5 Commits

Include renames

Author	SHA1	Message	Date
weichenandCursor	47463a9623	Align admin account e2e with must-change password gate ... Why: U4 middleware restricts must_change sessions to me/password/logout; the legacy e2e expected admin create before first password change. Evidence: go test ./internal/store/ ./internal/server/ ./internal/app/ Impact: TestAdminAccountFlow matches set-password + reloginRequired. Refs: docs/svc-deploy/u4-one-time-login-key.md §5–6 Co-authored-by: Cursor <cursoragent@cursor.com>	2026-10-12 03:54:59 +00:00
weichen	6681c3b47c	Fall back to session cookie on stale Bearer key and report authVia ... Why: a browser holding a revoked API key in localStorage sent the Bearer header on every request; key precedence 401'd all APIs despite a valid login session, locking admins out of user management. /api/me also reported mustChangePassword for key principals, who cannot change passwords (session-owned), dead-ending the forced-change gate. Evidence: new TestStaleKeySessionFallback covers fallback and authVia; TestAuthMiddleware/TestAdminAccountFlow unchanged and green; full go test ./... green. Impact: invalid key falls back to a valid session cookie before 401 (cookie-less programmatic clients unaffected); /api/me gains authVia ("key"|"session"|""), letting the frontend keep key holders out of the change-password gate. Refs: Dev task feature/admin-auth-gate-fix.	2026-10-11 13:45:52 +00:00
weichenandCursor	6533f0fa88	Add professional standards for every agent deliverable ... Why: Generated files kept Word's default theme, US Letter pages, hand-typed bullets and empty sections. Recipes only showed library calls, the prompt had no craft standard, and seeded skills could not be upgraded once written. Evidence: go test ./... passed. The house-style suite covers three themes across docx, pptx and xlsx, and rejects a document that repeats the diagnosed layout failures. lint on the sample minutes exits 1. Impact: Every run gets a resident quality standard. Office files use house-style (switchable themes, templates, imitation) and must pass lint. Skill seeding upgrades untouched builtins and keeps user edits. Uploads land in inputs/, and the default style is a setting. Refs: feature/agent-professional-deliverables Co-authored-by: Cursor <cursoragent@cursor.com>	2026-10-01 08:16:58 +00:00
weichen	9a545b1e69	Add admin-issued accounts with forced first-login password change ... Why: the user ruled out self-registration (2026-09-30): accounts are created only by admins who set an initial password; first login (and first login after any admin reset) must force a password change. Evidence: - migration v10 auth_accounts (users password/must_change/is_admin + sessions table; upgrade test walks v1<->v10 both directions). - argon2id hash/verify with PHC encoding; store tests cover hash roundtrip, duplicate-owner conflict, must-change lifecycle, session keep/except semantics. - e2e TestAdminAccountFlow: static login page reachable without auth, wrong password 401, login sets HttpOnly cookie + mustChangePassword, admin creates user (409 on duplicate), non-admin create 403, forced change clears flag and old password dies, admin reset revokes sessions and re-arms forced change, API-key channel untouched, 5-fail backoff 429, logout kills session. Full go test ./... green. Impact: middleware now accepts Bearer key OR session cookie and exempts static + /api/auth/login (also fixes the latent case where the login page itself could 401). Embedded no-auth mode unchanged. Refs: proposal 2026-09-30-ui-redesign-and-auth.md section 5 (admin-issued variant, user decision 2026-09-30)	2026-09-30 11:15:22 +00:00
weichen	02e2036fc6	Add dual-tier storage (embedded SQLite + optional PostgreSQL) ... Details (original message): Add dual-tier storage (embedded SQLite + optional PostgreSQL), tenant owner scoping, API key auth, versioned dual-dialect migrations, integrity hardening, and batched event persistence	2026-09-30 02:39:50 +00:00