ryan b7e5e811d1 fix(auth): register CAP scope, 400 on captcha, 403 for permission ...

Navigating from login reused a send_email_code token on register.
Captcha failure used 401 so the client stored /register as the
post-login target and never left the page. Permission denials now
return 403, and the API client no longer wipes the session on 401.

2026-09-02 18:26:22 +08:00

..

cache

autoresearch iter 35: BUGFIX a failed whitelist read is no longer cached as an admin decision

2026-08-29 19:29:25 +08:00

filesrv

autoresearch iter 4: stop one disconnected client from failing a shared image flight

2026-08-29 08:07:19 +08:00

handler

docs(swagger): restore gold @Router comments on platform APIs

2026-08-30 14:20:21 +08:00

ingest

feat(core): implement cordis configuration extension and migrate all plugins

2026-08-29 10:53:53 +08:00

migrations

feat(db): split migrations into dialect-specific sqlite and postgres packages

2026-08-28 15:36:03 +08:00

models

refactor(module): simplify module name to Wavelet and standardize import paths

2026-08-28 13:10:30 +08:00

repository

refactor(plugins): restructure admin and message_gateway into standard layered sub-packages

2026-08-28 22:33:26 +08:00

shared

feat(core): bind request services and implement registered tasks

2026-09-02 16:59:00 +08:00

stats

chore(lint): unify formatting on golangci-lint fmt (gofumpt), uncap issue reporting, fix gofumpt drift

2026-08-28 16:31:53 +08:00

storage

refactor: revive cleanup — unused params to _, add missing doc comments

2026-08-28 16:53:32 +08:00

task

autoresearch iter 33: BUGFIX storage migration no longer migrates from a config it could not read

2026-08-29 19:12:58 +08:00

util

chore(lint): unify formatting on golangci-lint fmt (gofumpt), uncap issue reporting, fix gofumpt drift

2026-08-28 16:31:53 +08:00

errs.go

refactor(module): simplify module name to Wavelet and standardize import paths

2026-08-28 13:10:30 +08:00

exports.go

refactor(core): align with cordis spatiotemporal composability architecture

2026-08-28 15:05:31 +08:00

models.go

refactor(module): simplify module name to Wavelet and standardize import paths

2026-08-28 13:10:30 +08:00

plugin_test.go

fix(api): align upload permissions and mount robots and swagger routes

2026-08-30 17:53:42 +08:00

plugin.go

fix(auth): register CAP scope, 400 on captcha, 403 for permission

2026-09-02 18:26:22 +08:00

repository.go

chore(lint): unify formatting on golangci-lint fmt (gofumpt), uncap issue reporting, fix gofumpt drift

2026-08-28 16:31:53 +08:00