2416	Scope Release-Bump to the surfaces that ship, and drop the inert package.json versions	2026-08-20 22:43:36 +02:00
lilleman	ef96ebd1f4	Rewrap the auto-release paragraph	2026-08-20 22:04:23 +02:00
lilleman	ecf33733a1	Lift the pre-release freeze — releases resume and the plugin contract goes live	2026-08-20 22:02:29 +02:00
lilleman	e0046e5068	Warn rather than refuse on a storage URL mismatch, and scrub the provisioning DSN before discovery	2026-08-19 01:03:40 +02:00
lilleman	5589472e25	Keep role re-assertion within a non-superuser provisioner's rights, and test the second boot	2026-08-19 00:44:49 +02:00
lilleman	060535c8ab	Confine the Postgres driver to bootstrap, bound plugin connections, and gate the storage DDL	2026-08-19 00:08:35 +02:00
lilleman	d2211cf75a	Refuse a throwaway plugin storage secret in bootstrap, before any role is created	2026-08-18 23:24:34 +02:00
lilleman	c7013be2f0	Give a plugin a Postgres database of its own	2026-08-18 23:12:13 +02:00
lilleman	ee7b78b94d	Let Renovate reach the example plugins' manifests	2026-08-18 21:55:35 +02:00
lilleman	65e76b69fd	Refuse a stray package.json or node_modules in config/ by name	2026-08-18 21:55:32 +02:00
lilleman	cb59eee76d	Refuse a node_modules at the plugins/ root, where it outranks the host's	2026-08-18 08:14:21 +02:00
lilleman	94dc581593	Fail loud on a null package.json and a stray plugins/package.json	2026-08-17 22:50:29 +02:00
lilleman	453058c67b	Refuse a shadowing barrel copy, and record the packaging contract	2026-08-17 22:34:56 +02:00
lilleman	af974cfa36	Let a plugin carry its own package.json and npm dependencies	2026-08-17 22:23:53 +02:00
lilleman	a005acb93d	Cut non-essential prose from docs and comments, and require the same of every future change ... README loses the competitor comparison, the personas and the repeated philosophy; the five near-identical E2E command blocks become a table plus one command, and the file map a clause per entry. AGENTS.md keeps every decision but drops the narrative around them. todo.md's completed items collapse to their task line — git holds the rest. Comments lose restatement, README duplication and history ("used to", "originally", dated notes). AGENTS.md gains a Prose discipline section making this a standing pass on every change rather than a one-off cleanup. src/compose.test.ts now expects 6 documented E2E run commands, not 10, since the README states the command once instead of per suite.	2026-08-05 23:41:12 +02:00
lilleman	78f5f72151	Correct the artifacts upgrade runbook and the bootstrap exception's stated reason	2026-08-05 22:46:05 +02:00
lilleman	1cf34a0d45	Harden the artifact-ownership guards and document the root-owned upgrade trap	2026-08-05 22:40:36 +02:00
lilleman	073ec294e9	Run the E2E runner as the invoking user so its artifacts aren't root-owned	2026-08-05 22:25:17 +02:00
lilleman	ab5c24deb7	Cut the node_modules prose to one home each; drop a stray tracked file	2026-08-05 19:52:09 +02:00
lilleman	3d3313c0ee	Document the shadowing risk and the leftover dir; close two holes in the mount guard	2026-08-05 19:17:07 +02:00
lilleman	bcf4d7fb1f	Install deps above WORKDIR so no root-owned node_modules lands in the checkout	2026-08-05 18:18:49 +02:00
lilleman	2852722873	Record the stale-copy trap as accepted until the apiVersion freeze lifts	2026-08-05 18:00:38 +02:00
lilleman	45b16824f1	Point a failed discovery at the stale plugins/ copy, and document upgrading	2026-08-05 17:52:43 +02:00
lilleman	edcd9fefc8	Deleting a group revokes the permissions it granted	2026-08-05 15:39:08 +02:00
lilleman	765f349007	Model the read/write split in the UI: read-only views, self-revoke and inherited-grant guards	2026-08-05 15:38:37 +02:00