5 Commits

Include renames

Author	SHA1	Message	Date
saopig1andClaude Opus 4.8	696b224f8d	feat(perm): load capabilities + bot access onto req.user; expose via /me ... Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-05-30 13:21:24 +08:00
saopig1andClaude Opus 4.7	a73f797bcb	feat(auth): two-role permission system (admin/member) ... Adds an admin/member role to WebUI auth. /api/users and /api/audit are now gated by a requireAdmin middleware; all other authenticated endpoints accept both roles. Schema migration defaults all existing users to admin to preserve access. POST /api/users defaults new users to member; first-run setup always creates an admin. Adds PATCH /api/users/:id/role with last-admin demotion and deletion guards. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-05-27 15:35:15 +08:00
saopig1	b0b61f8fce	fix(auth): defensive audit-record + self-reset preserves current session	2026-05-27 15:16:55 +08:00
saopig1andClaude Sonnet 4.6	6af0e97f51	feat(auth): user-management audit log (table + record sites + /api/audit endpoint) ... Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-05-27 15:04:19 +08:00
saopig1andClaude Sonnet 4.6	175b8e6065	feat(auth): add /api/users CRUD (list, create, delete, reset-password) ... Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-05-27 14:41:58 +08:00