Commit graph

994 commits

Author SHA1 Message Date
dongmucat
9815cd7e91 fix(ISSUE-64): quote legacy install command versions
Signed-off-by: dongmucat <1127093059@qq.com>
2026-07-08 10:55:41 +08:00
dongmucat
4f193a5eba fix(ISSUE-64): guard malformed compliance search rows
Signed-off-by: dongmucat <1127093059@qq.com>
2026-07-06 15:21:33 +08:00
dongmucat
1905125e27 fix(ISSUE-64): close remaining compliance blockers
Signed-off-by: dongmucat <1127093059@qq.com>
2026-07-03 15:33:43 +08:00
dongmucat
2d15da9092 fix(ISSUE-64): reject invalid compliance search filters
Signed-off-by: dongmucat <1127093059@qq.com>
2026-06-30 11:43:08 +08:00
dongmucat
e17e3e2d09 fix(ISSUE-64): close compliance review gaps
Signed-off-by: dongmucat <1127093059@qq.com>
2026-06-30 11:19:06 +08:00
dongmucat
eb2db152fd fix(ISSUE-64): restrict compliance evidenceUrl schemes
Signed-off-by: dongmucat <1127093059@qq.com>
2026-06-29 09:49:27 +08:00
dongmucat
1b5a8ab769 test: [6ec22314-8660-4ac1-99cd-11c5598c3dea] align skill detail compliance assertion
Signed-off-by: dongmucat <1127093059@qq.com>
2026-06-26 14:00:06 +08:00
dongmucat
76d17b4bc9 fix: [6ec22314-8660-4ac1-99cd-11c5598c3dea] audit built-in publish snapshot
Signed-off-by: dongmucat <1127093059@qq.com>
2026-06-26 14:00:06 +08:00
dongmucat
09cf3b5dcc feat: [6ec22314-8660-4ac1-99cd-11c5598c3dea] add compliance version mapping
Signed-off-by: dongmucat <1127093059@qq.com>
2026-06-26 14:00:06 +08:00
dongmucat
8413ee3950
Merge pull request #554 from iflytek/fix/auth-password-settings
Some checks failed
Security / Dependency Review (push) Has been cancelled
Security / CodeQL (java-kotlin) (push) Has been cancelled
Security / CodeQL (javascript-typescript) (push) Has been cancelled
fix(auth): restore password settings access
2026-06-24 10:50:26 +08:00
dongmucat
c25f950841
Merge pull request #555 from iflytek/feature/promotion-review-optimization
feat(promotion): improve promotion review dashboard
2026-06-24 10:36:46 +08:00
dongmucat
e501be9cf8 feat(promotion): improve promotion review dashboard
Signed-off-by: dongmucat <1127093059@qq.com>
2026-06-24 09:28:43 +08:00
dongmucat
636f1edac2 docs(auth): align auth me example with #541
Signed-off-by: dongmucat <1127093059@qq.com>
2026-06-23 13:54:33 +08:00
dongmucat
f61ce71daa test(web): ISSUE-61 cover security settings real requests
Signed-off-by: dongmucat <1127093059@qq.com>
2026-06-22 17:22:19 +08:00
dongmucat
9f927c12b0 fix(PR): default deny security password changes
Signed-off-by: dongmucat <1127093059@qq.com>
2026-06-22 14:22:25 +08:00
dongmucat
54006e72a4 fix(web): ISSUE-62 gate security settings by capability
Signed-off-by: dongmucat <1127093059@qq.com>
2026-06-22 14:00:53 +08:00
dongmucat
665ee0499a feat(auth): add ISSUE-60 password capability field
Signed-off-by: dongmucat <1127093059@qq.com>
2026-06-22 12:40:01 +08:00
dongmucat
dc185861d4
Merge pull request #542 from iflytek/release/cli-v0.1.8
Some checks failed
Security / Dependency Review (push) Has been cancelled
Security / CodeQL (java-kotlin) (push) Has been cancelled
Security / CodeQL (javascript-typescript) (push) Has been cancelled
chore(cli): release 0.1.8
2026-06-18 15:56:27 +08:00
dongmucat
78b8b34ed1 chore(cli): bump version to 0.1.8
Signed-off-by: dongmucat <1127093059@qq.com>
2026-06-18 15:54:23 +08:00
dongmucat
f8ea4e67e4
feat(cli): support anonymous public search and install
feat(cli): support anonymous public search and install
2026-06-18 14:29:45 +08:00
dongmucat
ea73c305b8
Merge pull request #534 from SenLinLeo/fix/install-target-enter-selection
fix(cli): treat highlighted install target as selected
2026-06-18 09:43:48 +08:00
dongmucat
17daf87ab6
Merge pull request #539 from iflytek/fix/notification-sse-headers
Some checks failed
Security / CodeQL (java-kotlin) (push) Waiting to run
Security / Dependency Review (push) Waiting to run
Security / CodeQL (javascript-typescript) (push) Waiting to run
Deploy Docs / build (push) Has been cancelled
Deploy Docs / Deploy (push) Has been cancelled
fix(notification): preserve SSE headers for notification stream
2026-06-17 16:20:35 +08:00
dongmucat
48a1de9640 fix(notification): preserve SSE headers for notification stream
Signed-off-by: dongmucat <1127093059@qq.com>
2026-06-17 15:19:07 +08:00
dongmucat
477bf08e3b
Merge pull request #537 from iflytek/fix/codeql-python-matrix
fix(ci): remove unsupported Python CodeQL scan
2026-06-17 14:19:25 +08:00
dongmucat
32f34fbf4c fix(ci): remove unsupported Python CodeQL scan
Signed-off-by: dongmucat <1127093059@qq.com>
2026-06-17 14:04:27 +08:00
dongmucat
22a76515d3
Merge pull request #538 from iflytek/chore/deps-2026-06-security
chore(deps): patch dependabot security alerts
2026-06-17 14:01:39 +08:00
dongmucat
47a0ef1f7f chore(deps): patch dependabot security alerts
Signed-off-by: dongmucat <1127093059@qq.com>
2026-06-17 13:43:43 +08:00
dongmucat
cf22f568f7 test(cli): align auth tests with bearer hardening
Refs: 25f57a32-5f1d-4d56-b6b7-9b6b7b868799
Signed-off-by: dongmucat <1127093059@qq.com>
2026-06-17 11:35:17 +08:00
dongmucat
cb4bf94711 fix(cli): filter installable search before pagination
Signed-off-by: dongmucat <1127093059@qq.com>
2026-06-17 11:35:16 +08:00
dongmucat
5a708a5bd6 fix(domain): reject anonymous restricted resolves cleanly
Signed-off-by: dongmucat <1127093059@qq.com>
2026-06-17 11:35:16 +08:00
dongmucat
f5259daa94 fix(cli): require installable latest in search
Signed-off-by: dongmucat <1127093059@qq.com>
2026-06-17 11:35:16 +08:00
dongmucat
32cc316b30 fix(cli): align anonymous installability rules
Signed-off-by: dongmucat <1127093059@qq.com>
2026-06-17 11:35:16 +08:00
dongmucat
9520cf63e0 fix(cli): add token auth to search
Signed-off-by: dongmucat <1127093059@qq.com>
2026-06-17 11:35:16 +08:00
dongmucat
b56973fb80 fix(auth): fail closed invalid cli bearer tokens
Signed-off-by: dongmucat <1127093059@qq.com>
2026-06-17 11:35:16 +08:00
dongmucat
e4e1639833
Merge pull request #536 from iflytek/fix/review-super-admin-self-promotion
fix(review): allow super admin self promotion review
2026-06-17 11:25:09 +08:00
dongmucat
a85298f7ae
Merge pull request #508 from iflytek/fix/security-review-hardening
fix(security): harden review findings
2026-06-17 11:08:38 +08:00
dongmucat
a23cbd84eb
Merge pull request #530 from iflytek/fix/issue-51-profile-review-notifications
fix: admin notifications for profile review requests
2026-06-17 11:08:10 +08:00
dongmucat
52251fcd0e chore(docs): remove handwritten notification OpenAPI (#524)
Signed-off-by: dongmucat <1127093059@qq.com>
2026-06-17 10:25:34 +08:00
dongmucat
e50140272b fix(security): close review hardening gaps
Signed-off-by: dongmucat <1127093059@qq.com>
2026-06-16 17:48:15 +08:00
SenLinLeo
b44c65443d fix(cli): treat highlighted install target as selected
Signed-off-by: SenLinLeo <1664761477@qq.com>
2026-06-16 16:30:30 +08:00
dongmucat
a73dba5f80
Merge pull request #533 from iflytek/fix/publish-notification-owner
fix(notification): avoid publish notice for promotion reviewers
2026-06-16 15:16:08 +08:00
dongmucat
05e1968563
Merge pull request #526 from iflytek/feature/add-agentguard-skill
feat(bootstrap): add agentguard builtin skill
2026-06-16 14:27:30 +08:00
dongmucat
7d0402e937 fix(security): address review blockers
Signed-off-by: dongmucat <1127093059@qq.com>
2026-06-16 14:19:39 +08:00
dongmucat
73767a9022 fix(notification): avoid publish notice for promotion reviewers
Signed-off-by: dongmucat <1127093059@qq.com>
2026-06-16 12:19:27 +08:00
dongmucat
8527409742 fix(notification): keep SSE live push streams open (#524)
Signed-off-by: dongmucat <1127093059@qq.com>
2026-06-16 11:57:49 +08:00
dongmucat
256344cbde fix(review): allow super admin self promotion review
Signed-off-by: dongmucat <1127093059@qq.com>
2026-06-16 11:29:39 +08:00
dongmucat
a865960cf3 fix(notification): ISSUE-51 add profile review notifications
Signed-off-by: dongmucat <1127093059@qq.com>
2026-06-16 10:33:02 +08:00
dongmucat
6d6577faa2 fix(bootstrap): confirm builtin publish warnings
Signed-off-by: dongmucat <1127093059@qq.com>
2026-06-16 10:23:02 +08:00
dongmucat
abdad25df3 feat(bootstrap): add agentguard builtin skill
Signed-off-by: dongmucat <1127093059@qq.com>
2026-06-15 15:32:35 +08:00
dongmucat
40d7de8462 fix(security): harden review findings
Signed-off-by: dongmucat <1127093059@qq.com>
2026-06-12 14:40:30 +08:00