agent-exec-transportandCursor 954e744d6d Require the caller's conversation when creating a surface ...

POST /api/surfaces with an empty surfaceId now requires a conversationId
that belongs to the caller: empty returns 400, missing or another owner's
conversation returns 404. Revisions keep the previous behavior. Without
this check a direct API caller could create a project-less surface and
skip the project lifecycle gate on actions.

Why: an empty conversationId produced surfaces with no project ownership.
Evidence: agent-exec unit backend-surface-submit-conversation-required (pi, attempt 1 after authorized rerun, terminal=success); go test ./internal/server/... ./internal/surfacesvc/... .
Impact: HTTP create-surface validation only.
Refs: Dev task fix/svc-superadmin-envfile-surface-conv.
Co-authored-by: Cursor <cursoragent@cursor.com>

2026-10-21 15:02:15 +00:00

..

testdata

Wire plugin slash aliases and the intent declaration surface (G2-2)

2026-10-10 00:15:21 +00:00

account_admin_unauthenticated_test.go

agent-exec transport c2933fd3bec7cf8194e9e35ec557ecbf/133d229ce0aa

2026-10-20 01:35:08 +00:00

account_contract_test.go

agent-exec transport c2933fd3bec7cf8194e9e35ec557ecbf/133d229ce0aa

2026-10-20 01:35:08 +00:00

account_effect_guard.go

Fence U3 account writes and stabilize directory cursors

2026-10-14 07:33:54 +00:00

account_search.go

Expose role and system permission APIs

2026-10-14 17:02:11 +00:00

account_sse_test.go

Require password lineage and make recovery retries metadata-only

2026-10-14 04:58:31 +00:00

account_write_fence_test.go

Expose role and system permission APIs

2026-10-14 17:02:11 +00:00

accounts.go

agent-exec transport 34e93ed2817e051b9b824abe27d8c08a/3eba67b6e84f

2026-10-20 01:45:06 +00:00

action_matrix_test.go

Add shared execution budgets and the action-authz matrix (U3 slice 2)

2026-10-11 05:18:12 +00:00

admin_execenv.go

Add immutable layered Python environments for the sandbox.

2026-10-15 13:52:48 +00:00

adminzone_test.go

Fence U3 account writes and stabilize directory cursors

2026-10-14 07:33:54 +00:00

admission_test.go

Recover interrupted runs and commit terminal state once

2026-10-03 14:37:49 +00:00

api_key_fixture_test.go

Expose role and system permission APIs

2026-10-14 17:02:11 +00:00

artifact_download_test.go

Add download semantics and extension MIME fallback to artifact content

2026-09-30 15:23:02 +00:00

audit_scope_test.go

Fence U3 account writes and stabilize directory cursors

2026-10-14 07:33:54 +00:00

auth_e2e_test.go

agent-exec transport c2933fd3bec7cf8194e9e35ec557ecbf/133d229ce0aa

2026-10-20 01:35:08 +00:00

auth_test_helpers_test.go

agent-exec transport c2933fd3bec7cf8194e9e35ec557ecbf/133d229ce0aa

2026-10-20 01:35:08 +00:00

auth.go

agent-exec transport c2933fd3bec7cf8194e9e35ec557ecbf/133d229ce0aa

2026-10-20 01:35:08 +00:00

borrow_account_write_test.go

Fence U3 account writes and stabilize directory cursors

2026-10-14 07:33:54 +00:00

borrow.go

Fence U3 account writes and stabilize directory cursors

2026-10-14 07:33:54 +00:00

command_pairs_test.go

Scope command audit storage and queries to the requesting owner

2026-10-08 14:02:19 +00:00

compiled_list_test.go

Fence U3 account writes and stabilize directory cursors

2026-10-14 07:33:54 +00:00

disk_full_test.go

Harden cross-instance HITL/cancel command paths and add disk-full rejection tests (U7)

2026-10-12 02:28:48 +00:00

e2e_test.go

agent-exec transport d0da8a3d648b5dc044f808fb094916f8/2838ce0af93e

2026-10-20 12:44:00 +00:00

explain_test.go

agent-exec transport db62fd9b2ada67370988679837bbb3d1/b712680caa58

2026-10-20 12:39:28 +00:00

explain.go

agent-exec transport 8315c523cef26780543b9b2130f4f4a4/5c8333ec4e92

2026-10-19 12:21:32 +00:00

ext9_upload_switch_test.go

Expose role and system permission APIs

2026-10-14 17:02:11 +00:00

guard_test.go

Refuse open listeners and cross-site writes without auth

2026-10-04 17:28:46 +00:00

guard.go

Refuse open listeners and cross-site writes without auth

2026-10-04 17:28:46 +00:00

human_decision_test.go

Alias the core package consistently

2026-10-15 06:01:32 +00:00

human_decision.go

Alias the core package consistently

2026-10-15 06:01:32 +00:00

intent_button_test.go

Whitelist B-class surface actions for help and intent

2026-10-12 03:18:57 +00:00

one_time_password_test.go

agent-exec transport 34e93ed2817e051b9b824abe27d8c08a/3eba67b6e84f

2026-10-20 01:45:06 +00:00

platform_api.go

Require the caller's conversation when creating a surface

2026-10-21 15:02:15 +00:00

project_events_test.go

agent-exec transport 662a926e726431b930433273fc26f39a/e8392e75611f

2026-10-20 09:03:51 +00:00

project_events.go

Protect private project event replay and live delivery

2026-10-13 11:12:47 +00:00

project_iam_integration_test.go

agent-exec transport db62fd9b2ada67370988679837bbb3d1/b712680caa58

2026-10-20 12:39:28 +00:00

project_lifecycle_test.go

Merge Backend main (align agent-native/agent-squad nested pins with the Dev composition)

2026-10-20 12:14:40 +00:00

project_lifecycle.go

agent-exec transport 47f1c6dec77e33ca7e6408150b0d3dd0/5116ee9fd8bf

2026-10-20 05:00:06 +00:00

project_resource_filter_test.go

Fence U3 account writes and stabilize directory cursors

2026-10-14 07:33:54 +00:00

ratelimit_e2e_test.go

Add multi-instance groundwork: blobstore seam for artifacts

2026-09-30 02:39:50 +00:00

ratelimit.go

Add multi-instance groundwork: blobstore seam for artifacts

2026-09-30 02:39:50 +00:00

resource_authz_consumption_test.go

Harden delegated role authority boundaries

2026-10-15 02:27:50 +00:00

resource_authz_test.go

Expose role and system permission APIs

2026-10-14 17:02:11 +00:00

rewind_http_test.go

Make the rewind happy test tolerant of the settle-release window

2026-10-07 18:04:08 +00:00

rewind.go

Fence U3 account writes and stabilize directory cursors

2026-10-14 07:33:54 +00:00

role_authorization_test.go

agent-exec transport 5231be3441402d174e41c888e044ef05/78ce1b6b9dc4

2026-10-20 11:13:54 +00:00

roles_test.go

agent-exec transport 875f5aca7406765a0c4913ffa0fbf707/3f6d66d1ffaa

2026-10-19 15:40:32 +00:00

roles.go

agent-exec transport 875f5aca7406765a0c4913ffa0fbf707/3f6d66d1ffaa

2026-10-19 15:40:32 +00:00

run_process_events_test.go

Accept a late parent terminal event in the child process page

2026-10-15 03:41:17 +00:00

server.go

agent-exec transport 39075300fab9c8ac1d78ca2dd93074fd/55144c34e7ce

2026-10-21 03:53:35 +00:00

shared_projects_test.go

Fence U3 account writes and stabilize directory cursors

2026-10-14 07:33:54 +00:00

shared_retrieval_test.go

Expose role and system permission APIs

2026-10-14 17:02:11 +00:00

sse_close_test.go

agent-exec transport c2933fd3bec7cf8194e9e35ec557ecbf/133d229ce0aa

2026-10-20 01:35:08 +00:00

sse_retry_test.go

Send an SSE retry interval and replay after overflow

2026-10-03 16:35:34 +00:00

super_admin_authority_test.go

agent-exec transport c2933fd3bec7cf8194e9e35ec557ecbf/133d229ce0aa

2026-10-20 01:35:08 +00:00

super_admin_login_test.go

agent-exec transport 64fcfc65eef6a9c12fe5ef9d4427a2bb/47019d8fae2f

2026-10-19 09:39:18 +00:00

surface_api_test.go

Require the caller's conversation when creating a surface

2026-10-21 15:02:15 +00:00

task_sources_test.go

agent-exec transport 2f80ef82aa46c436ab31ad04be4314d5/5a44c92c20c8

2026-10-19 09:24:56 +00:00

task_sources.go

agent-exec transport 2f80ef82aa46c436ab31ad04be4314d5/5a44c92c20c8

2026-10-19 09:24:56 +00:00

test_store_helpers_test.go

agent-exec transport c2933fd3bec7cf8194e9e35ec557ecbf/133d229ce0aa

2026-10-20 01:35:08 +00:00

urlpreview_test.go

Add url-preview endpoint and gated sandboxed fs tool family

2026-09-30 17:16:07 +00:00

urlpreview.go

Add url-preview endpoint and gated sandboxed fs tool family

2026-09-30 17:16:07 +00:00

work_checkpoint_eval_budget_test.go

agent-exec transport bf732506478b02c63a7b4fe251f0ef0f/ba449849829e

2026-10-21 06:08:09 +00:00

work_checkpoint_eval_route_contract_test.go

agent-exec transport 8b42e6435f6b297a2cdf67ab43c40db3/a83f1be549ed

2026-10-20 12:01:33 +00:00

work_checkpoint_eval_test.go

agent-exec transport bf732506478b02c63a7b4fe251f0ef0f/ba449849829e

2026-10-21 06:08:09 +00:00

workcard_test.go

agent-exec transport d0da8a3d648b5dc044f808fb094916f8/2838ce0af93e

2026-10-20 12:44:00 +00:00

workflow_route_test.go

Recover interrupted runs and commit terminal state once

2026-10-03 14:37:49 +00:00