weichen b9c0a344b6 Implement owner-confirmed account recovery and account controls ...

Why: Administrator-issued password and login-key paths could take over target accounts, while old credentials and plugin handles ignored current account state.

Evidence: SELF receipts /tmp/iam-u3-backend-all-replay.json, /tmp/iam-u3-backend-final-pg-core.json, /tmp/iam-u3-backend-build.json, and focused HTTP/concurrency receipts in /tmp/iam-u3-*.json.

Impact: Adds trusted pending-account initialization and reissue, preexisting owner-session proof, proposal/rotation/grant transactions, server-side admin search, current Host guards, and legacy HTTP/CLI closure. Production cutover and downstream pins remain pending.

Refs: IAM U3 r1 stages 4-5; Dev feature/iam-u3-account-directory-recovery

2026-10-14 04:20:48 +00:00

..

app

Implement owner-confirmed account recovery and account controls

2026-10-14 04:20:48 +00:00

blobstore

Fall back to local artifacts when the blob store is a typed nil

2026-10-13 01:22:57 +00:00

bus

Recover interrupted runs and commit terminal state once

2026-10-03 14:37:49 +00:00

cardsvc

Protect private project event replay and live delivery

2026-10-13 11:12:47 +00:00

cmdbus

Add AdminProvider capability and HostProjectID context (EXT-18)

2026-10-11 16:23:15 +00:00

config

Add the team PG tier, atomic migrations and the connection budget (U2)

2026-10-11 03:10:55 +00:00

ctxasm

Add the generative-ui plugin, capability gating, and surface projection

2026-10-11 10:38:15 +00:00

docgen

Generate styled Word deliverables and pin artifact cards in chat

2026-10-01 02:48:49 +00:00

evalgold

Add the public extension surface and platform services

2026-10-01 10:35:02 +00:00

genui

Close the account lifecycle leftovers: atomicity, bootstrap lock, redeem guard, credential delivery

2026-10-13 06:05:45 +00:00

hostapi

Close the EXT-8 remaining blocks: vector sharing, hostapi face, citation consistency

2026-10-08 17:16:10 +00:00

ingest

Keep tracked-change and hyperlink text in DOCX and add an exec hard switch

2026-10-09 10:36:02 +00:00

intentgate

Wire the intent slow lane behind settings flags (I2 WP3)

2026-10-07 11:20:41 +00:00

intentsem

Wire the intent slow lane behind settings flags (I2 WP3)

2026-10-07 11:20:41 +00:00

pgbus

Catch up event streams by cursor with real reconnect and periodic rescue (U6 slice 1)

2026-10-11 09:30:29 +00:00

plugins

Keep only hard facts in the blocking gate and add fact-consistency checks

2026-10-10 00:04:57 +00:00

profiles

Stream tool progress and drop hard agent limits

2026-10-02 02:17:02 +00:00

projectscope

Add project lifecycle delegation and private member work

2026-10-13 08:43:02 +00:00

prompts

Unwrap item-style spec wrappers, pair bare table cells, let subagents present pages

2026-10-12 03:03:26 +00:00

quality

Keep only hard facts in the blocking gate and add fact-consistency checks

2026-10-10 00:04:57 +00:00

rag

Add project lifecycle delegation and private member work

2026-10-13 08:43:02 +00:00

ratelimit

Close request atomicity: locked message append, card versions, atomic rate limit, recovery holds (U3 slice 1)

2026-10-11 04:37:50 +00:00

route

Keep only hard facts in the blocking gate and add fact-consistency checks

2026-10-10 00:04:57 +00:00

runmgr

Guard active runs with current account state

2026-10-14 03:20:41 +00:00

runtime

Close the account lifecycle leftovers: atomicity, bootstrap lock, redeem guard, credential delivery

2026-10-13 06:05:45 +00:00

server

Implement owner-confirmed account recovery and account controls

2026-10-14 04:20:48 +00:00

settings

Admit private member uploads and preserve masked metadata edits

2026-10-13 10:23:37 +00:00

skills

Open the kernel workspace tools and the markdown-source build pipeline

2026-10-09 18:01:06 +00:00

squadadapter

Keep only hard facts in the blocking gate and add fact-consistency checks

2026-10-10 00:04:57 +00:00

store

Implement owner-confirmed account recovery and account controls

2026-10-14 04:20:48 +00:00

surfacesvc

Flatten surface action data into command params

2026-10-12 04:16:34 +00:00

tools

Remove the empty -ws shell directory after each apply

2026-10-11 02:18:01 +00:00

wfcompile

Keep only hard facts in the blocking gate and add fact-consistency checks

2026-10-10 00:04:57 +00:00

workflow

Run workflow scripts through a capped callback host

2026-10-01 16:18:59 +00:00