Compare commits

..
Author SHA1 Message Date
weichen 7052297545 Record the UI capability platform delivery (icons/avatars/settings)
Why: proposal must record the 2026-09-30 decision (avatars, cards,
settings as base capabilities plugins reuse) and where it landed.

Evidence: feature/ui-capability-platform across core (avatar
vocabulary), ui (shared components + full vocabulary renderers),
frontend (consumption); 35+ tests and headless walk green.

Impact: status line only.
2026-09-30 14:22:37 +00:00
weichen fb72859505 Merge pull request 'Record admin-issued accounts decision and R2 delivery' (#19) from feature/auth-admin-accounts into main 2026-09-30 11:17:06 +00:00
weichen 924c3033a9 Record the admin-issued accounts decision and R2 delivery
Why: the user replaced the stage-2 email self-registration sketch with
admin-issued accounts (2026-09-30): no self registration, admin sets
initial passwords, first login after creation or reset forces a change.

Evidence: R2 landed on feature/auth-admin-accounts (migration v10,
auth/session APIs, CLI user subcommands, login page + forced change
gate + admin user management); store/e2e tests and a full headless
journey on the real binary are green (see that task's PR).

Impact: proposal status line only; section 5.1 sketch superseded.
2026-09-30 11:15:41 +00:00
weichen 9d4738142b Merge pull request 'feature/tavily-search-tool' (#18) from feature/tavily-search-tool into main 2026-09-30 11:00:28 +00:00
@@ -1,6 +1,6 @@
# 界面重构与多用户认证 —— 设计提案(2026-09-30)
状态:**accepted(方向)**——2026-09-30 用户裁定采用**方案 A 任务中心**;认证阶段 2 范围在 R2 启动时再确认。R1(左栏重构)已实施:Dev 仓 `feature/task-sidebar-r1`(Core 契约 +pinned/archived、Backend 迁移 v8 与 `GET /api/conversations`+`/api/me`、Frontend TaskSidebar 重构;验证证据见该任务 PR)。owner:weichen。
状态:**accepted(方向 + R2 范围)**——2026-09-30 用户裁定采用**方案 A 任务中心**;同日裁定认证阶段 2 改为**管理员发放制**:无自助注册,账号仅管理员(或 CLI 引导)创建并设定初始密码,创建后与重置后的首次登录均强制改密(§5.1 邮箱+自助注册方案作废)。R1 已实施:Dev 仓 `feature/task-sidebar-r1`(Core +pinned/archived、Backend 迁移 v9 与任务列表 API、Frontend TaskSidebar)。R2 已实施:Dev 仓 `feature/auth-admin-accounts`(Backend 迁移 v10 auth_accounts:users 密码/must_change/is_admin + sessions 表;`/api/auth/login|logout|password`、`/api/admin/users*`;argon2id;登录失败退避;中间件接受 Bearer 密钥或会话 cookie 且豁免静态与登录入口;CLI `user create|reset-password|list`;Frontend 登录页双 tab、强制改密门、用户管理弹层。验证:store/e2e 测试 + 无头全流程走查)。R4 已实施:`feature/visual-refresh-r4`(令牌 v2 + 线性图标集 + 全组件重造型)。**UI 能力平台已实施(2026-09-30 用户裁定:头像/卡片/设置页为系统基本能力,插件直接复用)**:`feature/ui-capability-platform`——Core 增 `avatar` 词表(UINode/UIAvatarSpec 含叠放组);@ui 入 Icon/Avatar(名字派色/语义色/状态点/叠放)/primitives(Btn/Input/Chip/EmptyState/SettingRow)/SettingsShell(侧导航设置外壳);UIRenderer 补齐 D28 七词表(progress/compare/tree/table/steps/tabs/timeline——此前仅类型声明、卡片内被静默丢弃);前端消费(消息头像列、设置中心上外壳、管理弹层头像);react 类型单副本钉扎(tsconfig paths,修 make frontend 双 @types/react 名义冲突)。owner:weichen。
前置:[界面交互底座](2026-09-30-ui-inbox-command-workspace.md)(D25–D33)、[双档存储、多租户与规模化](2026-09-30-dual-tier-storage-and-multitenancy.md)(D17–D24)。
配套 demo:`ui-redesign-demos/`(index.html 为入口,本地浏览器直接打开)。