4 commits

Author	SHA1	Message	Date
oliver	bad000d5b6	Use workspace membership as session ACL; keep owners for audit. ... Session RPC access checks visible workspaces (and cwd), wraps prompt and related methods with address.sessionId extraction, and gates create paths for non-admins. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-09-08 14:25:52 +08:00
oliver	337f6501b0	Enable fallback_admin by default with Admin@123. ... Initial deploys often cannot scan UAC QR; seed the emergency account unless roles.json explicitly disabled it. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-09-08 11:09:14 +08:00
oliver	505f9dea3f	Restore uds-auth in oclaw: DSH plugin with token+profile auth, settings UI, and pagination.	2026-09-08 01:46:17 +08:00
oliver	8ca42dd973	change log in	2026-09-08 00:28:58 +08:00