Commit graph

199 commits

Author SHA1 Message Date
wowo-zZ
56e7baed15 fix(auth): require authentication for skill downloads
- Remove download endpoints from permitAll list in SecurityConfig
- Add authentication checks to download tests
- Add login redirect for unauthenticated download attempts in frontend

This prevents unauthorized access to skill package downloads while
maintaining public access to skill metadata and file listings.
2026-03-14 16:54:10 +08:00
wowo-zZ
b886bd8aed chore(ci): trigger image publish only on release events
- Change workflow trigger from push events to release published events
- Remove automatic builds on main branch merges
- Keep manual workflow_dispatch option for flexibility
2026-03-14 16:08:35 +08:00
wowo
8194e821f8 Merge pull request #16 from iflytek/fix/v7-migration-jsonb-type
feat: add explore link to navbar and fix logout/migration issues
2026-03-14 16:02:33 +08:00
wowo-zZ
e97752735c fix(auth): improve logout flow to always redirect to home
- Use window.location.href for full page refresh
- Move redirect to finally block to ensure it always executes
- Fix V7 migration to be a no-op since column is already jsonb
2026-03-14 15:40:53 +08:00
wowo-zZ
611253fe21 feat(nav): add explore link to navbar with responsive design
- Group Logo and main nav links on the left
- Add explore link pointing to /search
- Use hidden md:flex for mobile responsiveness
- Maintain consistent spacing (gap-8 for Logo-nav, gap-6 for nav links)
2026-03-14 15:40:53 +08:00
wowo-zZ
39fc20f124 feat(i18n): add English translation for explore nav link 2026-03-14 15:40:53 +08:00
wowo-zZ
7f481cb958 feat(i18n): add Chinese translation for explore nav link 2026-03-14 15:40:53 +08:00
wowo
bd87e701cf Merge pull request #14 from iflytek/feat/optimize-staging-build
feat: optimize development workflow with fast local dev and staging environments
2026-03-14 14:27:48 +08:00
wowo
58ca1d0c9e Merge pull request #13 from iflytek/fix/allow-anonymous-skill-detail-view
fix(web): improve anonymous user experience on skill detail page
2026-03-14 14:27:10 +08:00
wowo
f991e9041f Merge pull request #12 from iflytek/docs/add-claude-code-instructions
docs: add Claude Code development instructions
2026-03-14 14:26:45 +08:00
wowo
987fa80bbf Merge pull request #11 from iflytek/fix/storage-permission-and-audit-log-jsonb
fix(ops): resolve storage permission and audit log JSONB type issues
2026-03-14 14:26:26 +08:00
wowo-zZ
5581bd6f06 feat(staging): optimize staging build with local Maven packaging
- Add server/Dockerfile.dev for fast local builds (JRE-only, ~70MB)
- Modify staging target to build JAR locally before Docker image
- Update .dockerignore to allow target/ directory for Dockerfile.dev
- Build time reduced from 17+ minutes to ~4 seconds
- Reuses local Maven cache (~/.m2/repository) instead of downloading in Docker
2026-03-14 14:21:06 +08:00
wowo-zZ
5254cd155e update 2026-03-14 13:54:39 +08:00
wowo-zZ
175b6c44c9 docs: add dev-workflow guide covering local dev, staging, and PR creation 2026-03-14 13:31:47 +08:00
wowo-zZ
2f639f1098 feat(staging): add staging and pr make targets 2026-03-14 13:30:32 +08:00
wowo-zZ
72b2802a21 feat(staging): add hybrid staging docker-compose 2026-03-14 13:30:24 +08:00
wowo-zZ
25477398b5 feat(dev): add dev-status and dev-logs make targets 2026-03-14 13:28:28 +08:00
wowo-zZ
797cfc5272 feat(dev): add Spring Boot DevTools for fast restart in local dev 2026-03-14 13:23:50 +08:00
wowo-zZ
fb15c53920 docs(plan): add dev workflow optimization implementation plan 2026-03-14 13:20:38 +08:00
wowo-zZ
798872f09a fix(web): improve anonymous user experience on skill detail page
- Add proper error handling for skill detail API errors
- Show friendly login prompt when anonymous users access private skills
- Show access denied message when authenticated users lack permission
- Add i18n translations for new error messages (en/zh)

This allows anonymous users to view PUBLIC skills while providing
clear guidance when they encounter private or restricted content.
2026-03-14 12:01:21 +08:00
wowo-zZ
01c5d43625 feat(web): add SkillHub logo as browser favicon
Add favicon.svg to web/public directory and configure it in index.html
to display the SkillHub logo in browser tabs.
2026-03-14 11:45:55 +08:00
wowo-zZ
d631b0e20a fix(ops): resolve storage permission and audit log JSONB type issues
Fixes two critical issues when deploying with runtime.sh:

1. Storage Permission Error
   - Problem: AccessDeniedException when publishing skills
   - Root cause: /var/lib/skillhub/storage owned by root, but app runs as 'app' user
   - Solution: Pre-create storage directory with correct permissions in Dockerfile

2. Audit Log JSONB Type Error
   - Problem: PostgreSQL JSONB type mismatch when recording audit logs
   - Root cause: Missing type mapping annotation in AuditLog entity
   - Solution: Add @JdbcTypeCode(SqlTypes.JSON) annotation and V7 migration

Changes:
- server/Dockerfile: Add storage directory creation and permission setup
- server/skillhub-domain/.../AuditLog.java: Add @JdbcTypeCode annotation
- server/skillhub-app/.../V7__fix_audit_log_jsonb_type.sql: Migration for existing data

Impact:
- New deployments: Issues resolved automatically
- Existing deployments: Flyway auto-applies V7 migration on upgrade
2026-03-14 11:23:19 +08:00
wowo
4ec0de90b9 Merge pull request #9 from FenjuFu/main
docs: add Usage with Agent Platforms section to README (#1)
2026-03-13 21:08:12 +08:00
FenjuFu
d5a5b44605 docs: add Usage with Agent Platforms section to README (#1)
* Initial plan

* docs: add Usage with Agent Platforms section to README

Co-authored-by: FenjuFu <92919259+FenjuFu@users.noreply.github.com>

* Fix heading format for AstronClaw section

Updated the heading for AstronClaw in the README.

Signed-off-by: FenjuFu <92919259+FenjuFu@users.noreply.github.com>

---------

Signed-off-by: FenjuFu <92919259+FenjuFu@users.noreply.github.com>
Co-authored-by: FenjuFu <92919259+FenjuFu@users.noreply.github.com>
2026-03-13 20:44:24 +08:00
wowo
eba2c99191 Merge pull request #8 from iflytek/docs/improve-readme
docs: improve README with logo, badges, and documentation link
2026-03-13 19:31:01 +08:00
wowo-zZ
557c4effab docs: hide stars and forks badges 2026-03-13 19:15:36 +08:00
wowo-zZ
84a95d039f docs: improve README with logo, badges, and Zread documentation link 2026-03-13 19:13:44 +08:00
vsxd
ac352314f7 Add extensible auth compatibility layer for private SSO 2026-03-13 18:00:22 +08:00
vsxd
2329fd4a7f Add sanitized production env draft 2026-03-13 17:00:47 +08:00
vsxd
7a0d40736c Add release config validation workflow 2026-03-13 17:00:47 +08:00
vsxd
b1aeb3c8a2 Fix web health check for release compose 2026-03-13 17:00:47 +08:00
vsxd
9ae9b93ca7 Refine production compose runtime config 2026-03-13 17:00:47 +08:00
vsxd
14d86c290a chore(release): v0.1.0-beta.7 2026-03-13 16:05:08 +08:00
vsxd
3682a4646b Auto-publish skills submitted by super admins 2026-03-13 15:36:56 +08:00
wowo-zZ
3268a243f5 update readme 2026-03-13 15:20:29 +08:00
wowo-zZ
cbc903a686 update readme 2026-03-13 15:20:29 +08:00
vsxd
a773b87e68 Adjust landing footer and remove CTA section 2026-03-13 15:15:13 +08:00
vsxd
0ab6b48ac6 fix(web): localize landing footer license text 2026-03-13 14:53:28 +08:00
vsxd
1fb70a99f2 Merge remote-tracking branch 'origin/main' 2026-03-13 14:50:32 +08:00
vsxd
0cb940e2f8 Merge branch 'feature/improvement' 2026-03-13 14:49:23 +08:00
vsxd
de5956476b Sync header auth state after login 2026-03-13 14:48:01 +08:00
vsxd
c2b75bf961 Refine skill install command layout 2026-03-13 14:44:28 +08:00
vsxd
2170412bda feat(web): complete i18n coverage for all pages and components
Replace hardcoded Chinese strings with t() calls across 36 files.
Expand translation keys from ~160 to 412 covering all pages, features,
and shared components. Fix date formatting to use dynamic i18n locale.
2026-03-13 14:43:26 +08:00
wowo-zZ
72a14d2e8a refactor(web): simplify landing page and update typography
- Change font class from font-display to font-heading in home page
- Adjust landing page title tracking from tight to normal
- Remove redundant CTA section from landing page
- Simplify footer links to GitHub only with proper external link attributes
2026-03-13 14:34:17 +08:00
vsxd
d82665baba feat(review): allow admins to review their own submissions 2026-03-13 14:23:20 +08:00
vsxd
6189671c27 Merge branch 'feature/improvement' 2026-03-13 14:13:42 +08:00
vsxd
5485e70eb8 chore: remove validate-openapi workflow 2026-03-13 14:12:59 +08:00
vsxd
b229b1030a Merge branch 'feature/improvement' 2026-03-13 14:01:43 +08:00
vsxd
cfcd4e9d0e chore: add .claude/ to .gitignore 2026-03-13 14:00:59 +08:00
vsxd
7f1e9b96fe fix(web): change namespace URL prefix from /@namespace to /space/namespace to avoid route conflicts 2026-03-13 13:59:55 +08:00