scriptoriumadmin/skillhub
1
0
Fork 0
mirror of https://github.com/iflytek/skillhub.git synced 2026-10-15 04:18:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3
1541 commits 266 branches 29 tags 44 MiB
Commit graph

1541 commits

This branch
This branch
All branches
Author SHA1 Message Date
XiaoSeS
642e780f1e fix(authoring): protect draft transactions and validation lifecycle 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-10-14 18:15:44 +08:00
zjncs
8a69827286 ci: run the backend test suite on pull requests 
Upstream PRs currently surface only the DCO/CLA app checks, so backend
results were only ever a local report. This adds a minimal workflow that
runs ./mvnw test (Temurin 21, Maven cache, Testcontainers on the hosted
runner) for pull requests and for the authoring feature branches, making
the suite's outcome a visible check on the PR head. Happy to drop or
rework it if the maintainers prefer a different CI arrangement.

Signed-off-by: zjncs <18910855655@163.com>
 2026-10-13 21:01:40 +08:00
zjncs
56531d2692 fix(authoring): enforce draft ownership on file and run listing 
Addresses the layer review on #935:

- listFiles and listRuns now resolve the draft through
  getOwnedDraft first, enforcing the same owner-or-SUPER_ADMIN policy
  as every other draft endpoint. Previously an authenticated non-owner
  could read another draft's file metadata and validation-run summary.
- new SkillAuthoringControllerAuthorizationTest: HTTP-level two-user
  coverage on both route prefixes (/api/v1/authoring and
  /api/web/authoring) — owner success, SUPER_ADMIN success, and the
  authenticated non-owner rejection, for both endpoints.
- migration renumbered to V69__authoring_platform.sql (upstream's
  system_auth_settings took V68), rebased on the latest main.
- web/src/api/generated/schema.d.ts regenerated from this branch's
  live OpenAPI surface (includes upstream API drift since the last
  generation plus the authoring endpoints).

Signed-off-by: zjncs <18910855655@163.com>
 2026-10-12 11:21:04 +08:00
zjncs
a5729d24e1 feat(authoring): draft domain model, CRUD and structure-layer validation 
Layer (a) of the authoring platform (tracked in #934): the SkillDraft
domain — drafts with revisions, digest and optimistic concurrency, draft
files in object storage, validation runs/events/findings — plus the V68
migration, the draft CRUD REST API with a scaffolded SKILL.md, and the
STRUCTURE validation layer executed by the run orchestrator (package
layout, frontmatter rules, file limits) reporting findings with
machine-applicable fix suggestions. Runs and findings stream over SSE
with a polling fallback.

Later layers add runtime binding and behavior execution (b), the fix
loop and publish integration (c), the web workbench (d) and docs (e).

Verified: skillhub-domain 609 tests green; the draft flow integration
test covers scaffold → broken frontmatter → FAILED run with a fixable
FRONTMATTER_FIELD_MISSING finding → repair → SUCCEEDED re-validation,
plus the optimistic-concurrency conflict path.

Signed-off-by: zjncs <18910855655@163.com>
 2026-10-12 11:07:24 +08:00
XiaoSeS
a463efb535
Merge pull request #939 from iflytek/fix/issue-923-role-grant-check
Some checks failed
Deploy Docs / build (push) Has been cancelled
Details
Security / Dependency Review (push) Has been cancelled
Details
Security / CodeQL (java-kotlin) (push) Has been cancelled
Details
Security / CodeQL (javascript-typescript) (push) Has been cancelled
Details
Security / CodeQL (python) (push) Has been cancelled
Details
Deploy Docs / Deploy (push) Has been cancelled
Details 
fix(auth): keep initial grant rules out of SQL checks
 2026-10-10 17:49:15 +08:00
XiaoSeS
68a99b21bd fix(auth): keep initial grant rules out of SQL checks 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-10-10 17:21:45 +08:00
XiaoSeS
55a5c93183
Merge pull request #938 from iflytek/feature/weekly-w40-w41-official 
docs(weekly): publish W40-W41 report
 2026-10-10 17:04:38 +08:00
XiaoSeS
24608f4d5d
Merge pull request #936 from iflytek/feat/issue-923-auth-settings 
feat(auth): configure local sign-in and initial external roles
 2026-10-10 17:00:34 +08:00
XiaoSeS
562b520d69 docs(weekly): publish W40-W41 report 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-10-10 16:58:57 +08:00
XiaoSeS
1bfbfdd720 test(auth): cover concurrent settings update in UI 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-10-10 16:38:07 +08:00
XiaoSeS
44a311ea80 feat(auth): improve system settings interactions 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-10-10 16:25:12 +08:00
XiaoSeS
f630519625 test(auth): verify initial grant seed across transactions 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-10-10 15:42:18 +08:00
XiaoSeS
b4a037b0ff test(auth): verify seed deletion and same-email grant isolation 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-10-10 15:42:18 +08:00
XiaoSeS
6842b40132 test(auth): persist initial grant audit in PostgreSQL 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-10-10 15:42:17 +08:00
XiaoSeS
e8de0059ef test(auth): cover competing initial grants and smoke endpoints 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-10-10 15:42:17 +08:00
XiaoSeS
5120f4f046 test(auth): verify initial role grants in PostgreSQL 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-10-10 15:42:17 +08:00
XiaoSeS
a2249454cf test(auth): cover public capabilities for all switch states 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-10-10 15:42:17 +08:00
XiaoSeS
ad2412c075 fix(auth): preserve login on existing installations 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-10-10 15:42:17 +08:00
XiaoSeS
f297fdfd09 fix(auth): verify initial grants and auth UI behavior 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-10-10 15:42:17 +08:00
XiaoSeS
df9b869d8e feat(auth): add system login settings and initial role grants 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-10-10 15:42:17 +08:00
XiaoSeS
72429e6f69
Merge pull request #933 from iflytek/feat/promotion-update-revoke-signed
Some checks failed
Deploy Docs / build (push) Has been cancelled
Details
Security / Dependency Review (push) Has been cancelled
Details
Security / CodeQL (java-kotlin) (push) Has been cancelled
Details
Security / CodeQL (javascript-typescript) (push) Has been cancelled
Details
Security / CodeQL (python) (push) Has been cancelled
Details
Deploy Docs / Deploy (push) Has been cancelled
Details 
feat(promotion): support global updates and revocation
 2026-10-09 19:39:57 +08:00
XiaoSeS
863e240838 test(promotion): cover unpublished sources and version races 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-10-09 18:28:39 +08:00
XiaoSeS
2732bc6dea fix(docs): retain current architecture diagram 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-10-09 18:15:38 +08:00
XiaoSeS
84bda97dee feat(promotion): support reviewed global updates and revocation 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-10-09 18:14:59 +08:00
dongmucat
753af7280a
Merge pull request #908 from iflytek/docs/readme-architecture-diagram 
docs(readme): refresh architecture diagram
 2026-10-09 15:17:15 +08:00
XiaoSeS
f10110a1b3
Merge pull request #931 from iflytek/fix/issue-912-triage-nda-manifest-dco-20261009
Some checks are pending
Security / Dependency Review (push) Waiting to run
Details
Security / CodeQL (java-kotlin) (push) Waiting to run
Details
Security / CodeQL (javascript-typescript) (push) Waiting to run
Details
Security / CodeQL (python) (push) Waiting to run
Details 
feat(starter): activate triage-nda built-in skill
 2026-10-09 10:34:33 +08:00
XiaoSeS
9d2c7d03a1 feat(starter): activate triage-nda built-in skill 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-10-09 10:10:57 +08:00
XiaoSeS
dfcd887669
Merge pull request #913 from iflytek/feat/starter-triage-nda-912 
feat(starter): add reviewed NDA triage skill
 2026-10-09 09:42:48 +08:00
XiaoSeS
8a0d82f30a
Merge pull request #916 from iflytek/fix/triage-heading-levels 
fix(triage): support level-2 issue headings
 2026-10-08 17:38:57 +08:00
XiaoSeS
45228996c7
Merge pull request #927 from iflytek/fix/issue-921-secure-account-merge-dco-20261008 
fix(auth): require secondary approval before account merge
 2026-10-08 16:35:06 +08:00
XiaoSeS
0f41e9f443 chore(auth): sync Silo image fix from main 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-10-08 15:21:02 +08:00
XiaoSeS
5bfc51946c
Merge pull request #925 from X77seven/fix/minio-image-source 
fix(deploy): repoint MinIO runtime image to pgsty/silo
 2026-10-08 15:20:01 +08:00
XiaoSeS
b7cfbe193b fix(auth): serialize account merges and revoke secondary tokens 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-10-08 13:56:23 +08:00
XiaoSeS
7a53782985 test(auth): bound row lock fixture wait 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-10-08 12:20:51 +08:00
XiaoSeS
15abf9ce76 test(auth): verify merge row lock contention 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-10-08 12:18:19 +08:00
XiaoSeS
291f5fc24f test(auth): cover merge cancellation races 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-10-08 12:15:13 +08:00
XiaoSeS
dc635a24d6 fix(auth): require secondary approval before account merge 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-10-08 12:03:55 +08:00
XiaoSeS
ee57b85aec fix(deploy): pin Helm image and preserve mirror alias 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-10-08 11:25:46 +08:00
X77
a9f5f0efa3 fix(deploy): repoint MinIO runtime image to pgsty/silo 
quay.io/minio/minio returns 401 Unauthorized for anonymous pulls on every
tag, so PR E2E (Real Services) and the Helm S3 smoke test fail before any
test runs. MinIO deleted minio/minio from Docker Hub on 2026-09-11 and
quay.io started requiring authentication on 2026-09-24.

Repoint the three runtime surfaces to pgsty/silo, a maintained MinIO fork
(AGPLv3 - same license as the image currently in use). It is a drop-in:
identical env vars, ports and command. Verified on a GitHub Actions runner
with SkillHub's exact configuration (health endpoints 200, S3 round trip
mb/put/get/ls/rb all pass).

- docker-compose.yml
- deploy/runtime-mirror-images.txt
- charts/skillhub/tests/install-upgrade-smoke.sh

Signed-off-by: X77 <1494159925@qq.com>
 2026-10-08 10:51:33 +08:00
dongmucat
906a5e6c19 fix(triage): parse level-2 issue headings (ISSUE-179) 
Signed-off-by: dongmucat <1127093059@qq.com>
 2026-10-02 02:23:11 +08:00
FenjuFu
57fac6f543 feat(starter): add reviewed NDA triage skill 
Signed-off-by: FenjuFu <fufenjupku@gmail.com>
 2026-10-01 17:05:44 +08:00
dongmucat
7969ff8a3b docs(readme): refresh architecture diagram 2026-09-29 15:31:24 +08:00
XiaoSeS
735259728f
Merge pull request #904 from iflytek/docs/weekly-w39-official-signed
Some checks failed
Deploy Docs / build (push) Has been cancelled
Details
Security / Dependency Review (push) Has been cancelled
Details
Security / CodeQL (java-kotlin) (push) Has been cancelled
Details
Security / CodeQL (javascript-typescript) (push) Has been cancelled
Details
Security / CodeQL (python) (push) Has been cancelled
Details
Deploy Docs / Deploy (push) Has been cancelled
Details 
docs(weekly): publish 2026-W39 report
 2026-09-24 18:29:41 +08:00
XiaoSeS
903228b350 docs(weekly): publish 2026-W39 report 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-09-24 18:24:38 +08:00
XiaoSeS
455cbb5ba5
Merge pull request #902 from iflytek/feature/enterprise-login-r1b2-org-admin 
feat(auth): add organization creation control plane slice
 2026-09-24 15:58:57 +08:00
dongmucat
0fd222d1e7
Merge pull request #879 from iflytek/feature/scanner-2-1-upgrade 
fix(scanner): harden Scanner 2.1 integration
 2026-09-24 15:47:20 +08:00
XiaoSeS
17273bb6ca docs(auth): decouple organization APIs from OIDC controls 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-09-24 15:44:56 +08:00
XiaoSeS
1e2de2798b test(auth): verify organization creation rollback 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-09-24 15:14:16 +08:00
dongmucat
9f92debf00 fix(scanner): redact mounted route findings 
Signed-off-by: dongmucat <1127093059@qq.com>
 2026-09-24 15:01:28 +08:00
XiaoSeS
52e4e052a1 feat(auth): add organization creation control plane slice 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-09-24 14:43:17 +08:00