ymq fcb56fb814 fix(security): cockpit跨租户门禁(2026-09-18银联事故实锤)——①picker全表无过滤改本产线+本人创建(旧版任何登录用户可枚举全部机构项目);②context_update加归属校验(同机构+本人创建,owner.superuser放行),堵'他机构项目id写进自己会话指针→工作空间/读文件越权'链

2026-09-18 13:23:59 +08:00

..

api

fix(security): cockpit跨租户门禁(2026-09-18银联事故实锤)——①picker全表无过滤改本产线+本人创建(旧版任何登录用户可枚举全部机构项目);②context_update加归属校验(同机构+本人创建,owner.superuser放行),堵'他机构项目id写进自己会话指针→工作空间/读文件越权'链

2026-09-18 13:23:59 +08:00

imgs

fix: 任务树展开图标走 /imgs/ 404——图标复制到 wwwroot/imgs 并配 any 权限；未分配迭代 0 个时不显示

2026-08-18 18:09:48 +08:00

sd_bug_list

chore: commit pending local changes (2026-09-17 github sync)

2026-09-17 13:45:54 +08:00

sd_dashboard

chore: commit pending local changes (2026-09-17 github sync)

2026-09-17 13:45:54 +08:00

sd_deploy_env_list

chore: commit pending local changes (2026-09-17 github sync)

2026-09-17 13:45:54 +08:00

sd_iteration_list

fix: CRUD endpoint return format - remove json.dumps, use widgettype format

2026-07-03 14:50:43 +08:00

sd_org_remote

chore: commit pending local changes (2026-09-17 github sync)

2026-09-17 13:45:54 +08:00

sd_org_setting_list

fix: CRUD dspy — move return outside async with, fix dbname underscore

2026-08-03 17:40:30 +08:00

sd_project_repo_list

fix: CRUD dspy — move return outside async with, fix dbname underscore

2026-08-03 17:40:30 +08:00

sd_review

chore: commit pending local changes (2026-09-17 github sync)

2026-09-17 13:45:54 +08:00

sd_test_case_list

fix: CRUD endpoint return format - remove json.dumps, use widgettype format

2026-07-03 14:50:43 +08:00

sd_test_plan_list

fix: CRUD endpoint return format - remove json.dumps, use widgettype format

2026-07-03 14:50:43 +08:00

wechat_config

chore: commit pending local changes (2026-09-17 github sync)

2026-09-17 13:45:54 +08:00

index_cockpit.ui

feat(secret): AgentIO 注入敏感信息选择窗配置(2026-09-17)

2026-09-17 15:45:17 +08:00

index.ui

feat(secret): AgentIO 注入敏感信息选择窗配置(2026-09-17)

2026-09-17 15:45:17 +08:00

pipeline_sdlc.css

feat: add 40 dspy APIs, 7 UI pages, CSS, pipeline definition SQL

2026-06-16 13:16:24 +08:00

task_tree_popup.ui

feat: model config popup button in cockpit, my_bugs API, task_tree_popup

2026-08-01 10:43:43 +08:00

workspace_edit.xterm

fix(workspace): 二级URL与office端点透传pipeline_id+_generic分支——通用助手查看/编辑文件报'文件不存在'根因

2026-09-17 23:27:19 +08:00