4 Commits

Author	SHA1	Message	Date
root	922b289cae	feat(ui): project card Tasks + Linked references sections; GET /api/projects/:id/links ... Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-06-05 00:28:17 +10:00
root	80363d3e68	feat(ui): Settings view + per-space project cards (status/research/edit/delete) + theming pass ... - Settings (#/settings): API tokens (mint/list/revoke), Agents list, Orthos Mode placeholder - Per-space Projects: Void-1-style expandable cards — inline status, ↻ Research (Eithan stub), Edit/New modal, Delete-with-confirm; migration 019 adds research_status/notes/timestamps; POST /api/projects/:id/research stub; GET /api/agent-tokens list - Global +1 font bump; themed scrollbars; larger/bolder themed topbar Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-06-05 00:06:08 +10:00
root	56805053f0	feat(api): capability enforcement on writes ... Add lib/api/cap.js: requireWrite(entity_type) maps HTTP method to action, runs canAct, and tags req.capTier as allow|suggest|deny→403. Mutating routes (pages, projects, tasks, refs, resources, source_docs) now check req.capTier and either run the repo (allow) or divert to pending_changes returning 202 (suggest). Owner and worker actors stay on the allow path. requireOwner helper added for Task 11. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>	2026-05-31 21:03:52 +10:00
root	beb6da21c8	feat(api): projects routes ... Add lib/api/routes/projects.js: list by space (with status filter), create scoped to space, get/patch/delete by id. FK violation from unknown space_id maps to 400 invalid_space. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>	2026-05-31 16:39:31 +10:00