weichen/Agent-System-Dev
1
0
Fork 0
Code Issues 1 Pull Requests 4 Actions 4 Packages Projects Releases Wiki Activity

Implement login recovery flow: admin-issued one-time keys, transaction hardening, browser wiring #504

Merged
weichen merged 8 commits from feature/svc-login-recovery-flow into main 2026-10-13 04:04:07 +00:00
Conversation 0 Commits 8 Files Changed 4
+342 -2
weichen commented 2026-10-13 03:54:33 +00:00
Owner
Copy Link
Copy Source

任务卡：.task/feature-svc-login-recovery-flow.md（主记录，含 L1–L9 需求表、授权来源、evidence 三段输出）。合同：docs/svc-deploy/2026-10-13-login-recovery-contract.md（三项裁定与验收矩阵）。

Why: 用户 2026-10-13 批准《登录流程方案》并指示实施——密码登录为默认入口；忘记密码由管理员签发一次性登录 Key；兑换进受限会话强制设密（免当前密码）；主动改密仍要求当前密码。

Evidence: make test / make build / task-sync 三段已由 make evidence 写入任务卡（SELF，worktree 本地）；组合构建版本串 backend=467718a+frontend=9fc7da2。组件 PR：Agent-System-Backend#187（CI success）、Agent-System-Frontend#76。

Impact: Backend 迁移 v28（auth_version+account_events）、管理员 login-keys 三端点、事务补强与登录竞态防护；Frontend 登录页改双入口（密码+一次性 Key，移除 ask_）、设密门免当前密码并回登录页、用户管理改签发 Key；Dev 固定组件指针并沉淀合同文档。

Refs: modules/documents/docs/proposals/2026-10-12-svc-unified-deploy-and-login-key.md r2。

任务卡：.task/feature-svc-login-recovery-flow.md（主记录，含 L1–L9 需求表、授权来源、evidence 三段输出）。合同：docs/svc-deploy/2026-10-13-login-recovery-contract.md（三项裁定与验收矩阵）。 Why: 用户 2026-10-13 批准《登录流程方案》并指示实施——密码登录为默认入口；忘记密码由管理员签发一次性登录 Key；兑换进受限会话强制设密（免当前密码）；主动改密仍要求当前密码。 Evidence: make test / make build / task-sync 三段已由 make evidence 写入任务卡（SELF，worktree 本地）；组合构建版本串 backend=467718a+frontend=9fc7da2。组件 PR：Agent-System-Backend#187（CI success）、Agent-System-Frontend#76。 Impact: Backend 迁移 v28（auth_version+account_events）、管理员 login-keys 三端点、事务补强与登录竞态防护；Frontend 登录页改双入口（密码+一次性 Key，移除 ask_）、设密门免当前密码并回登录页、用户管理改签发 Key；Dev 固定组件指针并沉淀合同文档。 Refs: modules/documents/docs/proposals/2026-10-12-svc-unified-deploy-and-login-key.md r2。
weichen added 8 commits 2026-10-13 03:54:33 +00:00
Record the task card for feature-svc-login-recovery-flow 4c01ec52a1 
Why: establish the authorized task workspace and its initial baseline.

Evidence: preserved precheck receipt in .task/feature-svc-login-recovery-flow.md; R0=3fb8210f6495a78e70a67af3661bdfe9c00fb9de.

Impact: task metadata only; the feature workspace starts at 3fb8210f64.

Refs: .task/feature-svc-login-recovery-flow.md
Add login recovery contract and task card baseline f35c3bfdad 
Why: The 2026-10-13 login flow plan requires a frozen contract record
(three adjudications against the r2 proposal) and a traceable task card
before implementation merges.

Evidence: doc-only commit; acceptance matrix cites backend/frontend test
files added in companion commits (SELF).

Impact: docs/svc-deploy/2026-10-13-login-recovery-contract.md becomes
the authoritative login-recovery contract; task card records user
authorization and requirement table L1-L9.

Refs: modules/documents/docs/proposals/2026-10-12-svc-unified-deploy-and-login-key.md r2
Pin backend and frontend to the login recovery implementation deb675fb6d 
Why: The Dev composite must carry the exact backend (467718a) and
frontend (9fc7da2) commits implementing the login recovery contract.

Evidence: component branches pushed to their origins; make test runs in
this task worktree validate the composite (receipts in task card).

Impact: gitlink bump only; no other Dev tree changes.

Refs: docs/svc-deploy/2026-10-13-login-recovery-contract.md
Record composite test evidence in the task card e4d9eda8e7
Record build evidence in the task card 192795cc97
Record the sync checkpoint b7dbd91d41 
Why: bind the task validation checkpoint to the latest integration baseline.

Evidence: SELF recursive component checks; sync_base=3fb8210f6495a78e70a67af3661bdfe9c00fb9de; candidate=192795cc97f698c1f3f20531cecc5cef533ef1b1.

Impact: task metadata only.

Refs: .task/feature-svc-login-recovery-flow.md
Record the sync checkpoint ed6dd79fd5 
Why: bind the task validation checkpoint to the latest integration baseline.

Evidence: SELF recursive component checks; sync_base=3fb8210f6495a78e70a67af3661bdfe9c00fb9de; candidate=b7dbd91d41b7ba4f45a2f9a6d5270e0fad952f68.

Impact: task metadata only.

Refs: .task/feature-svc-login-recovery-flow.md
Record task-sync evidence in the task card
ci / svc-realcombo (pull_request) Successful in 1m48s
Details
ci / test-pg (pull_request) Successful in 2m44s
Details
ci / test (pull_request) Successful in 4m41s
Details
16a9cdd216
weichen merged commit 268ef2999c into main 2026-10-13 04:04:07 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
weichen
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: weichen/Agent-System-Dev#504