weichen
7cf8f02399
Why: Shared project reads previously doubled as write permission, project mutations bypassed the domain lifecycle, and coarse retrieval shared private resources. Evidence: SELF red-before-implementation logs cover projection, lifecycle, private work, resource filtering, canonical retrieval scope, publication source and namespace. SELF go test ./..., isolated PostgreSQL go test ./internal/store -count=1, and CGO_ENABLED=0 go build ./cmd/agent-system passed; task owner owns replay/CI. Impact: Add optional actor-scoped projection/lifecycle capabilities; registered providers control public lifecycle and live work. Preserve owned conversation history and ordinary unregistered behavior. Authorize knowledge by stored ID/source, map current host scopes through trusted service metadata, and filter artifact lists. Refs: Dev project-member-access implementation plan r1 Task 1; approved design r0.1; 2026-10-13 trusted publication Source hardening ruling
70 lines
1.2 KiB
Plaintext
70 lines
1.2 KiB
Plaintext
AccountEntry
|
|
AccountLister
|
|
AccountLister.ListAccounts
|
|
AccountSearcher
|
|
AccountSearcher.SearchAccounts
|
|
AdminProvider
|
|
AdminProvider.IsAdmin
|
|
AdminZoneSpec
|
|
Compiled
|
|
ErrNotLinked
|
|
Handler
|
|
Host
|
|
Host.ArtifactContent
|
|
Host.ArtifactGet
|
|
Host.Audit
|
|
Host.Complete
|
|
Host.KVGet
|
|
Host.KVPut
|
|
Host.KnowledgeDelete
|
|
Host.KnowledgePublish
|
|
Host.KnowledgeSearch
|
|
Host.KnowledgeWrite
|
|
Host.Owner
|
|
Host.ParseDocument
|
|
Host.PluginID
|
|
Host.TaskCreate
|
|
Host.TaskUpdate
|
|
HostClient
|
|
InProc
|
|
IntentSpec
|
|
Main
|
|
NewHostClient
|
|
NewScopedHost
|
|
Options
|
|
ProjectHost
|
|
ProjectHost.EnsureProject
|
|
ProjectHost.OwnedProject
|
|
ProjectHost.OwnedProjects
|
|
ProjectHost.Owner
|
|
ProjectHost.ProjectMetadata
|
|
ProjectHost.ProjectNameAvailable
|
|
ProjectHost.RenameOwnedProject
|
|
ProjectLifecycle
|
|
ProjectLifecycleRegistry
|
|
ProjectLifecycleRegistry.RegisterProjectLifecycle
|
|
RegisterCompiled
|
|
Registry
|
|
Registry.AddAdminZone
|
|
Registry.AddCommand
|
|
Registry.AddCommandHandler
|
|
Registry.AddIntent
|
|
Registry.AddSkill
|
|
Registry.Note
|
|
Registry.RegisterResourceAuthorizer
|
|
Registry.RegisterResourceAuthorizerV2
|
|
Request
|
|
ResetCompiled
|
|
ResourceAuthorizer
|
|
ResourceAuthorizerV2
|
|
ResourceAuthzQuery
|
|
SetRunner
|
|
SetScopedHostFactory
|
|
SurfaceHost
|
|
SurfaceHost.SurfaceActivation
|
|
SurfaceHost.SurfaceGet
|
|
SurfaceHost.SurfaceList
|
|
SurfaceHost.SurfaceSave
|
|
SurfaceSaveRequest
|
|
SurfaceVersion
|