12 check-ins related to "fossil-caps"
|
2026-08-22
| ||
| 16:35 | merge fossil-caps: fossil capability model native (RFC 0004 phases 1-3, 5) check-in: bd494b50d4 user: dmestas tags: trunk | |
| 16:32 |
caps phase 5c: capability editor in settings
Per-repo category strings and per-account caps, editable in place with the expanded effective set shown beside each. CapsAdmin is an optional seam — a forge without it simply has no editor. closed check-in: b1e46974fc user: dmestas tags: fossil-caps | |
| 16:28 |
caps phase 5b: the capability matrix as executable spec
Each row driven twice — the letter alone must open its surface, and every OTHER letter together must not. Router resolves the repo from the request body for ops that carry it as a field (repos/update). check-in: 3df10d7f78 user: dmestas tags: fossil-caps | |
| 16:23 |
caps phase 5a: web write paths gate on capabilities
gateCap on every forum/wiki/ticket/technote/chat POST; caps plane separated from sessions (WithCaps) so enforcement doesn't imply a login page; an ungated forge stays ungated. Harness proves category caps reach surfaces and that removing a letter closes the same request. check-in: 54cc5168ca user: dmestas tags: fossil-caps | |
| 16:12 | gofmt: comment alignment in api tests check-in: be45fccb29 user: dmestas tags: fossil-caps | |
| 16:11 |
caps phases 2-3: ops declare fossil capabilities; router and web gate on them
RFC 0004 §4 table encoded on all ~45 ops; RouterWithCaps refines each Auth floor with EffectiveCaps; web gates and TrustedAuthor read caps with role fallback. Harness proves o/3/a separation end to end. check-in: 31437ec328 user: dmestas tags: fossil-caps | |
| 14:34 | merge trunk (composer fixes) into fossil-caps check-in: 03ca7e41fb user: dmestas tags: fossil-caps | |
| 14:27 | composer card clips its corners: square textarea no longer paints over the rounded border check-in: 347a061cc1 user: dmestas tags: trunk | |
| 14:27 | merge fossil-caps: caps phase 1; composer hidden fix check-in: c5fe4789aa user: dmestas tags: trunk | |
| 14:19 | composer: hidden wins over the split pane's flex check-in: 5498b20014 user: dmestas tags: fossil-caps | |
| 14:19 |
caps phase 1: fossil cap strings in OLTP, EffectiveCaps expansion, roles→caps migration
RFC 0004 §3/§5. v never implies u; a excludes s x y; s is universal; blank nobody+anonymous = private. Migration runs on every open, idempotent, never clobbers explicit caps. check-in: be3686ccbe user: dmestas tags: fossil-caps | |
| 14:18 | composer: Preview tab lives in composer.js — per-composer pane, posts the draft as body; preview endpoint is a plain fragment check-in: 34e1534151 user: dmestas tags: trunk | |