4 Commits

Include renames

Author	SHA1	Message	Date
weichen	f8730791b9	fix(coordinator): 回填会话项目绑定，避免受控投影被跳过 ... 聊天入口只把项目 ID 放在授权字段，协调器仍读空的 UserCtx.Project.ID，受控任务因此以 project_id=0 跳过账本投影，回复却称正文已保存。	2026-09-28 12:34:32 +00:00
weichen	3145550a59	feat(security): complete P0 release blocking remediation ... Unify auth middleware and remove X-User-ID trust, add project_members authorization, sandbox workspaces via resolver, and admin-only reconcile by run_id. Introduce goose migrations with startup schema gate, fail closed when DB unavailable outside explicit ALLOW_IN_MEMORY, bundle web/dist in app Dockerfile, and remove frontend pseudo-login fallback.	2026-09-13 02:50:22 +00:00
WeiCHENandCursor	44ebafd946	test(api): add e2e integration tests for claimed document SSE and docgov RESTful APIs ... Co-authored-by: Cursor <cursoragent@cursor.com>	2026-09-13 02:50:19 +00:00
WeiCHENandCursor	500884a19b	test(api): 补充SSE流式长连接端到端自动化测试套件 ... Co-authored-by: Cursor <cursoragent@cursor.com>	2026-09-13 02:50:19 +00:00