7 commits

Author	SHA1	Message	Date
oliver	ef57e05942	Honor view-all off: only own sessions and personal workspace. ... Shared project and channel sessions were still visible via canViewSystemSessions when the toggle was off; tighten ACL and copy so off means own only. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-09-16 23:52:02 +08:00
oliver	91d2515205	Unify admin-class workspace create and restore Add-workspace UI. ... Give admin the same permissions as super/fallback, occupy directoryFlow at priority 1 so the button renders without colliding with the native picker, and inject uiWorkspace for pickDirectory. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-09-16 22:46:45 +08:00
oliver	89700ef4f9	Allow admin (and Host plugins) to create workspaces. ... super_admin/fallback_admin already could; admin now has canCreateWorkspace, and Host-side creates without browser ALS (IM) are no longer blocked as forbidden. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-09-16 21:52:14 +08:00
oliver	ad0cc98b38	Make session visibility preference-driven and keep system-channel ACL separate. ... Super/fallback can toggle view-all (default on); admin/user stay own-only while still seeing unowned system sessions. Add restore/prune helpers so empty-shell cleanup is explicit and recoverable.	2026-09-14 20:48:15 +08:00
oliver	c26dc68f77	Add decrypt-to-unlock local admin via sealed env box. ... Replace auto-grant-on-env with AES-GCM box + passphrase unlock, rebuild fallback sessions after restart, and document seal script usage. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-09-12 22:16:21 +08:00
oliver	e2c2e949ed	Restrict @ mention and session query ACL so admin/user only see owned or workspace sessions. ... Co-authored-by: Cursor <cursoragent@cursor.com>	2026-09-10 00:30:46 +08:00
oliver	fd0df9b890	Add uds-auth zh/en i18n, UAC-branded settings, and QR expire/fail overlay. ... Wire client locale to the DSH host, return stable API error codes with localized messages, and replace bottom refresh with an in-frame retry for expired or offline QR. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-09-09 22:10:37 +08:00