Commit graph

576 commits

Author SHA1 Message Date
XiaoSeS
71790bc1b8 merge: sync main after authoring prerequisite
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-10-14 20:07:47 +08:00
XiaoSeS
642e780f1e fix(authoring): protect draft transactions and validation lifecycle
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-10-14 18:15:44 +08:00
XiaoSeS
0cfae1799d fix(web): reduce invitation dialog control density
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-10-14 14:18:59 +08:00
XiaoSeS
b67b9553e6 fix(web): compact invitation history and display names
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-10-14 14:03:21 +08:00
XiaoSeS
ccd171eac9 feat(namespace): retain invitation history and join records
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-10-14 11:52:19 +08:00
XiaoSeS
a56486812e fix(web): expand invitation dialog and clarify its status
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-10-14 11:06:27 +08:00
XiaoSeS
5916771237 fix(web): clarify pending avatars and space management
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-10-14 10:44:03 +08:00
XiaoSeS
be1529aeda fix(review): refresh moderation queue on entry
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-10-13 19:29:03 +08:00
XiaoSeS
efbb50f4aa fix(namespace): refresh invitation state before creating link
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-10-13 19:16:01 +08:00
XiaoSeS
3de13c033f style(namespace): remove trailing empty line
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-10-13 18:39:00 +08:00
XiaoSeS
71d0598d92 feat(review): unify skill avatar approval and space management
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-10-13 18:38:30 +08:00
XiaoSeS
bfb5298c9a fix(avatar): bound crop dialog and refresh inactive removal caches
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-10-13 15:50:50 +08:00
XiaoSeS
66571f709b fix(avatar): unify update flow and crop in a compact dialog
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-10-13 15:15:52 +08:00
XiaoSeS
b469b60997 fix(avatar): reuse open-source image cropping component
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-10-13 13:59:12 +08:00
XiaoSeS
c5f8483cbe fix(publish): refresh content review queue after submission
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-10-13 13:13:45 +08:00
XiaoSeS
d9c658a459 fix(avatar): refresh owner and review caches after mutations
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-10-13 12:54:18 +08:00
XiaoSeS
1a7ffbe6e2 feat(avatar): stage images before skill publication
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-10-13 11:15:35 +08:00
XiaoSeS
c48b09d3a0 fix(namespace): expose invitation confirmation errors
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-10-12 15:12:00 +08:00
XiaoSeS
5f2d47968c feat: combine Skill avatars and namespace invitations
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-10-12 13:42:31 +08:00
XiaoSeS
17a18b9319 fix(avatar): recover pending reviews and cover moderation flows
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-10-12 13:42:26 +08:00
XiaoSeS
b67ea7ddb8 feat(avatar): add review and owner interfaces
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-10-12 13:42:11 +08:00
XiaoSeS
ee17c1eb43 fix(invitation): enter namespace after member preview
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-10-12 12:52:04 +08:00
XiaoSeS
44a1623620 fix(invitation): align API with issue contract
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-10-12 12:48:18 +08:00
XiaoSeS
f12019cf14 fix(invitation): keep login return target on join route
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-10-12 12:32:12 +08:00
XiaoSeS
08fb846b15 fix(namespace): keep invitation labels unique and copy promptly
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-10-12 12:19:20 +08:00
XiaoSeS
7d36d42056 test(namespace): cover invitation mutation races
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-10-12 12:15:49 +08:00
XiaoSeS
27687713d2 fix(namespace): complete invitation review follow-up
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-10-12 12:06:34 +08:00
XiaoSeS
9c997f7eca feat(namespace): add one-time invitation links
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-10-12 11:55:47 +08:00
zjncs
56531d2692 fix(authoring): enforce draft ownership on file and run listing
Addresses the layer review on #935:

- listFiles and listRuns now resolve the draft through
  getOwnedDraft first, enforcing the same owner-or-SUPER_ADMIN policy
  as every other draft endpoint. Previously an authenticated non-owner
  could read another draft's file metadata and validation-run summary.
- new SkillAuthoringControllerAuthorizationTest: HTTP-level two-user
  coverage on both route prefixes (/api/v1/authoring and
  /api/web/authoring) — owner success, SUPER_ADMIN success, and the
  authenticated non-owner rejection, for both endpoints.
- migration renumbered to V69__authoring_platform.sql (upstream's
  system_auth_settings took V68), rebased on the latest main.
- web/src/api/generated/schema.d.ts regenerated from this branch's
  live OpenAPI surface (includes upstream API drift since the last
  generation plus the authoring endpoints).

Signed-off-by: zjncs <18910855655@163.com>
2026-10-12 11:21:04 +08:00
XiaoSeS
1bfbfdd720 test(auth): cover concurrent settings update in UI
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-10-10 16:38:07 +08:00
XiaoSeS
44a311ea80 feat(auth): improve system settings interactions
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-10-10 16:25:12 +08:00
XiaoSeS
f297fdfd09 fix(auth): verify initial grants and auth UI behavior
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-10-10 15:42:17 +08:00
XiaoSeS
df9b869d8e feat(auth): add system login settings and initial role grants
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-10-10 15:42:17 +08:00
XiaoSeS
84bda97dee feat(promotion): support reviewed global updates and revocation
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-10-09 18:14:59 +08:00
XiaoSeS
dc635a24d6 fix(auth): require secondary approval before account merge
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-10-08 12:03:55 +08:00
XiaoSeS
455cbb5ba5
Merge pull request #902 from iflytek/feature/enterprise-login-r1b2-org-admin
feat(auth): add organization creation control plane slice
2026-09-24 15:58:57 +08:00
dongmucat
0fd222d1e7
Merge pull request #879 from iflytek/feature/scanner-2-1-upgrade
fix(scanner): harden Scanner 2.1 integration
2026-09-24 15:47:20 +08:00
XiaoSeS
52e4e052a1 feat(auth): add organization creation control plane slice
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-24 14:43:17 +08:00
XiaoSeS
e0c5f7597d test(auth): expect home after registration
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-24 13:53:00 +08:00
XiaoSeS
69192fcf9b test(auth): match theme toggle accessible name
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-24 13:35:31 +08:00
XiaoSeS
f9e9496053 test(auth): stabilize registration layout screenshot
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-24 13:35:31 +08:00
XiaoSeS
3000375515 test(auth): cover registration viewport and artwork loading
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-24 13:35:31 +08:00
XiaoSeS
f8148f28f6 test(auth): cover direct routing and login layout boundaries
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-24 13:35:30 +08:00
XiaoSeS
e4ee6b6d9a fix(auth): keep login available during session check failures
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-24 13:35:30 +08:00
XiaoSeS
8249e84454 fix(auth): hide password routing implementation details
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-24 11:22:43 +08:00
XiaoSeS
0e9d2e2d3e fix(auth): redirect signed-in visitors away from login
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-24 11:22:43 +08:00
XiaoSeS
5be60043d5 test(auth): select password field precisely
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-24 10:32:21 +08:00
XiaoSeS
5aea7345b8 test(auth): cover registration and runtime return navigation
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-24 10:21:38 +08:00
XiaoSeS
1aa8d7bc85 fix(auth): guard registration OAuth hint and return paths
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-24 10:09:55 +08:00
XiaoSeS
5a8b796d03 fix(auth): defer organization discovery until backend contract
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-24 09:48:56 +08:00