mirror of https://github.com/docusealco/docuseal
master
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.1.0
1.1.1
1.1.10
1.1.11
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.1.9
1.2.0
1.2.1
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.8
1.4.0
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.6
1.6.7
1.6.8
1.6.9
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
1.7.8
1.7.9
1.8.0
1.8.1
1.8.2
1.8.3
1.8.4
1.8.5
1.8.6
1.8.7
1.8.8
1.8.9
1.9.0
1.9.1
1.9.10
1.9.2
1.9.3
1.9.4
1.9.5
1.9.6
1.9.7
1.9.8
1.9.9
2.0.0
2.0.1
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.3
2.1.4
2.1.5
2.1.6
2.1.7
2.1.8
2.2.0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9
2.3.0
2.3.1
2.3.2
2.3.3
2.3.4
2.3.5
2.3.6
2.3.7
2.4.0
2.4.1
2.4.2
2.4.3
2.4.4
2.5.0
2.5.1
2.5.2
2.5.3
3.0.0
3.0.1
3.0.2
3.0.3
3.1.0
3.1.1
${ noResults }
5 Commits (4cf91ff44af5dca23775c694af9d242fccaecbef)
| Author | SHA1 | Message | Date |
|---|---|---|---|
Wabo
|
4cf91ff44a |
Harden upstream merge (Phase 2): brand-asset baseline, sync-upstream gates, docs
Phase 2 of the merge-hardening effort (Phase 1 added bin/fork-check + the fork-invariants manifest). - config/brand_assets.sha256: checksum baseline of the WaboSign 'W' mark assets (the 6 logos + both apple-touch icons, which the old hardcoded 6-file restore list missed). bin/fork-check now verifies each asset's sha256 (catching a silent upstream overwrite that bypasses the text sweep) and warns about public/ brand-looking files not in the baseline. Single source of truth. - bin/sync-upstream: restore brand assets by reading the baseline (not a hardcoded list, so new brand files are covered automatically); run BOTH rebrand-check and fork-check after the post-merge sweep, aborting with a remediation message and leaving the tree in place if either fails; optional RUN_TESTS=1 to run rspec; print a status summary + the human-judgment residue. - .gitattributes: add the two apple-touch icons to the -merge brand list, kept in sync with the baseline. - REBRANDING.md: replace the 21-item manual post-merge checklist (which was not run reliably) with an automated tier delegated to fork-check + the manifest, plus a slim human-judgment residue; add an agent sync runbook and an 'Adding a new fork invariant' guide; correct the stale based_on attribution note. - rebrand-check/rebrand-sync: allowlist/deny the new baseline file (its comment legitimately references DocuSeal's logo). Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> |
3 weeks ago |
|
Wabo
|
6ef4a55bcd |
Add fork-invariants CI guard + remove re-introduced Pro gates
Upstream syncs repeatedly re-introduce DocuSeal's freemium gates, delete fork code, overwrite brand assets, and drop AGPL attribution; recovery took ~7 repair commits after the 3.0.2 sync. rebrand-check only catches surviving DocuSeal *text*, and the REBRANDING.md post-merge checklist was manual and not run reliably (two regressions it claims were fixed were still live). Add bin/fork-check, a stdlib-only runner driven by config/fork_invariants.yml, asserting: must-exist fork files/brand assets, must-not-exist placeholders / console_redirect / lib/docuseal.rb (Zeitwerk guard), must-contain attribution + renamed identifiers + SDK tokens, path-scoped must-not-contain gate markers, forbidden global markers, forbidden i18n keys, no dangling partial renders, and PRESERVE<->ALLOW_PATTERNS consistency between rebrand-sync/rebrand-check. Wired into CI as the 'Fork invariants' job. Allowlist the new guard + manifest in rebrand-check and deny them in rebrand-sync so the sweep can't corrupt them. Baseline cleanup so the new gate-absence checks pass (both documented as removed in REBRANDING.md but live on master): remove the ENTERPRISE_PATHS 'Pro Edition' export paywall from errors_controller.rb, and the multitenant? reminder-duration gate from _reminder_form.html.erb. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> |
3 weeks ago |
|
Wabo
|
38566399b0 |
Fix CI: add bin/sync-upstream to rebrand allowlists, install libvips for assets precompile
|
3 weeks ago |
|
Wabo
|
6fb7a1a779 |
Update rebrand-check to tolerate new upstream patterns (i18n keys, Twitter handles, github.com/docusealco)
|
3 weeks ago |
|
Wabo
|
6b652f8aa5 |
Add rebrand-sync/-check tooling for upstream merges
Adds a deterministic rebrand sweep so each upstream sync is a scripted
transformation rather than a manual sweep:
- bin/rebrand-sync — idempotent Ruby script that rewrites DocuSeal →
WaboSign tokens across the tree (Ruby module, AATL cert name, DB
names, Docker user, registry/repo URLs, DOM-ID/localStorage prefix,
daisyUI theme name, hardcoded UI strings). Sentinel-protects AGPL
§7(b) attribution phrases, SDK custom-element identifiers, the
@docuseal/* npm packages, and the docusealco/{fields-detection,
pdfium-binaries,turbo} binary URLs. Deny-lists NOTICE, LICENSE_*,
README, the AGPL attribution partials, calculator.js's DocuSeal LLC
copyright, lib/wabosign.rb's UPSTREAM constants, and the
docuseal_aatl migration that searches by the legacy name.
- bin/rebrand-check — fails CI when an unintended DocuSeal reference
survives in the tree. Wired in as the new `Rebrand check` job in
.github/workflows/ci.yml.
- REBRANDING.md gains a "Sync workflow" section documenting the
per-sync steps, rerere setup, and how to keep the two scripts'
allow/preserve lists in sync.
- .gitattributes marks Gemfile.lock and yarn.lock as -merge — they get
regenerated post-merge rather than diffed.
- Latent rebrand leftovers fixed: public/service-worker.js no longer
logs "DocuSeal App installed/activated"; .dockerignore and
.gitignore now ignore /wabosign (the actual runtime data dir mount)
rather than the stale /docuseal path.
Strategy detail lives at .claude/plans/come-up-with-a-foamy-flask.md.
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
|
1 month ago |