5 Commits

Include renames

Author	SHA1	Message	Date
weichen	3145550a59	feat(security): complete P0 release blocking remediation ... Unify auth middleware and remove X-User-ID trust, add project_members authorization, sandbox workspaces via resolver, and admin-only reconcile by run_id. Introduce goose migrations with startup schema gate, fail closed when DB unavailable outside explicit ALLOW_IN_MEMORY, bundle web/dist in app Dockerfile, and remove frontend pseudo-login fallback.	2026-09-13 02:50:22 +00:00
WeiCHENandCursor	f4e4357ddb	fix(agent): Chat Agent 全链路 P0-P5 整改 ... 封堵鉴权旁路与导出 IDOR，DocGov 改服务端身份；对话层 PendingAction 接真实 docgov/taskrun；修复流式租约假死与会话级任务流；加固配置/doc_id/NULL；补齐 slog 与测试；前端 ErrorBoundary 与受控文档重试。 Co-authored-by: Cursor <cursoragent@cursor.com>	2026-09-13 02:50:22 +00:00
WeiCHEN	abeab90388	feat(workflow): Phase 5 智能测试经理工作流、前置强依赖校验与文档血缘级联失效	2026-09-13 02:50:21 +00:00
WeiCHEN	c0d6ef7d80	feat(workflow): Phase 3 Coordinator 上下文、动作路由与工作流运行 API 集成	2026-09-13 02:50:21 +00:00
WeiCHEN	f87a6ee28d	feat(workflow): Phase 1 & 2 数据库迁移、项目创建人权威化与多工作流控制面	2026-09-13 02:50:21 +00:00