Xudong Sun
4aa3d29599
refactor: skill lifecycle projection and docs ( #78 )
...
* Refactor skill lifecycle projection and docs
* Improve owner lifecycle visibility on skill detail
* Track download counts per skill version
2026-03-18 13:39:22 +08:00
Xudong Sun
c2284d8acf
feat: add anonymous download rate limiting ( #76 )
2026-03-18 11:31:10 +08:00
vsxd
72054dee0f
Allow anonymous downloads for global public skills
2026-03-17 20:25:26 +08:00
yun-zhi-ztl
cc5fc7586f
fix: improve disabled-account feedback and skill detail polish ( #70 )
...
* fix: keep download counts consistent across skill pages
* fix: stabilize empty search ordering across sorts
* fix: show disabled-account reason on login redirect
* fix: mute report input placeholder text
* fix: return skill detail to my skills page
* test: stabilize auth context filter coverage
2026-03-17 19:55:44 +08:00
yun-zhi-ztl
b0e19af3ed
fix: harden hidden skill visibility and local dev restart flow ( #62 )
...
* fix: hide hidden skills from regular viewers
* fix: avoid dashboard preview crash after registration
* fix: restrict skill hiding to super admins
* chore: remove dev process script
* fix: hide hidden skills from slug resolution
2026-03-17 15:26:12 +08:00
vsxd
e52853c49c
test: cover role and user status permission edges
2026-03-17 14:27:25 +08:00
yun-zhi-ztl
252ba65297
fix: hide self-report action on skill detail
2026-03-17 14:05:40 +08:00
yun-zhi-ztl
83606ef930
fix: degrade gracefully for missing skill storage assets
2026-03-17 13:56:39 +08:00
yun-zhi-ztl
02c03946c9
test: restore passing unit suites
2026-03-17 11:44:57 +08:00
yun-zhi-ztl
f6aaa6f587
Merge remote-tracking branch 'origin/main' into feature/project-fixbug
2026-03-17 11:37:22 +08:00
vsxd
68de48933a
Fix frontend build and stabilize test suite
2026-03-17 11:16:01 +08:00
yun-zhi-ztl
97db5efa8f
fix: restrict namespace creation to admins
2026-03-17 11:12:13 +08:00
yun-zhi-ztl
163320f7eb
fix: paginate personal skills and stars
2026-03-17 11:06:47 +08:00
vsxd
66cbdd7b57
fix: official site urls removed
2026-03-16 21:25:55 +08:00
vsxd
ce16a27c8d
fix: migration sql version fixed
2026-03-16 21:21:46 +08:00
vsxd
ace60c477f
fix(skill): isolate unpublished slug access
2026-03-16 21:21:46 +08:00
xiose
cb717fd5f4
fix(auth): enforce owner isolation for skill publishing
...
- Change skill uniqueness constraint from (namespace_id, slug) to
(namespace_id, slug, owner_id) to support per-user skill records
- Reject publish when another owner has a published skill with same slug
- Reject review approval when same-slug conflict exists
- Auto-withdraw pending review versions when submitting a new version
- Resolve visible skill by preferring published skill, then current
user's own skill, to fix wrong skill returned for same-slug queries
- Invalidate all skill query cache on publish to prevent stale data
2026-03-16 21:21:46 +08:00
xiose
94a1e95bc7
fix(auth): invalidate session when user account is disabled
2026-03-16 21:21:46 +08:00
xiose
1805391d2d
fix(auth): refresh user roles on /me request, fix login page UI issues
...
- Backend: /api/v1/auth/me now fetches fresh roles from DB and updates
session when roles have changed, so users see role changes on page
refresh without re-login
- Frontend: invalidate ['auth', 'me'] cache after admin user mutations
(role change, status change, approve, disable, enable) and account merge
- Login: fix reversed eye icon (Eye=visible, EyeOff=hidden)
- Login: hide browser-native password reveal button to avoid duplicate
2026-03-16 21:21:46 +08:00
tww
3d4afc2120
Merge remote-tracking branch 'origin/main' into cli-login
2026-03-16 19:53:13 +08:00
vsxd
723ddf559c
Configure default session timeout
2026-03-16 19:31:51 +08:00
yun-zhi-ztl
84bc5c7d9d
fix: improve dashboard UX and session refresh handling ( #51 )
...
* fix: refresh skill download counts after download
* fix: limit skill search query length
* fix: truncate long error messages in ui
* fix: refresh auth roles promptly
* fix: block disabled users with active sessions
* fix: add my skills preview to dashboard
* fix: align dashboard my skills layout
* fix: refine dashboard my skills preview
* fix: adjust dashboard my skills grid
* fix: keep dashboard more tile visible
* fix: refine dashboard copy tone
2026-03-16 19:29:26 +08:00
tww
3ab76b201a
cli login fix
2026-03-16 17:33:12 +08:00
vsxd
5168e866da
fix: make bootstrap admin opt-in and stabilize promotion errors
2026-03-16 16:03:46 +08:00
yun-zhi-ztl
df5883ec04
fix: stabilize skill promotion approval flow
2026-03-16 16:03:46 +08:00
yun-zhi-ztl
0b85bf1e89
feat: bootstrap default super admin across profiles
2026-03-16 16:03:46 +08:00
yun-zhi-ztl
556e65efef
feat: complete skill promotion submission flow
2026-03-16 16:03:46 +08:00
vsxd
bead940e3e
test: stabilize api assertions and add frontend test setup
2026-03-16 16:03:46 +08:00
yun-zhi-ztl
5c42f05486
fix: tighten archived namespace visibility
2026-03-16 16:03:46 +08:00
yun-zhi-ztl
b30311a537
feat: build governance center workflow
2026-03-16 16:03:46 +08:00
yun-zhi-ztl
62979b2dd7
test: cover namespace workflow smoke paths
2026-03-16 16:03:46 +08:00
yun-zhi-ztl
30d6581710
fix: stabilize backend dev startup flow
2026-03-16 16:03:46 +08:00
yun-zhi-ztl
8fc2c01a32
feat: complete namespace member management
2026-03-16 16:03:46 +08:00
yun-zhi-ztl
93323766db
fix: stabilize backend dev module classpath
2026-03-16 16:03:46 +08:00
yun-zhi-ztl
33ed8fe17d
feat: hide archived namespaces from public reads
2026-03-16 16:03:46 +08:00
yun-zhi-ztl
971c75c936
feat: add namespace management endpoints
2026-03-16 16:03:46 +08:00
tww
bd83f91648
cli fix
2026-03-15 20:34:36 +08:00
yun-zhi-ztl
28393669e0
feat(skill): allow owner preview of pending submissions
2026-03-15 19:59:19 +08:00
yun-zhi-ztl
4ad97aa55a
feat(skill): add version management APIs
2026-03-15 19:45:10 +08:00
yun-zhi-ztl
29a08d3c54
feat(skill): allow withdrawing pending submissions
2026-03-15 19:23:20 +08:00
yun-zhi-ztl
7c2bd553e5
test(token): harden duplicate name regression coverage
2026-03-15 19:08:29 +08:00
yun-zhi-ztl
f544d9419d
Merge remote-tracking branch 'origin/main' into feature/project-local
...
# Conflicts:
# server/skillhub-app/src/test/java/com/iflytek/skillhub/compat/ClawHubRegistryControllerTest.java
# server/skillhub-domain/src/main/java/com/iflytek/skillhub/domain/skill/service/SkillQueryService.java
2026-03-15 17:57:58 +08:00
yun-zhi-ztl
b44a7c0b35
fix(security): throttle auth failures and sanitize security logs
2026-03-15 17:44:54 +08:00
yun-zhi-ztl
39b0f3c852
fix(security): add baseline content security policy
2026-03-15 17:40:20 +08:00
yun-zhi-ztl
458fc6b300
fix(security): enforce admin roles and expand audit log filters
2026-03-15 17:38:51 +08:00
yun-zhi-ztl
d6fac50309
fix(security): harden auth boundaries and metrics access
2026-03-15 17:29:51 +08:00
yun-zhi-ztl
c552829367
fix(skill): tighten lifecycle detail and search paging
2026-03-15 17:19:05 +08:00
yun-zhi-ztl
3a5e8d711e
feat(search): add semantic reranking foundation
2026-03-15 17:07:48 +08:00
yun-zhi-ztl
04eb468a19
feat(skill): add lifecycle management UI
2026-03-15 17:02:03 +08:00
yun-zhi-ztl
cc8ce22c85
feat(report): add skill report backend workflow
2026-03-15 16:41:31 +08:00
