Jiang Bohan 12d05b8c6e feat(security): replace instant member-add with invitation acceptance flow ...

Users invited to a workspace must now explicitly accept the invitation
before becoming a member. This fixes the security vulnerability where
knowing someone's email was enough to auto-register their runtime to
your workspace.

Changes:
- Add workspace_invitation table with pending/accepted/declined/expired states
- Replace CreateMember with CreateInvitation (same endpoint, new behavior)
- Add accept/decline/revoke/list invitation API endpoints
- Add invitation WS events for real-time notification
- Frontend: invitation accept/decline UI in workspace switcher
- Frontend: pending invitations section in members settings tab

2026-04-14 23:50:27 +08:00

..

events.go

feat(security): replace instant member-add with invitation acceptance flow

2026-04-14 23:50:27 +08:00

messages.go

feat(chat): redesign state, header, and unread tracking

2026-04-14 18:21:11 +08:00