Admin-issued accounts R2: gitlinks + task card #43

Merged
weichen merged 4 commits from feature/auth-admin-accounts into main 2026-09-30 11:17:31 +00:00
4 Commits
Author SHA1 Message Date
weichen 66eae89017 Advance frontend pin to merged PR #12 head
ci / test (pull_request) Failing after 30s
2026-09-30 11:17:12 +00:00
weichen a633f76a99 Merge origin/main (tavily-search sync; backend/documents rebased) 2026-09-30 11:15:49 +00:00
weichen e6ad8f06ac Land admin-issued auth R2 across repos (gitlinks + task card)
Why: R2 spans backend (migration v10, auth/session APIs, CLI user
subcommands), frontend (login page, forced change gate, admin user
management), documents (decision record).

Evidence: make test full suite green on this head (exit 0); headless
journey on the real binary with --auth on covers admin bootstrap,
first-login forced change for created and reset passwords, non-admin
menu gating, API-key login, logout.

Impact: auth-enabled deployments gain password login and admin account
management; embedded no-auth mode unchanged. Merge order: backend ->
frontend -> documents -> this PR.

Refs: proposal 2026-09-30-ui-redesign-and-auth.md (R2 admin-issued)
2026-09-30 11:15:06 +00:00
weichen ba8317e136 Record the task card for feature-auth-admin-accounts 2026-09-30 10:53:50 +00:00