Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
24 commits
Select commit Hold shift + click to select a range
e2bb535
chore(deps): dependency audit 2026-09-30 — 1 advisory to 0, adopt dot…
chriskehayias Sep 30, 2026
843f862
docs(todo): record MPNext playbook audit (2026-09-30) (#34)
chriskehayias Sep 30, 2026
d2ca3b3
fix(auth): Step 1 — refuse id_token sign-in (F12), close callbackUrl …
chriskehayias Sep 30, 2026
e5b8639
fix: Step 2 — fail-closed MP_SECURITY_ROLES, group-wizard mass assign…
chriskehayias Sep 30, 2026
5e5a71a
fix(security): Step 3 — 12h sessions, JWE cookie, no OAuth tokens, bo…
chriskehayias Sep 30, 2026
6f52180
fix(auth): Step 4 — OIDC lazy discovery, id_token sub binding, dedica…
chriskehayias Sep 30, 2026
5844446
fix(mp): Step 5 — MP HTTP client and provider-service hardening (#39)
chriskehayias Sep 30, 2026
14f6ba9
chore: remove the GrapesJS template editor and its dependencies (#40)
chriskehayias Oct 10, 2026
aa33d5b
refactor(auth): one MP client for service account and sign-in; remove…
chriskehayias Oct 10, 2026
91964cf
docs(todo): consolidated owner checklist for the next release (#42)
chriskehayias Oct 10, 2026
8fbeb6b
chore(deps): 2026-10 dependency audit — next 16.4.0 (6 high advisorie…
chriskehayias Oct 10, 2026
beb4f49
chore(todo): delete closed TODOs; open-work-only lifecycle (#44)
chriskehayias Oct 10, 2026
91e16bf
chore(vscode): set Peacock statusBar.inactiveBackground (#45)
chriskehayias Oct 10, 2026
f548ee4
chore(todo): drop select id-zero TODO as won't-do (#46)
chriskehayias Oct 10, 2026
6e394b8
chore(todo): close ops TODOs for secret rotation and MP_SECURITY_ROLE…
chriskehayias Oct 10, 2026
2bc6476
chore(todo): close owner checklist and drop held/step7/step9 TODOs (#48)
chriskehayias Oct 10, 2026
fb0ac59
fix(dev-panel): resolve contact IDs from page metadata, not caller na…
chriskehayias Oct 10, 2026
a5c9cd9
fix(addeditfamily): show "No contacts found" when a search comes up e…
chriskehayias Oct 10, 2026
3243b93
refactor(groupwizard): drop unreachable empty-fields branch in handle…
chriskehayias Oct 10, 2026
3218b2b
fix: step 8 — address-label caps + zip guard, global-error, safe deco…
chriskehayias Oct 10, 2026
13f0885
feat(security): step 6 — headers, proxy matching, server-only, preren…
chriskehayias Oct 10, 2026
cc10c32
chore: remove unused UserMenu, move handleSignOut to shared-actions; …
chriskehayias Oct 10, 2026
6156668
feat(no-access): sign-out form for users with no MP security role (#55)
chriskehayias Oct 10, 2026
772d208
docs: full documentation review; move SECURITY.md to .github/ (#56)
chriskehayias Oct 11, 2026
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
The table of contents is too big for display.
Diff view
Diff view
  •  
  •  
  •  

This file was deleted.

This file was deleted.

This file was deleted.

This file was deleted.

66 changes: 0 additions & 66 deletions .claude/TODO/2026-09-13-dead-empty-fields-branch-handlenext.md

This file was deleted.

Loading
Loading