weichen e0b1c27f1f Scope command audit storage and queries to the requesting owner ...

Why: GET /api/commands/audit leaked every tenant's audit rows (command ids, entrances, conversation ids, param digests) to any authenticated user; owner was never recorded nor filtered.
Evidence: Red run at a7cc69b FAIL (alice sees bob's row); after fix go test ./... 32/32 packages ok, including TestCommandAuditOwnerScoping and the v18 backfill test (rows recorded on the task card).
Impact: v18 migration adds command_audit.owner with actor-based backfill (empty-actor rows stay invisible via API, kept in-table); AppendAudit/ListAudits gain owner params; cmdbus port and fakes updated; handler passes authenticated owner. No public extension surface change.
Refs: Task card R1; U0 proposal section 5 C7 finding.

2026-10-08 14:02:19 +00:00

..

testdata

Add the public extension surface and platform services

2026-10-01 10:35:02 +00:00

accounts.go

Add admin-issued accounts with forced first-login password change

2026-09-30 11:15:22 +00:00

admission_test.go

Recover interrupted runs and commit terminal state once

2026-10-03 14:37:49 +00:00

artifact_download_test.go

Add download semantics and extension MIME fallback to artifact content

2026-09-30 15:23:02 +00:00

audit_scope_test.go

Scope command audit storage and queries to the requesting owner

2026-10-08 14:02:19 +00:00

auth_e2e_test.go

Add professional standards for every agent deliverable

2026-10-01 08:16:58 +00:00

auth.go

Add admin-issued accounts with forced first-login password change

2026-09-30 11:15:22 +00:00

borrow.go

Store secrets apart from settings and assemble context at the end

2026-10-04 18:20:10 +00:00

command_pairs_test.go

Scope command audit storage and queries to the requesting owner

2026-10-08 14:02:19 +00:00

e2e_test.go

Retire the legacy workflow executor and switch squad steps to agent-native (Q3 WP2)

2026-10-08 03:24:30 +00:00

guard_test.go

Refuse open listeners and cross-site writes without auth

2026-10-04 17:28:46 +00:00

guard.go

Refuse open listeners and cross-site writes without auth

2026-10-04 17:28:46 +00:00

platform_api.go

Add the public extension surface and platform services

2026-10-01 10:35:02 +00:00

ratelimit_e2e_test.go

Add multi-instance groundwork: blobstore seam for artifacts

2026-09-30 02:39:50 +00:00

ratelimit.go

Add multi-instance groundwork: blobstore seam for artifacts

2026-09-30 02:39:50 +00:00

rewind_http_test.go

Make the rewind happy test tolerant of the settle-release window

2026-10-07 18:04:08 +00:00

rewind.go

Rewind tracked files and fall back before the first token

2026-10-03 17:31:56 +00:00

server.go

Scope command audit storage and queries to the requesting owner

2026-10-08 14:02:19 +00:00

sse_retry_test.go

Send an SSE retry interval and replay after overflow

2026-10-03 16:35:34 +00:00

urlpreview_test.go

Add url-preview endpoint and gated sandboxed fs tool family

2026-09-30 17:16:07 +00:00

urlpreview.go

Add url-preview endpoint and gated sandboxed fs tool family

2026-09-30 17:16:07 +00:00

workflow_route_test.go

Recover interrupted runs and commit terminal state once

2026-10-03 14:37:49 +00:00