weichen f84733d128 Add shared execution budgets and the action-authz matrix (U3 slice 2) ...

Why: plan U3 remainder (R8/KTD13) - execution admission must be bounded and shared (leases in the database, parents yield while waiting so budgets cannot deadlock parent-child), and project authorization must distinguish read/edit/approve/execute/admin with default-deny for unconfigured actions.

Evidence: full suite green on SQLite and against real PostgreSQL 18.6 + Redis (isolated instance); new tests - admission_pg_test (enforcement, per-user, concurrent no-oversell), runmgr admission tests (saturated-budget sync spawn progresses, background children share the budget, bounded queue 429), server action-matrix tests (default deny, legacy adapter read-only, action-aware authoritative + fail-closed).

Impact: admission_leases (v21) with atomic lease accounting under an advisory lock; runtime.execBudgetGlobal/PerUser/execQueueMax settings (all zero = off, historical behavior preserved); conversation turns, background and sync subagents share the pool, parents yield around synchronous children and HITL waits; queue-full rejects 429 before writing; server gains ProjectAction matrix + SetProjectActionAuthorizer with legacy EXT-8 read fallback.

Refs: proposals/2026-10-11-collaboration-storage-and-distribution.md U3 R8/KTD13; docs/guides/team-storage.md section 9.

2026-10-11 05:18:12 +00:00

..

testdata

Wire plugin slash aliases and the intent declaration surface (G2-2)

2026-10-10 00:15:21 +00:00

accounts.go

Close request atomicity: locked message append, card versions, atomic rate limit, recovery holds (U3 slice 1)

2026-10-11 04:37:50 +00:00

action_matrix_test.go

Add shared execution budgets and the action-authz matrix (U3 slice 2)

2026-10-11 05:18:12 +00:00

admission_test.go

Recover interrupted runs and commit terminal state once

2026-10-03 14:37:49 +00:00

artifact_download_test.go

Add download semantics and extension MIME fallback to artifact content

2026-09-30 15:23:02 +00:00

audit_scope_test.go

Scope command audit storage and queries to the requesting owner

2026-10-08 14:02:19 +00:00

auth_e2e_test.go

Add professional standards for every agent deliverable

2026-10-01 08:16:58 +00:00

auth.go

Add admin-issued accounts with forced first-login password change

2026-09-30 11:15:22 +00:00

borrow.go

Store secrets apart from settings and assemble context at the end

2026-10-04 18:20:10 +00:00

command_pairs_test.go

Scope command audit storage and queries to the requesting owner

2026-10-08 14:02:19 +00:00

e2e_test.go

Keep only hard facts in the blocking gate and add fact-consistency checks

2026-10-10 00:04:57 +00:00

ext9_upload_switch_test.go

Add the EXT-9 publish/revoke surface and red acceptance tests

2026-10-08 15:53:39 +00:00

guard_test.go

Refuse open listeners and cross-site writes without auth

2026-10-04 17:28:46 +00:00

guard.go

Refuse open listeners and cross-site writes without auth

2026-10-04 17:28:46 +00:00

platform_api.go

Add the public extension surface and platform services

2026-10-01 10:35:02 +00:00

ratelimit_e2e_test.go

Add multi-instance groundwork: blobstore seam for artifacts

2026-09-30 02:39:50 +00:00

ratelimit.go

Add multi-instance groundwork: blobstore seam for artifacts

2026-09-30 02:39:50 +00:00

resource_authz_test.go

Consult the EXT-8 authorizer in project artifact read paths

2026-10-08 15:34:18 +00:00

rewind_http_test.go

Make the rewind happy test tolerant of the settle-release window

2026-10-07 18:04:08 +00:00

rewind.go

Rewind tracked files and fall back before the first token

2026-10-03 17:31:56 +00:00

server.go

Add shared execution budgets and the action-authz matrix (U3 slice 2)

2026-10-11 05:18:12 +00:00

shared_projects_test.go

Share retrieval inside runs and open project listing/conversations to members (EXT-13/15)

2026-10-09 15:44:48 +00:00

shared_retrieval_test.go

Close the EXT-8 remaining blocks: vector sharing, hostapi face, citation consistency

2026-10-08 17:16:10 +00:00

sse_retry_test.go

Send an SSE retry interval and replay after overflow

2026-10-03 16:35:34 +00:00

urlpreview_test.go

Add url-preview endpoint and gated sandboxed fs tool family

2026-09-30 17:16:07 +00:00

urlpreview.go

Add url-preview endpoint and gated sandboxed fs tool family

2026-09-30 17:16:07 +00:00

workflow_route_test.go

Recover interrupted runs and commit terminal state once

2026-10-03 14:37:49 +00:00