Commit graph

152 commits

Author SHA1 Message Date
vsxd
330f64cedd fix(web): avoid CSP errors when downloading skills 2026-03-16 21:03:37 +08:00
xiose
060a611a54 fix(auth): enforce owner isolation for skill publishing
- Change skill uniqueness constraint from (namespace_id, slug) to
  (namespace_id, slug, owner_id) to support per-user skill records
- Reject publish when another owner has a published skill with same slug
- Reject review approval when same-slug conflict exists
- Auto-withdraw pending review versions when submitting a new version
- Resolve visible skill by preferring published skill, then current
  user's own skill, to fix wrong skill returned for same-slug queries
- Invalidate all skill query cache on publish to prevent stale data
2026-03-16 20:56:28 +08:00
xiose
b83e8b8c27 fix(auth): refresh user roles on /me request, fix login page UI issues
- Backend: /api/v1/auth/me now fetches fresh roles from DB and updates
  session when roles have changed, so users see role changes on page
  refresh without re-login
- Frontend: invalidate ['auth', 'me'] cache after admin user mutations
  (role change, status change, approve, disable, enable) and account merge
- Login: fix reversed eye icon (Eye=visible, EyeOff=hidden)
- Login: hide browser-native password reveal button to avoid duplicate
2026-03-16 20:39:33 +08:00
xiose
40b9c8e39d fix(web): reset token dialog state on reopen, fix pagination and download button
- Reset form fields and mutation state when create-token dialog reopens
- Fix delete pagination: check items.length === 0 (post-delete) instead of 1
- Restrict skill download to PUBLISHED versions only
2026-03-16 20:39:33 +08:00
xiose
c23960ea0b fix(web): prevent text overflow in token dialogs
Add responsive text wrapping and overflow handling to token-related
components to prevent layout breaking with long token names or descriptions.

Changes:
- Add min-w-0 to dialog headers to allow flex shrinking
- Add break-all/break-words to prevent text overflow
- Add overflow-hidden to token display container
- Apply max-w-48 constraint to token name column
2026-03-16 20:39:33 +08:00
vsxd
4a102c6507 Fix SKILL.md frontmatter rendering 2026-03-16 20:29:36 +08:00
vsxd
3e67e12344 fix: clarify global namespace visibility copy 2026-03-16 19:30:54 +08:00
yun-zhi-ztl
84bc5c7d9d fix: improve dashboard UX and session refresh handling (#51)
* fix: refresh skill download counts after download

* fix: limit skill search query length

* fix: truncate long error messages in ui

* fix: refresh auth roles promptly

* fix: block disabled users with active sessions

* fix: add my skills preview to dashboard

* fix: align dashboard my skills layout

* fix: refine dashboard my skills preview

* fix: adjust dashboard my skills grid

* fix: keep dashboard more tile visible

* fix: refine dashboard copy tone
2026-03-16 19:29:26 +08:00
vsxd
5168e866da fix: make bootstrap admin opt-in and stabilize promotion errors 2026-03-16 16:03:46 +08:00
yun-zhi-ztl
2b0bb25240 fix: stabilize promotion approval and documentation fallback 2026-03-16 16:03:46 +08:00
yun-zhi-ztl
556e65efef feat: complete skill promotion submission flow 2026-03-16 16:03:46 +08:00
vsxd
bead940e3e test: stabilize api assertions and add frontend test setup 2026-03-16 16:03:46 +08:00
yun-zhi-ztl
b30311a537 feat: build governance center workflow 2026-03-16 16:03:46 +08:00
yun-zhi-ztl
8fc2c01a32 feat: complete namespace member management 2026-03-16 16:03:46 +08:00
yun-zhi-ztl
889a6d3b9d feat: add namespace creation dialog 2026-03-16 16:03:46 +08:00
yun-zhi-ztl
f92cdb31f2 feat: add namespace governance dashboard 2026-03-16 16:03:46 +08:00
tww
bbd416ceca Quick Start 2026-03-15 21:14:36 +08:00
tww
bd83f91648 cli fix 2026-03-15 20:34:36 +08:00
yun-zhi-ztl
907885eb79 fix(skill): surface unavailable readme states 2026-03-15 20:09:32 +08:00
yun-zhi-ztl
c6b3eab034 fix(skill): keep published view stable for owners 2026-03-15 20:06:45 +08:00
yun-zhi-ztl
28393669e0 feat(skill): allow owner preview of pending submissions 2026-03-15 19:59:19 +08:00
yun-zhi-ztl
3446740b5f feat(web): add skill version management UI 2026-03-15 19:48:29 +08:00
yun-zhi-ztl
29a08d3c54 feat(skill): allow withdrawing pending submissions 2026-03-15 19:23:20 +08:00
yun-zhi-ztl
74ac44ed65 fix(publish): simplify frontmatter validation errors 2026-03-15 18:28:22 +08:00
yun-zhi-ztl
30545d6a8a fix(publish): clarify precheck failures and avoid duplicate toasts 2026-03-15 18:26:14 +08:00
yun-zhi-ztl
39b0f3c852 fix(security): add baseline content security policy 2026-03-15 17:40:20 +08:00
yun-zhi-ztl
458fc6b300 fix(security): enforce admin roles and expand audit log filters 2026-03-15 17:38:51 +08:00
yun-zhi-ztl
c552829367 fix(skill): tighten lifecycle detail and search paging 2026-03-15 17:19:05 +08:00
yun-zhi-ztl
04eb468a19 feat(skill): add lifecycle management UI 2026-03-15 17:02:03 +08:00
yun-zhi-ztl
411e592362 feat(report): add skill report UI and admin page 2026-03-15 16:47:53 +08:00
yun-zhi-ztl
2b6f4e335e refactor(web): move portal APIs under api/web 2026-03-15 15:48:14 +08:00
yun-zhi-ztl
21a3c5717a fix(web): stabilize auth shell startup flow 2026-03-15 15:36:30 +08:00
yun-zhi-ztl
21ae36645c fix(token): remove list copy action and clarify one-time copy 2026-03-15 14:20:14 +08:00
yun-zhi-ztl
e188c8e060 fix(dialog): preserve centered modal positioning 2026-03-15 14:20:07 +08:00
yun-zhi-ztl
6786b8a95c fix(toast): center feedback and remove native token tooltip 2026-03-15 14:20:07 +08:00
yun-zhi-ztl
4c91b73592 fix(dialog): center popup content across app 2026-03-15 14:20:07 +08:00
yun-zhi-ztl
d6608e4b29 fix(token): center token actions and toast layout 2026-03-15 14:20:07 +08:00
yun-zhi-ztl
fb32512ed9 fix(token): center token feedback toasts 2026-03-15 14:20:07 +08:00
yun-zhi-ztl
9f4ac978b9 feat(token): support copy hints and expiration updates 2026-03-15 14:20:07 +08:00
yun-zhi-ztl
13840754ad feat(dashboard): add back navigation for subpages 2026-03-15 14:20:07 +08:00
yun-zhi-ztl
f3c3c2beeb feat(token): support configurable expiration times 2026-03-15 14:20:07 +08:00
yun-zhi-ztl
b1bbbeb7c9 fix(token): center copy toasts with dedicated toaster 2026-03-15 14:20:07 +08:00
yun-zhi-ztl
cc3e45dc30 fix(search): polish default sorting and loading states 2026-03-15 14:20:07 +08:00
yun-zhi-ztl
81458e1c17 fix(admin): clarify user search interactions 2026-03-15 14:20:07 +08:00
yun-zhi-ztl
e06b692064 feat(publish): allow removing selected uploads 2026-03-15 14:20:07 +08:00
yun-zhi-ztl
0671fae983 fix(admin): remove invalid role placeholder option 2026-03-15 14:20:07 +08:00
yun-zhi-ztl
6a53a6f6c7 fix(admin): resolve user ids for role updates 2026-03-15 14:20:07 +08:00
yun-zhi-ztl
149f811b43 fix(auth): localize password change feedback 2026-03-15 14:20:07 +08:00
yun-zhi-ztl
bace5f0b1b fix(my-skills): show pending skills after upload 2026-03-15 14:20:07 +08:00
wowo-zZ
1c5badde29 feat(i18n): set English as default fallback language 2026-03-14 21:11:21 +08:00