Jiayuan Zhang 0e8ad6b40d fix(security): support mdt_ daemon tokens in DaemonRegister + add regression tests ...

DaemonRegister now handles both auth paths:
- mdt_ daemon tokens: verify workspace match, skip member check, zero OwnerID
  (SQL COALESCE preserves existing owner on upsert)
- PAT/JWT: existing member check + OwnerID from member

Also adds WithDaemonContext helper and regression tests covering:
- Successful register with daemon token
- Workspace mismatch rejection
- Cross-workspace heartbeat rejection
- Cross-workspace task status rejection

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-04-11 04:35:33 +08:00

..

cmd

fix(security): add workspace ownership checks to all daemon API routes

2026-04-11 04:15:21 +08:00

internal

fix(security): support mdt_ daemon tokens in DaemonRegister + add regression tests

2026-04-11 04:35:33 +08:00

migrations

feat(search): add project search support to Cmd+K search (#663)

2026-04-10 20:59:32 +08:00

pkg

feat: add pin to sidebar for issues and projects (#653)

2026-04-10 19:00:25 +08:00

go.mod

fix: sanitize markdown rendering in comments and shared renderers (#679)

2026-04-11 03:44:30 +08:00

go.sum

fix: sanitize markdown rendering in comments and shared renderers (#679)

2026-04-11 03:44:30 +08:00

sqlc.yaml

feat: pivot to AI-native task management platform (#232)

2026-03-20 17:55:49 +08:00