weichen d26f3cf2e8 Protect private project event replay and live delivery ...

Why:
Legacy project streams replayed upload filenames and parser metadata to newly
authorized members even though the underlying cards remained owner-only.

Evidence:
SELF real HTTP red regressions exposed legacy replay, spoofed sharing claims,
private-history pagination, and live delivery after membership removal. The
affected packages, uncached full Backend suite, isolated PostgreSQL Store suite,
and agent-system build pass after applying the event boundary.

Impact:
Registered lifecycle streams resolve trusted resource ownership and require an
internal publication proof for cross-owner delivery. Event and proof commit in
one transaction; v30 adds an additive SQLite/PostgreSQL sidecar without granting
access to historical events. Seen and visible cursors remain separate, revoked
members leave live streams, and unregistered base behavior remains compatible.
The storage migration tool preserves the new proof rows.

Refs:
project-member-access-implementation-plan.md Task 1 / R5; authorized legacy SSE
privacy follow-up; project-member-composed-legacy-project-history.json

2026-10-13 11:12:47 +00:00

..

account_lifecycle_test.go

Close the account lifecycle leftovers: atomicity, bootstrap lock, redeem guard, credential delivery

2026-10-13 06:05:45 +00:00

admission_pg_test.go

Add shared execution budgets and the action-authz matrix (U3 slice 2)

2026-10-11 05:18:12 +00:00

admission.go

Add shared execution budgets and the action-authz matrix (U3 slice 2)

2026-10-11 05:18:12 +00:00

audit_test.go

Scope command audit storage and queries to the requesting owner

2026-10-08 14:02:19 +00:00

audit.go

Scope command audit storage and queries to the requesting owner

2026-10-08 14:02:19 +00:00

auth.go

Close the account lifecycle leftovers: atomicity, bootstrap lock, redeem guard, credential delivery

2026-10-13 06:05:45 +00:00

borrow.go

Store secrets apart from settings and assemble context at the end

2026-10-04 18:20:10 +00:00

card_version_test.go

Close request atomicity: locked message append, card versions, atomic rate limit, recovery holds (U3 slice 1)

2026-10-11 04:37:50 +00:00

cards.go

Close request atomicity: locked message append, card versions, atomic rate limit, recovery holds (U3 slice 1)

2026-10-11 04:37:50 +00:00

config.go

Expand dotted setting keys and mask secret pools

2026-10-04 13:01:38 +00:00

content.go

Recheck resumed project work and isolate publication replacement

2026-10-13 09:04:06 +00:00

dialect.go

Close the account lifecycle leftovers: atomicity, bootstrap lock, redeem guard, credential delivery

2026-10-13 06:05:45 +00:00

empty_json_test.go

Advance the core gitlink and serialize empty lists as arrays

2026-09-30 03:20:57 +00:00

execution.go

Add same-transaction outbox, S3-compatible blobstore, and real-process acceptance (U5 remainder)

2026-10-11 15:57:12 +00:00

knowledge_authorization_test.go

Recheck resumed project work and isolate publication replacement

2026-10-13 09:04:06 +00:00

lease_pg_test.go

Add execution ownership leases with epoch fencing and persistent run commands (U5)

2026-10-11 12:25:31 +00:00

login_keys_test.go

Harden login-key recovery flow with auth-version transactions

2026-10-13 03:36:38 +00:00

login_keys.go

Close the account lifecycle leftovers: atomicity, bootstrap lock, redeem guard, credential delivery

2026-10-13 06:05:45 +00:00

messages.go

Protect private project event replay and live delivery

2026-10-13 11:12:47 +00:00

migrate_atomic_test.go

Retry transient SQLITE_BUSY at migration Begin and race on a materialized db

2026-10-11 04:08:50 +00:00

migrate_compat_test.go

Publish schema target and compatibility floor

2026-10-12 14:11:07 +00:00

migrate_compat.go

Protect private project event replay and live delivery

2026-10-13 11:12:47 +00:00

migrate.go

Protect private project event replay and live delivery

2026-10-13 11:12:47 +00:00

notices.go

Give subagents per-run transcripts, resume, persisted notices, and the Background request field (N2 WP5)

2026-10-07 14:23:39 +00:00

outbox_tx_test.go

Add same-transaction outbox, S3-compatible blobstore, and real-process acceptance (U5 remainder)

2026-10-11 15:57:12 +00:00

pgvector_test.go

Add model identity and in-database vector top-k via pgvector (U6 slice 3)

2026-10-11 16:31:12 +00:00

platform_test.go

Add the public extension surface and platform services

2026-10-01 10:35:02 +00:00

platform.go

Add the public extension surface and platform services

2026-10-01 10:35:02 +00:00

project_events_test.go

Protect private project event replay and live delivery

2026-10-13 11:12:47 +00:00

project_events.go

Protect private project event replay and live delivery

2026-10-13 11:12:47 +00:00

project_projection_test.go

Add project lifecycle delegation and private member work

2026-10-13 08:43:02 +00:00

project_projection.go

Add project lifecycle delegation and private member work

2026-10-13 08:43:02 +00:00

projects.go

Share retrieval inside runs and open project listing/conversations to members (EXT-13/15)

2026-10-09 15:44:48 +00:00

prompts.go

Move prompts into a layered data library with trigger-based assembly

2026-09-30 10:35:23 +00:00

recovery_holds_test.go

Close request atomicity: locked message append, card versions, atomic rate limit, recovery holds (U3 slice 1)

2026-10-11 04:37:50 +00:00

recovery_holds.go

Close request atomicity: locked message append, card versions, atomic rate limit, recovery holds (U3 slice 1)

2026-10-11 04:37:50 +00:00

recovery_test.go

Recover interrupted runs and commit terminal state once

2026-10-03 14:37:49 +00:00

recovery.go

Add execution ownership leases with epoch fencing and persistent run commands (U5)

2026-10-11 12:25:31 +00:00

search_postgres.go

Filter private knowledge before applying shared result limits

2026-10-13 08:47:19 +00:00

store_test.go

Close request atomicity: locked message append, card versions, atomic rate limit, recovery holds (U3 slice 1)

2026-10-11 04:37:50 +00:00

store.go

Fall back to local artifacts when the blob store is a typed nil

2026-10-13 01:22:57 +00:00

surface_actions.go

Add the surface action pipeline: ledger, guards, dispatch, submit (U5)

2026-10-11 14:24:31 +00:00

surfaces_test.go

Add the Surface store, activation guard, and EXT-17 host capability

2026-10-11 08:26:24 +00:00

surfaces.go

Add project-level surface aggregation and task-phase guidance (U6)

2026-10-12 02:12:42 +00:00

system_identity_test.go

Open identity commands on an existing database only

2026-10-12 14:04:41 +00:00

system_identity.go

Open identity commands on an existing database only

2026-10-12 14:04:41 +00:00

typed_nil_blob_test.go

Fall back to local artifacts when the blob store is a typed nil

2026-10-13 01:22:57 +00:00

vectors.go

Add project lifecycle delegation and private member work

2026-10-13 08:43:02 +00:00