hansjone/oclaw
1
0
Fork 0
mirror of https://github.com/hansjone/oclaw.git synced 2026-10-14 00:43:28 +08:00
Code Issues Projects Releases Packages Wiki Activity Actions 1
347 commits 1 branch 0 tags 47 MiB
Commit graph

11 commits

Author SHA1 Message Date
oliver
ad0cc98b38 Make session visibility preference-driven and keep system-channel ACL separate. 
Super/fallback can toggle view-all (default on); admin/user stay own-only while still seeing unowned system sessions. Add restore/prune helpers so empty-shell cleanup is explicit and recoverable.
 2026-09-14 20:48:15 +08:00
oliver
c26dc68f77 Add decrypt-to-unlock local admin via sealed env box. 
Replace auto-grant-on-env with AES-GCM box + passphrase unlock, rebuild fallback sessions after restart, and document seal script usage.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-09-12 22:16:21 +08:00
oliver
e2c2e949ed Restrict @ mention and session query ACL so admin/user only see owned or workspace sessions. 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-09-10 00:30:46 +08:00
oliver
b60c626d41 Bundle uds-skill-auth inside the uds-auth plugin for single-package handoff. 
Move the public auth helper skill under uds-auth/skills and update docs to point there instead of the repo-root skills tree.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-09-08 23:46:11 +08:00
oliver
c5c6089f89 Document uds-skill-auth in the plugin for easy handoff to skill authors. 
Add a dedicated doc page and link it from the README and auth standard.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-09-08 23:43:29 +08:00
oliver
3595f49c86 Ship uds-skill-auth as a distributable skill for field UDS credential helpers. 
Business skills depend on this sibling skill instead of the plugin source tree; update the auth standard docs accordingly.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-09-08 23:35:28 +08:00
oliver
64761c8300 Add parallel skill credential path to uds-auth for agent/cron use. 
UI session behavior stays unchanged; login writes a separate skill cache, with optional retain-on-logout and loopback agent-credentials/outbound APIs plus helpers/docs.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-09-08 23:01:11 +08:00
oliver
bad000d5b6 Use workspace membership as session ACL; keep owners for audit. 
Session RPC access checks visible workspaces (and cwd), wraps prompt and related methods with address.sessionId extraction, and gates create paths for non-admins.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-09-08 14:25:52 +08:00
oliver
337f6501b0 Enable fallback_admin by default with Admin@123. 
Initial deploys often cannot scan UAC QR; seed the emergency account unless roles.json explicitly disabled it.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-09-08 11:09:14 +08:00
oliver
505f9dea3f Restore uds-auth in oclaw: DSH plugin with token+profile auth, settings UI, and pagination. 2026-09-08 01:46:17 +08:00
oliver
8ca42dd973 change log in 2026-09-08 00:28:58 +08:00