Bohan Jiang ce52374d5d test(daemon): add cross-workspace regression for GetIssueGCCheck (#1143) ...

Adds TestGetIssueGCCheck_WithDaemonToken_CrossWorkspace alongside the
existing TestGetTaskStatus_WithDaemonToken_CrossWorkspace, covering:

- daemon token scoped to a different workspace → 404 (matches the
  "issue not found" status, so no UUID enumeration oracle)
- daemon token scoped to the issue's workspace → 200 with status and
  updated_at fields populated

Follow-up to #1121, which fixed the underlying IDOR reported in #1112
but did not ship a regression test. This gates the class of bug at CI
so the next handler to forget requireDaemonWorkspaceAccess will be
caught before merge.

2026-04-16 13:49:54 +08:00

..

activity_test.go

…

activity.go

…

agent.go

feat(agent): add custom CLI arguments support (#986)

2026-04-15 14:58:53 +08:00

auth.go

fix(auth): increase email verification code resend cooldown to 60s (#912)

2026-04-14 02:35:34 +08:00

autopilot.go

refactor(autopilot): remove broken concurrency policies and fix multiple bugs (#1048)

2026-04-15 13:48:21 +08:00

chat.go

feat(chat): redesign state, header, and unread tracking

2026-04-14 18:21:11 +08:00

comment.go

fix(server): trigger agent on reply in thread where agent already participated (#981)

2026-04-14 18:00:29 +08:00

config.go

refactor(editor): remove hardcoded CDN domain, unify file card rendering

2026-04-15 10:43:36 +08:00

daemon_test.go

test(daemon): add cross-workspace regression for GetIssueGCCheck (#1143)

2026-04-16 13:49:54 +08:00

daemon.go

fix(security): enforce workspace access on GetIssueGCCheck (#1121)

2026-04-16 13:43:17 +08:00

file_test.go

refactor(editor): remove hardcoded CDN domain, unify file card rendering

2026-04-15 10:43:36 +08:00

file.go

fix(storage): scope S3 upload keys by workspace (#936)

2026-04-13 21:01:50 -07:00

handler_test.go

feat(server): trigger agent when issue moves out of backlog (#1006)

2026-04-15 19:07:48 +08:00

handler.go

feat(autopilot): scheduled/triggered automations for AI agents (#1028)

2026-04-15 04:54:37 +08:00

inbox.go

fix(inbox): read workspace ID from request context (#1142)

2026-04-16 13:46:39 +08:00

invitation.go

feat(invitation): dedicated /invite/{id} page for accepting invitations (#1023)

2026-04-15 00:37:53 +08:00

issue_reaction.go

…

issue.go

feat(server): trigger agent when issue moves out of backlog (#1006)

2026-04-15 19:07:48 +08:00

personal_access_token.go

…

pin.go

…

project.go

fix(web): correct project kanban issue counts (#667)

2026-04-10 21:13:25 +08:00

reaction.go

…

runtime_ping.go

fix(security): add workspace ownership checks to daemon API routes (#684)

2026-04-11 12:49:23 +08:00

runtime_update.go

fix(security): add workspace ownership checks to daemon API routes (#684)

2026-04-11 12:49:23 +08:00

runtime.go

fix(daemon): prevent duplicate runtime registration on profile switch (#906)

2026-04-14 01:52:34 +08:00

search_test.go

feat(search): add project search support to Cmd+K search (#663)

2026-04-10 20:59:32 +08:00

skill.go

fix(server): allow members to create and manage their own skills (#1017)

2026-04-14 23:48:57 +08:00

subscriber_test.go

fix(server): validate workspace membership for subscriptions and uploads (#935)

2026-04-13 20:22:03 -07:00

subscriber.go

fix(server): validate workspace membership for subscriptions and uploads (#935)

2026-04-13 20:22:03 -07:00

trigger_test.go

fix(server): trigger agent on reply in thread where agent already participated (#981)

2026-04-14 18:00:29 +08:00

workspace_reserved_slugs.go

Reapply "feat: workspace URL refactor v2 + rollback-safe compat layer (#1138)" (#1139) (#1141)

2026-04-16 13:16:35 +08:00

workspace_test.go

Reapply "feat: workspace URL refactor v2 + rollback-safe compat layer (#1138)" (#1139) (#1141)

2026-04-16 13:16:35 +08:00

workspace.go

Reapply "feat: workspace URL refactor v2 + rollback-safe compat layer (#1138)" (#1139) (#1141)

2026-04-16 13:16:35 +08:00