4 Commits

Include renames

Author	SHA1	Message	Date
weichen	3145550a59	feat(security): complete P0 release blocking remediation ... Unify auth middleware and remove X-User-ID trust, add project_members authorization, sandbox workspaces via resolver, and admin-only reconcile by run_id. Introduce goose migrations with startup schema gate, fail closed when DB unavailable outside explicit ALLOW_IN_MEMORY, bundle web/dist in app Dockerfile, and remove frontend pseudo-login fallback.	2026-09-13 02:50:22 +00:00
WeiCHENandCursor	6f3a4d4c80	fix(api): pass materials through task/stage stream handlers ... Stream SSE path now forwards Materials to ExecuteTask/ExecuteStage, and TestTaskStream_MaterialsInjection targets the real /tasks/run/stream endpoint. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-09-13 02:50:22 +00:00
WeiCHEN	eea28f0be4	feat(task): inject uploaded documents into task materials and enable LAN host access ... - backend: add Materials field to TaskRunRequestDTO and forward to ExecuteTask - backend: add TestTaskStream_MaterialsInjection test case in taskstream_test.go - web: serialize materials in buildTaskRequest and add unit test - web: improve isSameMessage identity comparison in messageIdentity.ts - web: configure host: '0.0.0.0' in vite.config.ts for LAN collaboration access	2026-09-13 02:50:22 +00:00
WeiCHEN	1df0a3f15f	test(server): task stream transient injection, classification and resume integration tests	2026-09-13 02:50:20 +00:00