weichen/Agent-System-Backend

T

weichen a4783d18e7

ci / vet-and-test (pull_request) Successful in 41s

Details

Consult the EXT-8 authorizer in project artifact read paths

Why: With the surface and injection seam in place, the read endpoints must fall back to the adapter when owner-scoped lookup misses, keeping default-deny and fail-closed semantics.
Evidence: TestProjectResourceAuthorizerSharesReads green (default deny, shared list/meta/content via adapter, third-party denied, authorizer error fail-closed); go test ./... 32/32 packages ok.
Impact: listArtifacts/getArtifact/artifactContent consult authorizeSharedProject; store gains gated helpers (GetArtifactByID/ArtifactContentByID/ListProjectArtifactsAll) documented internal-only; writes untouched; SSE project stream and project card aggregate deliberately deferred to EXT-12 (conversation-card mirroring privacy).
Refs: EXT-8; red run at d89e748; task card.

2026-10-08 15:34:18 +00:00

.gitea/workflows

Install house-style Python packages before backend CI

2026-10-03 12:46:10 +00:00

cmd/agent-system

Refuse open listeners and cross-site writes without auth

2026-10-04 17:28:46 +00:00

Point the nested squad pin at the a2a adapter and pin alignment

2026-10-08 04:01:20 +00:00

Add the startup configuration pipe with file and env layers plus explain

2026-09-30 04:19:11 +00:00

Add the task-level A/B dual-run harness with demo.brief evidence (Q3 WP5)

2026-10-08 03:46:54 +00:00

Consult the EXT-8 authorizer in project artifact read paths

2026-10-08 15:34:18 +00:00

Add the EXT-8 authorizer surface and a red sharing test

2026-10-08 15:32:04 +00:00

Add cmdbus: registry-driven command dispatch with audit and inline confirm

2026-09-30 07:51:31 +00:00

Implement the backend: store/bus/runmgr core

2026-09-29 17:53:24 +00:00

.gitignore

Ignore Python bytecode in the backend tree

2026-10-01 08:17:33 +00:00

.gitmodules

Wire Agent-Command as nested dependency

2026-09-30 05:53:13 +00:00

AGENTS.md

Record Gitea access facts in AGENTS.md

2026-09-30 16:06:16 +00:00

go.mod

Wire the squad native adapter instead of the core registration

2026-10-03 13:42:04 +00:00

go.sum

Bump x/crypto to v0.56.0 to clear module-level advisories

2026-09-30 17:15:17 +00:00

PROJECT.md

Refuse open listeners and cross-site writes without auth

2026-10-04 17:28:46 +00:00

README.md

Bootstrap the repository skeleton: README, agent rules, policy index, project facts

2026-09-29 17:30:31 +00:00

README.md

Agent-System-Backend

对话系统后端：Go 模块化单体，默认构建为单二进制（go:embed 内嵌前端与嵌入式 SQLite 存储）。组合 Agent-Native / Agent-Squad / Agent-Intent 生态，依赖 agent-system-core 契约。

契约与架构见 Agent-System-Documents 设计方案与架构文档；开发规范见 development-guidelines（Dev 仓 development/guidelines）。本仓为 Agent-System 多仓组合的组成部分。