183 Commits

Author	SHA1	Message	Date
lilleman	ea4777c099	Declare plugin settings in the manifest, resolve them from the environment	2026-08-23 13:17:03 +02:00
lilleman	716e0f50a7	Give each version mismatch its own remedy, and stop publishing a moving bare-major tag	2026-08-22 12:27:43 +02:00
lilleman	2d62553a10	Refuse a 0.x minor mismatch, and republish the overview from the named release's tree	2026-08-22 12:13:41 +02:00
lilleman	d62c7faabd	Scope the sidecar trailer by package so a mixed branch cannot lose it	2026-08-22 12:01:35 +02:00
lilleman	5820264885	Trim the prose to what is true now	2026-08-22 11:24:16 +02:00
lilleman	b708aab981	Keep the release at v0.1.0 — nothing consumed the old contract	2026-08-22 11:21:42 +02:00
lilleman	99e77ebabf	Release this as v0.2.0, and give the Hub overview its own job, token and template	2026-08-20 23:32:10 +02:00
lilleman	2148822dad	Make the plugin contract version the release version, and publish the Docker Hub overview from CI	2026-08-20 23:16:11 +02:00
lilleman	47541ae97b	Warn rather than refuse on a storage URL mismatch, and scrub the provisioning DSN before discovery	2026-08-19 01:03:40 +02:00
lilleman	c5c9cce2b6	Keep role re-assertion within a non-superuser provisioner's rights, and test the second boot	2026-08-19 00:44:49 +02:00
lilleman	6db14a2205	Isolate the storage CI stack, prove least-privilege provisioning, drop the secret before discovery	2026-08-19 00:20:17 +02:00
lilleman	ae8f105360	Confine the Postgres driver to bootstrap, bound plugin connections, and gate the storage DDL	2026-08-19 00:08:35 +02:00
lilleman	bba048e38f	Refuse a throwaway plugin storage secret in bootstrap, before any role is created	2026-08-18 23:24:34 +02:00
lilleman	bf638dfb19	Give a plugin a Postgres database of its own	2026-08-18 23:12:13 +02:00
lilleman	04af61a5e5	Hint the code field's digits-only rule, so the browser's refusal isn't bare	2026-08-18 22:07:12 +02:00
lilleman	d55898eb8c	Refuse a stray package.json or node_modules in config/ by name	2026-08-18 21:55:32 +02:00
lilleman	7d1f7750d3	Refuse a node_modules at the plugins/ root, where it outranks the host's	2026-08-18 08:14:21 +02:00
lilleman	3f9787df48	Follow symlinked plugin folders, and keep a plugin .npmrc out of the image	2026-08-18 07:49:51 +02:00
lilleman	77343e859a	Fail loud on a null package.json and a stray plugins/package.json	2026-08-17 22:50:29 +02:00
lilleman	616040fda6	Refuse a shadowing barrel copy, and record the packaging contract	2026-08-17 22:34:56 +02:00
lilleman	fee4fe632b	Let a plugin carry its own package.json and npm dependencies	2026-08-17 22:23:53 +02:00
lilleman	a005acb93d	Cut non-essential prose from docs and comments, and require the same of every future change ... README loses the competitor comparison, the personas and the repeated philosophy; the five near-identical E2E command blocks become a table plus one command, and the file map a clause per entry. AGENTS.md keeps every decision but drops the narrative around them. todo.md's completed items collapse to their task line — git holds the rest. Comments lose restatement, README duplication and history ("used to", "originally", dated notes). AGENTS.md gains a Prose discipline section making this a standing pass on every change rather than a one-off cleanup. src/compose.test.ts now expects 6 documented E2E run commands, not 10, since the README states the command once instead of per suite.	2026-08-05 23:41:12 +02:00
lilleman	1cf34a0d45	Harden the artifact-ownership guards and document the root-owned upgrade trap	2026-08-05 22:40:36 +02:00
lilleman	073ec294e9	Run the E2E runner as the invoking user so its artifacts aren't root-owned	2026-08-05 22:25:17 +02:00
lilleman	ab5c24deb7	Cut the node_modules prose to one home each; drop a stray tracked file	2026-08-05 19:52:09 +02:00
lilleman	3d3313c0ee	Document the shadowing risk and the leftover dir; close two holes in the mount guard	2026-08-05 19:17:07 +02:00
lilleman	bcf4d7fb1f	Install deps above WORKDIR so no root-owned node_modules lands in the checkout	2026-08-05 18:18:49 +02:00
lilleman	45b16824f1	Point a failed discovery at the stale plugins/ copy, and document upgrading	2026-08-05 17:52:43 +02:00
lilleman	38ebe40398	Never fail the boot on operator env; drop unusable ADMIN_PERMISSIONS with a warning	2026-08-05 17:36:04 +02:00
lilleman	edcd9fefc8	Deleting a group revokes the permissions it granted	2026-08-05 15:39:08 +02:00
lilleman	1787754781	Extend the read-only treatment to OAuth2 clients and write-intent GETs	2026-08-05 15:38:56 +02:00
lilleman	765f349007	Model the read/write split in the UI: read-only views, self-revoke and inherited-grant guards	2026-08-05 15:38:37 +02:00
lilleman	29d654c012	Permissions are a fixed list from plugin code; grant them on Users and Groups	2026-08-05 15:38:21 +02:00
lilleman	fb4382be9d	Enforce the permission-name rule at discovery, for every plugin	2026-08-05 15:38:00 +02:00
lilleman	27fee5f8a3	Permission names are <resource>:<action>, replacing the catch-all admin permission	2026-08-05 15:37:39 +02:00
lilleman	690d67728b	Watch what a beforeAll logs, and record where each message came from	2026-08-05 11:15:37 +02:00
lilleman	e808f87fbd	Fail an E2E test on anything the browser logs, in all three engines	2026-08-05 11:00:25 +02:00
lilleman	e5bdc15262	Prune deleted tags on the GitHub mirror so it stops advertising dropped versions	2026-08-05 10:42:39 +02:00
lilleman	2fb5e695e1	Record the docs-skip and no-release decisions, and blind the guard to comments	2026-08-05 10:34:46 +02:00
lilleman	81043edfc6	Count both paths of a rename in the docs-only CI skip	2026-08-05 10:15:09 +02:00
lilleman	9cf6c05325	Name the chrome's language menu and guard anchor positioning in the fallback	2026-08-05 02:23:50 +02:00
lilleman	cfeee10fa8	Wrap each popover menu and give it a caller-named id	2026-08-05 01:58:11 +02:00
lilleman	5d9bdebf59	Close the popup menus on an outside click, via the popover API	2026-08-05 01:37:58 +02:00
lilleman	64d1387df2	Scope the profile-menu assertion to the menu itself	2026-08-05 01:08:09 +02:00
lilleman	3c64621515	Remove the dead Profile link from the sidebar profile menu	2026-08-05 01:01:14 +02:00
lilleman	2b09635ed5	Hold the one-verb rule in AGENTS.md instead of a unit test	2026-08-05 00:52:09 +02:00
lilleman	9a9c63e625	Widen the one-verb guard to inflections and drop the last competing English string	2026-08-05 00:43:05 +02:00
lilleman	34b668d49f	Use one verb per action in the English UI: sign in, sign out, create account	2026-08-05 00:34:05 +02:00
lilleman	46548ae758	Narrow the settings-cog test assertions and record the icon-registry contract	2026-08-05 00:20:34 +02:00
lilleman	8f7ab55267	Remove the Settings cog and its Preferences menu from the sidebar footer	2026-08-05 00:08:35 +02:00