fix: complete audit security and frontend gaps

backend/internal/domain/models.go

@@ -38,40 +38,43 @@ type InboxItem struct {
 }
 
 type Task struct {
-	ID          uint   `gorm:"primaryKey"`
-	ProjectID   uint   `gorm:"index;not null"`
-	CreatedBy   uint   `gorm:"index;not null"`
-	AssigneeID  *uint  `gorm:"index"`
-	Title       string `gorm:"not null"`
-	Description string
-	Status      string `gorm:"not null;default:open"`
-	SortOrder   int    `gorm:"not null;default:0"`
-	DueAt       *time.Time
-	CreatedAt   time.Time
-	UpdatedAt   time.Time
+	ID                uint   `gorm:"primaryKey"`
+	ProjectID         uint   `gorm:"index;not null"`
+	CreatedBy         uint   `gorm:"index;not null"`
+	AssigneeID        *uint  `gorm:"index"`
+	SourceInboxItemID *uint  `gorm:"index"`
+	Title             string `gorm:"not null"`
+	Description       string
+	Status            string `gorm:"not null;default:open"`
+	SortOrder         int    `gorm:"not null;default:0"`
+	DueAt             *time.Time
+	CreatedAt         time.Time
+	UpdatedAt         time.Time
 }
 
 type Note struct {
-	ID        uint   `gorm:"primaryKey"`
-	ProjectID uint   `gorm:"index;not null"`
-	CreatedBy uint   `gorm:"index;not null"`
-	Title     string `gorm:"not null"`
-	Markdown  string `gorm:"type:text"`
-	CreatedAt time.Time
-	UpdatedAt time.Time
+	ID                uint   `gorm:"primaryKey"`
+	ProjectID         uint   `gorm:"index;not null"`
+	CreatedBy         uint   `gorm:"index;not null"`
+	SourceInboxItemID *uint  `gorm:"index"`
+	Title             string `gorm:"not null"`
+	Markdown          string `gorm:"type:text"`
+	CreatedAt         time.Time
+	UpdatedAt         time.Time
 }
 
 type Source struct {
-	ID          uint   `gorm:"primaryKey"`
-	ProjectID   uint   `gorm:"index;not null"`
-	CreatedBy   uint   `gorm:"index;not null"`
-	Kind        string `gorm:"not null"`
-	Title       string `gorm:"not null"`
-	URL         string
-	FilePath    string
-	ContentText string `gorm:"type:text"`
-	CreatedAt   time.Time
-	UpdatedAt   time.Time
+	ID                uint   `gorm:"primaryKey"`
+	ProjectID         uint   `gorm:"index;not null"`
+	CreatedBy         uint   `gorm:"index;not null"`
+	SourceInboxItemID *uint  `gorm:"index"`
+	Kind              string `gorm:"not null"`
+	Title             string `gorm:"not null"`
+	URL               string
+	FilePath          string
+	ContentText       string `gorm:"type:text"`
+	CreatedAt         time.Time
+	UpdatedAt         time.Time
 }
 
 type AISession struct {