8 Commits

Author	SHA1	Message	Date
Jesse_Chen	754505d40a	fix(admin): preserve revoked owners and 503 status ... Owner recovery lived in the identity-only migration path and could clear historical revocations on conflict. Admin layout also rethrew authorization 503s, turning service-unavailable failures into 500 responses.\n\nMove recovery behind the RBAC migration sequence, exclude revoked candidates without mutating their history, and terminate layout redirects at a no-store 503 route.	2026-08-07 11:33:48 +08:00
Jesse_Chen	0d7e5a26d5	fix(admin): break denied-session redirect loop ... Preserve 403/503 responses instead of redirecting them through the Caddy root, and recover Owner only for the sole loginable synced identity admin.	2026-08-07 11:06:13 +08:00
Jesse_Chen	5622ab448a	feat(admin): add operations resources and audit UI	2026-08-06 20:15:08 +08:00
Jesse_Chen	28e04857fa	feat(models): secure catalog and pin model versions	2026-08-06 20:15:08 +08:00
Jesse_Chen	7040fd998e	feat(billing): add products subscriptions orders and usage	2026-08-06 20:15:08 +08:00
Jesse_Chen	6457c836fa	feat(admin): add RBAC identity and MFA controls	2026-08-06 20:15:08 +08:00
linmeng	f4e35974c6	Revert "merge: sync GitHub staging to Gitea" ... This reverts commit a55c69115d, reversing changes made to 02c9c9f3d6.	2026-07-30 14:38:17 +08:00
Jesse	02ec5db361	feat(admin): add audited Refine staging console	2026-07-28 09:47:13 +08:00