나랑이
90968810ff
fix: resolve 8 review/security issues (SPRINT-016 hotfix)
Security:
- JwtGuard + RoleGuard on all sisters endpoints
- Admin-only access for config/sessions/subagents/activity
- ThrottlerGuard on /auth/refresh
- HttpOnly SameSite cookies + CSRF (replaces localStorage)
Code Quality:
- Per-sister draft input (Record<SisterName, string>)
- crypto.randomUUID for optimistic message ids (dedupe ready)
- Polling disabled while WebSocket connected
- SVG keyboard accessibility (role/tabIndex/onKeyDown)
2026-04-09 08:21:28 +09:00
..
2026-04-09 08:21:28 +09:00
2026-04-07 11:49:23 +09:00
2026-04-09 08:21:28 +09:00
2026-04-07 11:49:23 +09:00
2026-04-07 12:12:11 +09:00