63 Commits

Author	SHA1	Message	Date
lilleman	ab5c24deb7	Cut the node_modules prose to one home each; drop a stray tracked file	2026-08-05 19:52:09 +02:00
lilleman	3d3313c0ee	Document the shadowing risk and the leftover dir; close two holes in the mount guard	2026-08-05 19:17:07 +02:00
lilleman	bcf4d7fb1f	Install deps above WORKDIR so no root-owned node_modules lands in the checkout	2026-08-05 18:18:49 +02:00
lilleman	2852722873	Record the stale-copy trap as accepted until the apiVersion freeze lifts	2026-08-05 18:00:38 +02:00
lilleman	45b16824f1	Point a failed discovery at the stale plugins/ copy, and document upgrading	2026-08-05 17:52:43 +02:00
lilleman	38ebe40398	Never fail the boot on operator env; drop unusable ADMIN_PERMISSIONS with a warning	2026-08-05 17:36:04 +02:00
lilleman	1787754781	Extend the read-only treatment to OAuth2 clients and write-intent GETs	2026-08-05 15:38:56 +02:00
lilleman	765f349007	Model the read/write split in the UI: read-only views, self-revoke and inherited-grant guards	2026-08-05 15:38:37 +02:00
lilleman	29d654c012	Permissions are a fixed list from plugin code; grant them on Users and Groups	2026-08-05 15:38:21 +02:00
lilleman	fb4382be9d	Enforce the permission-name rule at discovery, for every plugin	2026-08-05 15:38:00 +02:00
lilleman	27fee5f8a3	Permission names are <resource>:<action>, replacing the catch-all admin permission	2026-08-05 15:37:39 +02:00
lilleman	690d67728b	Watch what a beforeAll logs, and record where each message came from	2026-08-05 11:15:37 +02:00
lilleman	e808f87fbd	Fail an E2E test on anything the browser logs, in all three engines	2026-08-05 11:00:25 +02:00
lilleman	e5bdc15262	Prune deleted tags on the GitHub mirror so it stops advertising dropped versions	2026-08-05 10:42:39 +02:00
lilleman	2fb5e695e1	Record the docs-skip and no-release decisions, and blind the guard to comments	2026-08-05 10:34:46 +02:00
lilleman	cfeee10fa8	Wrap each popover menu and give it a caller-named id	2026-08-05 01:58:11 +02:00
lilleman	5d9bdebf59	Close the popup menus on an outside click, via the popover API	2026-08-05 01:37:58 +02:00
lilleman	2b09635ed5	Hold the one-verb rule in AGENTS.md instead of a unit test	2026-08-05 00:52:09 +02:00
lilleman	9a9c63e625	Widen the one-verb guard to inflections and drop the last competing English string	2026-08-05 00:43:05 +02:00
lilleman	34b668d49f	Use one verb per action in the English UI: sign in, sign out, create account	2026-08-05 00:34:05 +02:00
lilleman	46548ae758	Narrow the settings-cog test assertions and record the icon-registry contract	2026-08-05 00:20:34 +02:00
lilleman	e03c1d1a2f	Let an operator mount plugin catalogs; document the end-user personas	2026-08-04 10:31:08 +02:00
lilleman	37b88b2fe6	Show the language picker on every page, targeting the nearest page that answers GET	2026-08-04 09:37:03 +02:00
lilleman	7e4c6940c9	Escape the values interpolated into the one markup-carrying message	2026-08-04 00:42:54 +02:00
lilleman	18e1a8d29d	Keep the chrome lazy for error pages, guard the guard-error render, split the recovery link	2026-08-04 00:31:19 +02:00
lilleman	be3bc2bdbb	Stability fixes: plugin-scoped contexts for owned pages, absent-href guard, checked locale mounts	2026-08-03 23:51:40 +02:00
lilleman	2b20497785	Pin the chrome's locale carrying in unit tests; keep one carrier list	2026-08-03 23:25:54 +02:00
lilleman	b3df7084c4	Reserve the locale param, carry it on breadcrumbs, translate the permissions detail view	2026-08-03 23:21:38 +02:00
lilleman	6440c543e5	Architecture review fixes: partials carry the locale, mountable locales/, shared core words	2026-08-03 23:12:18 +02:00
lilleman	245d1ad5b5	Add i18n support: per-locale catalogs, URL-driven locale, translated core and examples	2026-08-03 22:37:27 +02:00
lilleman	f38b5373bd	Say user throughout, noting Ory's identity naming in the docs	2026-08-03 17:41:40 +02:00
lilleman	9966b6bd46	Record the authorization vocabulary decision in AGENTS.md	2026-08-03 17:41:40 +02:00
lilleman	096720904e	Rename the coarse gate from role to permission, matching RBAC	2026-08-03 17:41:40 +02:00
lilleman	8f9f79ac30	Document the users, groups and roles model in README	2026-08-03 17:41:40 +02:00
lilleman	62f95afe63	Merge branch 'main' into remove-stability-auto-review	2026-08-02 15:19:13 +02:00
lilleman	12cc2d54c2	Clarify todo.md reference and record manual review policy	2026-08-02 15:12:22 +02:00
lilleman	bb6adc40af	Remove stability reviewer auto-run from AGENTS.md	2026-08-02 15:06:48 +02:00
lilleman	9213e5a0de	Make the CI web-image rebuild its own step; note the shared-workspace image-tag race	2026-08-02 15:06:21 +02:00
lilleman	23bafd247d	Fix typos in the AGENTS.md comment rules	2026-08-02 15:00:56 +02:00
lilleman	7c66599f35	Todo and agents updates	2026-08-02 14:11:33 +02:00
lilleman	6db0f57bf4	Trim README and workflow prose that restates the code	2026-08-02 13:55:50 +02:00
lilleman	cc886936ed	CI: sync release images to Docker Hub on vX.Y.Z tag push	2026-07-04 17:08:31 +02:00
lilleman	c78770a713	AGENTS.md: document the todo.md task workflow (interview scope, stability-review loop, PR flow)	2026-07-03 14:50:54 +02:00
lilleman	8afaeccf2c	AGENTS.md: sharpen simplicity/typing/comment guidance, prefer state-in-URL over POST	2026-07-02 13:05:54 +02:00
lilleman	e8ea911b80	Move admin screens (users/groups/roles/oauth2-clients) into a drop-in example plugin; add the ctx.system capability surface	2026-07-02 08:01:15 +02:00
lilleman	2202bdbaa0	config/ becomes an empty drop-in mount; examples/ mirrors the mount dirs; plugins & config import the host via #plugin-api/#menu-config subpath imports	2026-07-01 23:19:48 +02:00
lilleman	4adf14f386	docs: restructure README around the plugin-author path, add examples/README, genericize the plugin walkthrough	2026-06-30 23:30:13 +02:00
lilleman	de22f51c12	Organize src/ into concern folders (http, auth, admin, plugin-host, ui); co-locate tests, move plugin-api barrel into plugin-host, sync docs + AGENTS layout	2026-06-24 00:23:55 +02:00
lilleman	6d316c4888	Drop .mjs: rename e2e/dev mock servers to .ts, update refs, document the convention in AGENTS.md	2026-06-23 23:54:42 +02:00
lilleman	bb612baa2c	Reorganize README for two readers: first-run Quick start + nested ToC, overview-first ordering; document the convention in AGENTS.md	2026-06-23 23:15:24 +02:00