vsxd
ce16a27c8d
fix: migration sql version fixed
2026-03-16 21:21:46 +08:00
vsxd
ace60c477f
fix(skill): isolate unpublished slug access
2026-03-16 21:21:46 +08:00
xiose
cb717fd5f4
fix(auth): enforce owner isolation for skill publishing
...
- Change skill uniqueness constraint from (namespace_id, slug) to
(namespace_id, slug, owner_id) to support per-user skill records
- Reject publish when another owner has a published skill with same slug
- Reject review approval when same-slug conflict exists
- Auto-withdraw pending review versions when submitting a new version
- Resolve visible skill by preferring published skill, then current
user's own skill, to fix wrong skill returned for same-slug queries
- Invalidate all skill query cache on publish to prevent stale data
2026-03-16 21:21:46 +08:00
xiose
94a1e95bc7
fix(auth): invalidate session when user account is disabled
2026-03-16 21:21:46 +08:00
xiose
1805391d2d
fix(auth): refresh user roles on /me request, fix login page UI issues
...
- Backend: /api/v1/auth/me now fetches fresh roles from DB and updates
session when roles have changed, so users see role changes on page
refresh without re-login
- Frontend: invalidate ['auth', 'me'] cache after admin user mutations
(role change, status change, approve, disable, enable) and account merge
- Login: fix reversed eye icon (Eye=visible, EyeOff=hidden)
- Login: hide browser-native password reveal button to avoid duplicate
2026-03-16 21:21:46 +08:00
tww
3d4afc2120
Merge remote-tracking branch 'origin/main' into cli-login
2026-03-16 19:53:13 +08:00
vsxd
723ddf559c
Configure default session timeout
2026-03-16 19:31:51 +08:00
yun-zhi-ztl
84bc5c7d9d
fix: improve dashboard UX and session refresh handling ( #51 )
...
* fix: refresh skill download counts after download
* fix: limit skill search query length
* fix: truncate long error messages in ui
* fix: refresh auth roles promptly
* fix: block disabled users with active sessions
* fix: add my skills preview to dashboard
* fix: align dashboard my skills layout
* fix: refine dashboard my skills preview
* fix: adjust dashboard my skills grid
* fix: keep dashboard more tile visible
* fix: refine dashboard copy tone
2026-03-16 19:29:26 +08:00
tww
3ab76b201a
cli login fix
2026-03-16 17:33:12 +08:00
vsxd
5168e866da
fix: make bootstrap admin opt-in and stabilize promotion errors
2026-03-16 16:03:46 +08:00
yun-zhi-ztl
df5883ec04
fix: stabilize skill promotion approval flow
2026-03-16 16:03:46 +08:00
yun-zhi-ztl
0b85bf1e89
feat: bootstrap default super admin across profiles
2026-03-16 16:03:46 +08:00
yun-zhi-ztl
556e65efef
feat: complete skill promotion submission flow
2026-03-16 16:03:46 +08:00
vsxd
bead940e3e
test: stabilize api assertions and add frontend test setup
2026-03-16 16:03:46 +08:00
yun-zhi-ztl
5c42f05486
fix: tighten archived namespace visibility
2026-03-16 16:03:46 +08:00
yun-zhi-ztl
b30311a537
feat: build governance center workflow
2026-03-16 16:03:46 +08:00
yun-zhi-ztl
62979b2dd7
test: cover namespace workflow smoke paths
2026-03-16 16:03:46 +08:00
yun-zhi-ztl
30d6581710
fix: stabilize backend dev startup flow
2026-03-16 16:03:46 +08:00
yun-zhi-ztl
8fc2c01a32
feat: complete namespace member management
2026-03-16 16:03:46 +08:00
yun-zhi-ztl
93323766db
fix: stabilize backend dev module classpath
2026-03-16 16:03:46 +08:00
yun-zhi-ztl
33ed8fe17d
feat: hide archived namespaces from public reads
2026-03-16 16:03:46 +08:00
yun-zhi-ztl
fcc2df2975
feat: enforce namespace lifecycle on workflows
2026-03-16 16:03:46 +08:00
yun-zhi-ztl
971c75c936
feat: add namespace management endpoints
2026-03-16 16:03:46 +08:00
yun-zhi-ztl
7501bb3cf2
feat: add namespace lifecycle governance
2026-03-16 16:03:46 +08:00
tww
bd83f91648
cli fix
2026-03-15 20:34:36 +08:00
yun-zhi-ztl
c6b3eab034
fix(skill): keep published view stable for owners
2026-03-15 20:06:45 +08:00
yun-zhi-ztl
2757f0ede7
fix(skill): handle missing stored files gracefully
2026-03-15 20:02:31 +08:00
yun-zhi-ztl
28393669e0
feat(skill): allow owner preview of pending submissions
2026-03-15 19:59:19 +08:00
yun-zhi-ztl
4ad97aa55a
feat(skill): add version management APIs
2026-03-15 19:45:10 +08:00
yun-zhi-ztl
3f82a88c4e
feat(skill): support rereleasing published versions
2026-03-15 19:42:44 +08:00
yun-zhi-ztl
29a08d3c54
feat(skill): allow withdrawing pending submissions
2026-03-15 19:23:20 +08:00
yun-zhi-ztl
7c2bd553e5
test(token): harden duplicate name regression coverage
2026-03-15 19:08:29 +08:00
yun-zhi-ztl
74ac44ed65
fix(publish): simplify frontmatter validation errors
2026-03-15 18:28:22 +08:00
yun-zhi-ztl
30545d6a8a
fix(publish): clarify precheck failures and avoid duplicate toasts
2026-03-15 18:26:14 +08:00
yun-zhi-ztl
f544d9419d
Merge remote-tracking branch 'origin/main' into feature/project-local
...
# Conflicts:
# server/skillhub-app/src/test/java/com/iflytek/skillhub/compat/ClawHubRegistryControllerTest.java
# server/skillhub-domain/src/main/java/com/iflytek/skillhub/domain/skill/service/SkillQueryService.java
2026-03-15 17:57:58 +08:00
yun-zhi-ztl
b44a7c0b35
fix(security): throttle auth failures and sanitize security logs
2026-03-15 17:44:54 +08:00
yun-zhi-ztl
39b0f3c852
fix(security): add baseline content security policy
2026-03-15 17:40:20 +08:00
yun-zhi-ztl
458fc6b300
fix(security): enforce admin roles and expand audit log filters
2026-03-15 17:38:51 +08:00
yun-zhi-ztl
e827df2aa4
fix(publish): add package prechecks and content validation
2026-03-15 17:33:15 +08:00
yun-zhi-ztl
d6fac50309
fix(security): harden auth boundaries and metrics access
2026-03-15 17:29:51 +08:00
yun-zhi-ztl
c552829367
fix(skill): tighten lifecycle detail and search paging
2026-03-15 17:19:05 +08:00
yun-zhi-ztl
090cb156ac
tune(search): improve semantic reranking quality
2026-03-15 17:09:46 +08:00
yun-zhi-ztl
3a5e8d711e
feat(search): add semantic reranking foundation
2026-03-15 17:07:48 +08:00
yun-zhi-ztl
04eb468a19
feat(skill): add lifecycle management UI
2026-03-15 17:02:03 +08:00
yun-zhi-ztl
cc8ce22c85
feat(report): add skill report backend workflow
2026-03-15 16:41:31 +08:00
yun-zhi-ztl
0bdca1ab81
feat(skill): add lifecycle management APIs
2026-03-15 16:30:10 +08:00
tww
f38fea85b5
cli
2026-03-15 16:02:54 +08:00
yun-zhi-ztl
2b6f4e335e
refactor(web): move portal APIs under api/web
2026-03-15 15:48:14 +08:00
yun-zhi-ztl
17dcb4807a
fix(review): allow super admins to review own skills
2026-03-15 15:39:37 +08:00
yun-zhi-ztl
a7d1ba1952
fix(download): fall back to safe same-origin skill downloads
2026-03-15 14:20:14 +08:00
