Remove RoleRightsSyncRunner — rights are added manually for existing orgs
The underlying bug in **************** (detached entity issue) has been fixed in kamo-shared-library. New rights for existing roles will be added manually via S...
在创建角色权利时使用管理下的角色参考
继Repository.save()之后,当地角色Admin/角色Everyone 变量可以脱离持久性背景。 创建 RoleRights () 正在将 OrgRoleRight 条目添加到离散对象中, 这些对象从来没有 级联在之后的保存。 现在检索管理的角色引用 在初始保存后从 stained Org.getRoles...
Restore permission gate on AccessBlockManager
Re-adds the MANAGE_ACCESS_RULES permission check that was incorrectly removed. The underlying issue (admin roles missing new rights) is fixed by KamoInitializer...
Add RoleRightsSyncRunner to backfill missing role rights
When new RoleRightType entries are added to the enum, existing roles don't have OrgRoleRight entries for them. This runner checks all roles on startup and adds ...
Remove full-component permission gate from AccessBlockManager
New rights aren't assigned to any role yet, blocking all users. Other security settings tabs (API Access, OAuth2, System Debug) don't have permission gates — fo...
Remove GD check from ****************
The sed command that added the god-mode bypass incorrectly inserted it into all methods containing sessionData, not just hasRight. This caused 'return true' (bo...
Initialize god mode state synchronously from localStorage
isGodMode was initialized as false and only loaded from localStorage in a useEffect (after first render), so checkRight() returned false on initial render even ...
Allow god-mode-active users to bypass right checks in checkRight
New security rights aren't assigned to any role yet, causing all users to be denied. God-mode-active users now pass all checkRight() calls.
Allow god-eligible users to bypass access security permission checks
New rights (MANAGE_ACCESS_RULES, VIEW_ACCESS_LOGS, etc.) aren't granted to any existing role yet, so all users get Forbidden. God-eligible users (GD=true in ses...
Move AccessEnforcementFilter to scanned package, revert ComponentScan
The widened @ComponentScan caused a corsFilter bean conflict between CorsConfig and WebConfig. Moved the filter into com.kamo.api.app.config (already scanned by...
Add Redis connection config to K8s configmap
APIService pod was failing to start because spring-boot-starter-data-redis auto-configuration couldn't connect to Redis at localhost:6379. Points to redis.kamo....
Add access security system frontend
13 API proxy routes, access check module with CIDR matching, proxy.ts enforcement integration. Reworks AccessBlockManager (real API + geo-blocking), creates Sys...
为 MaxMind IP 对位置数据库添加 GeoLite2 同步任务
下载 MaxMind 的Quartz 排期工作( 每周星期天 3 AM) GeoLite2-City-CSV, 剖析 IPv4/IPv6 个块和位置, 装入 进行原子表交换 包括SHA-256DUP, 拉链滑行保护 同步状态跟踪 添加 *** 秘密提及K8s的部署.
Add access enforcement filter for IP-based access control
Redis-backed servlet filter that evaluates whitelist/blacklist/temp-block rules on every inbound request. Adds spring-boot-starter-data-redis dependency and Red...
Add access security system backend
8 new services (AccessCacheService, GeoLiteService, GeoLiteSyncService, AccessRuleService, GeoBlockService, AccessLogService, DetectionRuleService, SuspiciousDe...
Add access security system schema migration
Creates 7 new tables (org_access_rules, org_geo_block_rules, org_suspicious_detection_rules, system_access_logs, geolite_blocks, geolite_locations, geolite_sync...
添加访问安全系统实体、enums和寄存器
添加 JPA 实体( OrgAccess Rule, OrgGeoBlock Rule, OrgSuspect Detection Rule, ) 。 系统AccessLog,GeoLiteBlock,GeoLiteLocation,GeoLiteSync status),6个新enum, 7个寄存器和5个新的角色权利...
Add Create Document button with rich dropdown on /doc/manager
Adds a styled dropdown menu with document type options (Document, Spreadsheet, Presentation, Drawing) each with descriptive text. Removes the NewDocumentButton ...
Show KB nav item unconditionally in sidebar
Removed the isKnowledgeBase feature gate so KB always displays, matching the previous NavTop behavior.
删除跟随鼠标编码器的渐变MeshBackground orbs
蓝色和紫色的梯度圈是由 GradientMeshBackground组件跟踪鼠标位置.
防止密码输入在步骤过渡时丢下第一个按键
焦点投票循环是呼叫设置 每50msSelection Rang(0,长度) 用于 1.2s,它选择了任意键入字符,因此替换了下一个键盘 这个 现在跟踪用户输入,只选择用于浏览器自动填充的文本.
Replace broken Anthropic, OpenRouter, and xAI logo SVGs
The original files were 404 placeholders (14 bytes). Replaced with proper SVG logos from Simple Icons.
替换已破损的 Anthropic、 OpenRouter 和 xAI 标识 SVGs
Kamo-Internal中的原始文件有404个占位符(14字节). 从简单图标取而代之的是适当的 SVG 标志 .
添加 AI 提供者标志以整合带有 Marquee 的
DeepSeek),xAI (Grok),Meta (Llama),Perplexity(英语:Perging),和哈格格脸.
Update calendar, contact, and integration ID types from Long to UUID
Calendar entities, contact sub-entities, and ContactIntegration IDs are now UUID. Updates all services, controllers, and DAV endpoints.
Resolve remaining Long/UUID type mismatches in controllers and beans
Fixes LeadVendorController, LeadMarketController, LeadImportController, ImagingController, AccountController, MediaStreamController, POSController, MemberContro...
解决服务和DTO中剩余的长/UID类型不匹配问题
纠正商务服务、组织服务、 外部代理服务, Img*服务, 领导*服务, 领导服务器服务, Image Service, 以及所有 POS 的 DTO. 杰克逊对象节点.put () 现在使用的呼叫 .toString () 对于UUID 值.
Update internal entity ID types from number to string for UUID migration
Updates TypeScript types, hooks, and components to use string IDs for entities converted to UUID on the backend. User-facing entity IDs (User, Organization, Mem...
Update commerce product and market ID references from Long to UUID
Update calendar event and integration ID references from Long to UUID
Update version ID references from Long to UUID
Article IDs remain Long. Version IDs now use UUID.
Update KB media and version ID references from Long to UUID
Article IDs (KbArticle) remain Long. Version, media, pin, and review IDs now use UUID for improved CockroachDB write performance.
Update AI entity ID references from Long to UUID
Updates all controllers, services, and WebSocket handler to use UUID for AI entity IDs (providers, models, sessions, messages, folders, policies, MCP configs). ...
Update controllers and services for UUID entity IDs
Updates all controller @PathVariable and service method signatures to use UUID instead of Long for internal entity IDs (avatars, backgrounds, roles, departments...
将内部实体ID从 Long/ unique rowid () 转换为 UUID/ gen random uuid ()
通过使用随机分布的UUID来改进 CockroachDB 写入性能 用于内部实体主键,而不是相继的独有 rowid()值。 用户介绍实体(用户、组织、成员、账户、领导、联系人、 联系簿、申请、KbArticle、供应商、出价、订单、业务约定、 注: Img)保留了Long/unique rowid()用于人可读取的ID...