weichenandCursor a56d033d3c feat(web): fail-closed capabilities and admin roles from server API ...

Stop persisting roles to localStorage as authority; AdminSettingsModal reads
and writes role matrices via /api/v1/admin/roles; hasPermission denies when
capabilities are not loaded from /auth/me.

Co-authored-by: Cursor <cursoragent@cursor.com>

2026-09-13 02:50:22 +00:00

..

src

feat(web): fail-closed capabilities and admin roles from server API

2026-09-13 02:50:22 +00:00

.gitignore

feat(web): initialize react 19 vite typescript scaffold and token design system

2026-09-13 02:50:19 +00:00

index.html

feat(web): initialize react 19 vite typescript scaffold and token design system

2026-09-13 02:50:19 +00:00

package-lock.json

feat(doc-preview): 上传文档多格式在线预览 + IndexedDB 持久化恢复

2026-09-13 02:50:21 +00:00

package.json

feat(security): complete P0 release blocking remediation

2026-09-13 02:50:22 +00:00

tsconfig.json

feat(web): initialize react 19 vite typescript scaffold and token design system

2026-09-13 02:50:19 +00:00

vite.config.ts

feat(security): complete P0 release blocking remediation

2026-09-13 02:50:22 +00:00