yushen c27b7bab5e fix(upload): sniff content type, sanitize filename, add key prefix ... - Use http.DetectContentType() instead of trusting client-declared MIME type - Sanitize quotes in filename for Content-Disposition header injection - Add uploads/ prefix to S3 keys for better organization Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>		2026-03-31 14:58:52 +08:00
..
auth	fix(upload): add file type/size validation, Content-Disposition header	2026-03-31 14:55:27 +08:00
cli	feat(daemon): add --profile flag for multi-environment isolation	2026-03-30 20:21:23 +08:00
daemon	feat(agents): reply as thread instead of top-level comment (#205)	2026-03-31 13:48:39 +08:00
events	feat(realtime): WS invalidation + refetch pattern, inbox bugfixes, UI polish	2026-03-29 13:49:40 +08:00
handler	fix(upload): sniff content type, sanitize filename, add key prefix	2026-03-31 14:58:52 +08:00
logger	feat(logging): add structured logging across server and SDK	2026-03-26 10:57:11 +08:00
middleware	refactor(server): consolidate workspace permission checks into middleware	2026-03-30 03:40:20 +08:00
realtime	feat(realtime): route personal events to target user only	2026-03-29 17:42:50 +08:00
service	feat(agents): reply as thread instead of top-level comment (#205)	2026-03-31 13:48:39 +08:00
storage	fix(upload): sniff content type, sanitize filename, add key prefix	2026-03-31 14:58:52 +08:00
util	feat(server): add task service layer and daemon REST protocol	2026-03-23 18:34:51 +08:00