4 Commits

Include renames

Author	SHA1	Message	Date
mrleo1nid	c34272d508	fix(auth): allow admins to change any username including their own	2026-10-21 17:33:19 +03:00
mrleo1nidandClaude Opus 5.5	74da457362	feat(auth): make upload review a separate grant instead of an admin privilege ... Reviewing the upload queue is now a per-user flag (reviews_uploads), not part of the admin role: several people can hold it, a moderator can have it, and an admin may not. Only admins grant or revoke it; existing admins keep it. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-21 10:07:05 +03:00
mrleo1nidandClaude Opus 5.5	978f03b8f8	feat(admin): reset a user's recommendations from the users panel ... - POST /admin/users/{id}/reset-recommendations clears the taste profile (onboarding, CF vector, bandit), play stats and wave impressions; likes, dislikes and history stay, wave sessions stay so a playing wave keeps going - moderators may reset plain users, admins anyone including themselves; the reset is written to the audit log - users panel gets the menu action with a confirmation; docs updated Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-21 08:52:31 +03:00
mrleo1nidandClaude Opus 5.5	f075863f15	feat(api): user management and audit log for admins (M1) ... - /admin/users: list with search, role filter and cursor pages; create with a one-time temporary password; rename, change role, block; reset password; delete - every change is checked against the role policy, a forbidden field rejects the whole patch; the last active admin is locked in the transaction and cannot be demoted, blocked or deleted - role change and blocking revoke access tokens at once; blocking and password reset also end all sessions - /admin/audit: newest-first journal with actor names - path and query parameter errors are problem+json now Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-20 06:18:02 +03:00