8 commits

Author	SHA1	Message	Date
oliver	ad0cc98b38	Make session visibility preference-driven and keep system-channel ACL separate. ... Super/fallback can toggle view-all (default on); admin/user stay own-only while still seeing unowned system sessions. Add restore/prune helpers so empty-shell cleanup is explicit and recoverable.	2026-09-14 20:48:15 +08:00
oliver	c26dc68f77	Add decrypt-to-unlock local admin via sealed env box. ... Replace auto-grant-on-env with AES-GCM box + passphrase unlock, rebuild fallback sessions after restart, and document seal script usage. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-09-12 22:16:21 +08:00
oliver	64761c8300	Add parallel skill credential path to uds-auth for agent/cron use. ... UI session behavior stays unchanged; login writes a separate skill cache, with optional retain-on-logout and loopback agent-credentials/outbound APIs plus helpers/docs. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-09-08 23:01:11 +08:00
oliver	b3b5b6997e	Fix first-login bootstrap to super_admin; allow admin settings via canAccessSettings. ... Co-authored-by: Cursor <cursoragent@cursor.com>	2026-09-08 03:23:20 +08:00
oliver	9ff9635624	Query user profile via intranet direct HTTP; upgrade/clear trust sessions without department. ... Co-authored-by: Cursor <cursoragent@cursor.com>	2026-09-08 02:50:34 +08:00
oliver	74a86ff832	Fix QR login: pass userSearchUrl into auth middleware for token+empNo verify. ... Co-authored-by: Cursor <cursoragent@cursor.com>	2026-09-08 02:37:08 +08:00
oliver	505f9dea3f	Restore uds-auth in oclaw: DSH plugin with token+profile auth, settings UI, and pagination.	2026-09-08 01:46:17 +08:00
oliver	8ca42dd973	change log in	2026-09-08 00:28:58 +08:00