4 Commits

Include renames

Author	SHA1	Message	Date
weichen	3145550a59	feat(security): complete P0 release blocking remediation ... Unify auth middleware and remove X-User-ID trust, add project_members authorization, sandbox workspaces via resolver, and admin-only reconcile by run_id. Introduce goose migrations with startup schema gate, fail closed when DB unavailable outside explicit ALLOW_IN_MEMORY, bundle web/dist in app Dockerfile, and remove frontend pseudo-login fallback.	2026-09-13 02:50:22 +00:00
WeiCHENandCursor	f4e4357ddb	fix(agent): Chat Agent 全链路 P0-P5 整改 ... 封堵鉴权旁路与导出 IDOR，DocGov 改服务端身份；对话层 PendingAction 接真实 docgov/taskrun；修复流式租约假死与会话级任务流；加固配置/doc_id/NULL；补齐 slog 与测试；前端 ErrorBoundary 与受控文档重试。 Co-authored-by: Cursor <cursoragent@cursor.com>	2026-09-13 02:50:22 +00:00
WeiCHEN	7d293833bf	feat(chat): 完成分类锚点坞(CategoryDock)与双轨制未读重构 (含方案A轮次归一化与起始位置居中)	2026-09-13 02:50:20 +00:00
WeiCHEN	1cfe3f9f02	feat(history): 完成 Phase P3 虚拟滚动、聊天记录导出与协同未读提醒 ... - 虚拟滚动：接入 @tanstack/react-virtual，封装 useVirtualMessages 动态测高与 overscan 预渲染，迁移 anchorNavigator 锚点定位与 SSR 兼容降级 - 聊天记录导出：基于既有 docx 与 xlsx 依赖实现 chatExporter 与 ChatExportModal，新增服务端 /api/v1/chat/export/messages 支持按条件导出 - 协同未读标记：新增 useUnreadMarks 30s 轮询与服务端 /api/v1/chat/unread 接口，日历格与工具栏支持橙色未读徽标提示 - 测试与验证：新增 chat_unread_and_export_api_test.go，前端全量 126 项单元/组件测试及生产打包 100% 通过	2026-09-13 02:50:20 +00:00