Commit graph

409 commits

Author SHA1 Message Date
yun-zhi-ztl
81458e1c17 fix(admin): clarify user search interactions 2026-03-15 14:20:07 +08:00
yun-zhi-ztl
e06b692064 feat(publish): allow removing selected uploads 2026-03-15 14:20:07 +08:00
yun-zhi-ztl
0671fae983 fix(admin): remove invalid role placeholder option 2026-03-15 14:20:07 +08:00
yun-zhi-ztl
6a53a6f6c7 fix(admin): resolve user ids for role updates 2026-03-15 14:20:07 +08:00
yun-zhi-ztl
149f811b43 fix(auth): localize password change feedback 2026-03-15 14:20:07 +08:00
yun-zhi-ztl
bace5f0b1b fix(my-skills): show pending skills after upload 2026-03-15 14:20:07 +08:00
wowo-zZ
1c5badde29 feat(i18n): set English as default fallback language 2026-03-14 21:11:21 +08:00
yun-zhi-ztl
d8ec0c4088 fix(search): separate starred filter from sort controls 2026-03-14 20:38:22 +08:00
yun-zhi-ztl
bf62b340ab fix: change api/v1/cli to api/v1 2026-03-14 20:35:50 +08:00
yun-zhi-ztl
57c4f77d25 feat(search): add starred-only filter 2026-03-14 20:33:52 +08:00
yun-zhi-ztl
2f1faa1397 feat(search): allow unstar from skill cards 2026-03-14 20:28:38 +08:00
yun-zhi-ztl
bbec999d49 fix(search): make starred skills easier to spot 2026-03-14 20:26:02 +08:00
yun-zhi-ztl
f90e404efc fix(skill): refine starred and rating visual states 2026-03-14 20:23:36 +08:00
yun-zhi-ztl
e08763ec37 fix(search): distinguish starred and rating states 2026-03-14 20:21:01 +08:00
yun-zhi-ztl
176bfe9fb5 fix(token): handle successful deletes and refresh immediately 2026-03-14 20:09:41 +08:00
yun-zhi-ztl
8c8ce1d881 fix(publish): clarify duplicate version upload errors 2026-03-14 19:59:26 +08:00
yun-zhi-ztl
f3cd59a6c0 feat(search): update results as users type 2026-03-14 19:58:17 +08:00
yun-zhi-ztl
196fe52391 fix(dashboard): avoid duplicate token fetch and false error toast 2026-03-14 19:56:57 +08:00
yun-zhi-ztl
5544990240 fix(publish): keep publish button text color consistent 2026-03-14 19:54:45 +08:00
yun-zhi-ztl
60145d7dae fix(publish): timeout stalled publish requests 2026-03-14 19:53:27 +08:00
yun-zhi-ztl
a1083412e1 fix(stars): keep favorites data in sync 2026-03-14 19:51:06 +08:00
yun-zhi-ztl
bf319332c5 feat(token): paginate token list 2026-03-14 19:44:11 +08:00
yun-zhi-ztl
495b05f63f fix(dialog): keep modals centered on long pages 2026-03-14 19:41:33 +08:00
yun-zhi-ztl
32add06b5d fix(skill): format publish time in local system time 2026-03-14 19:40:17 +08:00
yun-zhi-ztl
fc9bdffc7d fix(token): validate name length and uniqueness 2026-03-14 19:38:18 +08:00
yun-zhi-ztl
ccc23289bc fix(dialog): portal token modal to body 2026-03-14 19:31:16 +08:00
yun-zhi-ztl
725b71d323 fix(skill): contain readme content overflow 2026-03-14 19:27:50 +08:00
yun-zhi-ztl
72f0b9f8f3 fix(login): validate required fields before submit 2026-03-14 19:26:37 +08:00
yun-zhi-ztl
553a72eeb1 fix(token): center copy feedback toast 2026-03-14 19:24:29 +08:00
yun-zhi-ztl
33abb1133e feat(skill): add back button on detail page 2026-03-14 19:22:23 +08:00
yun-zhi-ztl
7eb88356cd fix(search): align skill card metadata rows 2026-03-14 19:20:53 +08:00
yun-zhi-ztl
73550c0b06 feat(login): add password visibility toggle 2026-03-14 19:18:39 +08:00
yun-zhi-ztl
0b576e3f59 fix(search): wrap long empty-state descriptions 2026-03-14 19:16:25 +08:00
yun-zhi-ztl
a5d6b6246b fix(auth): localize login errors and align API error handling 2026-03-14 19:05:20 +08:00
yun-zhi-ztl
188f6108d1 feat(auth): improve extensible login method metadata 2026-03-14 18:52:35 +08:00
yun-zhi-ztl
3f1985da46 fix(web): adapt header controls to landing theme 2026-03-14 18:19:41 +08:00
yun-zhi-ztl
c08fd7306b fix(web): align language switcher text color 2026-03-14 18:18:08 +08:00
yun-zhi-ztl
a6cf862e8e merge(main): sync latest origin/main into feature/project-review
Resolved 9 conflicts according to documented strategy:
- .gitignore: kept both entries (docs/review/ + CLAUDE.md)
- ClawHubCompatController.java: manual merge (use @AuthenticationPrincipal + platformRoles)
- ClawHubCompatControllerTest.java: kept ours (HEAD security tests)
- CliControllerTest.java: kept ours (HEAD platform roles tests)
- ReviewPermissionChecker.java: kept ours (stricter permission model)
- SkillPublishService.java: kept theirs (main SUPER_ADMIN bypass + events)
- SkillPublishServiceTest.java: kept theirs (main complete test suite)
- router.tsx: manual merge (HEAD's createLazyRouteComponent + main's privacy/terms)
- markdown-renderer.tsx: kept ours (HEAD frontmatter stripping + styles)

All A1-A9 security fixes preserved. No new logic introduced.
2026-03-14 17:50:38 +08:00
yun-zhi-ztl
d64c92f4cf fix(web): use light text colors for landing page header nav
Override LanguageSwitcher, UserMenu, and login link text colors
to slate-200/300 so they are visible on the dark landing background.
2026-03-14 17:36:56 +08:00
yun-zhi-ztl
fd790a9610 feat(web): add header nav to landing page and local dev improvements
- Add sticky header with LanguageSwitcher and UserMenu to landing page
- Update token dialog and i18n translations
- Fix dev process script and compose release config
- Remove stale skillhub submodule reference
2026-03-14 17:32:47 +08:00
yun-zhi-ztl
cfc296181f fix : temp debug 2026-03-14 17:32:47 +08:00
wowo
b96126a267 Merge pull request #20 from iflytek/bugfix/require-auth-for-download
fix: require authentication for downloads and fix download count increment
2026-03-14 17:22:38 +08:00
wowo_zZ
41b0f8ce1b feat(web): add legal pages and footer links 2026-03-14 17:14:16 +08:00
wowo-zZ
56e7baed15 fix(auth): require authentication for skill downloads
- Remove download endpoints from permitAll list in SecurityConfig
- Add authentication checks to download tests
- Add login redirect for unauthenticated download attempts in frontend

This prevents unauthorized access to skill package downloads while
maintaining public access to skill metadata and file listings.
2026-03-14 16:54:10 +08:00
wowo-zZ
e97752735c fix(auth): improve logout flow to always redirect to home
- Use window.location.href for full page refresh
- Move redirect to finally block to ensure it always executes
- Fix V7 migration to be a no-op since column is already jsonb
2026-03-14 15:40:53 +08:00
wowo-zZ
611253fe21 feat(nav): add explore link to navbar with responsive design
- Group Logo and main nav links on the left
- Add explore link pointing to /search
- Use hidden md:flex for mobile responsiveness
- Maintain consistent spacing (gap-8 for Logo-nav, gap-6 for nav links)
2026-03-14 15:40:53 +08:00
wowo-zZ
39fc20f124 feat(i18n): add English translation for explore nav link 2026-03-14 15:40:53 +08:00
wowo-zZ
7f481cb958 feat(i18n): add Chinese translation for explore nav link 2026-03-14 15:40:53 +08:00
wowo
58ca1d0c9e Merge pull request #13 from iflytek/fix/allow-anonymous-skill-detail-view
fix(web): improve anonymous user experience on skill detail page
2026-03-14 14:27:10 +08:00
wowo-zZ
798872f09a fix(web): improve anonymous user experience on skill detail page
- Add proper error handling for skill detail API errors
- Show friendly login prompt when anonymous users access private skills
- Show access denied message when authenticated users lack permission
- Add i18n translations for new error messages (en/zh)

This allows anonymous users to view PUBLIC skills while providing
clear guidance when they encounter private or restricted content.
2026-03-14 12:01:21 +08:00