weichen/Agent-System-Backend
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
835 Commits 7 Branches 11 Tags
main
Commit Graph
10 Commits
Author SHA1 Message Date
agent-exec-transport 76abebe790 agent-exec transport 64b951970cf4308149cee90d2ab93fbb/078c7847c409 2026-10-21 14:41:59 +00:00
agent-exec-transport da1d9fa447 agent-exec transport db62fd9b2ada67370988679837bbb3d1/b712680caa58 2026-10-20 12:39:28 +00:00
weichen 4a38266320 Merge Backend main into the lifecycle line (narrowed role model wins per plan R2) 
Why: compose the lifecycle line (role narrowing to a single project-access
boolean, U3b member-history read path) with Backend main (capability
association, explanation, super-admin). Per plan 2026-10-19-1440 R2/KTD2
the narrowed single-boolean write model supersedes the linked-cap expansion
and its association invariant; main non-conflicting work (explanation,
super-admin, tavily, O2 pins) is incorporated.

Impact: integration merge on the lifecycle branch; suites arbitrate.
 2026-10-20 11:02:16 +00:00
agent-exec-transport cf9c35aa0a agent-exec transport 875f5aca7406765a0c4913ffa0fbf707/3f6d66d1ffaa 2026-10-19 15:40:32 +00:00
agent-exec-transport e942a35b73 agent-exec transport 8315c523cef26780543b9b2130f4f4a4/5c8333ec4e92
governance / governance (pull_request) Successful in 14s
Details
ci / vet-and-test (pull_request) Successful in 1m18s
Details
2026-10-19 12:21:32 +00:00
agent-exec-transport afb65c5678 agent-exec transport dd2fa5d8f3774523c4c97a4afaa4360d/4fd52114d316 2026-10-19 03:08:12 +00:00
weichen b2a1cd0a60 Expose effective system actions to the client 
Why: Non-root managers need the system-management entry and controls to follow their explicit grants.

Evidence: The full Backend test suite passed and /api/me action projection is covered by the grant-isolation test.

Impact: /api/me now returns only the current actor system actions evaluated by the same authorizer.

Refs: Focused role and permission system task 7
 2026-10-14 17:37:39 +00:00
weichen 94732f3c87 Add trusted role administration compatibility 
Why: Existing RDM role commands must reach the Backend authority during UI and migration cutover without dual-writing RDM role tables.

Evidence: The full Backend suite passed, including actor-bound role administration, owner compatibility, provider, and public-surface tests.

Impact: Adds temporary trusted Host administration methods and completes the project-action catalog used by RDM.

Refs: Focused role and permission system task 5
 2026-10-14 17:28:31 +00:00
weichen 4d1ca60067 Expose role and system permission APIs 
Why: System, role, and project entry permissions need explicit actions instead of a single administrator flag or unrestricted project creation.

Evidence: The full Backend test suite passed, including role APIs, action isolation, project.create denial/allow, storage migration coverage, and account write fences.

Impact: Adds versioned role and grant endpoints, maps account actions to explicit permissions, and requires project.create authority.

Refs: Focused role and permission system task 3
 2026-10-14 17:02:11 +00:00
weichen 6b1afab82b Add the role permission catalog and schema 
Why: Backend needs a single trusted catalog and durable role authority before RDM can stop owning position data.

Evidence: Authz catalog tests and the full store suite passed on SQLite; migration rollback and one-active-role constraints are covered.

Impact: Adds schema v35 and stable role/binding types without changing existing authorization callers.

Refs: Focused role and permission system task 1
 2026-10-14 16:47:09 +00:00