61 Commits

Author	SHA1	Message	Date
lilleman	ea6c32a7db	Answer prose round 1: 0 🔴, 5 🟡 (0 misread); comments match the stages, item 59's detail reads plainly	2026-11-08 20:16:41 +01:00
lilleman	c4eb9dde1f	Answer security round 1: 0 🔴, 0 🟡 (0 misread); route on the method and path read before the hooks	2026-11-08 19:57:54 +01:00
lilleman	b4579131a2	Split handleRequest into named stages, so the stage order is written once	2026-11-08 19:55:26 +01:00
lilleman	c3ca92713e	Point the request-wrapper comments at request-tracking.ts	2026-11-08 15:10:53 +01:00
lilleman	b19b43685c	Answer stability round 1: 2 🔴, 3 🟡 (0 misread); refuse a trailing-slash range, full plugin route, merged tests, compose passes TRUSTED_PROXIES	2026-11-08 15:06:19 +01:00
lilleman	a69593eb72	Put the caller, site and route on every request's span and log line	2026-11-08 14:59:55 +01:00
lilleman	9af29ffdb9	Answer stability round 1: 1 🔴, 4 🟡 (0 misread); assetHref in the test fakes, one shared buildContext option set, default pinned, upgrade note and AGENTS.md corrected	2026-11-08 14:41:19 +01:00
lilleman	404f2584ac	Add buildPaginationModel and ctx.assetHref, and bump the plugin contract to 0.5.0	2026-11-08 14:32:05 +01:00
lilleman	4239ee12f0	Answer stability round 1: 0 🔴, 3 🟡 (0 misread); gate test pins each source, builtin-route name, exact CSS wording	2026-11-08 14:18:39 +01:00
lilleman	a2493edff2	Move test-only tooling to src/test-tooling, split positive, warn on undeclared gated permissions	2026-11-08 14:09:20 +01:00
lilleman	5aa62e2742	Record reading cost for item 51's chunk	2026-11-08 14:09:20 +01:00
lilleman	fefc7cee30	Plan 0.5.0 from the ten highest-scoring items; reserve the plugin id error, translate the duplicate-group refusal, and correct four comments and README passages	2026-11-03 21:43:57 +01:00
lilleman	3592a30f98	Answer prose round 1: 0 🔴, 2 🟡 (0 misread); the view header calls the link a URL, the always-present code loses its guard, the test comment goes	2026-10-31 13:11:21 +01:00
lilleman	4cb21d8909	Link the admin's recovery-code notice to the flow the code was minted on	2026-10-31 13:05:06 +01:00
lilleman	053438f968	Answer product-owner round 1: 0 🔴, 2 🟡 (0 misread); the submit sends a same-origin Referer, Kratos' redirect to this host keeps the chosen locale	2026-10-31 12:59:28 +01:00
lilleman	ead604f49d	Accept a verification or recovery code pasted with whitespace around it	2026-10-31 12:41:11 +01:00
lilleman	35f71d435b	Answer stability round 1: 0 🔴, 2 🟡 (0 misread); tests pin all three user-page modes and the refusal page's group, the guard checks membership before the per-permission walk, logs the action and what was lost	2026-10-31 11:02:47 +01:00
lilleman	ad812e17c2	Refuse a group change that would lock the acting admin out, and title a read-only user page View user	2026-10-31 10:47:47 +01:00
lilleman	c1abc67a92	Answer prose round 1: 0 🔴, 2 🟡 (0 misread); the harness and plugins-test comments and the README clause are gone, the admin pointers name the full path	2026-10-31 10:37:15 +01:00
lilleman	71b12a6c0a	Split src/http/app.test.ts into one file per concern, and reset the reading-cost trend	2026-10-31 10:35:08 +01:00
lilleman	65e2340e49	Answer stability round 1: 0 🔴, 4 🟡 (0 misread); the serve path streams its hash and answers an unreadable file 500 with a log, cached deployments skip the per-href stat, tests for the pre-context error page and the size half of the memo	2026-10-31 10:25:19 +01:00
lilleman	c38ad74e3a	Answer prose round 1: 0 🔴, 4 🟡 (0 misread); a changed file, not a release, changes the hash; the memo comment, the CHANGELOG scope and smaller comment cuts	2026-10-31 10:16:05 +01:00
lilleman	3d757d4726	item-34 - Serve every /public/ asset under a content-versioned URL with an immutable Cache-Control	2026-10-31 10:00:03 +01:00
lilleman	85bfadd040	Answer stability round 1: 1 🔴, 4 🟡 (0 misread); allow the stale-save 409 in the e2e console guard, report a partial save when Keto cannot be read again, add the missing group, no-op and plain-login tests	2026-10-31 09:46:17 +01:00
lilleman	f4969d5c1f	Refuse a stale permission save, confirm or report it, show View to read-only holders, keep an absolute return_to beside a locale	2026-10-31 09:34:05 +01:00
lilleman	8d1e8be6fc	Answer stability round 1: 0 🔴, 2 🟡 (0 misread); pin the 503 on a non-401 failure and the language-only return target	2026-10-31 09:10:57 +01:00
lilleman	2a4ed30e93	Redirect an anonymous hit on /settings to sign-in with the page as return_to	2026-10-31 09:04:55 +01:00
lilleman	437a2e8580	Answer stability round 1: 0 🔴, 3 🟡 (0 misread); pin dashboard heading and branding, fix stale comment	2026-10-31 08:41:59 +01:00
lilleman	352de29013	Retire shell-context and render the dashboard from ctx.chrome	2026-10-31 08:37:45 +01:00
lilleman	44a777dc3f	Answer stability round 1: 1 🔴, 0 🟡 (0 misread); share no page	2026-10-30 21:32:56 +01:00
lilleman	1dfc6aac3a	Set Cache-Control on every rendered page, and record the CSRF token's unbinding	2026-10-30 21:28:14 +01:00
lilleman	18dc4f3136	Refuse an emailless identity where the session is minted, and rows the upstream should not have sent	2026-09-02 18:24:56 +02:00
lilleman	6a0d11d9d3	Name exactly one gate on every declaration, and own a shift by identity id	2026-09-02 14:00:04 +02:00
lilleman	dfb043c3bd	Read one gate everywhere, and check a declaration's gate in one pass	2026-09-02 12:32:51 +02:00
lilleman	bf146c07e7	Bump the contract for the new gate, and close the ways it could read as open	2026-09-02 08:36:16 +02:00
lilleman	8da75b4ca7	Gate a route or nav node on a session, not only a permission	2026-09-02 07:36:08 +02:00
lilleman	fa7cad1d65	Declare plugin settings in the manifest, resolve them from the environment	2026-08-23 13:17:03 +02:00
lilleman	cb59eee76d	Refuse a node_modules at the plugins/ root, where it outranks the host's	2026-08-18 08:14:21 +02:00
lilleman	af974cfa36	Let a plugin carry its own package.json and npm dependencies	2026-08-17 22:23:53 +02:00
lilleman	a005acb93d	Cut non-essential prose from docs and comments, and require the same of every future change ... README loses the competitor comparison, the personas and the repeated philosophy; the five near-identical E2E command blocks become a table plus one command, and the file map a clause per entry. AGENTS.md keeps every decision but drops the narrative around them. todo.md's completed items collapse to their task line — git holds the rest. Comments lose restatement, README duplication and history ("used to", "originally", dated notes). AGENTS.md gains a Prose discipline section making this a standing pass on every change rather than a one-off cleanup. src/compose.test.ts now expects 6 documented E2E run commands, not 10, since the README states the command once instead of per suite.	2026-08-05 23:41:12 +02:00
lilleman	edcd9fefc8	Deleting a group revokes the permissions it granted	2026-08-05 15:39:08 +02:00
lilleman	1787754781	Extend the read-only treatment to OAuth2 clients and write-intent GETs	2026-08-05 15:38:56 +02:00
lilleman	765f349007	Model the read/write split in the UI: read-only views, self-revoke and inherited-grant guards	2026-08-05 15:38:37 +02:00
lilleman	29d654c012	Permissions are a fixed list from plugin code; grant them on Users and Groups	2026-08-05 15:38:21 +02:00
lilleman	27fee5f8a3	Permission names are <resource>:<action>, replacing the catch-all admin permission	2026-08-05 15:37:39 +02:00
lilleman	bd76c981ee	Carry the language through sign-in; warn when switching leaves the page; product-review copy fixes	2026-08-04 09:59:00 +02:00
lilleman	37b88b2fe6	Show the language picker on every page, targeting the nearest page that answers GET	2026-08-04 09:37:03 +02:00
lilleman	18e1a8d29d	Keep the chrome lazy for error pages, guard the guard-error render, split the recovery link	2026-08-04 00:31:19 +02:00
lilleman	93139ea058	Stability round two: no language links on POST-rendered pages, scoped observers, Vary only where it varies	2026-08-04 00:10:31 +02:00
lilleman	be3bc2bdbb	Stability fixes: plugin-scoped contexts for owned pages, absent-href guard, checked locale mounts	2026-08-03 23:51:40 +02:00