[imbajin]

Summary

Hubble now uses one capability-driven connection and authorization model across standalone and PD deployments, while keeping older HugeGraph versions on explicit minimum-compatibility paths.

Before	After
Authentication and connection behavior was inferred in multiple controllers and pages.	The backend resolves Server/PD connectivity and publishes one verified capability contract to the UI.
GraphSpace permissions exposed low-level authorization objects and inconsistent account flows.	Users work with four readable presets: super administrator, GraphSpace read-only, GraphSpace read-write, and GraphSpace administrator.
Distributed status mixed PD, Store, stale metrics, and node health, which could produce contradictory cards.	Server, PD, and Store health are independent; ambiguous cluster-level signals appear only under Items needing attention.
CI depended on temporary Server PR overrides and did not run the complete React test suite.	CI follows Server master dynamically and runs lint, i18n validation, all frontend Jest tests, backend tests, and the browser workflow.

Main changes

• Unifies authenticated and anonymous client resolution without manufacturing empty-token administrator sessions.
• Adds GraphSpace-scoped account and membership UX, multi-space assignment, permission enforcement, and guided recovery.
• Adds the HugeGraph cluster topology, node health, source freshness, capacity facts, and 2 Server + 3 PD + 3 Store discovery.
• Improves async result viewing, algorithm capability guidance, keyboard execution, navigation behavior, account feedback, and password re-login handling.
• Centralizes compatibility checks, removes temporary CI/Server commit overrides, and adds current English product screenshots.

Compatibility

Server / PD generation	Support level
Server 1.5.x standalone	Minimum usability for core graph, schema, data, and Gremlin workflows only
Server 1.7.x with matching PD/Store	Minimum usability through legacy REST/Gremlin and capability adapters
Server, PD, and Store 1.8.x or later	Full and recommended Hubble experience

Use matching component minor versions. Server/PD >= 1.8 is strongly recommended; 1.5 and 1.7 compatibility does not imply current feature parity.

Runtime evidence

• Final head: 146f41151fefba7a120357aedba04ebabe033a43
• Commit history reduced from 32 to 22 commits without changing the final Git tree
• Local Hubble backend: 595 tests passed; Checkstyle passed
• Local Hubble frontend: 161 suites / 1019 tests passed; lint, i18n, and production build passed
• Distributed Chrome verification: 2 Server + 3 PD + 3 Store, all nodes UP; topology and Server/PD/Store summaries are consistent and independently attributed
• Standalone Chrome verification: Server 1.7.0 + RocksDB; login, graph overview, g.V().count(), account management, node list, and node detail passed
• Final latest image workflow: https://github.com/hugegraph/actions/actions/runs/33293143917
• Open review threads at final audit: 0

Scope boundaries

• Authentication remains cluster-wide; Hubble does not expose a per-GraphSpace authentication switch.
• Kubernetes-dependent OLAP flows stay capability-gated when the required environment is unavailable.
• Legacy 1.7 Basic Gremlin credential handling is session-scoped and cleared on logout, password change, login failure, or expiry; broader credential-storage redesign is intentionally outside this PR.
• Cross-session credential invalidation and shared login throttling for a future multi-replica Hubble deployment remain explicit follow-up TODOs.

Follow-up TODO

The following work is intentionally outside this PR and should be handled in dedicated changes:

• Refactor the Vermeer and graph-computing integration, including GraphSpace write authorization and matching frontend capability gates.
• Refactor and implement Text2GQL.
• Upgrade the frontend graph engine to a new major version.

[codecov]

Codecov Report

❌ Patch coverage is 64.76138% with 635 lines in your changes missing coverage. Please review.
✅ Project coverage is 45.90%. Comparing base (b066b80) to head (9322a30).
⚠️ Report is 218 commits behind head on master.

Files with missing lines	Patch %	Lines
...org/apache/hugegraph/service/auth/UserService.java	59.04%	77 Missing and 34 partials ⚠️
.../hugegraph/service/op/LiveOperationsCollector.java	72.24%	45 Missing and 13 partials ⚠️
.../hugegraph/service/auth/GraphSpaceUserService.java	80.82%	20 Missing and 31 partials ⚠️
.../hugegraph/controller/ingest/IngestController.java	31.34%	39 Missing and 7 partials ⚠️
...rvice/auth/StandaloneAccountPermissionService.java	63.63%	25 Missing and 15 partials ⚠️
...rg/apache/hugegraph/controller/BaseController.java	60.56%	20 Missing and 8 partials ⚠️
...che/hugegraph/service/space/GraphSpaceService.java	78.22%	14 Missing and 13 partials ⚠️
...graph/controller/algorithm/OltpAlgoController.java	0.00%	26 Missing ⚠️
...raph/controller/auth/GraphSpaceUserController.java	40.54%	18 Missing and 4 partials ⚠️
...ache/hugegraph/service/load/JobManagerService.java	0.00%	18 Missing ⚠️
... and 35 more

Additional details and impacted files

@@              Coverage Diff              @@
##             master     #758       +/-   ##
=============================================
- Coverage     62.49%   45.90%   -16.60%     
- Complexity     1903     4374     +2471     
=============================================
  Files           262      602      +340     
  Lines          9541    29342    +19801     
  Branches        886     3427     +2541     
=============================================
+ Hits           5963    13470     +7507     
- Misses         3190    14552    +11362     
- Partials        388     1320      +932     

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[imbajin]

Blocking: yes. Summary: No additional actionable source-level finding was confirmed, but this PR is not approvable until the required review evidence and failing latest-head checks are resolved. Evidence: targeted Hubble authorization tests 72/72, frontend auth/route suites 90/90, and ServerCompatibilityTest 2/2; failed checks: hubble-ci (11, 3.11), codecov/patch, codecov/project.