chore(main): release 1.4.0

[github-actions]

🤖 I have created a release beep boop

1.4.0 (2026-07-08)

Features

• api: add Env bindings type and per-request db injection middleware (cc40638)
• api: add GET /sessions/:id/messages (session-scoped message list) (c5af5d6)
• api: add POST /sessions/:id/messages send-and-reply (persist on AI success) (62e8412)
• ios: chat auth gate, error fallback, no-clear-on-refresh, send-fail retry (0f42b26)

Bug Fixes

• api: backfill real D1 database_id in wrangler.jsonc (47241cf)
• api: keep GET /sessions/:id/messages additive — revert toChatDto refactor of existing routes (356fcd7)
• api: lazy rate-limit sweep, no top-level setInterval (6387af0)
• api: read CORS origin per-request from c.env (was wide-open on Workers) (a15397b)
• api: register dbMiddleware before rate-limit so DB limiter has c.get('db') (d962d6c)
• api: route pino logs to console (fs.write incompatible with Workers) (277523b)
• ci: add wrangler devDependency so deploy workflow can invoke it (165048c)
• database: import D1Database explicitly so consumers typecheck without ambient globals (84e534a)
• database: unbreak root dev:db script after D1 migration (no TiDB boot) (c05c198)
• ios: drop phantom messageCount, nullable lastMessageAt, real-shape fixtures (deb805f)
• ios: localize remaining hardcoded-Chinese screens to en/zh catalog (5d164e4)
• ios: resolve smoke-test UI issues in itinerary list and AI planner (9cb18fe)

---

This PR was generated with Release Please. See documentation.

[greptile-apps]

PR author is in the excluded authors list.

[github-actions]

🤖 Created releases:

• v1.4.0

🌻