Bohan Jiang 04747b45a2 fix(auth): add user-facing task messages endpoint for cookie auth (#853) ...

The frontend's listTaskMessages() was calling /api/daemon/tasks/{id}/messages
which uses DaemonAuth middleware (requires Authorization header). After the
cookie auth migration (#819), cookie-mode sessions don't send an Authorization
header, causing 401 on this endpoint. The 401 then triggers handleUnauthorized()
which clears the workspace context, cascading into 400 errors on all subsequent
requests.

Fix: add GET /api/tasks/{taskId}/messages under regular user auth middleware,
and update the frontend to use it instead of the daemon endpoint.

Closes #833

2026-04-13 18:03:25 +08:00

..

core

fix(auth): add user-facing task messages endpoint for cookie auth (#853)

2026-04-13 18:03:25 +08:00

eslint-config

chore: add shared ESLint config + enforce strict tsconfig across packages

2026-04-10 08:27:29 +08:00

tsconfig

chore: add shared ESLint config + enforce strict tsconfig across packages

2026-04-10 08:27:29 +08:00

ui

Revert "feat: add online status indicator on agent & member avatars (#821)" (#837)

2026-04-13 15:03:31 +08:00

views

feat(onboarding): add full-screen onboarding wizard for new workspaces (#852)

2026-04-13 17:59:51 +08:00