weichen 88e33282db fix(freedoc): persist uploaded file metadata and text body server-side ...

上传文档跨端不可访问修复（ISSUE-20260927-upload-doc-cross-device）：
- 迁移 00076：freeform_documents 增加 source_filename/mime/size_bytes/asset_id
- freedoc：Create/Get/List 读写源文件元数据，负值拒绝
- 前端：注册前全部附件先登记 CAS 并预读文本正文；文本正文嵌入注册
  markdown；跨端恢复 sourceType/fileMeta 路由回文件预览器
- 大小显示 formatFileSize（<512B 不再显示 0 KB）
- E2E 新增 FS-UPLOAD-02 跨浏览器上下文可访问性用例

回归：go vet/arch-check/go test -short（隔离 PG）+ web npm test/build 全绿；
存量无元数据旧文档不可恢复（重新上传即可）。

2026-09-27 07:45:15 +00:00

..

agent

merge: integrate go-agentx runtime into local_dev candidate

2026-09-23 13:25:32 +00:00

agentx

test(agentx): compare pi-native with the container backend

2026-09-21 15:11:29 +00:00

app

fix(security): harden bypass authz, gate blind spot, command exec, validated_only (review P0/P1)

2026-09-26 02:00:14 +00:00

archtest

fix(security): harden bypass authz, gate blind spot, command exec, validated_only (review P0/P1)

2026-09-26 02:00:14 +00:00

artifactvault

fix(artifactvault): derive staging/artifact UUIDs from idempotency key

2026-09-24 00:56:54 +00:00

auth

feat(auth): admin password reset API and credential guards

2026-09-24 04:18:58 +00:00

authz

fix(security): harden bypass authz, gate blind spot, command exec, validated_only (review P0/P1)

2026-09-26 02:00:14 +00:00

bizdev

feat(ctx): surface dialogue conflict confirmation cards to triggering user

2026-09-25 21:01:37 +00:00

chat

feat(chat): dialogue triggers for comments/reopen/pending-supplements with mistouch guards

2026-09-25 20:14:10 +00:00

config

feat(ctxmgr): wildcard session allowlist for semantic replace rollout

2026-09-26 02:29:29 +00:00

conflictresolve

feat(ctx): inject cleaned project dialogue into squad and assistant

2026-09-24 17:04:04 +00:00

contracts/vocabulary

refactor(docgov): converge shared lifecycle vocab into contracts

2026-09-22 21:44:57 +08:00

coordinator

feat(ctx): surface dialogue conflict confirmation cards to triggering user

2026-09-25 21:01:37 +00:00

ctxmgr

feat(ctxmgr): wildcard session allowlist for semantic replace rollout

2026-09-26 02:29:29 +00:00

dataset

feat(dataset): registry, pause/resume backfill, destroy gates, eight tracks

2026-09-15 02:40:12 +00:00

db

feat(db,server): T20-S2 hardening batch B1/B4/B7 (XFF trust, pool statement_timeout, shutdown drain)

2026-09-25 04:45:49 +00:00

dialoguectx

feat(ctx): inject cleaned project dialogue into squad and assistant

2026-09-24 17:04:04 +00:00

doccontent

feat(doccontent): extract shared markdown canonicalization and SHA

2026-09-15 10:24:24 +00:00

docduty

feat(arch): clear G1 U3/U4 sql_write and path exceptions

2026-09-22 21:40:12 +08:00

docgov

fix(docgov): join ambient uow in persistApproveAndFAV to avoid row-lock deadlock

2026-09-26 00:25:01 +00:00

docquery

fix(server,docquery): restore durable-notify unhook and deliverable store in tests

2026-09-24 00:45:22 +00:00

docrevision

feat(concurrency): T20 S3 B3 - per-docID lock split for docgov/docrevision, hydrate out of cross-doc critical path (stage A)

2026-09-25 06:52:55 +00:00

events

feat(notification): digest aggregates, supplement-impact batch, and free-collab hooks

2026-09-24 11:44:20 +00:00

freedoc

fix(freedoc): persist uploaded file metadata and text body server-side

2026-09-27 07:45:15 +00:00

fsutil

fix(cli): require positive live-dev identity and exclusive backups

2026-09-14 02:30:11 +00:00

handoff

fix(handoff): remove unused stubSrc from e2e test

2026-09-24 23:21:39 +00:00

httpx

fix(authz): harden permissions, chat gate, and project create idempotency

2026-09-20 07:04:57 +00:00

intent

feat(chat): dialogue triggers for comments/reopen/pending-supplements with mistouch guards

2026-09-25 20:14:10 +00:00

jevdecide

feat(jevdecide): product shadow client with offline eval gates

2026-09-23 17:40:40 +00:00

kb

fix: 补齐 rows.Err() 检查（R-2，其余包）

2026-09-18 03:40:24 +00:00

localpg

feat(dev): single-binary no-docker runtime with managed localpg

2026-09-24 15:53:50 +00:00

maintenance

feat(maintenance): wire sysadmin ui.* whitelist settings to public site status

2026-09-25 16:33:56 +00:00

materialindex

feat(chat): show MinerU parse progress while waiting in-turn

2026-09-23 09:55:59 +08:00

maturity

feat(intent): depend on maturity vocabulary instead of bizdev

2026-09-15 10:29:38 +00:00

mineru

docs(ops): salvage task docs and mineru gofmt in closeout batch

2026-09-23 12:49:33 +00:00

notification

feat(chat): dialogue triggers for comments/reopen/pending-supplements with mistouch guards

2026-09-25 20:14:10 +00:00

observability

fix(agent): Chat Agent 全链路 P0-P5 整改

2026-09-13 02:50:22 +00:00

projectcontext

fix(governance): 统一文档访问判定与上下文快照排除计数

2026-09-13 02:50:23 +00:00

projectinstance

feat(collab): free-lane chat, claim-on-view, lease ownership, notify inbox

2026-09-24 11:49:43 +00:00

projectworkflow

fix(projectworkflow): write repo binding into project_source_bindings.source_ref

2026-09-26 00:59:08 +00:00

quote

feat(quote,squad): B5 input validation + review invariants; A5 non-critical step degradation

2026-09-25 17:10:35 +00:00

replyexport

feat(export): 实现单次智能体回复导出、私密文档保存与隐私防泄露全套闭环 (Phase 0 - Phase 2)

2026-09-13 02:50:21 +00:00

server

fix(security): harden bypass authz, gate blind spot, command exec, validated_only (review P0/P1)

2026-09-26 02:00:14 +00:00

squad

feat(quote,squad): B5 input validation + review invariants; A5 non-critical step degradation

2026-09-25 17:10:35 +00:00

storage

fix(storage): deterministic ID ordering in memory-mode ListProjectRefs

2026-09-25 13:17:25 +00:00

stream

fix(pi-runner): cap /v1/run response size to stop typed reject

2026-09-23 10:22:23 +08:00

supplementimpact

feat(chat): dialogue triggers for comments/reopen/pending-supplements with mistouch guards

2026-09-25 20:14:10 +00:00

swboot

fix(security): harden bypass authz, gate blind spot, command exec, validated_only (review P0/P1)

2026-09-26 02:00:14 +00:00

sysadmin

fix(sysadmin): refresh feature maturity catalog to post-rollout wiring facts

2026-09-26 02:45:05 +00:00

taskrun

feat(ctx): surface dialogue conflict confirmation cards to triggering user

2026-09-25 21:01:37 +00:00

template

feat(workflow): namespace task keys without breaking old instances

2026-09-19 10:50:25 +00:00

traceimpact

feat(chat): dialogue triggers for comments/reopen/pending-supplements with mistouch guards

2026-09-25 20:14:10 +00:00

upload

feat(upload): reuse MIME validator for workflow template uploads.

2026-09-13 02:50:23 +00:00

workflow

refactor(workflowdef): make definition/runtime deps unidirectional

2026-09-22 21:44:57 +08:00

workflowdef

refactor(workflowdef): make definition/runtime deps unidirectional

2026-09-22 21:44:57 +08:00

workflowscope

feat(server): allow weighted cross-workflow reads after a view check

2026-09-21 09:11:47 +00:00

workspace

merge: integrate go-agentx runtime into local_dev candidate

2026-09-23 13:25:32 +00:00