yushen b9a4fa1a6d fix(auth): add CSRF state param, scheme validation, and .envrc to gitignore ... Add state parameter to CLI browser login flow for CSRF protection — CLI generates a random state, frontend passes it through, CLI verifies on callback. Also restrict cli_callback to http: scheme only. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>		2026-03-26 15:04:46 +08:00
..
(auth)/login	fix(auth): add CSRF state param, scheme validation, and .envrc to gitignore	2026-03-26 15:04:46 +08:00
(dashboard)	feat(auth): email verification login and personal access tokens	2026-03-26 14:32:30 +08:00
favicon.ico	Provision default workspaces and harden daemon pairing	2026-03-24 15:19:27 +08:00
pair/local	feat(ui): UI/UX polish — layout, sidebar, button, theme improvements	2026-03-25 18:53:14 +08:00
custom.css	feat(ui): UI/UX polish — layout, sidebar, button, theme improvements	2026-03-25 18:53:14 +08:00
globals.css	feat(ui): UI/UX polish — layout, sidebar, button, theme improvements	2026-03-25 18:53:14 +08:00
layout.tsx	feat: inbox actor tracking, issue detail extraction, UI polish	2026-03-26 12:36:12 +08:00
page.tsx	feat(ui): route persistence, sidebar active fix, header spacing	2026-03-26 10:57:32 +08:00