weichen 716fe9541c Enforce system-managed settings scope with admin system settings API ...

Why: P2——模型、密钥、Tavily、遥测与运行基础设施属系统受管项；user/project 层须整笔拒绝（含嵌套、点路径与子树覆盖），生效链剥除存量覆盖，管理员经新系统面统一配置。
Evidence: go test ./... 全绿；settings 单测覆盖嵌套/点路径/祖先标量拒绝、系统层生效、读面剥除；server e2e 覆盖 400/系统面读写/掩码；认证档 admin 门测试（普通 403、admin 200、密钥不泄漏）。
Impact: settings.go 受管标记与 mergeScope 拦截、Effective 增系统层、server 新增 GET/PUT /api/settings/system（无认证档本机即管理员）、SecretLookup 系统行回退、插件 schema 受管注入；测试基建 mock seed 与三处用例迁到系统层；svc.sh 播种改走系统面（仅 admin，无管理员时明确跳过）。Core gitlink 升至 9150e6f。
Refs: modules/documents/docs/proposals/2026-10-13-rdm-settings-members-duties-perms-increment.md P2

2026-10-13 04:05:15 +00:00

..

testdata

Wire plugin slash aliases and the intent declaration surface (G2-2)

2026-10-10 00:15:21 +00:00

accounts.go

Add one-time login keys, restricted sessions, and OpenExisting

2026-10-12 03:44:16 +00:00

action_matrix_test.go

Add shared execution budgets and the action-authz matrix (U3 slice 2)

2026-10-11 05:18:12 +00:00

adminzone_test.go

Declare admin-zone sections from compiled plugins (surface 2.9.0)

2026-10-12 02:28:51 +00:00

admission_test.go

Recover interrupted runs and commit terminal state once

2026-10-03 14:37:49 +00:00

artifact_download_test.go

Add download semantics and extension MIME fallback to artifact content

2026-09-30 15:23:02 +00:00

audit_scope_test.go

Scope command audit storage and queries to the requesting owner

2026-10-08 14:02:19 +00:00

auth_e2e_test.go

Enforce system-managed settings scope with admin system settings API

2026-10-13 04:05:15 +00:00

auth.go

Add one-time login keys, restricted sessions, and OpenExisting

2026-10-12 03:44:16 +00:00

borrow.go

Store secrets apart from settings and assemble context at the end

2026-10-04 18:20:10 +00:00

command_pairs_test.go

Scope command audit storage and queries to the requesting owner

2026-10-08 14:02:19 +00:00

compiled_list_test.go

List compiled plugins in /api/plugins

2026-10-12 01:44:56 +00:00

disk_full_test.go

Harden cross-instance HITL/cancel command paths and add disk-full rejection tests (U7)

2026-10-12 02:28:48 +00:00

e2e_test.go

Enforce system-managed settings scope with admin system settings API

2026-10-13 04:05:15 +00:00

ext9_upload_switch_test.go

Add the EXT-9 publish/revoke surface and red acceptance tests

2026-10-08 15:53:39 +00:00

guard_test.go

Refuse open listeners and cross-site writes without auth

2026-10-04 17:28:46 +00:00

guard.go

Refuse open listeners and cross-site writes without auth

2026-10-04 17:28:46 +00:00

intent_button_test.go

Whitelist B-class surface actions for help and intent

2026-10-12 03:18:57 +00:00

login_key_test.go

Add one-time login keys, restricted sessions, and OpenExisting

2026-10-12 03:44:16 +00:00

platform_api.go

Add project-level surface aggregation and task-phase guidance (U6)

2026-10-12 02:12:42 +00:00

ratelimit_e2e_test.go

Add multi-instance groundwork: blobstore seam for artifacts

2026-09-30 02:39:50 +00:00

ratelimit.go

Add multi-instance groundwork: blobstore seam for artifacts

2026-09-30 02:39:50 +00:00

resource_authz_consumption_test.go

Consult resource-level authorizer on all shared read paths

2026-10-12 12:08:14 +00:00

resource_authz_test.go

Consult the EXT-8 authorizer in project artifact read paths

2026-10-08 15:34:18 +00:00

rewind_http_test.go

Make the rewind happy test tolerant of the settle-release window

2026-10-07 18:04:08 +00:00

rewind.go

Rewind tracked files and fall back before the first token

2026-10-03 17:31:56 +00:00

server.go

Enforce system-managed settings scope with admin system settings API

2026-10-13 04:05:15 +00:00

shared_projects_test.go

Share retrieval inside runs and open project listing/conversations to members (EXT-13/15)

2026-10-09 15:44:48 +00:00

shared_retrieval_test.go

Close the EXT-8 remaining blocks: vector sharing, hostapi face, citation consistency

2026-10-08 17:16:10 +00:00

sse_retry_test.go

Send an SSE retry interval and replay after overflow

2026-10-03 16:35:34 +00:00

surface_api_test.go

Add the surface action pipeline: ledger, guards, dispatch, submit (U5)

2026-10-11 14:24:31 +00:00

urlpreview_test.go

Add url-preview endpoint and gated sandboxed fs tool family

2026-09-30 17:16:07 +00:00

urlpreview.go

Add url-preview endpoint and gated sandboxed fs tool family

2026-09-30 17:16:07 +00:00

workflow_route_test.go

Recover interrupted runs and commit terminal state once

2026-10-03 14:37:49 +00:00