eab9178743
feat(webui): registry editor context-window/output/temperature fields + advanced section
2026-08-11 15:07:53 +08:00
94e64cc0c2
feat(webui): context-usage indicator fed by custom stream events
2026-08-11 15:07:53 +08:00
1351da2ee0
feat(webui): clear-all usage records endpoint + dialog action
2026-08-11 15:07:23 +08:00
a7f7adc56b
feat(webui): install skills from arbitrary source, uninstall, marketplace categories
2026-08-11 15:07:23 +08:00
79cfeae8d8
fix(webui): harden branding path validation, auth-on warning, scheduler retry
...
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com >
2026-08-11 12:33:58 +08:00
6d0251a673
fix(webui): clean up eslint errors in branding route and backup scheduler test
...
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com >
2026-08-11 12:21:42 +08:00
ae32cc72df
feat(webui): consume system branding in layout metadata and login page
2026-08-11 12:04:01 +08:00
7353afbec9
feat(webui): security + data backup tabs in system config dialog
...
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com >
2026-08-11 11:55:07 +08:00
0e83ab73af
fix(webui): keep unsaved system config edits across branding uploads
...
Uploading or restoring a logo/favicon revalidated /api/system/config,
which re-ran the dialog's sync effect and replaced the whole draft,
silently wiping unsaved wordmark/login-terms edits. Now only the
draft's file field is updated from the response and only the public
config key is revalidated. Also fix the favicon fallback preview src
from the nonexistent /favicon.ico to /icon.png.
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com >
2026-08-11 11:47:46 +08:00
5634abdbd5
feat(webui): system config dialog shell with general + login terms tabs
2026-08-11 11:32:28 +08:00
7bd43a39a0
feat(webui): backup run/history/download/delete API routes
2026-08-11 11:20:39 +08:00
1532a9de3e
feat(webui): honor security overrides in auth, captcha, login, and proxy
...
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com >
2026-08-11 10:08:45 +08:00
74516fd7c8
feat(webui): branding upload + public asset routes
2026-08-11 09:23:28 +08:00
e8f09f240e
fix(webui): reject malformed JSON body in system config PUT
...
An unparseable request body was silently converted to null, merged over
defaults, and saved — wiping the admin's config while returning 200.
Throw SystemConfigError on JSON parse failure so the route returns 400
INVALID_REQUEST without touching the saved config file.
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com >
2026-08-11 09:06:11 +08:00
3ddd953e1b
feat(webui): admin + public system config API routes
2026-08-11 08:51:46 +08:00
b75de8b5e6
Revert "feat(webui): pin sidebar collapse button to the resize divider"
...
This reverts commit adc59ba
2026-08-11 07:22:20 +08:00
adc59ba9a9
feat(webui): pin sidebar collapse button to the resize divider
...
The collapse control now hangs off the top of the ResizableHandle so it
tracks the divider as the sidebar is resized, instead of sitting in the
header far from the boundary it controls. The header toggle remains for
the collapsed and mobile-overlay states. ResizableHandle now renders
passed children (previously shadowed by the withHandle element).
2026-08-10 23:44:28 +08:00
17271d6ebd
style(webui): show title only in thread list rows
2026-08-10 22:44:55 +08:00
39e126beab
style(webui): gradient brand mark and larger welcome title
2026-08-10 22:35:23 +08:00
62005109a4
style(webui): pastel-tinted stat cards on welcome screen
...
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com >
2026-08-10 22:32:34 +08:00
e0d38afa0c
fix(webui): composer shadow and single cyan focus ring
2026-08-10 21:34:29 +08:00
535d1b4955
fix(webui): deepen light brand to cyan-700 for WCAG AA contrast
...
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com >
2026-08-10 21:00:37 +08:00
c388fa4838
fix(webui): register layered shadows in theme, use ring-ring/20 for focus rings
...
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com >
2026-08-10 21:00:22 +08:00
11aa88d4f9
style(webui): cyan active states in sidebar, premium login card
2026-08-10 20:02:13 +08:00
7b6bac0c53
style(webui): polish composer, user bubble, and tool-call box
2026-08-10 19:58:47 +08:00
50e5871184
style(webui): bright zinc+cyan design tokens and Inter font
2026-08-10 14:13:12 +08:00
10904c13fb
fix(webui): prefix zip include paths with ./ to defeat option injection
2026-08-10 12:25:48 +08:00
9984c6bdc4
feat(webui): checkbox multi-select download in workspace tree
2026-08-10 12:14:46 +08:00
1d813c18d6
feat(webui): selective include/exclude download for workspace zips
2026-08-10 12:06:39 +08:00
0e34383aed
fix(webui): maximize the DialogContent itself; fixed children are trapped by its translate
2026-08-08 22:53:45 +08:00
cd87138a82
fix(webui): maximize preview to browser window instead of OS fullscreen
2026-08-08 22:48:58 +08:00
bbea13b68a
feat(webui): fullscreen toggle for html preview panel
2026-08-08 22:37:24 +08:00
918cf741ac
feat(webui): redirect render=1 html to path-embedded token URL
2026-08-08 14:15:34 +08:00
046129197a
feat(webui): token-gated render route for sandboxed html preview
2026-08-08 14:05:48 +08:00
0e9334d4cd
fix(webui): use Code icon for Source toggle to distinguish from Edit
...
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com >
2026-08-08 12:00:57 +08:00
9a4141b05e
feat(webui): preview/source toggle for html files in workspace dialog
...
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com >
2026-08-08 11:46:15 +08:00
666a82ebb0
feat(webui): image zoom/pan and prev-next navigation in file dialog
...
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com >
2026-08-08 11:44:15 +08:00
66781a7012
feat(webui): serve html as text/html with allow-scripts sandbox under render=1
...
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com >
2026-08-08 11:31:21 +08:00
2db00b5157
feat(webui): captcha input on login page after repeated failures
...
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com >
2026-08-08 09:35:44 +08:00
9a1775c17d
feat(webui): require math captcha after 3 failed logins per IP
...
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com >
2026-08-08 09:32:52 +08:00
f91b26670b
feat(webui): GET /api/auth/captcha issues math captchas
...
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com >
2026-08-08 09:29:29 +08:00
4a652fd67f
feat(webui): redirect to /login on any API 401 response
...
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com >
2026-08-08 09:17:06 +08:00
b53d58fa35
fix(webui): preserve remaining session TTL on password change
...
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com >
2026-08-08 08:30:43 +08:00
a7625fc38f
feat(webui): remember-me checkbox on the login page
...
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com >
2026-08-08 08:19:23 +08:00
a047129622
feat(webui): rememberMe login flag with 30-day persistent cookie
...
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com >
2026-08-08 08:12:10 +08:00
8a59ec59d8
feat(webui): parameterize session TTL and cookie maxAge
...
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com >
2026-08-08 08:06:51 +08:00
0953e403e5
feat(webui): mount error-log bell in the header
...
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com >
2026-07-31 20:10:09 +08:00
47420514bd
feat(webui): error-log bell with unread badge and clear-all
...
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com >
2026-07-31 19:32:57 +08:00
a67f16651d
feat(webui): useErrorLogs hook with unread cursor and clear-all
...
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com >
2026-07-31 19:31:59 +08:00
09d9f49e9f
feat(webui): record BFF route errors in the acting user's error log
...
routeErrorResponse gains an optional actor; every route that resolves an
actor now passes it, so API failures survive the toast. Unauthenticated
failures and the error-logs route itself are never logged.
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com >
2026-07-31 11:01:31 +08:00
m4