From ba8317e136aef3d651b3c2e900b8e045996bb601 Mon Sep 17 00:00:00 2001 From: weichen Date: Wed, 30 Sep 2026 10:53:50 +0000 Subject: [PATCH 1/3] Record the task card for feature-auth-admin-accounts --- .task/feature-auth-admin-accounts.md | 25 +++++++++++++++++++++++++ 1 file changed, 25 insertions(+) create mode 100644 .task/feature-auth-admin-accounts.md diff --git a/.task/feature-auth-admin-accounts.md b/.task/feature-auth-admin-accounts.md new file mode 100644 index 00000000..ec4c3b94 --- /dev/null +++ b/.task/feature-auth-admin-accounts.md @@ -0,0 +1,25 @@ +# feature/auth-admin-accounts 任务卡 + +任务主记录：；状态：进行中；owner：weichen + +## 基线与授权 + +- 权威仓：ssh://git@git-ssh.u1680832.nyat.app:31411/weichen/Agent-System-Dev.git；目标分支：main；R0（initial_base_sha）= b71ef3e9a857646aec7e46839914f6cc0af1cc9f +- 工作区：/home/weichen/projects/Agent-System-Dev-wt-feature-auth-admin-accounts（worktree）；分支：feature/auth-admin-accounts +- 授权与交付终点：<本次允许的动作与终点；未授权事项写明> + +## 目标与非目标 + +<预期结果、受影响入口/模块/契约；明确不做什么。> + +## 同步记录 + +| 节点 | sync_base_sha | tested_head_sha | checked_at | +|---|---|---|---| +| 启动 | b71ef3e9a857646aec7e46839914f6cc0af1cc9f | b71ef3e9a857646aec7e46839914f6cc0af1cc9f | 2026-09-30T10:53:50Z | + +## 结果与验证（完成后填写） + +- 结果： +- 验证： +- 影响与剩余项： From e6ad8f06ace0295e981da2c8e3d3e7f4b580b1ad Mon Sep 17 00:00:00 2001 From: weichen Date: Wed, 30 Sep 2026 11:15:06 +0000 Subject: [PATCH 2/3] Land admin-issued auth R2 across repos (gitlinks + task card) Why: R2 spans backend (migration v10, auth/session APIs, CLI user subcommands), frontend (login page, forced change gate, admin user management), documents (decision record). Evidence: make test full suite green on this head (exit 0); headless journey on the real binary with --auth on covers admin bootstrap, first-login forced change for created and reset passwords, non-admin menu gating, API-key login, logout. Impact: auth-enabled deployments gain password login and admin account management; embedded no-auth mode unchanged. Merge order: backend -> frontend -> documents -> this PR. Refs: proposal 2026-09-30-ui-redesign-and-auth.md (R2 admin-issued) --- .task/feature-auth-admin-accounts.md | 5 +++-- modules/backend | 2 +- modules/documents | 2 +- modules/frontend | 2 +- 4 files changed, 6 insertions(+), 5 deletions(-) diff --git a/.task/feature-auth-admin-accounts.md b/.task/feature-auth-admin-accounts.md index ec4c3b94..037a5c2c 100644 --- a/.task/feature-auth-admin-accounts.md +++ b/.task/feature-auth-admin-accounts.md @@ -6,11 +6,12 @@ - 权威仓：ssh://git@git-ssh.u1680832.nyat.app:31411/weichen/Agent-System-Dev.git；目标分支：main；R0（initial_base_sha）= b71ef3e9a857646aec7e46839914f6cc0af1cc9f - 工作区：/home/weichen/projects/Agent-System-Dev-wt-feature-auth-admin-accounts（worktree）；分支：feature/auth-admin-accounts -- 授权与交付终点：<本次允许的动作与终点；未授权事项写明> +- 授权与交付终点：用户 /goal 指令（2026-09-30）授权实施管理员发放制认证；终点 = 四仓 PR 合入 main + 验证证据落 PR。 ## 目标与非目标 -<预期结果、受影响入口/模块/契约；明确不做什么。> +- 目标（R2，2026-09-30 用户裁定"管理员发放制"）：登录页（用户名+密码 / API 密钥双入口）；账号仅管理员创建（初始密码）或 CLI 引导；创建后与重置后的首次登录强制改密；服务端会话（HttpOnly cookie）；登录失败退避；CLI `user create|reset-password|list`。 +- 非目标：邮箱注册（用户明确否决）、orgs/memberships 多租户成员模型（R3）、计费、SSO。 ## 同步记录 diff --git a/modules/backend b/modules/backend index cbd700d3..aafdaca3 160000 --- a/modules/backend +++ b/modules/backend @@ -1 +1 @@ -Subproject commit cbd700d3d66dd5eb325b2eb3b4fdd53a1920f2b2 +Subproject commit aafdaca3edb34e495f02b3dd4f5b7b971fd297b8 diff --git a/modules/documents b/modules/documents index 1774cfee..cf3044e6 160000 --- a/modules/documents +++ b/modules/documents @@ -1 +1 @@ -Subproject commit 1774cfeefa626b2b80de7e7019073b00673a106e +Subproject commit cf3044e60d2f70a573a51d03cec35175344d2711 diff --git a/modules/frontend b/modules/frontend index dc70399d..413e6ff1 160000 --- a/modules/frontend +++ b/modules/frontend @@ -1 +1 @@ -Subproject commit dc70399d459bd70afbd106305f771d1e487ebf69 +Subproject commit 413e6ff15c8498b738239e5ee56bec2858e428fb From 66eae890170c2373681384ddb1b8ae84454a4e87 Mon Sep 17 00:00:00 2001 From: weichen Date: Wed, 30 Sep 2026 11:17:12 +0000 Subject: [PATCH 3/3] Advance frontend pin to merged PR #12 head --- modules/frontend | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/modules/frontend b/modules/frontend index 413e6ff1..1d6b8a64 160000 --- a/modules/frontend +++ b/modules/frontend @@ -1 +1 @@ -Subproject commit 413e6ff15c8498b738239e5ee56bec2858e428fb +Subproject commit 1d6b8a64a6df3ec9c073a2e30931029a961729d3