295 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
lilleman	c7013be2f0	Give a plugin a Postgres database of its own	2026-08-18 23:12:13 +02:00
lilleman	9ff8f57509	Todo: note the code-field hint landed, the paste fix did not	2026-08-18 22:07:21 +02:00
lilleman	8f3fc7414a	Hint the code field's digits-only rule, so the browser's refusal isn't bare	2026-08-18 22:07:12 +02:00
lilleman	552cc6bd97	Todo: record the flow-POST proxy findings for the verification-code fix	2026-08-18 22:00:31 +02:00
lilleman	52a3228503	Todo: record the manifest-over-.env decision for plugin config	2026-08-18 21:55:35 +02:00
lilleman	ee7b78b94d	Let Renovate reach the example plugins' manifests	2026-08-18 21:55:35 +02:00
lilleman	65e76b69fd	Refuse a stray package.json or node_modules in config/ by name	2026-08-18 21:55:32 +02:00
lilleman	e00dad8ed7	Merge branch 'main' into plugin-dependencies	2026-08-18 18:33:24 +02:00
lilleman	cb59eee76d	Refuse a node_modules at the plugins/ root, where it outranks the host's	2026-08-18 08:14:21 +02:00
lilleman	82af77356f	Follow symlinked plugin folders, and keep a plugin .npmrc out of the image	2026-08-18 07:49:51 +02:00
renovate-bot	a261570796	Update renovate/renovate Docker tag to v44.32.6 ... Release-Bump: minor	2026-08-18 04:18:04 +00:00
lilleman	94dc581593	Fail loud on a null package.json and a stray plugins/package.json	2026-08-17 22:50:29 +02:00
lilleman	453058c67b	Refuse a shadowing barrel copy, and record the packaging contract	2026-08-17 22:34:56 +02:00
lilleman	af974cfa36	Let a plugin carry its own package.json and npm dependencies	2026-08-17 22:23:53 +02:00
lilleman	1ba6dbdc51	Merge branch 'main' into prose-diet	2026-08-17 21:05:29 +02:00
renovate-bot	09ab2fcb85	Update renovate/renovate Docker tag to v44.31.0 ... Release-Bump: minor	2026-08-17 04:17:51 +00:00
renovate-bot	a977ecf1c7	Update renovate/renovate Docker tag to v44.30.3 ... Release-Bump: minor	2026-08-15 04:18:17 +00:00
renovate-bot	04a508c169	Update postgres Docker tag to v18.6 ... Release-Bump: minor	2026-08-14 04:18:05 +00:00
renovate-bot	d74989c4e0	Update renovate/renovate Docker tag to v44.27.0 ... Release-Bump: minor	2026-08-13 04:18:02 +00:00
renovate-bot	43d7062d9e	Update renovate/renovate Docker tag to v44.24.3 ... Release-Bump: minor	2026-08-12 04:18:15 +00:00
renovate-bot	d5ee0353d4	Update renovate/renovate Docker tag to v44.23.0 ... Release-Bump: minor	2026-08-11 04:17:48 +00:00
renovate-bot	137c35478d	Update dependency lucide-static to v1.31.0 ... Release-Bump: minor	2026-08-10 04:17:44 +00:00
renovate-bot	352f2f2794	Update axllent/mailpit Docker tag to v1.30.7 ... Release-Bump: patch	2026-08-09 04:18:09 +00:00
renovate-bot	3b6f2c1ed3	Update renovate/renovate Docker tag to v44.14.10 ... Release-Bump: patch	2026-08-08 04:18:02 +00:00
renovate-bot	f99a029bc5	Update renovate/renovate Docker tag to v44.14.3 ... Release-Bump: minor	2026-08-07 04:18:27 +00:00
renovate-bot	1daa2b1777	Update renovate/renovate Docker tag to v44.13.3 ... Release-Bump: minor	2026-08-06 04:18:26 +00:00
lilleman	8a5d2dfd6c	Make the two persona references self-contained now that the section is gone	2026-08-05 23:42:58 +02:00
lilleman	a005acb93d	Cut non-essential prose from docs and comments, and require the same of every future change ... README loses the competitor comparison, the personas and the repeated philosophy; the five near-identical E2E command blocks become a table plus one command, and the file map a clause per entry. AGENTS.md keeps every decision but drops the narrative around them. todo.md's completed items collapse to their task line — git holds the rest. Comments lose restatement, README duplication and history ("used to", "originally", dated notes). AGENTS.md gains a Prose discipline section making this a standing pass on every change rather than a one-off cleanup. src/compose.test.ts now expects 6 documented E2E run commands, not 10, since the README states the command once instead of per suite.	2026-08-05 23:41:12 +02:00
lilleman	f5240ef7f6	Record macOS as a supported dev host and the commands still unverified there	2026-08-05 22:55:48 +02:00
lilleman	78f5f72151	Correct the artifacts upgrade runbook and the bootstrap exception's stated reason	2026-08-05 22:46:05 +02:00
lilleman	1cf34a0d45	Harden the artifact-ownership guards and document the root-owned upgrade trap	2026-08-05 22:40:36 +02:00
lilleman	073ec294e9	Run the E2E runner as the invoking user so its artifacts aren't root-owned	2026-08-05 22:25:17 +02:00
lilleman	e8b91ecd09	Compress AGENTS.md and add a standing rule to trim it on every edit	2026-08-05 21:52:56 +02:00
lilleman	ab5c24deb7	Cut the node_modules prose to one home each; drop a stray tracked file	2026-08-05 19:52:09 +02:00
lilleman	3d3313c0ee	Document the shadowing risk and the leftover dir; close two holes in the mount guard	2026-08-05 19:17:07 +02:00
lilleman	bcf4d7fb1f	Install deps above WORKDIR so no root-owned node_modules lands in the checkout	2026-08-05 18:18:49 +02:00
lilleman	2852722873	Record the stale-copy trap as accepted until the apiVersion freeze lifts	2026-08-05 18:00:38 +02:00
lilleman	45b16824f1	Point a failed discovery at the stale plugins/ copy, and document upgrading	2026-08-05 17:52:43 +02:00
lilleman	f76cd2a267	Todo updates	2026-08-05 17:48:55 +02:00
lilleman	38ebe40398	Never fail the boot on operator env; drop unusable ADMIN_PERMISSIONS with a warning	2026-08-05 17:36:04 +02:00
lilleman	1f0956dd58	Keep the group-delete confirm in user terms, not tuple mechanics	2026-08-05 15:39:08 +02:00
lilleman	edcd9fefc8	Deleting a group revokes the permissions it granted	2026-08-05 15:39:08 +02:00
lilleman	1787754781	Extend the read-only treatment to OAuth2 clients and write-intent GETs	2026-08-05 15:38:56 +02:00
lilleman	765f349007	Model the read/write split in the UI: read-only views, self-revoke and inherited-grant guards	2026-08-05 15:38:37 +02:00
lilleman	29d654c012	Permissions are a fixed list from plugin code; grant them on Users and Groups	2026-08-05 15:38:21 +02:00
lilleman	fb4382be9d	Enforce the permission-name rule at discovery, for every plugin	2026-08-05 15:38:00 +02:00
lilleman	90cbc47607	Seed the demo admin from the mounted plugins, not the image's empty copy	2026-08-05 15:37:39 +02:00
lilleman	27fee5f8a3	Permission names are <resource>:<action>, replacing the catch-all admin permission	2026-08-05 15:37:39 +02:00
lilleman	9412b90946	More todos	2026-08-05 14:18:09 +02:00
lilleman	225569b08a	More todos	2026-08-05 12:08:09 +02:00