mix/selfpost
1
0
Fork 0
Code Issues Pull Requests Actions 21 Packages Projects Releases Wiki Activity
274 Commits 1 Branch 3 Tags
5e0adb2de573e272efe26b5d0c6e08dbd815b708
Commit Graph
7 Commits
Author SHA1 Message Date
mixClaude Sonnet 5Cursor
 		4204ee279c phase4-6: harden help/docs links and auth defaults
test / test (push) Has been cancelled
Details 
Close remaining low-priority review follow-ups by removing hardcoded help URLs, improving help drawer accessibility, raising explicit bcrypt cost, and adding validation/injection coverage; also bound postqueue reads with a timeout to avoid hangs.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-08-19 19:15:30 +03:00
mixandCursor 81190a7aad phase1-3: apply review fixes and docs alignment
test / test (push) Has been cancelled
Details 
Implement phase 1 and 2 review actions (DMARC UI CSS fixes, bounded DMARC ingest stdin,
rate-limit eviction hardening, settings/user handler cleanup, shared atomic/supervisor helpers)
and phase 3 documentation/changelog updates including roadmap and accepted-risk notes.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-08-19 19:06:33 +03:00
mixandCursor 0570608738 fix(panel): GUI defects from the 1.2.x layout pass (P3) 
- .flash.error now renders on the danger surface instead of the success
  one; RateLimitErr previously showed as green with red text.
- User delete goes through a confirmation page (GET/POST
  /users/{uid}/delete), matching the domain-delete pattern, instead of a
  plain submit button next to Save with no confirmation.
- Extracted the repeated DNS Host/Type/Value markup on a domain's page and
  the duplicated Settings credentials form into shared partials. No
  behaviour change.

docs/plans/code-review.md P3 checked off; CHANGELOG updated.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-08-13 21:50:42 +03:00
mixComposerCursor
 		1d30605533 panel: align page URLs, titles, and headings
test / test (push) Has been cancelled
Details 
Settings moves to /settings with a 308 redirect from /account; domains, Status, Users, and user forms get matching browser titles and h1 text; backup page title reflects domain import.

Co-Authored-By: Composer <noreply@cursor.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-08-12 15:24:14 +03:00
mixandCursor de6f7a88da panel: disable demote and delete for the only global admin
test / test (push) Has been cancelled
Details 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-08-11 22:42:01 +03:00
mixandCursor 5985977f21 panel: hide domain pick for global administrators on user form
test / test (push) Has been cancelled
Details 
Global administrators manage every domain; the assignment checkboxes are
now hidden when that role is selected.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-08-11 22:37:04 +03:00
mixandCursor 15baa1e5d0 feat(panel): add domain-admin role with per-domain authorization
test / test (push) Has been cancelled
Details 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-08-10 23:43:59 +03:00