ivan-igorevich/mdm-ordinis
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
947 Commits 1 Branch 0 Tags
main
Commit Graph

457 Commits

Author SHA1 Message Date
semantic-release-bot 2d76a72bc4 chore(release): v2.55.3 
## [2.55.3](https://git.nstart.cloud/2-6/2-6-4/terravault/ordinis/compare/v2.55.2...v2.55.3) (2026-06-22)

### 🐛 Fixes

* **db:** record_drafts_operation_check + REOPEN (500 на «Открыть заново») ([9b7c34a](https://git.nstart.cloud/2-6/2-6-4/terravault/ordinis/commit/9b7c34a0a67e6ce7adc11d0e00f3f29bf8f59989))
 2026-06-22 10:51:28 +00:00
semantic-release-bot 76dc2ca8c4 chore(release): v2.55.2 
## [2.55.2](https://git.nstart.cloud/2-6/2-6-4/terravault/ordinis/compare/v2.55.1...v2.55.2) (2026-06-22)

### 🐛 Fixes

* **record:** reopen latest closed по max(validTo) + revert i18n ([3cc7410](https://git.nstart.cloud/2-6/2-6-4/terravault/ordinis/commit/3cc7410ab5c8eaf0e35d93da71ba5b140a856ff3))
 2026-06-22 10:08:17 +00:00
Александр Зимин 3cc7410ab5 fix(record): reopen latest closed по max(validTo) + revert i18n 2026-06-22 10:00:38 +00:00
semantic-release-bot b84ef94121 chore(release): v2.55.1 
## [2.55.1](https://git.nstart.cloud/2-6/2-6-4/terravault/ordinis/compare/v2.55.0...v2.55.1) (2026-06-22)

### 🐛 Fixes

* **ui:** edit-форма уважает as-of таймлайна (не now) ([ac5eb53](https://git.nstart.cloud/2-6/2-6-4/terravault/ordinis/commit/ac5eb53617ff2576f9be246ef41dea800a40a2a0))
 2026-06-22 09:43:52 +00:00
Александр Зимин ac5eb53617 fix(ui): edit-форма уважает as-of таймлайна (не now) 2026-06-22 09:39:16 +00:00
semantic-release-bot 0c1cc385de chore(release): v2.55.0 
## [2.55.0](https://git.nstart.cloud/2-6/2-6-4/terravault/ordinis/compare/v2.54.2...v2.55.0) (2026-06-22)

### ✨ Features

* **record:** REOPEN operation — вернуть закрытую запись ([444c004](https://git.nstart.cloud/2-6/2-6-4/terravault/ordinis/commit/444c004e3c99ff0eb5b67095f8cd85a37d2a24e9))
 2026-06-22 09:26:20 +00:00
Александр Зимин 444c004e3c feat(record): REOPEN operation — вернуть закрытую запись 2026-06-22 09:18:50 +00:00
semantic-release-bot 8dff458b83 chore(release): v2.54.2 
## [2.54.2](https://git.nstart.cloud/2-6/2-6-4/terravault/ordinis/compare/v2.54.1...v2.54.2) (2026-06-21)

### 🐛 Fixes

* **ci:** commit-msg-lint и commit-prod-image-bump на alpine/git pre-baked ([0fb0848](https://git.nstart.cloud/2-6/2-6-4/terravault/ordinis/commit/0fb0848964fe83d72f8847fa54d889f00de96944))
* **ci:** push images в nstart/terravault namespace ([24e347f](https://git.nstart.cloud/2-6/2-6-4/terravault/ordinis/commit/24e347f758ecbd6bd093bd07bdc0b7cffc93d840))
* **ci:** release job на node:22-bookworm (без apk) ([8996f3b](https://git.nstart.cloud/2-6/2-6-4/terravault/ordinis/commit/8996f3b6f0f4c999efcfb5b24f6b74d1d72939f0))
* **ci:** use /dockerhub/ prefix для Nexus proxy путей ([6645906](https://git.nstart.cloud/2-6/2-6-4/terravault/ordinis/commit/664590660b136b1f78b51f057996a3632887efd2))
* **ui:** DatePicker off-by-one в TZ != UTC ([a82b520](https://git.nstart.cloud/2-6/2-6-4/terravault/ordinis/commit/a82b520952f01b2cbbb7becd5181f0c8cf440d4b))
 2026-06-21 07:50:15 +00:00
Александр Зимин 664590660b fix(ci): use /dockerhub/ prefix для Nexus proxy путей 2026-06-20 21:45:56 +00:00
Александр Зимин a82b520952 fix(ui): DatePicker off-by-one в TZ != UTC 2026-06-20 21:37:05 +00:00
semantic-release-bot b28c0f6ede chore(release): v2.54.1 
## [2.54.1](https://git.nstart.cloud/2-6/2-6-4/terravault/ordinis/compare/v2.54.0...v2.54.1) (2026-06-09)

### 🐛 Fixes

* **dict:** explicit Java filter — soft-deleted leak в list ([9aff1a0](https://git.nstart.cloud/2-6/2-6-4/terravault/ordinis/commit/9aff1a00e91d5d51b42081bdc8b76aa728ffaf03))
 2026-06-09 14:35:20 +00:00
semantic-release-bot bf8be4772e chore(release): v2.54.0 
## [2.54.0](https://git.nstart.cloud/2-6/2-6-4/terravault/ordinis/compare/v2.53.0...v2.54.0) (2026-06-09)

### ✨ Features

* **dict:** 7-day retention auto-purge + inline restore UI ([8621687](https://git.nstart.cloud/2-6/2-6-4/terravault/ordinis/commit/8621687a6096133c8a30e090d2e0939828bf5a40))
 2026-06-09 13:53:21 +00:00
Александр Зимин 8621687a60 feat(dict): 7-day retention auto-purge + inline restore UI 2026-06-09 13:40:23 +00:00
semantic-release-bot 05d2093273 chore(release): v2.53.0 
## [2.53.0](https://git.nstart.cloud/2-6/2-6-4/terravault/ordinis/compare/v2.52.0...v2.53.0) (2026-06-08)

### ✨ Features

* **dict:** soft-delete с recovery (Phase 1) ([0ccdff9](https://git.nstart.cloud/2-6/2-6-4/terravault/ordinis/commit/0ccdff95d2610bd31968708fb820ca2acb284bb1))
 2026-06-08 14:37:34 +00:00
semantic-release-bot 4516559e21 chore(release): v2.52.0 
## [2.52.0](https://git.nstart.cloud/2-6/2-6-4/terravault/ordinis/compare/v2.51.1...v2.52.0) (2026-06-08)

### ✨ Features

* **dict:** delete dictionary endpoint + UI button с cascade safety ([5c6801f](https://git.nstart.cloud/2-6/2-6-4/terravault/ordinis/commit/5c6801f993a34cfa43e71419807250973ce376ac))

### 🐛 Fixes

* **ci:** release не зависит от deploy-staging — unblock tag chain ([1a420b4](https://git.nstart.cloud/2-6/2-6-4/terravault/ordinis/commit/1a420b428f333034e75d8980cf2e59e015466adc))
* **schema:** FK target field — select из реальной схемы вместо free-form ([bfe5142](https://git.nstart.cloud/2-6/2-6-4/terravault/ordinis/commit/bfe5142bbae19f2d537eb2f2c62e5c29e666d173))
* **ui:** delete dict modal — destructive вместо invalid mars/danger ([6392621](https://git.nstart.cloud/2-6/2-6-4/terravault/ordinis/commit/6392621199fd58546893c611a15b32613137246e))

### 📝 Docs

* **changelog:** public release notes v2.45.3 → v2.52.0 ([082eb88](https://git.nstart.cloud/2-6/2-6-4/terravault/ordinis/commit/082eb88e7e164630b226a5a23f5ec9594ca485a8))
 2026-06-08 11:08:15 +00:00
Александр Зимин 6392621199 fix(ui): delete dict modal — destructive вместо invalid mars/danger 2026-06-08 10:08:53 +00:00
Александр Зимин 5c6801f993 feat(dict): delete dictionary endpoint + UI button с cascade safety 2026-06-05 09:47:05 +00:00
Александр Зимин bfe5142bba fix(schema): FK target field — select из реальной схемы вместо free-form 2026-06-04 15:24:55 +00:00
semantic-release-bot 48a1fd5f48 chore(release): v2.51.1 
## [2.51.1](https://git.nstart.cloud/2-6/2-6-4/terravault/ordinis/compare/v2.51.0...v2.51.1) (2026-06-02)

### 🐛 Fixes

* **reviews:** admin может self-approve record draft через UI ([308c910](https://git.nstart.cloud/2-6/2-6-4/terravault/ordinis/commit/308c9104e9636d0b13342f3e4611005589e1e002))
 2026-06-02 13:18:24 +00:00
Александр Зимин 308c9104e9 fix(reviews): admin может self-approve record draft через UI 2026-06-02 13:02:13 +00:00
semantic-release-bot 039b6ef039 chore(release): v2.51.0 
## [2.51.0](https://git.nstart.cloud/2-6/2-6-4/terravault/ordinis/compare/v2.50.0...v2.51.0) (2026-06-02)

### ✨ Features

* **layout:** убрать max-w-7xl на root — full width на больших экранах ([ff18a3a](https://git.nstart.cloud/2-6/2-6-4/terravault/ordinis/commit/ff18a3aa720824314bc2354d36acfd8220df58a8))
 2026-06-02 12:55:05 +00:00
Александр Зимин ff18a3aa72 feat(layout): убрать max-w-7xl на root — full width на больших экранах 2026-06-02 12:38:10 +00:00
semantic-release-bot 4f16669f2b chore(release): v2.50.0 
## [2.50.0](https://git.nstart.cloud/2-6/2-6-4/terravault/ordinis/compare/v2.49.0...v2.50.0) (2026-06-02)

### ✨ Features

* **dict:** таблица справочника — hide tail columns по умолчанию (без H-scroll) ([b619071](https://git.nstart.cloud/2-6/2-6-4/terravault/ordinis/commit/b6190713e4e472b0aa1a9f26592b537920b8df8b))

### 🐛 Fixes

* **dict:** default-hide для existing users (v=2 storage) + sticky header/pagination ([fece673](https://git.nstart.cloud/2-6/2-6-4/terravault/ordinis/commit/fece673017b5fbae0035f275cabba14f3d06879c))
 2026-06-02 12:35:11 +00:00
Александр Зимин fece673017 fix(dict): default-hide для existing users (v=2 storage) + sticky header/pagination 2026-06-02 12:22:19 +00:00
Александр Зимин b6190713e4 feat(dict): таблица справочника — hide tail columns по умолчанию (без H-scroll) 2026-06-02 12:14:00 +00:00
semantic-release-bot 071315b058 chore(release): v2.49.0 
## [2.49.0](https://git.nstart.cloud/2-6/2-6-4/terravault/ordinis/compare/v2.48.0...v2.49.0) (2026-06-02)

### ✨ Features

* **dict:** таблица справочника — все scalar поля схемы в pool колонок ([65f5dbd](https://git.nstart.cloud/2-6/2-6-4/terravault/ordinis/commit/65f5dbd48b5be5df612a74e834a5ae482bcced7e))

### 🐛 Fixes

* **approve:** retry на Postgres SERIALIZABLE 40001 (массовый approve drafts) ([30506b0](https://git.nstart.cloud/2-6/2-6-4/terravault/ordinis/commit/30506b0cc4f7c52ddbcd47a8960c720117115098))
 2026-06-02 12:08:28 +00:00
Александр Зимин 65f5dbd48b feat(dict): таблица справочника — все scalar поля схемы в pool колонок 2026-06-02 11:50:16 +00:00
semantic-release-bot 4510d7cc6f chore(release): v2.48.0 
## [2.48.0](https://git.nstart.cloud/2-6/2-6-4/terravault/ordinis/compare/v2.47.0...v2.48.0) (2026-06-02)

### ✨ Features

* **ui:** RecordDrawer wide-mode default по viewport ([010f71e](https://git.nstart.cloud/2-6/2-6-4/terravault/ordinis/commit/010f71e44d0caf9768c295bde3afa45593767bb3))

### 🐛 Fixes

* **bundle:** semver-aware schema update — не откатывать user-published ([39e24a6](https://git.nstart.cloud/2-6/2-6-4/terravault/ordinis/commit/39e24a6d0130fc29019d3347c92f0b431a7ca0e9))
 2026-06-02 11:26:08 +00:00
Александр Зимин 010f71e44d feat(ui): RecordDrawer wide-mode default по viewport 2026-06-02 11:14:48 +00:00
semantic-release-bot c892f30b3e chore(release): v2.47.0 
## [2.47.0](https://git.nstart.cloud/2-6/2-6-4/terravault/ordinis/compare/v2.46.1...v2.47.0) (2026-06-02)

### ✨ Features

* **ui:** dict table column sort + visibility toggle (localStorage) ([c2e7dd0](https://git.nstart.cloud/2-6/2-6-4/terravault/ordinis/commit/c2e7dd0c87113868f4b4b8c02936ae5cd894c450))
 2026-06-02 11:04:14 +00:00
Александр Зимин c2e7dd0c87 feat(ui): dict table column sort + visibility toggle (localStorage) 2026-06-02 10:58:59 +00:00
semantic-release-bot c20ffb6dee chore(release): v2.46.1 
## [2.46.1](https://git.nstart.cloud/2-6/2-6-4/terravault/ordinis/compare/v2.46.0...v2.46.1) (2026-06-02)

### 🐛 Fixes

* **workflow:** drop DB self-approve constraints (unblock admin override) ([ba76704](https://git.nstart.cloud/2-6/2-6-4/terravault/ordinis/commit/ba767045a494837c5aa95439db2fc9e3573ed592))
 2026-06-02 09:27:23 +00:00
semantic-release-bot ff0fd1e3e9 chore(release): v2.46.0 
## [2.46.0](https://git.nstart.cloud/2-6/2-6-4/terravault/ordinis/compare/v2.45.3...v2.46.0) (2026-06-01)

### ✨ Features

* **workflow:** admin self-approve override (D3 relaxation для small teams) ([ba49854](https://git.nstart.cloud/2-6/2-6-4/terravault/ordinis/commit/ba49854a612aae10e9a1dacb1f020dfe36eefed7))
 2026-06-01 18:55:37 +00:00
semantic-release-bot 41466123cd chore(release): v2.45.3 
## [2.45.3](https://git.nstart.cloud/2-6/2-6-4/terravault/ordinis/compare/v2.45.2...v2.45.3) (2026-05-27)

### 🐛 Fixes

* **security:** CSO findings — non-root containers + .env gitignore + actuator hardening ([7abff8f](https://git.nstart.cloud/2-6/2-6-4/terravault/ordinis/commit/7abff8f73ff9a042a5d03b81654827eb427fa981)), closes [#1](https://git.nstart.cloud/2-6/2-6-4/terravault/ordinis/issues/1) [#2](https://git.nstart.cloud/2-6/2-6-4/terravault/ordinis/issues/2) [#3](https://git.nstart.cloud/2-6/2-6-4/terravault/ordinis/issues/3)
 2026-05-27 16:15:25 +00:00
Александр Зимин c1a006765f chore(ui): a11y touch-targets sweep + useUserDisplay JSDoc refresh 2026-05-27 15:49:17 +00:00
semantic-release-bot 2868e8635a chore(release): v2.45.2 
## [2.45.2](https://git.nstart.cloud/2-6/2-6-4/terravault/ordinis/compare/v2.45.1...v2.45.2) (2026-05-26)

### 🐛 Fixes

* **auth:** зачистить остатки auth.nstart.space → altum.nstart.cloud ([c1aaf6a](https://git.nstart.cloud/2-6/2-6-4/terravault/ordinis/commit/c1aaf6a696050678d7b2edacde1f1150647b1a00))
 2026-05-26 13:26:20 +00:00
Александр Зимин 9144b2d1d1 Merge branch 'chore/cleanup-tokensync-jsdoc' into 'main' 
chore(ui): убрать упоминание TokenSync из RequireAuth JSDoc

See merge request 2-6/2-6-4/terravault/ordinis!275
 2026-05-26 12:37:17 +00:00
semantic-release-bot 16559a8488 chore(release): v2.45.1 
## [2.45.1](https://git.nstart.cloud/2-6/2-6-4/terravault/ordinis/compare/v2.45.0...v2.45.1) (2026-05-26)

### 🐛 Fixes

* **auth:** иерархическое расширение scope set в ScopeContext ([6977ba1](https://git.nstart.cloud/2-6/2-6-4/terravault/ordinis/commit/6977ba106dbb81e9a735edafb1224f8799c47c35))
 2026-05-26 12:33:43 +00:00
Zimin A.N. 03973a943e chore(ui): убрать упоминание TokenSync из RequireAuth JSDoc 
TokenSync.tsx был удалён в Phase 1a (keycloak-js migration, MR !270).
В JSDoc на RequireAuth.tsx осталась ссылка на его поведение —
обновляем описание под текущую модель: apiClient request interceptor
+ ensureFreshToken на 401 (см. api/client.ts:64).

Минор-долг из checkpoint'а keycloak-js-altum-migration.
 2026-05-26 15:28:24 +03:00
semantic-release-bot 90a6c1185e chore(release): v2.45.0 
## [2.45.0](https://git.nstart.cloud/2-6/2-6-4/terravault/ordinis/compare/v2.44.1...v2.45.0) (2026-05-26)

### ✨ Features

* **auth:** Phase 2 — audited-users UserPicker + Tier-3 Keycloak Admin lookup ([a4ba873](https://git.nstart.cloud/2-6/2-6-4/terravault/ordinis/commit/a4ba8735d0e03b1e867c648bc8fb9ee059aa5c8f))
 2026-05-26 12:09:48 +00:00
Александр Зимин f38b2b668d Merge branch 'feat/phase2-direct-kc-admin' into 'main' 
feat(auth): Phase 2 — audited-users UserPicker + Tier-3 Keycloak Admin lookup

See merge request 2-6/2-6-4/terravault/ordinis!272
 2026-05-26 12:01:10 +00:00
Александр Зимин a4ba8735d0 feat(auth): Phase 2 — audited-users UserPicker + Tier-3 Keycloak Admin lookup 2026-05-26 12:01:09 +00:00
semantic-release-bot bd3798ffa8 chore(release): v2.44.1 
## [2.44.1](https://git.nstart.cloud/2-6/2-6-4/terravault/ordinis/compare/v2.44.0...v2.44.1) (2026-05-26)

### 🐛 Fixes

* **ui:** TS2345 в DictionaryEditorDialog[#449](https://git.nstart.cloud/2-6/2-6-4/terravault/ordinis/issues/449) — narrow unknown ([8337561](https://git.nstart.cloud/2-6/2-6-4/terravault/ordinis/commit/83375610b25b2f194f1e12fc6c0b1f1cfd1c2561))
 2026-05-26 11:54:07 +00:00
Александр Зимин 83375610b2 fix(ui): TS2345 в DictionaryEditorDialog#449 — narrow unknown 2026-05-26 11:48:24 +00:00
semantic-release-bot f1fcabc9da chore(release): v2.44.0 
## [2.44.0](https://git.nstart.cloud/2-6/2-6-4/terravault/ordinis/compare/v2.43.0...v2.44.0) (2026-05-26)

### ✨ Features

* **auth:** Phase 1b — swap default Keycloak realm на altum ([da0f894](https://git.nstart.cloud/2-6/2-6-4/terravault/ordinis/commit/da0f8943426ae96ef483ebd65c591fbb00ddd9b5))
 2026-05-26 10:21:28 +00:00
Zimin A.N. da0f894342 feat(auth): Phase 1b — swap default Keycloak realm на altum 
Frontend default: https://auth.nstart.space/realms/nstart →
https://altum.nstart.cloud/auth/realms/altum. Shared SSO с altum portal.

Keycloak setup (Keycloak admin actions требуются ДО merge):
- В realm `altum` создать client `ordinis` (тип: public, standard flow)
- Redirect URIs:
    https://ordinis.nstart.cloud/*
    https://ordinis.k8s.265.nstart.cloud/*
    http://localhost:5173/*
- Web origins: те же
- Client-roles: ordinis-public, ordinis-internal, ordinis-restricted,
  admin (admin даёт RESTRICTED через ScopeContext.isAdminRole)

Backend issuerUri меняется отдельным MR в ordinis-infra
(charts/ordinis/values.yaml).

После настройки Keycloak + деплоя — старый realm auth.nstart.space/nstart
больше не используется. Все юзеры должны иметь учётки в realm altum
(вероятно brokered к nstart-id если SSO с New Start ID настроен).

171/171 tests, TSC чистый.
 2026-05-26 13:11:49 +03:00
semantic-release-bot 6e5e64d558 chore(release): v2.43.0 
## [2.43.0](https://git.nstart.cloud/2-6/2-6-4/terravault/ordinis/compare/v2.42.6...v2.43.0) (2026-05-26)

### ✨ Features

* **auth:** миграция oidc-client-ts → keycloak-js (altum-pattern) ([7e435e0](https://git.nstart.cloud/2-6/2-6-4/terravault/ordinis/commit/7e435e07b7eb532dd99c03e02d9e76ecbcf9f451))
 2026-05-26 08:37:11 +00:00
Александр Зимин aaae04b4ca Merge branch 'feat/keycloak-js-altum-style-auth' into 'main' 
feat(auth): миграция oidc-client-ts → keycloak-js (altum-pattern, Phase 1a)

See merge request 2-6/2-6-4/terravault/ordinis!270
 2026-05-26 08:31:42 +00:00
Zimin A.N. 7e435e07b7 feat(auth): миграция oidc-client-ts → keycloak-js (altum-pattern) 
Phase 1a из плана: только swap библиотеки, realm/URL остаются на
auth.nstart.space/realms/nstart. Phase 2 (intgr с altum auth-service)
— отдельный эпик.

Зачем. oidc-client-ts с automaticSilentRenew триггерил бесконечный
POST /token loop когда refresh_token истекал (см. MR !269 revert,
~30+ 400'к в console, страница залипала на 403). Altum давно ушёл
с oidc-client-ts на keycloak-js по той же причине.

Новая модель.
- src/lib/keycloak.ts — singleton + initKeycloak(check-sso, PKCE) +
  ensureFreshToken(N) wrapper над kc.updateToken(). Зеркало
  altum/src/lib/keycloak.ts.
- src/stores/authStore.ts — Zustand store: {user, isAuthenticated,
  isLoading, error}. checkAuth() ждёт initKeycloak, wireKeycloakEvents()
  → onAuthSuccess/Refresh/Logout/TokenExpired re-снэпшотят store.
- src/auth/useAuth.ts — compat shim для react-oidc-context API
  (auth.user.profile, isAuthenticated, signinSilent, signinRedirect,
  signoutRedirect, removeUser, error). Все 11 callsites продолжают
  работать без правок (только сменили путь import'а).
- src/api/client.ts — request interceptor дёргает ensureFreshToken(30)
  ПЕРЕД каждым запросом + attaches Bearer ${getToken()}. 401 interceptor
  делает ensureFreshToken(0) + retry один раз. Никаких таймеров, никаких
  setAccessToken/setUnauthorizedHandler holder'ов — keycloak-js сам source
  of truth.
- src/main.tsx — убран <AuthProvider>, <TokenSync />. Просто
  useAuthStore.getState().checkAuth() на старте, потом обычный render.
- public/silent-check-sso.html — endpoint для silentCheckSsoRedirectUri.

Удалены.
- src/auth/TokenSync.tsx — не нужен, ensureFreshToken на запросах.
- src/auth/oidcConfig.ts — не нужен, конфиг внутри lib/keycloak.ts.
- npm deps: react-oidc-context, oidc-client-ts.

Добавлены deps: keycloak-js@26.2.4, zustand@5.0.13.

Tests: 171/171 passed, TSC чистый.

Migration callsites — все unchanged по семантике благодаря compat shim.
 2026-05-26 11:18:30 +03:00
semantic-release-bot 273393cc7e chore(release): v2.42.6 
## [2.42.6](https://git.nstart.cloud/2-6/2-6-4/terravault/ordinis/compare/v2.42.5...v2.42.6) (2026-05-26)

### ⏪ Reverts

* уберу proactive re-auth и 403→reauth — спам Keycloak /token ([0aaae9c](https://git.nstart.cloud/2-6/2-6-4/terravault/ordinis/commit/0aaae9cb2b53c00d6c7e7cae08f8904c97f118e0))
 2026-05-26 08:03:18 +00:00