4 Commits

Include renames

Author	SHA1	Message	Date
saopig1andClaude Opus 4.8	43c0175334	fix(guest): tear down guest WS on guest-mode config change ... An open guest WebSocket stamped isGuest/botScope once at upgrade and never rechecked them, so it kept streaming bot state after an admin disabled guest mode or narrowed guestMode.bots. setupWebSocket now returns { cleanup, refreshGuestPolicy }; POST /api/bot/settings invokes refreshGuestPolicy after saving a guestMode change, force-closing guest sockets when disabled and live re-scoping them otherwise. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-06-25 16:05:14 +08:00
saopig1	d2ab888114	feat(ws): scope guest WebSocket feed to allowed bots	2026-06-25 11:56:19 +08:00
saopig1andClaude Opus 4.7	a73f797bcb	feat(auth): two-role permission system (admin/member) ... Adds an admin/member role to WebUI auth. /api/users and /api/audit are now gated by a requireAdmin middleware; all other authenticated endpoints accept both roles. Schema migration defaults all existing users to admin to preserve access. POST /api/users defaults new users to member; first-run setup always creates an admin. Adds PATCH /api/users/:id/role with last-admin demotion and deletion guards. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-05-27 15:35:15 +08:00
saopig1andClaude Sonnet 4.6	490b2d57dc	test(auth): verify ws upgrade gating end-to-end ... Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-05-27 13:49:05 +08:00