Files
Agent-System-Backend/pkg/extension/surface.txt
T
weichen 7492feab42 Fence delegated project projection by its real operator
Why: RDM delegated rename rebuilt the creator Host and could commit a Backend project rename after the delegated operator was disabled.

Evidence: SQLite and isolated PostgreSQL targeted checks cover operator/creator disable order, two processes, sorted locks, auth-off local compatibility, and HTTP/command Host wiring; exact committed-head replay remains pending.

Impact: Adds a request-bound single-project extension capability and checks operator plus creator in the final Backend transaction. Global ScopedHost cannot derive delegated authority; RDM cross-database atomicity remains outside the promise.

Refs: Approved Documents delegated-projection amendment 5783940, U3 A1-A4 candidate adcd8fe, Dev feature/iam-u3-account-directory-recovery.
2026-10-14 08:17:31 +00:00

91 lines
1.9 KiB
Plaintext

AccountDirectoryEntry
AccountDirectoryLookup
AccountDirectoryModeExact
AccountDirectoryModeFuzzy
AccountDirectoryPage
AccountDirectoryProvider
AccountDirectoryProvider.LookupAccountDirectory
AccountDirectoryProvider.LookupAccountDirectoryOwner
AccountDirectoryProvider.QueryAccountDirectory
AccountDirectoryPurposeDocumentDuties
AccountDirectoryPurposeProjectMembers
AccountDirectoryPurposeSystemUsers
AccountDirectoryQuery
AccountDirectoryRegistrar
AccountDirectoryRegistrar.RegisterAccountDirectoryScopeResolver
AccountDirectorySchemaVersion
AccountDirectoryScope
AccountDirectoryScopeRequest
AccountDirectoryScopeResolver
AccountEntry
AccountLister
AccountLister.ListAccounts
AccountSearcher
AccountSearcher.SearchAccounts
AdminProvider
AdminProvider.IsAdmin
AdminZoneSpec
Compiled
DelegatedProjectProjectionHost
DelegatedProjectProjectionHost.ProjectProjectionForCreator
ErrNotLinked
Handler
Host
Host.ArtifactContent
Host.ArtifactGet
Host.Audit
Host.Complete
Host.KVGet
Host.KVPut
Host.KnowledgeDelete
Host.KnowledgePublish
Host.KnowledgeSearch
Host.KnowledgeWrite
Host.Owner
Host.ParseDocument
Host.PluginID
Host.TaskCreate
Host.TaskUpdate
HostClient
InProc
IntentSpec
Main
NewHostClient
NewScopedHost
Options
ProjectHost
ProjectHost.EnsureProject
ProjectHost.OwnedProject
ProjectHost.OwnedProjects
ProjectHost.Owner
ProjectHost.ProjectMetadata
ProjectHost.ProjectNameAvailable
ProjectHost.RenameOwnedProject
ProjectLifecycle
ProjectLifecycleRegistry
ProjectLifecycleRegistry.RegisterProjectLifecycle
RegisterCompiled
Registry
Registry.AddAdminZone
Registry.AddCommand
Registry.AddCommandHandler
Registry.AddIntent
Registry.AddSkill
Registry.Note
Registry.RegisterResourceAuthorizer
Registry.RegisterResourceAuthorizerV2
Request
ResetCompiled
ResourceAuthorizer
ResourceAuthorizerV2
ResourceAuthzQuery
SetRunner
SetScopedHostFactory
SurfaceHost
SurfaceHost.SurfaceActivation
SurfaceHost.SurfaceGet
SurfaceHost.SurfaceList
SurfaceHost.SurfaceSave
SurfaceSaveRequest
SurfaceVersion