mirror of
https://github.com/dohooo/helmor.git
synced 2026-09-22 16:40:02 +08:00
3408700ce5
Carry a team member's SERVER-DERIVED author id from the companion's trusted X-Helmor-Member-Id header onto their persisted user-prompt row, surfacing it as ThreadMessageLike.author. The companion overwrites request.author_id from the header after deserialization (never client-asserted; resolve_request helper + direct tests). Sandbox SQLite stores only author_id; display fields are hydrated frontend-side. Desktop/local IPC sets no author_id, so author stays None and the single-user wire shape (and all pipeline snapshots) is unchanged. Adds non-null author E2E, wire camelCase, and trusted-header-over-body tests.