Repository navigation
Conversation
…ction UI Wire record.created/updated/deleted to sys.server.action with unlink-safe domains, depth cap 5, 60s cooldown via sys.server.action.log, and https-only webhooks. Run actions as the event actor without bypass; reject sensitive write: fields. Add activity: server actions and form fields for model, event, domain, and code.
Introduce sys.property.definition seeding, domain support for field.key, ORM properties handling, and SWC PropertiesField registration with tests.
Add mail addon for mail.activity and mail.message, board grouping (overdue/today/later), done/snooze actions, parent deep links, shell Activities link, and calendar arch date_start behavior. Outbound SMTP unchanged; no inbound routing.
Stop pagehide GET /web/logout from shell tabs; make GET /web/logout redirect-only. Portal sign-out uses POST with CSRF. RpcService and HttpService send unauthenticated clients to /web/login on 401.
…ating Add shell tab lease and POST /web/session/touch, browser_seen_at on sys.session, grace checks in resolveSession, and config keys in sumeru.conf.example.
…SWC/CSS Add addons/digest README and compute test coverage; LinkOAuthUser edge cases; drop unused sum template parser path, debug aliases, and orphaned message CSS.
Update x/crypto to v0.58.0 and vitest/jsdom patch releases; refresh package-lock.json (source-map-js audit fix).
Wire currency_field through arch and MonetaryField; add platform.pricing.sample. Add sys.property.definition views, partner extra_properties, and PropertiesField polish. Group activity board by type; link activities from the messages panel; extend tests.
CHINMAYVIVEK
approved these changes
Oct 12, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Merges the
platformbranch intodevwith the platform issue batch, web session hardening, and toolchain alignment after the currency/UoM addon split.test/addons/automation/.sdk.Properties,PropertiesFieldwidget,sys.property.definitionadmin list/form,core.partner.extra_properties+ seed defs + contacts form inherit; list domain example (gold tier).currency_fieldfor monetary fields,MonetaryField+ list formatting, reference modelplatform.pricing.sample(platform depends oncurrency); conversion/pricing tests./web/session/touch, tab lease,sumeru.conf.examplekeys); OAuth/session integration tests extended.golang.org/x/cryptov0.58.0, SWC vitest/jsdom bumps; merged latestdev(dedicatedcurrency/uomaddons).Not in this PR: SUM-PLAT-06, 20, 23, 25. SUM-PLAT-22 (inbound mail) intentionally not implemented.
Follow-ups (other repos)
After merge, tier-2/3 workspaces should declare
currencyin manifest where models useCoreCurrency/sdk.Money, runmake generate, and update modules — see sibling PRs onsumeru_addons/sumeru_custom_addonsif applicable.Test plan
cd sumeru && make(lint, SWC, Go tests, build)make update-graphify(if tracking graph locally)close_session_on_last_tabenabled, close all tabs → session ends after grace (config as documented insumeru.conf.example)base,currency,platform,mail,contacts; no module install errorsRisk / notes
extra_propertiesoncore.partnervia normal ORM sync.currency— ensure install order /-u platformon existing DBs.make+ manual Activities/Contacts pass.