5 Commits

Include renames

Author	SHA1	Message	Date
weichen	cb26e4c947	Add EXT-1 inproc plugin command handler with owner-scoped host handle ... Why: 进程内插件命令此前只登记规格不绑处理器，分发即 "no host handler bound"， 且插件无 owner 凭证（H4）；EXT-1 最小集补上处理器绑定与 owner 作用域宿主句柄。 Evidence: pkg/extension 新增 Request/Handler/Host + Registry.AddCommandHandler（surface.txt 12→15）； cmdbus.RegisterPluginCommand 三例测试（committed/未绑 rejected/高危确认卡先拦）； rag.IndexChunks 抽出并两例直测；internal/app hostcaps+inprocHost 复用 hostapi owner 作用域实现， applyCompiled 携 caps，inproc_host_test 双 owner 隔离 + provider=hash 向量写入均通过；go test ./... 29 包全绿。 Impact: 公开面依赖从零外部模块变为 +agent-system-core（声明式 go.mod 需按 compat-policy §4 加 core require+replace）； 既有路径语义不变，SurfaceVersion 保持 2.0.0-experimental。 Refs: documents 提案 2026-10-05-ext-1-inproc-command-handler.md；V1.2 方案批注 1。	2026-10-05 11:39:25 +00:00
weichen	42cca8fade	Store secrets apart from settings and assemble context at the end ... Why: Masks must not be the only copy of a key, and personal instructions, lore hits, and candidate replies have to reach the model without rewriting the system prefix or deleting history. Evidence: go test ./internal/store ./internal/ctxasm ./internal/settings ./internal/runtime ./internal/server. Migration v16 upgrades and rolls back. Startup snapshots settings before moving raw keys. Impact: One labeled key is active per service. Excluding a message hides its whole run from the model. Regenerating appends another candidate and rewinds files to the user turn. User slash commands expand to prompt text and do not fire on their own. Refs: docs/records/2026-10-04-sillytavern-review.md	2026-10-04 18:20:10 +00:00
weichenandCursor	cd5b82186d	Add the public extension surface and platform services ... Why: Downstream products must extend the base through a public package and host API instead of editing internal code. Evidence: go test ./... passed, including plugin v2 assets, sidecar startup, migration v13, pending confirms, HITL timeout, hash embedder, command pairs, and the extension surface snapshot. Impact: apiVersion 2.0-experimental rejects empty network allowlists for declarative HTTP. Hash embeddings stay opt-in via models.embedding.provider=hash. Plugin secrets resolve per owner at execution time. Refs: docs/proposals/2026-10-01-plugin-contract-v2.md Co-authored-by: Cursor <cursoragent@cursor.com>	2026-10-01 10:35:02 +00:00
weichen	9a545b1e69	Add admin-issued accounts with forced first-login password change ... Why: the user ruled out self-registration (2026-09-30): accounts are created only by admins who set an initial password; first login (and first login after any admin reset) must force a password change. Evidence: - migration v10 auth_accounts (users password/must_change/is_admin + sessions table; upgrade test walks v1<->v10 both directions). - argon2id hash/verify with PHC encoding; store tests cover hash roundtrip, duplicate-owner conflict, must-change lifecycle, session keep/except semantics. - e2e TestAdminAccountFlow: static login page reachable without auth, wrong password 401, login sets HttpOnly cookie + mustChangePassword, admin creates user (409 on duplicate), non-admin create 403, forced change clears flag and old password dies, admin reset revokes sessions and re-arms forced change, API-key channel untouched, 5-fail backoff 429, logout kills session. Full go test ./... green. Impact: middleware now accepts Bearer key OR session cookie and exempts static + /api/auth/login (also fixes the latent case where the login page itself could 401). Embedded no-auth mode unchanged. Refs: proposal 2026-09-30-ui-redesign-and-auth.md section 5 (admin-issued variant, user decision 2026-09-30)	2026-09-30 11:15:22 +00:00
weichen	4fdbfbc9a2	Add the vector RAG pipeline: paragraph chunker ... Details (original message): Add the vector RAG pipeline: paragraph chunker, OpenAI-compatible embeddings and rerank clients, dual-tier vector store with cosine search, and RRF hybrid retrieval	2026-09-30 02:39:50 +00:00