Repository navigation
Conversation
…w addons. Base install wrote en_US.po before sys.translation existed. Installed modules now import i18n/*.po on server start, and those strings apply to menus and view labels. sumeru-bp creates i18n/en_US.po for a new module.
…ch a new company to its creator.
Canonical redirect URI, setup wizard CSRF, no CSRF in query strings, bulk user context and guards, SVG and read_group ACL, html/template for report preview, plus focused tests.
Mechanical rewrite with apply_literal_first_comparisons.py; golangci staticcheck ST1017 off to match project go.mdc convention.
Centralize loadOwnedBulkBatch from BulkStatusHandler and gate preview, dry-run, confirm, cancel, save-template, SWC import, and import wizard routes to close staged CSV IDOR.
Align GET exports with header CSRF, server export entitlements, module-manager apps access, and typed auth/mail settings; cap RPC write/unlink IDs, rate-limit /api/rpc with JSON errors, migrate selected web paths to ORM, and document SQL tier policy with CI allowlist checks.
Replace flat POST /api/rpc with prefix routing (model/method, auth.login, model health), unified API envelope, ORM login/session helpers shared with web login, optional TLS for HTTP/2, and SWC RPC client updates.
Add path-based /api/rpc, auth.login, and ORM-backed local auth
Search redacts core.user.password, so both sign-in paths were checking an empty value.
Compare login and API auth against the bcrypt hash stored at setup.
Issue login keys with audited bypass and 24h expiry; require 1–30 day duration for profile and admin create; grant users own-key ACL and record rule.
Use /web/{module} entry with workspace redirects, centralize menu→action resolution, allow Settings admins to reach gated menus, and repair group implied sync on record updates and module reload.
…ction, and access gaps.
…n as the status bar.
Route addon data access through the SDK and bind compute and status from struct tags.
CHINMAYVIVEK
approved these changes
Oct 27, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
No description provided.