6 Commits

Include renames

Author	SHA1	Message	Date
weichen	45b011af9f	Wire the intent slow lane behind settings flags (I2 WP3) ... Why: I2 increments 1-2 shipped the agent-intent ports (SemanticScorer, CommandGenerator); the backend still had no implementation, so the slow lane could not be enabled in the product. Evidence: go test ./... green; lint-boundaries ok; the two new runtime.intentSemantic / runtime.intentGenerator flags are registered with default false and the gate defaults to the I1 recognizer when both are off (TestIntentSlowLaneFlagsDefaultOff, TestGate*). Impact: no behavior change by default; enabling runtime.intentSemantic routes ambiguous rule matches through embedding cosine scoring, and runtime.intentGenerator lets the lightweight model propose commands on fallback with library-side fail-closed validation. Nested agent-intent pin moves to 343b1e6 (I2 increments 1-2). Refs: I2 increment 3	2026-10-07 11:20:41 +00:00
weichen	517ae236b3	Project the command types through the intent gate surface ... Why: The boundary linter allows agent-intent imports only in the adapter layer; route and runmgr consume aliases from intentgate instead of importing the ecosystem library directly. Evidence: lint-boundaries passes below; backend suite green. Impact: intentgate re-exports Command/ActionRef and the kind constants; route drops the agent-intent import.	2026-10-07 07:58:05 +00:00
weichen	ff43c7c9aa	Unify intent routing behind the route package and enable NFKC ... Why: I1 WP3 - chat routing and the HITL free-text pivot now share one router consuming the library's command list, and both intent hosts fold compatibility-equivalent input. Evidence: go vet clean; go test ./... 30 packages ok, including the existing workflow-route and server e2e suites unchanged (behavior parity) and the new route package tests. Impact: new internal/route package (unique router with explicit priority rules); intentgate carries Commands and folds NFKC; server.go and runmgr.go route through it; nested pins at intent 2554b50 and squad 6b7a991. Blueprint actions resolve to a squad decision at the router level; per-run squad entry stays a recorded follow-up (no silent misrouting). Refs: Documents proposal 2026-10-07-agent-stack-n1q1i1-plans.md I1 WP3/WP4	2026-10-07 07:44:31 +00:00
weichenandCursor	ebeb6c599c	Route a matched intent to its workflow after commands ... Why: A hit intent should start the bound workflow, and a command that shares the same id still has to win. Evidence: go test ./internal/intentgate/ ./internal/runmgr/ ./internal/server/ passed. Recognize keeps slots and the missing-slot question. StartWorkflowRun copies the definition and selects the workflow runner even when mock is on. Impact: Ordinary turns are unchanged. The workflow runner body is still a stub until the executor lands. Refs: feature/agent-harness-p4 Co-authored-by: Cursor <cursoragent@cursor.com>	2026-10-01 16:04:49 +00:00
weichen	9a545b1e69	Add admin-issued accounts with forced first-login password change ... Why: the user ruled out self-registration (2026-09-30): accounts are created only by admins who set an initial password; first login (and first login after any admin reset) must force a password change. Evidence: - migration v10 auth_accounts (users password/must_change/is_admin + sessions table; upgrade test walks v1<->v10 both directions). - argon2id hash/verify with PHC encoding; store tests cover hash roundtrip, duplicate-owner conflict, must-change lifecycle, session keep/except semantics. - e2e TestAdminAccountFlow: static login page reachable without auth, wrong password 401, login sets HttpOnly cookie + mustChangePassword, admin creates user (409 on duplicate), non-admin create 403, forced change clears flag and old password dies, admin reset revokes sessions and re-arms forced change, API-key channel untouched, 5-fail backoff 429, logout kills session. Full go test ./... green. Impact: middleware now accepts Bearer key OR session cookie and exempts static + /api/auth/login (also fixes the latent case where the login page itself could 401). Embedded no-auth mode unchanged. Refs: proposal 2026-09-30-ui-redesign-and-auth.md section 5 (admin-issued variant, user decision 2026-09-30)	2026-09-30 11:15:22 +00:00
weichen	30ad92730d	Integrate the agent-intent gate ... Details (original message): Integrate the agent-intent gate: plugin intent overlays rebuild the registry (fail-closed, keeps previous snapshot), HITL free-input pivots on matched foreign intents; unit and e2e tests; pin logging-system and error-code-system submodules.	2026-09-29 18:11:47 +00:00