8 commits

Author	SHA1	Message	Date
oliver	ad0cc98b38	Make session visibility preference-driven and keep system-channel ACL separate. ... Super/fallback can toggle view-all (default on); admin/user stay own-only while still seeing unowned system sessions. Add restore/prune helpers so empty-shell cleanup is explicit and recoverable.	2026-09-14 20:48:15 +08:00
oliver	e2c2e949ed	Restrict @ mention and session query ACL so admin/user only see owned or workspace sessions. ... Co-authored-by: Cursor <cursoragent@cursor.com>	2026-09-10 00:30:46 +08:00
oliver	fd0df9b890	Add uds-auth zh/en i18n, UAC-branded settings, and QR expire/fail overlay. ... Wire client locale to the DSH host, return stable API error codes with localized messages, and replace bottom refresh with an in-frame retry for expired or offline QR. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-09-09 22:10:37 +08:00
oliver	93526e7d45	Seed fallback_admin password Admin@123 on first start. ... roles.json missing the hash field (or absent) enables the emergency account; an explicit null keeps it disabled. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-09-08 11:10:36 +08:00
oliver	337f6501b0	Enable fallback_admin by default with Admin@123. ... Initial deploys often cannot scan UAC QR; seed the emergency account unless roles.json explicitly disabled it. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-09-08 11:09:14 +08:00
oliver	92ee170b2e	Enforce multi-user ACL for sessions, settings, and workspaces. ... Bridge UDS identity into DSH RPC via ALS, stamp/filter sessions, auto-provision per-empNo workspaces, and hide Settings/Add-workspace for roles that lack those permissions. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-09-08 04:29:48 +08:00
oliver	505f9dea3f	Restore uds-auth in oclaw: DSH plugin with token+profile auth, settings UI, and pagination.	2026-09-08 01:46:17 +08:00
oliver	8ca42dd973	change log in	2026-09-08 00:28:58 +08:00