2392 commits

Author	SHA1	Message	Date
Anish Sarkar	62c7efb216	fix(auth):enforce session auth cutover	2026-06-24 03:55:39 +05:30
Anish Sarkar	fbecbb98b5	fix(auth):harden session cookie transport	2026-06-24 03:55:39 +05:30
Anish Sarkar	bf8772e312	Merge remote-tracking branch 'upstream/dev' into feat/auth-revamp	2026-06-23 15:52:11 +05:30
Anish Sarkar	3695e1d5c5	Merge remote-tracking branch 'upstream/dev' into feat/api-key	2026-06-23 13:09:53 +05:30
Anish Sarkar	7241a7a894	fix(authz):add zero context authorization checks	2026-06-23 12:55:25 +05:30
Anish Sarkar	08c1d12eb1	fix(authz):publish zero parent tables	2026-06-23 12:53:36 +05:30
Anish Sarkar	2b6bf504ec	fix(users):expose current user session routes	2026-06-23 12:53:29 +05:30
Anish Sarkar	a547cfe3c3	fix(auth):return session based auth responses	2026-06-23 12:53:06 +05:30
Anish Sarkar	2966f41a5a	fix(auth):schedule refresh token cleanup	2026-06-23 12:50:02 +05:30
Anish Sarkar	5ba940f905	fix(auth):harden refresh token schema	2026-06-23 12:49:46 +05:30
Anish Sarkar	d395d4dc1c	fix(auth):add csrf session cookie helpers	2026-06-23 12:49:22 +05:30
Anish Sarkar	b05f30e2f9	fix(backend):add session database settings	2026-06-23 12:49:04 +05:30
Rohan Verma	1dc3fac81d	Merge pull request #1527 from Muhammad-Ikhwan-Fathulloh/dev ... fix: normalize image URLs before persistence and add model selector aria-label	2026-06-23 00:08:41 -07:00
DESKTOP-RTLN3BA\$punk	a08de01cc7	Revert "Merge pull request #1523 from CREDO23/fix/chat-citations" ... This reverts commit cd2242147a, reversing changes made to a4bb0a5253.	2026-06-22 22:55:29 -07:00
Muhammad-Ikhwan-Fathulloh	2848ac6c39	fix: normalize image URLs before persistence and add model selector aria-label	2026-06-20 19:49:58 +07:00
Anish Sarkar	fd31ac34fd	Merge remote-tracking branch 'upstream/dev' into feat/api-key	2026-06-20 10:50:03 +05:30
Anish Sarkar	1e8baa10ec	refactor(routes): replace user variable with auth context in tests	2026-06-20 03:34:40 +05:30
Anish Sarkar	14cb0a22e9	refactor(routes): update document file access functions to use auth context instead of user variable	2026-06-20 02:53:07 +05:30
Anish Sarkar	8e50871d43	refactor(routes): replace user variable with auth context in search space snapshot functions	2026-06-20 02:48:08 +05:30
Anish Sarkar	6dd8bd4290	refactor(routes): replace user variable with auth context in thread snapshot functions	2026-06-20 02:39:01 +05:30
Anish Sarkar	cf840875c9	fix(connectors): gate folder listings for PAT access	2026-06-20 01:58:16 +05:30
Anish Sarkar	3a0cd8c8cf	fix(models): require sessions for personal connection writes	2026-06-20 01:58:06 +05:30
Anish Sarkar	1f9cf326e5	feat(auth): require sessions for user-scoped routes	2026-06-20 01:57:48 +05:30
Anish Sarkar	2315b2f344	feat(auth): add PAT fail-closed bootstrap allowlist	2026-06-20 01:57:37 +05:30
CREDO23	1cb7633920	Merge upstream/main into fix/chat-citations	2026-06-19 18:25:37 +02:00
Anish Sarkar	49b5247210	refactor: unify authentication handling by replacing current_active_user with auth context across routes	2026-06-19 21:38:18 +05:30
CREDO23	73dd4e8e3a	feat: embed line-citation tokens in search hits	2026-06-19 17:37:41 +02:00
CREDO23	188ae053ac	feat: serve numbered source_markdown reads with citation preamble	2026-06-19 17:37:41 +02:00
Anish Sarkar	6fd3f8570e	refactor: streamline auth context usage across chat and automation routes	2026-06-19 21:04:21 +05:30
CREDO23	fc17b9becd	docs: rename evidence.chunk_ids to citations in desktop kb prompt	2026-06-19 17:32:45 +02:00
CREDO23	30ca0e1ef5	docs: readonly kb specialist cites line or chunk form	2026-06-19 17:32:45 +02:00
CREDO23	3c63a7bcd3	docs: kb specialist cites numbered or legacy chunk form	2026-06-19 17:32:45 +02:00
CREDO23	141801f1cc	docs: clarify web/kb/legacy citation channels	2026-06-19 17:32:45 +02:00
Anish Sarkar	096dea45d4	refactor: pass auth context through automations	2026-06-19 20:28:35 +05:30
Anish Sarkar	7ec6fa4d1f	feat: enforce API access for integration routes	2026-06-19 20:28:12 +05:30
Anish Sarkar	70a0828b95	feat: enforce API access for chat routes	2026-06-19 20:28:02 +05:30
Anish Sarkar	493e8d5a64	feat: enforce API access for knowledge resources	2026-06-19 20:27:47 +05:30
Anish Sarkar	7e8d26fa81	refactor: route authorization through auth context	2026-06-19 20:27:28 +05:30
Anish Sarkar	54a3ba122e	feat: add search space API access controls	2026-06-19 20:27:06 +05:30
Anish Sarkar	608facd7e7	feat: add personal access token API routes	2026-06-19 20:26:56 +05:30
Anish Sarkar	cddfb3660b	feat: resolve auth context from sessions and PATs	2026-06-19 20:26:46 +05:30
Anish Sarkar	4463990ca4	feat: add PAT storage and API access fields	2026-06-19 20:26:28 +05:30
CREDO23	1741fdc9c8	feat: numbered-read preamble and matched line ranges	2026-06-19 15:43:21 +02:00
CREDO23	f67c6607d6	feat: by-chunk resolve derives cited line range	2026-06-19 15:31:44 +02:00
CREDO23	ea32b62f82	feat: add cited line range to by-chunk response	2026-06-19 15:31:44 +02:00
CREDO23	435b84215e	feat: expose chunk char spans on ChunkRead	2026-06-19 15:31:44 +02:00
CREDO23	7967b62b42	feat: search tool renders matched passage with lines	2026-06-19 14:53:49 +02:00
CREDO23	04b679e2bf	feat: return chunk char spans from hybrid search	2026-06-19 14:53:49 +02:00
CREDO23	0f32b35d3e	feat: add char-span to line-range helper	2026-06-19 14:53:49 +02:00
CREDO23	f2fe2e576e	feat: note writes chunk via shared span builder	2026-06-18 20:17:45 +02:00