Ronne AI Marketplace 0.7.0

What it added

• The setup in the browser now asks for a one-time setup code. The server makes it when it starts before setup and shows it only where the person who runs the server sees it, such as the server's log, the install script's output and the setup-code command. Until now, whoever opened the address first set the instance up. The code is deleted once root exists.
• Root sets how long access tokens may last, on the Authentication tab: 30, 90 or 365 days or no limit, and the same or shorter for reviewers and root (365 and 90 days by default). Create token offers only what's allowed, and Shorten brings older tokens under the limit without revoking them. Changing your password revokes your tokens unless you untick the box, and so does root's reset of your two-factor sign-in. Root sees each person's tokens on their page and can revoke one. Access tokens is now a tab of Account.
• When root approves their own submission, nobody else looks at it, so a reason is required again, on the review page and in Approve many. The reason shows on the review page and on the item's Overview. An ordinary approval's message stays optional.
• Every audit event now records its request ID (the same one as in the server's log lines), how it came in (web, API, SCIM, the command line or a scheduled job), the client, the workspace and the outcome, so a failed sign-in or a refused SCIM request is marked as such. The audit log filters by workspace and by request ID, and names people by their name.
• A bell at the top of every page counts what you haven't read, and a Notifications page lists everything, with filters. Authors hear when a submission is approved, sent back, rejected, commented on or released; the reviewer who asked for changes hears when it comes back; people hear when a request to join a workspace or to move something is answered, and the people who answer such requests when one waits. Root hears about new feedback and new versions. Nobody is told about their own action. Notifications stay in the app, with no email, and are kept for 90 days.
• Once a day the server asks GitHub whether a newer release exists, and sends nothing about the instance. When one does, root gets a notification, and Admin › Settings › Updates shows how to update for each way Ronne can be installed, with a backup first. Ronne never updates itself. Root can turn the check off, and so can the operator with RONNE_UPDATE_CHECK=off.
• In Admin › Settings › Languages, root picks the language everyone starts in, and which of English, Portuguese and French people may choose, or turns the choice off. A language that is turned off keeps people's choice for when it comes back.
• Sign-in, its second step and the setup wizard share a new layout. Sign-in has two tabs, one for your account and one for the terminal (rmk), identity provider buttons carry Microsoft's or Google's mark, and the authenticator app's code goes in six boxes that take a paste.
• The result of an action, such as Saved or Token revoked, now shows as a short message at the bottom of the screen that goes away by itself; warnings and errors stay until you close them. The app's text is set in Inter, and the sidebar's groups close and open with a click on their heading.
• The Security scan tab's filters take more than one value, and a React warning on the review page is gone.