Junghwan 93cf95f799 fix(security): enforce workspace access on GetIssueGCCheck (#1121) ...

The daemon GC check endpoint did not verify the caller's access to the
issue's workspace, letting a daemon token or PAT scoped to workspace A
read issue status/updated_at for any issue UUID across the instance.

Mirror the pattern used by every other handler in daemon.go: look up
the issue's workspace and gate on requireDaemonWorkspaceAccess.

Closes #1112

Co-authored-by: shaun0927 <shaun0927@users.noreply.github.com>

2026-04-16 13:43:17 +08:00

..

cmd

Reapply "feat: workspace URL refactor v2 + rollback-safe compat layer (#1138)" (#1139) (#1141)

2026-04-16 13:16:35 +08:00

internal

fix(security): enforce workspace access on GetIssueGCCheck (#1121)

2026-04-16 13:43:17 +08:00

migrations

Reapply "feat: workspace URL refactor v2 + rollback-safe compat layer (#1138)" (#1139) (#1141)

2026-04-16 13:16:35 +08:00

pkg

feat(agent): log full command line at debug level when spawning agents (#1071)

2026-04-15 16:21:55 +08:00

go.mod

feat(autopilot): scheduled/triggered automations for AI agents (#1028)

2026-04-15 04:54:37 +08:00

go.sum

feat(autopilot): scheduled/triggered automations for AI agents (#1028)

2026-04-15 04:54:37 +08:00

sqlc.yaml

feat: pivot to AI-native task management platform (#232)

2026-03-20 17:55:49 +08:00