Why: include the current integration baseline before verification.
Evidence: fetched origin/main=3ef65a91428cf28e73dd2a23127dda014e455d87.
Impact: integrate upstream changes without rewriting task history.
Refs: task-sync
Why: include the current integration baseline before verification.
Evidence: fetched origin/main=53a3effef777c83bd6baa63f8181f34480533559.
Impact: integrate upstream changes without rewriting task history.
Refs: task-sync
Why: include the current integration baseline before verification.
Evidence: fetched origin/main=27fa4fda7a0dbdf9228f9575f3fd50ca5974df76.
Impact: integrate upstream changes without rewriting task history.
Refs: task-sync
# Conflicts:
# modules/frontend
Why: include the current integration baseline before verification.
Evidence: fetched origin/main=03b2adfdc218b45ae2a3f8172fea4110783a4e05.
Impact: integrate upstream changes without rewriting task history.
Refs: task-sync
Why: completion claims require tool-written evidence for precheck,
task-sync and tests; the combined run also validates the realigned
backend core pin (Backend#154) and both auth fixes end to end.
Evidence: CMD="make test" make evidence, exit 0 (governance 133 tests,
pins ok, libs/core/backend green, frontend 93/93, ui 106/106).
Impact: none beyond the card.
Refs: task feature/admin-auth-gate-fix.
Why: the auth fixes landed in sub-repo main via Backend#153/#154 and
Frontend#54; the Dev tree must pin them for combined verification and
release. Also records the first make-test attempt, which failed on
test-pins due to the pre-existing backend core misalignment fixed by
Backend#154.
Evidence: gitlink pins backend 44d45e1 (auth fallback + core repin) and
frontend fcf40ff (gate fix); combined make test evidence follows in the
task card.
Impact: none beyond the recorded pins.
Refs: task feature/admin-auth-gate-fix.
Why: include the current integration baseline before verification.
Evidence: fetched origin/main=259270b4e339132219490b95b42d12386f9abe1e.
Impact: integrate upstream changes without rewriting task history.
Refs: task-sync
Why: an admin with a stale API key in localStorage was 401'd on every
request despite a valid session (Bearer precedence), and API-key holders
entering the forced-change gate could never complete it (passwords are
session-owned) while every 401 showed "wrong username or password",
masking the real cause.
Evidence: backend go test ./... and frontend vitest 93/93 green locally
(SELF); sub-repo PRs Backend#153 / Frontend#54 carry GATE CI; combined
make test evidence recorded in the task card.
Impact: pins backend 6681c3b and frontend dc18d6c via gitlinks; fills
the task card with diagnosis, requirements R1-R4 and plan.
Refs: task feature/admin-auth-gate-fix.
Why: establish the authorized task workspace and its initial baseline.
Evidence: preserved precheck receipt in .task/feature-admin-auth-gate-fix.md; R0=2e43e71209384b356ebfe664e9f27492fd514977.
Impact: task metadata only; the feature workspace starts at 2e43e71209.
Refs: .task/feature-admin-auth-gate-fix.md
weichen