165 Commits

Author	SHA1	Message	Date
lilleman	453058c67b	Refuse a shadowing barrel copy, and record the packaging contract	2026-08-17 22:34:56 +02:00
lilleman	af974cfa36	Let a plugin carry its own package.json and npm dependencies	2026-08-17 22:23:53 +02:00
lilleman	a005acb93d	Cut non-essential prose from docs and comments, and require the same of every future change ... README loses the competitor comparison, the personas and the repeated philosophy; the five near-identical E2E command blocks become a table plus one command, and the file map a clause per entry. AGENTS.md keeps every decision but drops the narrative around them. todo.md's completed items collapse to their task line — git holds the rest. Comments lose restatement, README duplication and history ("used to", "originally", dated notes). AGENTS.md gains a Prose discipline section making this a standing pass on every change rather than a one-off cleanup. src/compose.test.ts now expects 6 documented E2E run commands, not 10, since the README states the command once instead of per suite.	2026-08-05 23:41:12 +02:00
lilleman	78f5f72151	Correct the artifacts upgrade runbook and the bootstrap exception's stated reason	2026-08-05 22:46:05 +02:00
lilleman	1cf34a0d45	Harden the artifact-ownership guards and document the root-owned upgrade trap	2026-08-05 22:40:36 +02:00
lilleman	073ec294e9	Run the E2E runner as the invoking user so its artifacts aren't root-owned	2026-08-05 22:25:17 +02:00
lilleman	ab5c24deb7	Cut the node_modules prose to one home each; drop a stray tracked file	2026-08-05 19:52:09 +02:00
lilleman	3d3313c0ee	Document the shadowing risk and the leftover dir; close two holes in the mount guard	2026-08-05 19:17:07 +02:00
lilleman	bcf4d7fb1f	Install deps above WORKDIR so no root-owned node_modules lands in the checkout	2026-08-05 18:18:49 +02:00
lilleman	2852722873	Record the stale-copy trap as accepted until the apiVersion freeze lifts	2026-08-05 18:00:38 +02:00
lilleman	45b16824f1	Point a failed discovery at the stale plugins/ copy, and document upgrading	2026-08-05 17:52:43 +02:00
lilleman	edcd9fefc8	Deleting a group revokes the permissions it granted	2026-08-05 15:39:08 +02:00
lilleman	765f349007	Model the read/write split in the UI: read-only views, self-revoke and inherited-grant guards	2026-08-05 15:38:37 +02:00
lilleman	29d654c012	Permissions are a fixed list from plugin code; grant them on Users and Groups	2026-08-05 15:38:21 +02:00
lilleman	fb4382be9d	Enforce the permission-name rule at discovery, for every plugin	2026-08-05 15:38:00 +02:00
lilleman	90cbc47607	Seed the demo admin from the mounted plugins, not the image's empty copy	2026-08-05 15:37:39 +02:00
lilleman	27fee5f8a3	Permission names are <resource>:<action>, replacing the catch-all admin permission	2026-08-05 15:37:39 +02:00
lilleman	e808f87fbd	Fail an E2E test on anything the browser logs, in all three engines	2026-08-05 11:00:25 +02:00
lilleman	e5bdc15262	Prune deleted tags on the GitHub mirror so it stops advertising dropped versions	2026-08-05 10:42:39 +02:00
lilleman	2fb5e695e1	Record the docs-skip and no-release decisions, and blind the guard to comments	2026-08-05 10:34:46 +02:00
lilleman	3ebd1fa507	Gate the auto-release tag job behind an AUTO_RELEASE variable	2026-08-05 10:15:09 +02:00
lilleman	9cf6c05325	Name the chrome's language menu and guard anchor positioning in the fallback	2026-08-05 02:23:50 +02:00
lilleman	cfeee10fa8	Wrap each popover menu and give it a caller-named id	2026-08-05 01:58:11 +02:00
lilleman	5d9bdebf59	Close the popup menus on an outside click, via the popover API	2026-08-05 01:37:58 +02:00
lilleman	e03c1d1a2f	Let an operator mount plugin catalogs; document the end-user personas	2026-08-04 10:31:08 +02:00
lilleman	bd76c981ee	Carry the language through sign-in; warn when switching leaves the page; product-review copy fixes	2026-08-04 09:59:00 +02:00
lilleman	37b88b2fe6	Show the language picker on every page, targeting the nearest page that answers GET	2026-08-04 09:37:03 +02:00
lilleman	7e4c6940c9	Escape the values interpolated into the one markup-carrying message	2026-08-04 00:42:54 +02:00
lilleman	18e1a8d29d	Keep the chrome lazy for error pages, guard the guard-error render, split the recovery link	2026-08-04 00:31:19 +02:00
lilleman	be3bc2bdbb	Stability fixes: plugin-scoped contexts for owned pages, absent-href guard, checked locale mounts	2026-08-03 23:51:40 +02:00
lilleman	2b20497785	Pin the chrome's locale carrying in unit tests; keep one carrier list	2026-08-03 23:25:54 +02:00
lilleman	b3df7084c4	Reserve the locale param, carry it on breadcrumbs, translate the permissions detail view	2026-08-03 23:21:38 +02:00
lilleman	6440c543e5	Architecture review fixes: partials carry the locale, mountable locales/, shared core words	2026-08-03 23:12:18 +02:00
lilleman	245d1ad5b5	Add i18n support: per-locale catalogs, URL-driven locale, translated core and examples	2026-08-03 22:37:27 +02:00
lilleman	c30cd95ebd	Fix a stale ctx.identity reference in the file map	2026-08-03 17:41:40 +02:00
lilleman	f38b5373bd	Say user throughout, noting Ory's identity naming in the docs	2026-08-03 17:41:40 +02:00
lilleman	096720904e	Rename the coarse gate from role to permission, matching RBAC	2026-08-03 17:41:40 +02:00
lilleman	04fe5b1e06	Cut the security-model threat table down to what the code cannot show	2026-08-03 17:41:40 +02:00
lilleman	3486e0ad00	Rename the Keto User namespace to Identity, matching Kratos	2026-08-03 17:41:40 +02:00
lilleman	8f9f79ac30	Document the users, groups and roles model in README	2026-08-03 17:41:40 +02:00
lilleman	f0662cbd0f	Reflow the security-model prose to the file's wrap width	2026-08-03 17:41:40 +02:00
lilleman	73a78d4404	Add the seeded admin login to the production secrets checklist	2026-08-03 17:41:40 +02:00
lilleman	5a5803b265	Review fixes: denylist-conditional revoke, Ory secret wiring, exp guard test	2026-08-03 17:41:40 +02:00
lilleman	a2204782fa	Review fixes: re-mint path, real session lifetime, full secret checklist	2026-08-03 17:41:40 +02:00
lilleman	eb5aafdfaa	Document the auth security model in README	2026-08-03 17:41:40 +02:00
lilleman	0919adf4ef	Review fixes: plain depends_on merge, positive secret assertion	2026-08-02 16:10:35 +02:00
lilleman	f5f4455b81	Browser E2E for the admin OAuth2-clients screen	2026-08-02 16:03:30 +02:00
lilleman	3f30f889c3	README: note GITHUB_ secret-name prefix is rejected too	2026-08-02 15:48:04 +02:00
lilleman	ae1479f55b	Renovate: set GITHUB_COM_TOKEN for authenticated github.com lookups	2026-08-02 15:43:38 +02:00
lilleman	6db0f57bf4	Trim README and workflow prose that restates the code	2026-08-02 13:55:50 +02:00