ymq 790d8edb12 security: workspace_edit.xterm 未登录直接拒绝，去掉匿名回退 admin ...

此前 'if not uid: uid = user-01' 把未登录者当成 admin：结合 RBAC 通配授权，
匿名可拿到 admin 工作空间的编辑器进程，读写工作空间全部源码与 env/*.json(含 DB 密码)。

2026-08-25 14:47:05 +08:00

..

api

feat(my_todos): 待办列表补项目名(project_name)，前端卡片显示所属项目

2026-08-25 14:17:25 +08:00

imgs

fix: 任务树展开图标走 /imgs/ 404——图标复制到 wwwroot/imgs 并配 any 权限；未分配迭代 0 个时不显示

2026-08-18 18:09:48 +08:00

json

fix: cockpit_context_update 处理未登录用户

2026-08-07 15:17:34 +08:00

sd_bug_list

feat: add 40 dspy APIs, 7 UI pages, CSS, pipeline definition SQL

2026-06-16 13:16:24 +08:00

sd_dashboard

feat(cockpit): product-grade LLM integration with context + model mgmt

2026-07-31 18:06:27 +08:00

sd_deploy_env_list

feat: add 40 dspy APIs, 7 UI pages, CSS, pipeline definition SQL

2026-06-16 13:16:24 +08:00

sd_iteration_list

fix: CRUD endpoint return format - remove json.dumps, use widgettype format

2026-07-03 14:50:43 +08:00

sd_org_remote

fix: 机构远程空间配置表单取值/赋值 bug + get 支持 owner_type

2026-08-14 15:15:24 +08:00

sd_org_setting_list

fix: CRUD dspy — move return outside async with, fix dbname underscore

2026-08-03 17:40:30 +08:00

sd_project_list

feat: add 40 dspy APIs, 7 UI pages, CSS, pipeline definition SQL

2026-06-16 13:16:24 +08:00

sd_project_repo_list

fix: CRUD dspy — move return outside async with, fix dbname underscore

2026-08-03 17:40:30 +08:00

sd_project_role_models

feat(sdlc): 模型配置 get/add/update 强制用会话当前项目 project_id，工作空间报错文案统一为切换项目

2026-08-22 18:55:05 +08:00

sd_review

feat: add 40 dspy APIs, 7 UI pages, CSS, pipeline definition SQL

2026-06-16 13:16:24 +08:00

sd_test_case_list

fix: CRUD endpoint return format - remove json.dumps, use widgettype format

2026-07-03 14:50:43 +08:00

sd_test_plan_list

fix: CRUD endpoint return format - remove json.dumps, use widgettype format

2026-07-03 14:50:43 +08:00

wechat_config

feat: 微信通道落地-系统级单条配置+验证码绑定(个人订阅号方案)

2026-08-15 20:35:47 +08:00

agent_input.js

fix: 文件传输改用file_names数组(避免File对象序列化丢失)

2026-08-06 17:45:39 +08:00

index_cockpit.ui

feat: switch cockpit UI to v2 agent endpoint

2026-08-11 13:36:58 +08:00

index.ui

fix(session): 项目上下文 per-session 隔离——切换项目写 pipeline_session_settings，读项目优先 per-session，前端请求带 session_id

2026-08-24 18:32:49 +08:00

pipeline_sdlc.css

feat: add 40 dspy APIs, 7 UI pages, CSS, pipeline definition SQL

2026-06-16 13:16:24 +08:00

task_tree_popup.ui

feat: model config popup button in cockpit, my_bugs API, task_tree_popup

2026-08-01 10:43:43 +08:00

workspace_edit.xterm

security: workspace_edit.xterm 未登录直接拒绝，去掉匿名回退 admin

2026-08-25 14:47:05 +08:00