weichen/Agent-System-Backend

[WIP] Build the Backend from versioned Go libraries and fixed frontend composition #196

Closed

weichen wants to merge 8 commits from feature/versioned-dependencies into main

Author	SHA1	Message	Date
weichen	0d31f942b3	Preserve Python dependency paths in Backend tests ci / vet-and-test (pull_request) Successful in 35s Details Why: Test-local PYTHONPATH overrides and an exact-value assertion hid the fixed wheel directory used by isolated composition. Evidence: Three affected Backend tests passed under local Bubblewrap with an 8-wheel offline install; SELF receipt /tmp/dependency-task3-backend-three-tests-20261014-01a1345f.json. Impact: Test environment and assertion changes only; production lint path behavior is unchanged. Refs: Backend PR #196; Dev PR #537; Documents plan 5099e12	2026-10-14 11:11:55 +00:00
weichen	c08003bc59	Preserve isolated Python tools in the DOCX lint test ci / vet-and-test (pull_request) Successful in 36s Details Why: The test replaced PYTHONPATH with the house-style source path, hiding the fixed Python wheels installed inside the candidate sandbox. Evidence: Isolated Backend TestLintErrorContinues replay passed with locked wheel acquisition and no host site-packages; SELF receipt /tmp/dependency-task3-backend-lint-probe-20261014-01a1345f.json. Impact: Test environment composition only; production runtime behavior is unchanged. Refs: Backend PR #196; Dev PR #537; Documents plan 5099e12	2026-10-14 10:57:36 +00:00
weichen	3b6254d02e	Reject sandbox tests when Bubblewrap never starts Why: Home and sibling isolation tests could pass after a Bubblewrap startup failure, hiding an untested security boundary. Evidence: Isolated fake-Bubblewrap replay changed both target tests from PASS to FAIL; SELF receipt /tmp/dependency-task1-fake-green-20261014-01a1345f.json. Native positive replay remains NOT_RUN. Impact: Test assertions only; production execution behavior is unchanged. Refs: Backend PR #196; Documents design 1790cf8	2026-10-14 10:24:49 +00:00
weichen	48649a37ee	Preserve account transactions in the versioned Backend branch ci / vet-and-test (pull_request) Successful in 40s Details Why: Backend PR #185 merged while the dependency migration was open. Its account transactions, audit behavior and migration tests must remain intact when this branch adopts the new main. Evidence: SELF 343 upstream Go files match after canonical import translation except the two bounded test-reliability corrections; complete Go test and vet passed in /tmp/dependency-backend-after-185-{parity,all-go,vet}-20261014-01a1345f.json. Impact: Disposable integration fixture first; the actual Backend branch can fast-forward to this tested merge without rewriting other task history. No production account logic is changed relative to the new main. Refs: Backend PR #196; upstream Backend PR #185; Dev PR #537; R15	2026-10-14 04:17:06 +00:00
weichen	bada7ee40f	Scope sandbox orphan probe to its own script (U5) Why: The host-wide s.sh grep counted unrelated host scripts as sandbox escapes and failed the fixed combination even when its sandbox script had exited. Evidence: SELF unrelated sentinel produced the exact original RED, while the scoped probe stayed GREEN under the same sentinel and detected its own positive-control script; full Backend Go tests passed. Receipts: /tmp/dependency-sandbox-host-collision-{red,green}-20261014-01a1345f.json and /tmp/dependency-backend-test-repair-all-go-green-20261014-01a1345f.json. Impact: Test process identity check only; the sandbox process isolation implementation and failure condition for its own script are unchanged. Refs: Backend PR #196; Dev PR #537; R8/R14	2026-10-14 04:15:17 +00:00
weichen	af2702de8a	Wait for recovery worker before releasing test fixtures (U5) Why: ResumeInterruptedChildren starts a background worker; the recovery-hold test returned while it could still write to a temporary workspace and SQLite store, causing cleanup races. Evidence: SELF Root e3a full combination exposed the TempDir/database-close race; the corrected target passed 100 repetitions and full Backend Go tests passed in /tmp/dependency-recovery-hold-wait-green-20261014-01a1345f.json and /tmp/dependency-backend-test-repair-all-go-green-20261014-01a1345f.json. Impact: Test teardown synchronization only; no production recovery behavior changes. Refs: Backend PR #196; Dev PR #537; R14/R15	2026-10-14 04:15:17 +00:00
weichen	fffd5790cf	Adopt credential safe CI and retire replaced source gitlinks ci / vet-and-test (pull_request) Successful in 42s Details Why: Make independent version consumption work from ordinary clones while retaining historical commits and existing branch workspaces. Evidence: SELF Dev task receipts record 24 CI boundary cases, all workflow syntax checks, readonly private-source prefetch in clean exports, provider tests and package installation without acquisition scripts. Platform CI remains pending. Impact: Remove only replaced index links, preserve old physical checkouts, and update dependency guidance. Library consumers retain their immutable versions until an explicit dependency update. Refs: Agent-System-Dev feature/dependency-workspace; approved versioned-dependency r1, U3-U7 and R15.	2026-10-13 17:11:45 +00:00
weichen	f1302ed5b3	Enable canonical versioned Go module consumption Why: Allow consumers to download an immutable module revision without nested source checkouts or local path replacements. Evidence: SELF package tests and the prior canonical-path rejection are recorded in the Dev dependency-workspace task card; remote consumption is replayed against the committed candidate. Impact: Change the module identity and its Go imports while preserving API behavior. Existing historical submodule revisions remain buildable. Refs: Versioned dependencies U1/U3; feature/dependency-workspace	2026-10-13 15:47:16 +00:00