SivanCola e7a5b149e3 feat(attachments): admit images at the session boundary ...

Problem: Composer and CLI image references could lose their bytes before the
provider request, leaving path text to fall through to tools and Bash.

Root cause: Image preparation was split across focus-sensitive Desktop RPCs,
temporary draft credentials, controller state, and request-time model routing
instead of one durable session admission boundary.

Fix: Admit ordered image batches before creating the user turn, freeze accepted
sources into session-owned image inputs, bind Desktop targets to session
identity, and preserve legacy provider serialization and CLI path behavior.

Verification: Focused attachment, control, provider, boot, serve, tool, Desktop,
and frontend suites passed on the latest main-v2 base. Frontend typecheck,
repolint, and git diff checks also passed.

2026-09-19 22:56:34 +08:00

..

store_test.go

fix(security): harden response and content paths

2026-09-14 11:03:29 +08:00

store.go

feat(attachments): admit images at the session boundary

2026-09-19 22:56:34 +08:00