Commit Graph

98 Commits

Author SHA1 Message Date
huangping 34e15dd650 feat(web): add 3-way theme comparison (Figma / ElementPlus / Hybrid-recommended) 2026-05-18 23:21:18 +08:00
huangping 9cb2fda66a feat(web): add Figma vs Element Plus license management theme comparison page 2026-05-18 23:14:39 +08:00
huangping be772db94b chore: update Cargo.lock and crypto test import 2026-05-18 22:41:46 +08:00
huangping 5d615dd393 feat: add build.rs pubkey embedding and webhook license/v1 endpoints 2026-05-18 22:39:05 +08:00
huangping ebb3da2ad6 feat(rust): add online activation and heartbeat (HTTPS + HMAC signing) for selfhosted provider 2026-05-18 22:37:03 +08:00
huangping 6f79bb97d9 feat(platform): add LicenseSigner, LicenseService, LicenseController, and persistence entities 2026-05-18 22:27:03 +08:00
huangping 91aabb500c feat: extend Java config, Schema, and DB for selfhosted licensing SDK 2026-05-18 22:20:14 +08:00
huangping fbce298f2b feat(rust): add Provider trait + refactor C ABI to route through Provider
SelfHostedProvider implements Provider trait for offline license verification
2026-05-18 22:17:05 +08:00
huangping 8b90a71077 feat(rust): add device fingerprint and selfhosted provider (cache, license verify, offline validation) 2026-05-18 22:12:49 +08:00
huangping f9203e077e feat(rust): add crypto module (HKDF + AES-256-GCM + RSA verify) 2026-05-18 22:05:36 +08:00
huangping b7a947409a build(native): rename lib to craftlabs_auth_core, add crypto deps
feat(rust): extend error codes for selfhosted licensing (crypto/license state variants)
2026-05-18 22:02:28 +08:00
huangping 9bb5cbba64 docs: complete implementation plan for selfhosted licensing SDK (25 tasks, 4 phases) 2026-05-18 21:21:15 +08:00
huangping d7469afee9 docs: self-hosted licensing SDK design spec 2026-05-18 21:00:56 +08:00
huangping dc74c19be4 feat(native): add session management with global handle registry 2026-05-01 14:05:16 +08:00
huangping d716719428 feat(native): add LicenseError enum with BitAnswer error code mapping 2026-05-01 14:02:58 +08:00
huangping 307a019d48 plan: implement BitAnswer 1:1 refactor — 12 tasks across 4 phases
Phase 1 (infrastructure, no breaking changes):
- Rust: error.rs, session.rs, ffi/bitanswer.rs, ffi/bridge.rs
- Rust: refactor lib.rs to session-based handle management
- Java: @Deprecate AuthProvider, create 6 capability interfaces
- Java: LicenseSession skeleton, NativeBridge 30+ method stubs
- Java: CraftLicense new entry point

Phase 2-4: core API expansion, advanced features, cleanup
2026-05-01 13:57:46 +08:00
huangping 7af83b089e docs: add BitAnswer 1:1 mapping refactor design spec
Architecture audit revealed AuthProvider (8 methods) only covers
~15% of BitAnswer's 50+ C API surface. This spec proposes:
- 6 capability interfaces (LicenseLifecycle, FeatureManagement,
  DataItemStore, LicenseInfoQuery, CheckoutManager, LicenseUtility)
- 40+ JNI → Rust → BitAnswer C API mappings
- 4-phase migration path with backward compatibility
2026-05-01 13:45:43 +08:00
huangping 313315cd3f chore: archive old C++ CMake build to .deprecated-cmake/; Rust is now canonical 2026-04-28 22:47:45 +08:00
huangping b7f756bc2b feat(rust): complete M5 security hardening — dynamic API, obfuscation, libloading 2026-04-28 22:45:49 +08:00
huangping 6a92f46447 feat(rust): split core library into activate/license/heartbeat modules with build.rs and C ABI tests 2026-04-28 18:46:20 +08:00
huangping 6b3f1bdab5 chore: upgrade Spring Boot 3.4.5 -> 4.0.0 with compiler and SecurityConfig fixes
- Move maven-compiler-plugin from pluginManagement to plugins for proper release 17 inheritance
- Remove deprecated UserDetailsServiceAutoConfiguration exclude (removed in Boot 4.0)
- Switch MyBatis-Plus to boot4-starter
2026-04-28 18:39:54 +08:00
huangping 30cd1ec51a chore: update .gitignore for .env and README with docker build instructions 2026-04-28 18:32:08 +08:00
huangping d884e6bab2 feat: expand docker-compose to 8 services with monitoring stack per architecture spec 2026-04-28 18:31:49 +08:00
huangping 53c52a0b3e refactor(native): rename C API auth_* -> craft_* across header, core, JNI bridge, and smoke tests 2026-04-28 18:27:34 +08:00
huangping 5073a4193f refactor(native): rename C API auth_* -> craft_* in JNI bridge 2026-04-28 18:23:51 +08:00
huangping 650c1caffa docs(engineering): I8/I9 iteration artifacts and frontend UI specification
Add I8/I9 design and implementation review markdown, update parallel iteration
index and I7 review cross-links, and add FRONTEND_UI_SPECIFICATION for design
handoff (Figma Make).

Made-with: Cursor
2026-04-07 21:26:51 +08:00
huangping d53ddf32c8 feat(i8-i9): webhook DEAD replay, read-only delivery status, and callback UI
I8: platform proxies replay to webhook; webhook ops token filter and internal
replay endpoint; delivery service supports read/replay flows.

I9: platform GET callback webhook delivery status by inbox id; UI shows
read-only status block and handles load errors without blocking the page.

Also refresh OpenAPI, Runbook notes, test fixtures and YAML; fix Vite dev
axios baseURL so /api uses proxy; improve login error messaging.

Made-with: Cursor
2026-04-07 21:26:44 +08:00
huangping 5e051633ec docs: sync I5_I6 design with I7 (OPS, async delivery); index I7 row
Made-with: Cursor
2026-04-06 23:06:07 +08:00
huangping 5fe7181b35 feat(i7): async webhook delivery queue, OPS RBAC, UI role routing; docs and runbook
- Architect: I7_DESIGN.md, I7_IMPLEMENTATION_REVIEW.md; parallel index + track B
- Backend: @EnableMethodSecurity; OPS login; CallbackInbox PreAuthorize; IntegrationCatalog triple role
- Webhook: V2 webhook_platform_delivery; planner + scheduler + single-shot forwarder; tests
- Frontend: Pinia hasAnyRole; MainLayout/HomeView/router for OPS vs dev
- Runbook §10.5 delivery config

Made-with: Cursor
2026-04-06 23:01:10 +08:00
huangping ce49fe143c docs(i6): solidify I5_I6 design markdown; add Dependabot and ci-security (Trivy, npm audit)
Made-with: Cursor
2026-04-06 22:48:58 +08:00
huangping 499fef3c2f feat(web): VITE_API_BASE and I6 home module navigation
Made-with: Cursor
2026-04-06 22:46:31 +08:00
huangping d9536802db feat(platform): add I6 security headers for API chains
Made-with: Cursor
2026-04-06 22:46:31 +08:00
huangping 78433faa89 docs(i6): UAT closeout, architecture review, Runbook internal token
Made-with: Cursor
2026-04-06 22:46:31 +08:00
huangping 841bd3e0bd feat(web): I5 callback inbox and integration catalog UI
Made-with: Cursor
2026-04-06 22:40:28 +08:00
huangping e34b420168 feat(webhook): forward BitAnswer callbacks to platform after first receipt
Made-with: Cursor
2026-04-06 22:40:26 +08:00
huangping fc0c4b1930 feat(platform): I5 callback inbox, internal ingest, and M6 catalog APIs
Made-with: Cursor
2026-04-06 22:40:21 +08:00
huangping b6e110acaf docs(i5i6): add I5/I6 design and fix SDK doc backticks
Made-with: Cursor
2026-04-06 22:40:16 +08:00
huangping 00411a5e74 feat(web): I4 delivery and license SN UI
Add routes, menu entries, platform API helpers, and views for delivery
batches and license SN management.

Made-with: Cursor
2026-04-06 21:49:10 +08:00
huangping 9df6f60a17 feat(platform): I4 delivery batches, lines, and license SN APIs
Add Flyway V4 tables, delivery-batches and license-sns endpoints with
validation, audit actions, controller tests, and OpenAPI snapshot update.

Made-with: Cursor
2026-04-06 21:49:04 +08:00
huangping df91ab0673 docs(i4): add I4 design for M3 delivery and M4 license SN
Describe REST contracts, validation, routing, and I4 sync checklist
aligned with V4 schema and parallel iteration index.

Made-with: Cursor
2026-04-06 21:48:55 +08:00
huangping 7f8e7b7e7c feat(web): I3 contract list, wizard, and detail
Add routes and menu, platform API helpers (patch status, audit-events),
and Vue views aligned to platform contract DTOs and state transitions.

Made-with: Cursor
2026-04-06 21:29:28 +08:00
huangping 69f7ee11df feat(platform): I3 contracts, lines, status machine, and audit API
Add Flyway V3 tables, contract CRUD and line endpoints, PATCH status
transitions with validation, M10-F01 audit-events listing, 409 handler,
and integration tests. Refresh OpenAPI contract snapshot.

Made-with: Cursor
2026-04-06 21:29:21 +08:00
huangping 5b50bf0fd8 docs(i3): add I3 design for M2 contracts and M10-F01 audit
Document REST shape, state machine, audit query, and Webhook DTO v0.1
alignment for iteration I3 (parallel tracks + product M2 P0).

Made-with: Cursor
2026-04-06 21:29:17 +08:00
huangping f94f03bcc2 feat(sdk): AuthConfigs, JSON Schema, examples, and release checksum CI
Add craftlabs-auth-config.schema.json, Java AuthConfigs model with tests,
example configs aligned to BP-10, C/Java/auth-config documentation,
native header notes, RELEASING guide, and workflow to verify SDK
artifact checksums on release tags.

Made-with: Cursor
2026-04-06 21:05:12 +08:00
huangping 65eb983035 feat(web): I1 shell and I2 customer/project UI
Vue 3 + Element Plus layout with JWT login, RBAC routes, axios 401
handling with token restore, and Customers/Projects views wired to
platform APIs.

Made-with: Cursor
2026-04-06 21:05:02 +08:00
huangping 3f577b34d5 feat(platform): I1 bootstrap, I2 M1 APIs, OpenAPI SSOT, and CI guards
Deliver dual Spring Boot services (platform API + webhook ingress), JWT
auth, Flyway with isolated history tables, customer/project/dictionary
endpoints, OpenAPI snapshot under contracts/, RUNBOOK, and CI that runs
on services/web/contracts paths plus enforcer + dependency tree ban on
craftlabs-auth-bitanswer.

Made-with: Cursor
2026-04-06 21:04:56 +08:00
huangping 76ff98db87 docs(i1): engineering index, parallel tracks, and product context
Add PARALLEL_ITERATION_INDEX, workspace layout, system architecture,
three-track execution packs, BPM/product references, and planned
service manifests. Supports I1 alignment across backend, web, and SDK.

Made-with: Cursor
2026-04-06 21:04:49 +08:00
hpd840321 3894315759 feat: add native/Java auth SDK, docs, CI, and examples
Made-with: Cursor
2026-04-06 17:42:09 +08:00