10 commits

Author	SHA1	Message	Date
oliver	a5ba9d52cc	Fix workspaceRegistry inject and restore WS UDS identity. ... Stop Cordis throws on ctx.workspaceRegistry, inject the registry handle for provisioning, and bind login identity onto remote.mux WebSocket listeners so super_admin keeps all workspaces. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-09-08 09:48:44 +08:00
oliver	92ee170b2e	Enforce multi-user ACL for sessions, settings, and workspaces. ... Bridge UDS identity into DSH RPC via ALS, stamp/filter sessions, auto-provision per-empNo workspaces, and hide Settings/Add-workspace for roles that lack those permissions. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-09-08 04:29:48 +08:00
oliver	b3b5b6997e	Fix first-login bootstrap to super_admin; allow admin settings via canAccessSettings. ... Co-authored-by: Cursor <cursoragent@cursor.com>	2026-09-08 03:23:20 +08:00
oliver	9ff9635624	Query user profile via intranet direct HTTP; upgrade/clear trust sessions without department. ... Co-authored-by: Cursor <cursoragent@cursor.com>	2026-09-08 02:50:34 +08:00
oliver	74a86ff832	Fix QR login: pass userSearchUrl into auth middleware for token+empNo verify. ... Co-authored-by: Cursor <cursoragent@cursor.com>	2026-09-08 02:37:08 +08:00
oliver	74ea52667d	Fix duplicate /uds-auth route: drop rpc.handle, register webServer prefix once.	2026-09-08 02:04:57 +08:00
oliver	c9ca785155	Register /uds-auth/qr-start and fix crypto imports for QR login.	2026-09-08 01:54:42 +08:00
oliver	3aca99ca93	Fix uds-auth qr-start 404 by registering route and top-level crypto import.	2026-09-08 01:54:02 +08:00
oliver	505f9dea3f	Restore uds-auth in oclaw: DSH plugin with token+profile auth, settings UI, and pagination.	2026-09-08 01:46:17 +08:00
oliver	8ca42dd973	change log in	2026-09-08 00:28:58 +08:00