yun-zhi-ztl
984137485d
fix: fallback to rebuilding skill bundles for downloads
2026-03-17 14:14:45 +08:00
vsxd
033ac54c76
chore: unify build and test entrypoints
2026-03-17 14:09:22 +08:00
yun-zhi-ztl
252ba65297
fix: hide self-report action on skill detail
2026-03-17 14:05:40 +08:00
yun-zhi-ztl
83606ef930
fix: degrade gracefully for missing skill storage assets
2026-03-17 13:56:39 +08:00
yun-zhi-ztl
02c03946c9
test: restore passing unit suites
2026-03-17 11:44:57 +08:00
yun-zhi-ztl
f6aaa6f587
Merge remote-tracking branch 'origin/main' into feature/project-fixbug
2026-03-17 11:37:22 +08:00
yun-zhi-ztl
43493fa63d
fix: relax skill frontmatter parsing
2026-03-17 11:22:08 +08:00
yun-zhi-ztl
96dcf08b0e
fix: allow republish after review withdrawal
2026-03-17 11:16:57 +08:00
vsxd
68de48933a
Fix frontend build and stabilize test suite
2026-03-17 11:16:01 +08:00
yun-zhi-ztl
97db5efa8f
fix: restrict namespace creation to admins
2026-03-17 11:12:13 +08:00
yun-zhi-ztl
a888561e53
fix: handle numeric skill search queries
2026-03-17 11:10:05 +08:00
yun-zhi-ztl
163320f7eb
fix: paginate personal skills and stars
2026-03-17 11:06:47 +08:00
vsxd
66cbdd7b57
fix: official site urls removed
2026-03-16 21:25:55 +08:00
vsxd
ce16a27c8d
fix: migration sql version fixed
2026-03-16 21:21:46 +08:00
vsxd
ace60c477f
fix(skill): isolate unpublished slug access
2026-03-16 21:21:46 +08:00
xiose
cb717fd5f4
fix(auth): enforce owner isolation for skill publishing
...
- Change skill uniqueness constraint from (namespace_id, slug) to
(namespace_id, slug, owner_id) to support per-user skill records
- Reject publish when another owner has a published skill with same slug
- Reject review approval when same-slug conflict exists
- Auto-withdraw pending review versions when submitting a new version
- Resolve visible skill by preferring published skill, then current
user's own skill, to fix wrong skill returned for same-slug queries
- Invalidate all skill query cache on publish to prevent stale data
2026-03-16 21:21:46 +08:00
xiose
94a1e95bc7
fix(auth): invalidate session when user account is disabled
2026-03-16 21:21:46 +08:00
xiose
1805391d2d
fix(auth): refresh user roles on /me request, fix login page UI issues
...
- Backend: /api/v1/auth/me now fetches fresh roles from DB and updates
session when roles have changed, so users see role changes on page
refresh without re-login
- Frontend: invalidate ['auth', 'me'] cache after admin user mutations
(role change, status change, approve, disable, enable) and account merge
- Login: fix reversed eye icon (Eye=visible, EyeOff=hidden)
- Login: hide browser-native password reveal button to avoid duplicate
2026-03-16 21:21:46 +08:00
tww
3d4afc2120
Merge remote-tracking branch 'origin/main' into cli-login
2026-03-16 19:53:13 +08:00
vsxd
723ddf559c
Configure default session timeout
2026-03-16 19:31:51 +08:00
yun-zhi-ztl
84bc5c7d9d
fix: improve dashboard UX and session refresh handling ( #51 )
...
* fix: refresh skill download counts after download
* fix: limit skill search query length
* fix: truncate long error messages in ui
* fix: refresh auth roles promptly
* fix: block disabled users with active sessions
* fix: add my skills preview to dashboard
* fix: align dashboard my skills layout
* fix: refine dashboard my skills preview
* fix: adjust dashboard my skills grid
* fix: keep dashboard more tile visible
* fix: refine dashboard copy tone
2026-03-16 19:29:26 +08:00
tww
3ab76b201a
cli login fix
2026-03-16 17:33:12 +08:00
vsxd
5168e866da
fix: make bootstrap admin opt-in and stabilize promotion errors
2026-03-16 16:03:46 +08:00
yun-zhi-ztl
df5883ec04
fix: stabilize skill promotion approval flow
2026-03-16 16:03:46 +08:00
yun-zhi-ztl
0b85bf1e89
feat: bootstrap default super admin across profiles
2026-03-16 16:03:46 +08:00
yun-zhi-ztl
556e65efef
feat: complete skill promotion submission flow
2026-03-16 16:03:46 +08:00
vsxd
bead940e3e
test: stabilize api assertions and add frontend test setup
2026-03-16 16:03:46 +08:00
yun-zhi-ztl
5c42f05486
fix: tighten archived namespace visibility
2026-03-16 16:03:46 +08:00
yun-zhi-ztl
b30311a537
feat: build governance center workflow
2026-03-16 16:03:46 +08:00
yun-zhi-ztl
62979b2dd7
test: cover namespace workflow smoke paths
2026-03-16 16:03:46 +08:00
yun-zhi-ztl
30d6581710
fix: stabilize backend dev startup flow
2026-03-16 16:03:46 +08:00
yun-zhi-ztl
8fc2c01a32
feat: complete namespace member management
2026-03-16 16:03:46 +08:00
yun-zhi-ztl
93323766db
fix: stabilize backend dev module classpath
2026-03-16 16:03:46 +08:00
yun-zhi-ztl
33ed8fe17d
feat: hide archived namespaces from public reads
2026-03-16 16:03:46 +08:00
yun-zhi-ztl
fcc2df2975
feat: enforce namespace lifecycle on workflows
2026-03-16 16:03:46 +08:00
yun-zhi-ztl
971c75c936
feat: add namespace management endpoints
2026-03-16 16:03:46 +08:00
yun-zhi-ztl
7501bb3cf2
feat: add namespace lifecycle governance
2026-03-16 16:03:46 +08:00
tww
bd83f91648
cli fix
2026-03-15 20:34:36 +08:00
yun-zhi-ztl
c6b3eab034
fix(skill): keep published view stable for owners
2026-03-15 20:06:45 +08:00
yun-zhi-ztl
2757f0ede7
fix(skill): handle missing stored files gracefully
2026-03-15 20:02:31 +08:00
yun-zhi-ztl
28393669e0
feat(skill): allow owner preview of pending submissions
2026-03-15 19:59:19 +08:00
yun-zhi-ztl
4ad97aa55a
feat(skill): add version management APIs
2026-03-15 19:45:10 +08:00
yun-zhi-ztl
3f82a88c4e
feat(skill): support rereleasing published versions
2026-03-15 19:42:44 +08:00
yun-zhi-ztl
29a08d3c54
feat(skill): allow withdrawing pending submissions
2026-03-15 19:23:20 +08:00
yun-zhi-ztl
7c2bd553e5
test(token): harden duplicate name regression coverage
2026-03-15 19:08:29 +08:00
yun-zhi-ztl
74ac44ed65
fix(publish): simplify frontmatter validation errors
2026-03-15 18:28:22 +08:00
yun-zhi-ztl
30545d6a8a
fix(publish): clarify precheck failures and avoid duplicate toasts
2026-03-15 18:26:14 +08:00
yun-zhi-ztl
f544d9419d
Merge remote-tracking branch 'origin/main' into feature/project-local
...
# Conflicts:
# server/skillhub-app/src/test/java/com/iflytek/skillhub/compat/ClawHubRegistryControllerTest.java
# server/skillhub-domain/src/main/java/com/iflytek/skillhub/domain/skill/service/SkillQueryService.java
2026-03-15 17:57:58 +08:00
yun-zhi-ztl
b44a7c0b35
fix(security): throttle auth failures and sanitize security logs
2026-03-15 17:44:54 +08:00
yun-zhi-ztl
39b0f3c852
fix(security): add baseline content security policy
2026-03-15 17:40:20 +08:00
