weichen/Agent-System-Dev
1
0
Fork 0
Code Issues 1 Pull Requests 6 Actions 2 Packages Projects Releases Wiki Activity

Fix admin password creation and reset flow #603

Merged
weichen merged 12 commits from feature/auth-password-management into main 2026-10-17 12:32:28 +00:00
Conversation 0 Commits 12 Files Changed 3
+164 -2
weichen commented 2026-10-17 11:30:47 +00:00
Owner
Copy Link
Copy Source

Why

Make account creation and password recovery usable from the web UI without server-side CLI initialization or owner-session proof for locked accounts.

Evidence

  • Backend: GOWORK=off go test -count=1 ./internal/server ./internal/store passed.
  • Frontend: npm test -- --run passed: 36 files, 324 tests.
  • Frontend: npm run build passed.
  • Full make test reached 421 governance tests; one unrelated test_svc_plugins.PluginComposeTests.test_deploy_reuses_selection_and_gates_clearing timed out after 120s.

Impact

  • Admin-created users receive a supplied or one-time generated initial password and must change it at first login.
  • Admin resets generate a one-time temporary password, revoke old sessions and unused login keys, and force a password change.
  • Browser login is username/password only. Key management and non-login-page recovery flows remain available.

Refs

  • Task card: .task/feature-auth-password-management.md
  • Backend component: b8b3493
  • Frontend component: fb1f9f2
## Why Make account creation and password recovery usable from the web UI without server-side CLI initialization or owner-session proof for locked accounts. ## Evidence - Backend: `GOWORK=off go test -count=1 ./internal/server ./internal/store` passed. - Frontend: `npm test -- --run` passed: 36 files, 324 tests. - Frontend: `npm run build` passed. - Full `make test` reached 421 governance tests; one unrelated `test_svc_plugins.PluginComposeTests.test_deploy_reuses_selection_and_gates_clearing` timed out after 120s. ## Impact - Admin-created users receive a supplied or one-time generated initial password and must change it at first login. - Admin resets generate a one-time temporary password, revoke old sessions and unused login keys, and force a password change. - Browser login is username/password only. Key management and non-login-page recovery flows remain available. ## Refs - Task card: `.task/feature-auth-password-management.md` - Backend component: `b8b3493` - Frontend component: `fb1f9f2`
weichen added 8 commits 2026-10-17 11:30:47 +00:00
Record the task card for feature-auth-password-management fce7a6fa5c 
Why: establish the authorized task workspace and its initial baseline.

Evidence: preserved precheck receipt in .task/feature-auth-password-management.md; R0=a5829c271c92c2e7c525206eb831b0d6e9c877a6.

Impact: task metadata only; the feature workspace starts at a5829c271c.

Refs: .task/feature-auth-password-management.md
Record password management task scope 79d93775db
Record auth password task blocker 900bdb90e1
Record password fix verification 9895950ca6
Record temporary reset fallback cac290335f
Integrate password management components 8c8235db6e
Merge authoritative main into the task branch 6d631d8535 
Why: include the current integration baseline before verification.

Evidence: fetched origin/main=3227dec8918dd36cbd4f8906a05ed62ffa98f3df.

Impact: integrate upstream changes without rewriting task history.

Refs: task-sync
Record the sync checkpoint
ci / svc-realcombo (pull_request) Failing after 2s
Details
ci / test (pull_request) Failing after 3s
Details
ci / test-pg (pull_request) Failing after 3s
Details
ce16c32b23 
Why: bind the task validation checkpoint to the integration baseline.

Evidence: SELF recursive component checks; sync_base=3227dec8918dd36cbd4f8906a05ed62ffa98f3df; before_record=6d631d8535c87dfb0800429a9815e6c3f2378d44.

Impact: task metadata only.

Refs: .task/feature-auth-password-management.md
weichen added 1 commit 2026-10-17 11:41:19 +00:00
Record component publication for CI
ci / svc-realcombo (pull_request) Successful in 1m58s
Details
ci / test (pull_request) Successful in 7m50s
Details
ci / test-pg (pull_request) Successful in 9m36s
Details
fbd5ee68d6
weichen added 1 commit 2026-10-17 11:57:15 +00:00
Refresh password management component pins
ci / svc-realcombo (pull_request) Successful in 2m14s
Details
ci / test (pull_request) Successful in 7m16s
Details
ci / test-pg (pull_request) Successful in 8m44s
Details
ba81f507e5
weichen added 2 commits 2026-10-17 12:10:22 +00:00
Merge authoritative main into the task branch 28fe708c45 
Why: include the current integration baseline before verification.

Evidence: fetched origin/main=f563ed612a9574e798ee3421c010a9e2ceb416a0.

Impact: integrate upstream changes without rewriting task history.

Refs: task-sync
Record the sync checkpoint
ci / svc-realcombo (pull_request) Successful in 1m57s
Details
ci / test (pull_request) Successful in 6m53s
Details
ci / test-pg (pull_request) Successful in 7m53s
Details
85edbd0aa5 
Why: bind the task validation checkpoint to the integration baseline.

Evidence: SELF recursive component checks; sync_base=f563ed612a9574e798ee3421c010a9e2ceb416a0; before_record=28fe708c45db63d57b68e38fffd077d3d840febe.

Impact: task metadata only.

Refs: .task/feature-auth-password-management.md
weichen merged commit d1dc67e778 into main 2026-10-17 12:32:28 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
weichen
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: weichen/Agent-System-Dev#603