f4a2ba86ae
fix: restore mobile report scrolling and published product edits
...
Independent Staging Quality Gate / validate (push) Has been cancelled
Independent Staging Quality Gate / publish (push) Has been cancelled
Report pages now scroll inside the chat shell lock, and admin product save forks a draft or retires a published plan instead of rejecting with a generic constraint error.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-08-18 17:28:22 +08:00
1cbdb774e0
fix(admin): pass verified identity role to code RPCs
Independent Staging Quality Gate / validate (push) Successful in 13m41s
Independent Staging Quality Gate / publish (push) Successful in 9m41s
2026-08-16 20:40:25 +08:00
945d61fa1c
fix(admin): remove redundant confirmations and repair code access
Independent Staging Quality Gate / validate (push) Failing after 12m38s
Independent Staging Quality Gate / publish (push) Has been skipped
2026-08-16 17:55:15 +08:00
c712787ec2
fix(admin): remove manual reasons and repair code creation
Independent Staging Quality Gate / validate (push) Has been cancelled
Independent Staging Quality Gate / publish (push) Has been cancelled
2026-08-16 16:49:11 +08:00
4f6cf5782d
fix(admin): remove operation-level email reauthentication
Independent Staging Quality Gate / validate (push) Successful in 12m37s
Independent Staging Quality Gate / publish (push) Successful in 10m0s
2026-08-16 14:07:57 +08:00
a32d56677b
Allow emergency model provider disable
Staging Backend Quality Gate / validate (push) Successful in 14m32s
Staging Backend Quality Gate / publish (push) Successful in 25m17s
2026-08-08 12:20:26 +08:00
0676b6c402
Map model provider configuration errors
2026-08-08 11:01:56 +08:00
99e2abe9bc
fix(admin): secure proxied model mutations
Staging Backend Quality Gate / validate (push) Successful in 19m41s
Staging Backend Quality Gate / publish (push) Successful in 28m13s
2026-08-08 01:38:50 +08:00
3089316d2e
feat(admin): configure model providers from database
2026-08-07 20:03:20 +08:00
66a6c96a5c
fix(admin): fail safe across migration and auth boundaries
...
The recovery migration crossed the identity and RBAC ledgers without guarding schema prerequisites, while unknown configuration, provider, and database failures escaped the admin authorization boundary as 500s. Keep recovery in the DB ledger with explicit prerequisite no-ops, and sanitize unknown authorization failures to the existing 503 path.
2026-08-07 12:08:58 +08:00
754505d40a
fix(admin): preserve revoked owners and 503 status
...
Owner recovery lived in the identity-only migration path and could clear historical revocations on conflict. Admin layout also rethrew authorization 503s, turning service-unavailable failures into 500 responses.\n\nMove recovery behind the RBAC migration sequence, exclude revoked candidates without mutating their history, and terminate layout redirects at a no-store 503 route.
2026-08-07 11:33:48 +08:00
0d7e5a26d5
fix(admin): break denied-session redirect loop
...
Preserve 403/503 responses instead of redirecting them through the Caddy root, and recover Owner only for the sole loginable synced identity admin.
2026-08-07 11:06:13 +08:00
5622ab448a
feat(admin): add operations resources and audit UI
2026-08-06 20:15:08 +08:00
28e04857fa
feat(models): secure catalog and pin model versions
2026-08-06 20:15:08 +08:00
7040fd998e
feat(billing): add products subscriptions orders and usage
2026-08-06 20:15:08 +08:00
6457c836fa
feat(admin): add RBAC identity and MFA controls
2026-08-06 20:15:08 +08:00
f4e35974c6
Revert "merge: sync GitHub staging to Gitea"
...
Deploy staging to test server / deploy (push) Failing after 14m49s
This reverts commit a55c69115d02c9c9f3d6
2026-07-30 14:38:17 +08:00
02ec5db361
feat(admin): add audited Refine staging console
2026-07-28 09:47:13 +08:00
Jesse_Chen