feat: v7.3.0 — cycle v6.8.0→v7.3.0 (Sites, Search, Automations, Calendar, SCIM, Wiki) + audit A9

- v6.8.0 Sites & Forms publics (migrations 24) - v6.9.0 Recherche sémantique hybride + Ask AI (migration 25) - v7.0.0 Automations v2 multi-étapes + Workers sandboxés (migration 26) - v7.1.0 Calendar sync Google/CalDAV + Meeting Notes (migration 27) - v7.2.0 Enterprise : SCIM 2.0, 2FA TOTP/passkeys, audit UI, agent approvals (migration 28) - v7.3.0 Wiki/Teamspaces, verified pages, collab polish, charts, unfurl (migration 29) - docs V68→V73, ROADMAP/CHANGELOG/WORKLOAD à jour, VERSION 7.3.0 - A9 : flowdeck.db, flowdeck_dev.db, test-commit.md, upload_test.txt et e2e/{node_modules,shots,test-results} désindexés + ignorés (.gitignore/.dockerignore)
2026-09-30 20:02:57 -04:00
parent d074689b18
commit 1706ad1ee9
260 changed files with 10667 additions and 353788 deletions
@@ -2393,7 +2393,7 @@ applyAIBlocks(text){
          if(this.saving){ if(cb) cb(); return; }
          this.sync();
          this.saving=true;
-          const blocksArr=this.blocks.map(b=>{const c={id:b.id,type:b.type,content:b.content};['checked','expanded','language','icon','src','embed_src','embed_provider','alt','style','embed_type','collection_id','dbs','file_name','file_size','file_mime','children','rows','align','has_header','first_col_header','colsW','meeting','automation_id','automation_name'].forEach(k=>{if(b[k]!=null)c[k]=b[k];});return c;});
+          const blocksArr=this.blocks.map(b=>{const c={id:b.id,type:b.type,content:b.content};['checked','expanded','language','icon','src','embed_src','embed_provider','alt','style','embed_type','collection_id','dbs','file_name','file_size','file_mime','children','rows','align','has_header','first_col_header','colsW','meeting','automation_id','automation_name','url','title','description','image','site_name'].forEach(k=>{if(b[k]!=null)c[k]=b[k];});return c;});
          // v6.0.0 PWA: hors ligne (ou échec réseau) → file IndexedDB rejouée au retour du réseau
          const queueOffline=()=>{
            if(!window.FlowOffline){this.saving=false;return;}
@@ -404,6 +404,33 @@
      </div>
    </div>

+    <!-- Teamspaces -->
+    <div class="sidebar-section" x-show="isSectionVisible('teamspaces')" x-transition:enter="transition ease-out duration-200" x-transition:enter-start="opacity-0" x-transition:enter-end="opacity-100">
+      <div class="sidebar-section-header" @click="toggleSection('teamspaces')" @contextmenu.prevent="openSectionMenu($event, 'teamspaces')">
+        <div class="sidebar-section-title">
+          <span class="chevron" :class="{ open: sectionsOpen.teamspaces }">▶</span>
+          <span class="section-icon">{{ fd_icon("home",14) }}</span>
+          <span class="section-label">Teamspaces</span>
+        </div>
+        <div class="sidebar-section-actions">
+          <button class="section-action-btn" title="Refresh" @click.stop="loadTeamspaces()">{{ fd_icon("refresh",16) }}</button>
+          <button class="section-action-btn section-menu-btn" title="Section options" @click.stop="openSectionMenu($event, 'teamspaces')">⋮</button>
+        </div>
+      </div>
+      <div class="sidebar-section-items" x-show="sectionsOpen.teamspaces" x-transition>
+        <ul class="sidebar-items" data-section="teamspaces">
+          <template x-for="t in teamspaces" :key="t.id">
+            <li class="sidebar-item" @click="openTeamspace(t.id)">
+              <span class="page-icon page-icon-svg">{{ fd_icon("home",16) }}</span>
+              <span class="page-name" x-text="t.name"></span>
+              <span class="page-name text-dim" style="font-size:11px;" x-text="t.item_count + (t.private ? ' · 🔒' : '')"></span>
+            </li>
+          </template>
+          <li class="sidebar-item empty-hint" x-show="!teamspaces.length"><span class="page-icon page-icon-svg">{{ fd_icon("home",16) }}</span><span class="page-name text-dim">No teamspaces yet</span></li>
+        </ul>
+      </div>
+    </div>
+
    <!-- Shared -->
    <div class="sidebar-section" x-show="isSectionVisible('shared')" x-transition:enter="transition ease-out duration-200" x-transition:enter-start="opacity-0" x-transition:enter-end="opacity-100">
      <div class="sidebar-section-header" @click="toggleSection('shared')" @contextmenu.prevent="openSectionMenu($event, 'shared')">
@@ -503,9 +530,10 @@
      </div>
      <div class="scp-list">
        <template x-for="(cfg, key) in (Object.keys(sidebarConfig).length ? sidebarConfig : {
-          workspace:{visible:true,order:0},meetings:{visible:true,order:1},
-          recents:{visible:true,order:2},favorites:{visible:true,order:3},
-          agents:{visible:true,order:4},shared:{visible:true,order:5},published:{visible:true,order:6}
+          workspace:{visible:true,order:0},teamspaces:{visible:true,order:1},
+          meetings:{visible:true,order:2},recents:{visible:true,order:3},
+          favorites:{visible:true,order:4},agents:{visible:true,order:5},
+          shared:{visible:true,order:6},published:{visible:true,order:7}
        })" :key="key">
          <div class="scp-item" @click="toggleSectionVisibility(key)">
            <div class="scp-item-left">
@@ -1098,6 +1126,7 @@
        window.appState = this;
        this.loadSidebarConfig();
        this.loadAgents();
+        this.loadTeamspaces();
        this.initSidebarWidth();
        document.addEventListener('fd-toggle-sidebar', () => this.toggleSidebar());
        this.startClipAutoRefresh();
@@ -1157,6 +1186,17 @@
        if(window.fdAgent && window.fdAgent.open){ window.fdAgent.open(); }
        else { document.dispatchEvent(new CustomEvent('fd-agent-toggle')); }
      },
+      teamspaces: [],
+      loadTeamspaces() {
+        var self = this;
+        fetch('/api/v2/wiki/teamspaces').then(function(r){ return r.json(); }).then(function(d){
+          self.teamspaces = d.teamspaces || [];
+        }).catch(function(){});
+      },
+      openTeamspace(id) {
+        var target = '/wiki/teamspaces/' + id;
+        if (window.fdNavigate) window.fdNavigate(target); else window.location = target;
+      },
      sidebarCollapsed: false,
      sidebarPeek: false,
      mobileSidebarOpen: false,
@@ -1310,7 +1350,7 @@

      // ── Sections collapsible ──
      sectionsOpen: (function() {
-        var def = { recents: true, private: true, meetings: true, favorites: true, agents: true, shared: true, published: true, apps: true, workspace: true, gitea: true };
+        var def = { recents: true, private: true, meetings: true, favorites: true, agents: true, teamspaces: true, shared: true, published: true, apps: true, workspace: true, gitea: true };
        try {
          var saved = JSON.parse(localStorage.getItem('fd_sections') || '{}');
          return Object.assign(def, saved);
@@ -1361,7 +1401,7 @@

      getSectionOrder(key) {
        var cfg = this.sidebarConfig[key];
-        var sections = ['workspace','gitea','meetings','recents','favorites','agents','shared','published'];
+        var sections = ['workspace','gitea','meetings','recents','favorites','agents','teamspaces','shared','published'];
        if (cfg && typeof cfg.order === 'number') return cfg.order;
        return sections.indexOf(key);
      },
@@ -1380,7 +1420,7 @@
            return (self.sidebarConfig[a] && self.sidebarConfig[a].order || 99) -
                   (self.sidebarConfig[b] && self.sidebarConfig[b].order || 99);
          }) :
-          ['workspace','gitea','meetings','recents','favorites','agents','shared','published'];
+          ['workspace','gitea','meetings','recents','favorites','agents','teamspaces','shared','published'];
        var idx = sections.indexOf(key);
        if (idx < 0) return;
        var swapIdx = direction === 'up' ? idx - 1 : idx + 1;
@@ -1422,7 +1462,7 @@
      getSectionIcon(key) {
        var icons = {
          workspace: '📁', meetings: '📅', recents: '🕐', favorites: '⭐',
-          agents: '🤖', shared: '👥', published: '🌐', gitea: '🔗',
+          agents: '🤖', teamspaces: '🏛️', shared: '👥', published: '🌐', gitea: '🔗',
          private: '🔒', library: '📚', 'my-tasks': '✅', marketplace: '🛒',
          help: '❓', trash: '🗑️'
        };
@@ -1432,7 +1472,7 @@
        var labels = {
          workspace: 'Workspace', gitea: 'Repository (Gitea)', meetings: 'Meetings',
          recents: 'Recents', favorites: 'Favorites', agents: 'Agents',
-          shared: 'Shared', published: 'Published', private: 'Private',
+          teamspaces: 'Teamspaces', shared: 'Shared', published: 'Published', private: 'Private',
          library: 'Library', 'my-tasks': 'My Tasks', marketplace: 'Marketplace',
          help: 'Help', trash: 'Trash'
        };
@@ -810,35 +810,57 @@
      <!-- Admin: Audit Log -->
      <div x-show="activeSection==='admin-audit'">
        <h2>Audit Log</h2>
-        <p class="section-desc">Login history and security events.</p>
+        <p class="section-desc">Actions API, changements de permissions et connexions SSO (unifiés).</p>
+        <div style="display:flex;gap:8px;flex-wrap:wrap;margin-bottom:14px;align-items:center;">
+          <template x-for="s in ['all','api','permissions','sso']" :key="s">
+            <button class="btn" :class="{ 'btn-primary': auditSource===s }" style="font-size:12px;" @click="auditSource=s; loadAuditLogs()" x-text="s"></button>
+          </template>
+          <input type="text" placeholder="actor (user id)" x-model="auditActor" style="font-size:12px;padding:6px 8px;" @keyup.enter="loadAuditLogs()">
+          <input type="text" placeholder="action (LIKE)" x-model="auditAction" style="font-size:12px;padding:6px 8px;" @keyup.enter="loadAuditLogs()">
+          <button class="btn" style="font-size:12px;" @click="loadAuditLogs()">Apply</button>
+          <span style="flex:1;"></span>
+          <a class="btn" style="font-size:12px;" :href="auditCsvUrl()" download>Export CSV</a>
+        </div>
        <div class="table-wrap">
          <table class="admin-table">
            <thead>
              <tr>
                <th>Date</th>
-                <th>User</th>
-                <th>IP Address</th>
-                <th>User Agent</th>
+                <th>Source</th>
+                <th>Actor</th>
+                <th>Action</th>
+                <th>Resource</th>
+                <th>IP</th>
+                <th>Detail</th>
              </tr>
            </thead>
            <tbody>
-              <template x-for="e in auditEntries" :key="e.id">
+              <template x-for="e in auditLogs" :key="e.at + '-' + e.source + '-' + e.actor">
                <tr>
-                  <td><span style="font-size:12px;" x-text="new Date(e.logged_at+'Z').toLocaleString()"></span></td>
-                  <td>
-                    <span style="font-weight:500;" x-text="e.full_name || e.login"></span>
-                    <span style="font-size:11px;color:var(--text-dim);display:block;" x-text="e.login"></span>
-                  </td>
-                  <td><code style="font-size:11px;" x-text="e.ip_address || '—'"></code></td>
-                  <td><span style="font-size:11px;color:var(--text-dim);max-width:300px;overflow:hidden;text-overflow:ellipsis;white-space:nowrap;display:block;" x-text="e.user_agent || '—'"></span></td>
+                  <td><span style="font-size:12px;" x-text="new Date(e.at).toLocaleString()"></span></td>
+                  <td><span style="font-size:11px;" :class="'audit-src audit-src-'+e.source" x-text="e.source"></span></td>
+                  <td><code style="font-size:11px;" x-text="e.actor"></code></td>
+                  <td><code style="font-size:11px;" x-text="e.action"></code></td>
+                  <td><span style="font-size:11px;" x-text="e.resource"></span></td>
+                  <td><code style="font-size:11px;" x-text="e.ip || '—'"></code></td>
+                  <td style="font-size:11px;color:var(--text-dim);max-width:280px;overflow:hidden;text-overflow:ellipsis;white-space:nowrap;" :title="e.detail" x-text="e.detail || '—'"></td>
                </tr>
              </template>
-              <tr x-show="auditEntries.length === 0">
-                <td colspan="4" style="text-align:center;color:var(--text-dim);padding:20px;">No login events yet</td>
+              <tr x-show="!auditLogs.length && !auditLoading">
+                <td colspan="7" style="text-align:center;color:var(--text-dim);padding:20px;">No audit events yet</td>
              </tr>
            </tbody>
          </table>
        </div>
+        <div style="display:flex;justify-content:center;margin-top:12px;">
+          <button class="btn" style="font-size:12px;" x-show="auditHasMore" @click="auditOffset+=auditPageSize; loadAuditLogs(false)">Load more</button>
+        </div>
+        <style>
+          .audit-src{display:inline-block;padding:1px 7px;border-radius:8px;font-weight:600;}
+          .audit-src-api{background:rgba(76,154,255,.15);color:#4c9aff;}
+          .audit-src-permissions{background:rgba(255,176,0,.15);color:#ffb000;}
+          .audit-src-sso{background:rgba(0,200,100,.15);color:#00cc66;}
+        </style>
      </div>

      <!-- Admin: Backups -->
@@ -1203,6 +1225,7 @@ function settingsInit() {
      adminUsers: [],
      adminStats: {},
      auditEntries: [],
+      auditLogs: [],
      showCreateUser: false,
      newUser: {login:'',name:'',email:'',password:'',is_admin:false},
      editingUser: null,
@@ -1394,11 +1417,41 @@ function settingsInit() {
      },

      async loadAdminAudit() {
+        await this.loadAuditLogs();
+      },
+
+      // ── Unified Audit API (v7.3.0) ──
+      auditSource: 'all',
+      auditActor: '',
+      auditAction: '',
+      auditOffset: 0,
+      auditPageSize: 50,
+      auditLoading: false,
+      auditHasMore: false,
+      async loadAuditLogs(reset) {
+        if (reset !== false) { this.auditOffset = 0; }
+        this.auditLoading = true;
        try {
-          var r = await this.adminFetch('/api/admin/audit?limit=200');
-          var d = await r.json();
-          this.auditEntries = d.entries || [];
-        } catch(e) { this.auditEntries = []; }
+          const params = new URLSearchParams({ source: this.auditSource, limit: this.auditPageSize, offset: this.auditOffset });
+          if (this.auditActor) params.set('actor', this.auditActor);
+          if (this.auditAction) params.set('action', this.auditAction);
+          const r = await fetch('/api/v2/audit/logs?' + params.toString());
+          if (!r.ok) { throw new Error('HTTP ' + r.status); }
+          const d = await r.json();
+          const logs = d.logs || [];
+          this.auditLogs = (reset !== false) ? logs : this.auditLogs.concat(logs);
+          this.auditHasMore = logs.length >= this.auditPageSize;
+        } catch(e) {
+          if (reset !== false) this.auditLogs = [];
+          this.auditHasMore = false;
+        }
+        this.auditLoading = false;
+      },
+      auditCsvUrl() {
+        const params = new URLSearchParams({ source: this.auditSource, limit: 500, format: 'csv' });
+        if (this.auditActor) params.set('actor', this.auditActor);
+        if (this.auditAction) params.set('action', this.auditAction);
+        return '/api/v2/audit/logs?' + params.toString();
      },

      async adminCreateUser() {