Commit Graph
807 Commits
Author SHA1 Message Date
weichen 275b1e234d Merge pull request 'Close the W6 review MINOR findings' (#242) from fix/w6-review-minors into main
governance / governance (push) Successful in 17s
ci / vet-and-test (push) Successful in 1m25s
2026-10-22 03:07:56 +00:00
agent-exec-transport 4c2db4c89b agent-exec transport baad876f1320016310be2522c373a71b/9d3ed5593bfb
governance / governance (pull_request) Successful in 17s
ci / vet-and-test (pull_request) Successful in 1m27s
2026-10-22 03:03:31 +00:00
weichen 16538f1c46 Merge pull request 'Port the IAM permission-management API from the abandoned iam-perm-ux branch' (#240) from fix/iam-perm-ux-port into main
governance / governance (push) Successful in 17s
ci / vet-and-test (push) Successful in 1m22s
v0.8.0
2026-10-21 15:38:14 +00:00
weichen 4a8cc0170b Merge remote-tracking branch 'origin/main' into fix/iam-perm-ux-port
governance / governance (pull_request) Successful in 23s
ci / vet-and-test (pull_request) Successful in 1m42s
2026-10-21 15:14:16 +00:00
weichen c5a599e28d Record port scope, build fix and PASS review for the IAM permission API
governance / governance (pull_request) Successful in 29s
ci / vet-and-test (pull_request) Successful in 1m31s
Why: the port's authorization boundary, the build correction and the review
verdict must be recorded before delivery.

Evidence:
  /tmp/be-iam-perm-ux-impl-r1-20261021.json: pi, success (port)
  /tmp/be-iam-perm-ux-buildfix-r2-20261021.json: pi, success (build fix;
    r1 failed-unknown produced no record so nothing was imported)
  /tmp/be-iam-perm-ux-review-r1-20261021.json: pi, PASS, no blockers
  Host-side checks on the final head: gofmt -l clean; go build ./... and
  go vet on store/server/authz silent; go test on those packages green.

Impact: card metadata only.
Refs: fix/iam-perm-ux-port; backup /home/weichen/projects/backups/iam-perm-ux-20261021T140345Z
2026-10-21 15:13:59 +00:00
agent-exec-transport 53e78ffb73 agent-exec transport 5aab730b1b5c159f2ce8f0cf9b2c50b5/5dfb74fd02f1 2026-10-21 15:13:33 +00:00
weichen 528e3a4c1f Merge pull request 'Require the caller's conversation when creating a surface' (#239) from fix/surface-conversation-required into main
governance / governance (push) Successful in 13s
ci / vet-and-test (push) Successful in 1m13s
2026-10-21 15:05:03 +00:00
agent-exec-transportandCursor 954e744d6d Require the caller's conversation when creating a surface
governance / governance (pull_request) Successful in 16s
ci / vet-and-test (pull_request) Successful in 1m14s
POST /api/surfaces with an empty surfaceId now requires a conversationId
that belongs to the caller: empty returns 400, missing or another owner's
conversation returns 404. Revisions keep the previous behavior. Without
this check a direct API caller could create a project-less surface and
skip the project lifecycle gate on actions.

Why: an empty conversationId produced surfaces with no project ownership.
Evidence: agent-exec unit backend-surface-submit-conversation-required (pi, attempt 1 after authorized rerun, terminal=success); go test ./internal/server/... ./internal/surfacesvc/... .
Impact: HTTP create-surface validation only.
Refs: Dev task fix/svc-superadmin-envfile-surface-conv.
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-10-21 15:02:15 +00:00
agent-exec-transport f10fb2e65c agent-exec transport 362d13b3c56f54861bc1cae9cd38cc36/2b675cb19c4f 2026-10-21 15:01:35 +00:00
agent-exec-transport 76abebe790 agent-exec transport 64b951970cf4308149cee90d2ab93fbb/078c7847c409 2026-10-21 14:41:59 +00:00
weichen 2d1e5f5b16 chore(task): start fix/iam-perm-ux-port 2026-10-21 14:13:28 +00:00
weichen 01f4c47a2b Merge pull request 'Backfill and archive three merged task cards (#212, #226, #237)' (#238) from fix/close-merged-task-cards into main
governance / governance (push) Successful in 13s
ci / vet-and-test (push) Successful in 1m14s
2026-10-21 12:03:12 +00:00
weichen a89a04f803 Backfill and archive three merged task cards
governance / governance (pull_request) Successful in 16s
ci / vet-and-test (pull_request) Successful in 1m17s
Why: the three cards whose PRs are merged (Backend #212, #226, #237) were
still sitting at .task/ top level, which keeps the main checkout reporting
card debt. Only the status line and the merge fact were added; the historical
record inside each card is untouched.

Evidence: Gitea API for PRs 212/226/237 all report state=closed merged=true
(merge commits 56a7f9f440, 508288fbed, f084d10aa5); triage receipt
/tmp/be-triage-cardclose-20261021.json (verdict NEW).

Impact: .task bookkeeping only; no code change, no submodule pin change.
Refs: fix/close-merged-task-cards
2026-10-21 11:42:28 +00:00
weichen 57421f6683 chore(task): start fix/close-merged-task-cards 2026-10-21 11:42:07 +00:00
weichen f084d10aa5 Merge pull request 'Fix run-status write-ordering race in ResolveHITL (U7 multi-instance flake)' (#237) from fix/resolve-hitl-run-status-ordering into main
governance / governance (push) Successful in 14s
ci / vet-and-test (push) Successful in 1m17s
2026-10-21 07:38:21 +00:00
weichen f39b683188 Record task authorization and agent receipt for the run-status fix
governance / governance (pull_request) Successful in 16s
ci / vet-and-test (pull_request) Successful in 1m19s
Why: the card must record the scope, the (r1 scope-expansion -> granted
expansion -> r2 success) trajectory, and the rebase onto 241e1b3 before delivery.
Evidence: /tmp/be-runhitl-impl-r2-20261021.json (pi, success, transport 789f67f);
no PR/merge facts yet.
Impact: card metadata only; no behaviour change.
Refs: fix/resolve-hitl-run-status-ordering
2026-10-21 07:12:13 +00:00
agent-exec-transport 789f67f317 agent-exec transport d7af319ad1e36046a46be5ad16007582/d3f2d0786d5b 2026-10-21 07:10:20 +00:00
weichen cf9a0d4d75 chore(task): start fix/resolve-hitl-run-status-ordering 2026-10-21 07:10:20 +00:00
weichen 241e1b3c76 Merge pull request 'Tighten A01 final reserve and add final eval label' (#236) from feature/fast-slow-o2-a01-final-budget into main
governance / governance (push) Successful in 15s
ci / vet-and-test (push) Successful in 1m20s
2026-10-21 06:18:35 +00:00
agent-exec-transport aec92b7684 agent-exec transport bf732506478b02c63a7b4fe251f0ef0f/ba449849829e
governance / governance (pull_request) Successful in 16s
ci / vet-and-test (pull_request) Successful in 1m18s
2026-10-21 06:08:09 +00:00
agent-exec-transport 9a6f0f880f agent-exec transport fb210f7fecc330e94bf619a5fb064a9c/3e52e52b4541 2026-10-21 05:38:29 +00:00
weichen 07228aa381 Merge pull request 'Announce final-only on every material tool result' (#235) from feature/fast-slow-o2-final-only-notice-all-tools into main
governance / governance (push) Successful in 15s
ci / vet-and-test (push) Successful in 1m22s
2026-10-21 04:40:07 +00:00
agent-exec-transport 52a3e497ed agent-exec transport 2aba0efd75f9b3a95cb01b82b7fcc45c/866c2dd62a06
governance / governance (pull_request) Successful in 13s
ci / vet-and-test (pull_request) Successful in 1m15s
2026-10-21 04:36:36 +00:00
weichen 7158bead16 Merge pull request 'Land the project access and lifecycle role and work-state work on Backend main' (#234) from feature/project-access-lifecycle-u3-backend-merge into main
governance / governance (push) Successful in 14s
ci / vet-and-test (push) Successful in 1m15s
2026-10-21 04:06:34 +00:00
agent-exec-transport 284d3ac781 agent-exec transport 39075300fab9c8ac1d78ca2dd93074fd/55144c34e7ce
governance / governance (pull_request) Successful in 15s
ci / vet-and-test (pull_request) Successful in 1m36s
2026-10-21 03:53:35 +00:00
weichen 0408a032c1 Merge the lifecycle role and project-state work into Backend main
Why: the project access and lifecycle units (U1 role narrowing to a single
project-access boolean, U2 creator authority, U3 member history, U4 project
work states) were implemented and pushed on this line but never landed on
Backend main, so Dev's pinned Backend does not contain them.

Evidence: merge is conflict-free against current origin/main; full
vet-and-test runs on the merge commit.

Impact: Backend only. RDM side is delivered separately.

Refs: Dev PR #634.
2026-10-21 03:47:35 +00:00
weichen e02e25a0ce Merge pull request 'Announce final-only in the material checkpoint tool result' (#233) from feature/fast-slow-o2-final-only-notice into main
governance / governance (push) Successful in 13s
ci / vet-and-test (push) Successful in 1m17s
2026-10-21 03:17:08 +00:00
agent-exec-transport 7867449920 agent-exec transport 3908146c8a3ed2d0c3967ffe7fdf69cf/9e8e3bf5a934
governance / governance (pull_request) Successful in 19s
ci / vet-and-test (pull_request) Successful in 1m12s
2026-10-21 02:58:14 +00:00
weichen 7a41f22ee1 Merge pull request 'W6 X1 source recheck: trusted per-source re-authorization' (#231) from feature/w6-x1-source-recheck into main
governance / governance (push) Successful in 14s
ci / vet-and-test (push) Successful in 1m17s
2026-10-21 01:51:35 +00:00
weichen 5a4edf3bc1 Merge remote-tracking branch 'origin/main' into feature/w6-x1-source-recheck
governance / governance (pull_request) Successful in 21s
ci / vet-and-test (pull_request) Successful in 1m28s
2026-10-21 01:48:57 +00:00
agent-exec-transport 65122b874c agent-exec transport 6147f5d6a94694710f90bbbb8dc92c2d/0ec99c9c36be
governance / governance (pull_request) Successful in 21s
ci / vet-and-test (pull_request) Successful in 1m46s
2026-10-20 16:48:12 +00:00
weichen dfb31da20a Merge pull request 'Tighten work-checkpoint evidence guidance and allow one eval correction' (#232) from feature/fast-slow-o2-a01-evidence-guidance into main
governance / governance (push) Successful in 18s
ci / vet-and-test (push) Successful in 1m20s
2026-10-20 16:32:57 +00:00
agent-exec-transport 837480d4c1 agent-exec transport fe547395130f262af6f15a09d8a4aa2d/1f4b762f53be
governance / governance (pull_request) Successful in 23s
ci / vet-and-test (pull_request) Successful in 1m26s
2026-10-20 16:15:37 +00:00
agent-exec-transport 8c410b9ea4 agent-exec transport 412eff9b36afd457500606d468b89f94/0636a7e1c0f0
governance / governance (pull_request) Successful in 14s
ci / vet-and-test (pull_request) Successful in 1m30s
2026-10-20 15:59:51 +00:00
weichen b4399e3000 Merge remote-tracking branch 'origin/main' into feature/w6-x1-source-recheck 2026-10-20 15:50:02 +00:00
agent-exec-transport bd640df8d0 agent-exec transport 70575de7333e033d2c2b5f7bc0eec883/362fcbe4d749 2026-10-20 13:13:39 +00:00
weichen 689e1768c7 Merge pull request 'Raise server e2e run-terminal wait windows for slow CI' (#230) from fix/server-e2e-terminal-wait into main
governance / governance (push) Successful in 16s
ci / vet-and-test (push) Successful in 1m21s
2026-10-20 12:53:17 +00:00
agent-exec-transport 58228c21f3 agent-exec transport d0da8a3d648b5dc044f808fb094916f8/2838ce0af93e
governance / governance (pull_request) Successful in 20s
ci / vet-and-test (pull_request) Successful in 1m45s
2026-10-20 12:44:00 +00:00
agent-exec-transport da1d9fa447 agent-exec transport db62fd9b2ada67370988679837bbb3d1/b712680caa58 2026-10-20 12:39:28 +00:00
weichen f18c265c5d Merge Backend main (align agent-native/agent-squad nested pins with the Dev composition) 2026-10-20 12:14:40 +00:00
weichen 74e5396861 Merge pull request 'Fail the paid eval fast when the route contract is not attached' (#229) from feature/fast-slow-o2-p1-eval-contract-failfast into main
governance / governance (push) Successful in 15s
ci / vet-and-test (push) Successful in 1m19s
2026-10-20 12:08:59 +00:00
weichen 43575816e5 Merge remote-tracking branch 'origin/main' into feature/fast-slow-o2-p1-eval-contract-failfast
governance / governance (pull_request) Successful in 20s
ci / vet-and-test (pull_request) Successful in 1m31s
2026-10-20 12:04:26 +00:00
agent-exec-transport ddb6e293b2 agent-exec transport 8b42e6435f6b297a2cdf67ab43c40db3/a83f1be549ed
governance / governance (pull_request) Successful in 20s
ci / vet-and-test (pull_request) Successful in 1m29s
2026-10-20 12:01:33 +00:00
weichen ed956a4d44 Merge pull request 'Add read-only role options, a member roster directory and a removed-member send refusal' (#228) from fix/multiuser-collab-followups into main
governance / governance (push) Successful in 22s
ci / vet-and-test (push) Successful in 1m30s
2026-10-20 12:00:22 +00:00
agent-exec-transport 612e04402d agent-exec transport be0c4744ff5899017313eb3f4fbd4a3f/43fe057c8332
governance / governance (pull_request) Successful in 16s
ci / vet-and-test (pull_request) Successful in 1m43s
2026-10-20 11:57:53 +00:00
agent-exec-transport 424c611a36 agent-exec transport 5231be3441402d174e41c888e044ef05/78ce1b6b9dc4 2026-10-20 11:13:54 +00:00
agent-exec-transport 97c8cc8c23 agent-exec transport f7332a745364f439ad5fdc66fc3e3ec5/3040807e4420 2026-10-20 11:08:03 +00:00
weichen 4a38266320 Merge Backend main into the lifecycle line (narrowed role model wins per plan R2)
Why: compose the lifecycle line (role narrowing to a single project-access
boolean, U3b member-history read path) with Backend main (capability
association, explanation, super-admin). Per plan 2026-10-19-1440 R2/KTD2
the narrowed single-boolean write model supersedes the linked-cap expansion
and its association invariant; main non-conflicting work (explanation,
super-admin, tavily, O2 pins) is incorporated.

Impact: integration merge on the lifecycle branch; suites arbitrate.
2026-10-20 11:02:16 +00:00
weichen d8923f18ec Merge pull request 'Run the SQLite-only FTS deadlock step only on SQLite' (#227) from fix/search-deadlock-test-pg-dialect into main
governance / governance (push) Successful in 17s
ci / vet-and-test (push) Successful in 1m20s
2026-10-20 09:28:57 +00:00
weichen 803d64e8a2 Merge remote-tracking branch 'origin/main' into fix/search-deadlock-test-pg-dialect
governance / governance (pull_request) Successful in 15s
ci / vet-and-test (pull_request) Successful in 1m25s
2026-10-20 09:26:59 +00:00