6 Commits

Include renames

Author	SHA1	Message	Date
agent-exec-transport	965eda5786	agent-exec transport 4453a2e5e5465aca56a8081251ccd9ca/8b3678a73905	2026-10-19 14:26:29 +00:00
weichenandCursor	0f192a4813	Merge origin/main into feature/d1-identity-open ... Why: main gained AGENT_SYSTEM_DSN fallback in #182 after this branch was cut. Both changes touch identity DSN parsing. Evidence: go test ./pkg/identity/ ./internal/store/ ./cmd/agent-system/ for the identity, schema, and unknown-subcommand cases passed after the resolution. Impact: keeps open-existing identity mode and the 0600 dsn file. Environment DSN still wins when --dsn is absent, via ResolveDSN. Refs: Backend #182; recovery plan r3.1 D1 Co-authored-by: Cursor <cursoragent@cursor.com>	2026-10-12 14:55:56 +00:00
weichenandCursor	5c26a86331	Publish schema target and compatibility floor ... Why: a rollback can only be safe when the candidate says which schema it will migrate to and whether older binaries can still read that schema. A new migration that forgets to register that fact must fail the test. Evidence: go test ./internal/store/ ./pkg/identity/ -run 'TestMigrationCompat|TestCapabilities' passed. Impact: version --json and identity capabilities include schema.target and schema.compatFloor. Every migration version is listed in migrationBreaksOldReaders. Current versions do not break old readers, so the floor stays 0. Refs: recovery plan r3.1 D2 Co-authored-by: Cursor <cursoragent@cursor.com>	2026-10-12 14:11:07 +00:00
weichenandCursor	69ea7dcc14	Open identity commands on an existing database only ... Why: identity ensure/verify went through the normal store open, which creates a database and runs migrations. A deploy gate that calls the candidate before stopping the old service could migrate production ahead of the switch, and a missing database was turned into an empty one. Evidence: go test ./pkg/identity/ ./internal/store/ ./cmd/agent-system/ -run 'TestCapabilities|TestEnsure|TestVerify|TestDSN|TestUsage|TestSystemIdentity|TestOpenIdentity|TestUnknownSubcommand' passed in this worktree. Impact: identity CLI refuses a missing file or a missing agent_system_identity table, does not migrate, reads DSN from the environment or a 0600 file, and version --json plus identity capabilities emit one capability document. Unknown top-level commands exit 2. Refs: recovery plan r3.1 D1; Dev feature/svc-d1-identity-flow Co-authored-by: Cursor <cursoragent@cursor.com>	2026-10-12 14:04:41 +00:00
weichen	58b4c640d5	Fall back to AGENT_SYSTEM_DSN for identity CLI DSN delivery ... Why: svc.sh delivers database credentials via environment per G1-7 (command lines are visible to every process on the host), but identity ensure/verify only accepted --dsn on the command line for pg-bound instances. Evidence: go test ./pkg/identity/... ok; build ok. Impact: --dsn remains highest priority, then AGENT_SYSTEM_DSN, then embedded SQLite; no storage changes. Refs: Dev U3 (real-combination CI gates); G1-7 credential discipline.	2026-10-12 14:04:07 +00:00
weichen	5623000d51	Publicize identity CLI as pkg/identity for downstream reuse ... Why: runIdentity lived in cmd/agent-system package main, so downstream combination binaries (Agent-System-RDM) cannot reuse it and their unknown subcommands fall into the serve path; the 2026-10-12 rdm1/rdmcand batch update failures traced back to that capability gap. Evidence: go test ./pkg/identity/... ok; CGO_ENABLED=0 go build ok; behavioral probes (usage rc=2, capabilities v1, ensure/verify roundtrip) recorded in the PR. Impact: identity semantics unchanged for the base binary; adds identity capabilities (v1) and usage-on-unknown contract shared by all products; no storage changes. Refs: Dev PR #474 (svc.sh candidate gate); user root-cause report 2026-10-12 U1 (shared identity interface).	2026-10-12 13:10:13 +00:00