Agent-System-Dev

4,769 Commits 20 Branches 4 Tags

3 Commits

Include renames

Author	SHA1	Message	Date
weichenandCursor	67d6fd81cd	Require the real lifecycle gate and fault rollback ci / svc-realcombo (pull_request) Successful in 1m45s Details ci / test-pg (pull_request) Successful in 2m53s Details ci / test (pull_request) Successful in 4m45s Details Why: The live deploy journal never called fault injection, and test-lifecycle failed closed on login so CI could not require the real combination cases. Evidence: SELF python3 -m unittest tests.test_svc_u2.U2ReleaseTests -q exit 0 (35 ok, 1 skipped) on 3602a87; receipt sha256 9b5785577751e8e9e7947cf9700fb8854b1c80142f34273ae25f3097ee4c9aa8. Impact: test-pg builds the Dev binary and runs make test-lifecycle. Login and full-track deploy without SVC_RDM_ORIGIN stay NOT_RUN. No live data move and no account CLI. Refs: recovery plan D2/D3; Dev #485 Co-authored-by: Cursor <cursoragent@cursor.com>	2026-10-13 01:14:27 +00:00
weichen	9f7b11675e	Preserve rollback artifacts across same-second deployments Why: Second-resolution release IDs let staging delete a previous release when a same-source deployment ran within the same clock tick. Evidence: Fixed-clock rollback regression fails before and passes after; 250 governance checks pass. Independent review replays collision and copy-failure protection; receipts are in the primary task card. Impact: Add invocation identity and exclusive directory creation; keep old artifacts intact. Also retain the latest compatible frontend pointer. Refs: User-approved I2; Dev #483; Frontend #71/#72	2026-10-12 14:50:09 +00:00
weichen	241bea6ce7	Add immutable release dirs with switch journal and failure rollback Why: deploy overwrote live artifacts after stopping the old service, so a failed start or workbench check left instances in a mixed registration-vs-artifact state with no recovery path (2026-10-12 rdm1/rdmcand); the report's U2 requires restorable updates. Evidence: make test-governance 250 OK; five svc suites 105 OK (rows in the task card); new tests cover layout/pidcheck stability, rollback on start failure with desired-state restore, build failure keeping the old service running, interrupted-switch journal resolution, and schema- advance blocking rollback without touching the database. Impact: agent deploys stage immutable releases/<id>/ and switch the current symlink atomically; deploy.journal persists the switch and is resolved at start/restart/deploy/update/recover entries; legacy layouts are adopted on first deploy and remain readable; release/rdm tracks verify sha256 before staging. Refs: .task/feature-svc-u2-release-recovery.md; user goal directive 2026-10-12; Dev #474 (U1 gate); Documents unified-deploy plan r2.	2026-10-12 13:52:29 +00:00

Author

SHA1

Message

Date

weichenandCursor

67d6fd81cd

Require the real lifecycle gate and fault rollback

ci / svc-realcombo (pull_request) Successful in 1m45s

Details

ci / test-pg (pull_request) Successful in 2m53s

Details

ci / test (pull_request) Successful in 4m45s

Details

Why: The live deploy journal never called fault injection, and test-lifecycle failed closed on login so CI could not require the real combination cases.
Evidence: SELF python3 -m unittest tests.test_svc_u2.U2ReleaseTests -q exit 0 (35 ok, 1 skipped) on 3602a87; receipt sha256 9b5785577751e8e9e7947cf9700fb8854b1c80142f34273ae25f3097ee4c9aa8.
Impact: test-pg builds the Dev binary and runs make test-lifecycle. Login and full-track deploy without SVC_RDM_ORIGIN stay NOT_RUN. No live data move and no account CLI.
Refs: recovery plan D2/D3; Dev #485
Co-authored-by: Cursor <cursoragent@cursor.com>

2026-10-13 01:14:27 +00:00

weichen

9f7b11675e

Preserve rollback artifacts across same-second deployments

Why: Second-resolution release IDs let staging delete a previous release
when a same-source deployment ran within the same clock tick.

Evidence: Fixed-clock rollback regression fails before and passes after;
250 governance checks pass. Independent review replays collision and
copy-failure protection; receipts are in the primary task card.

Impact: Add invocation identity and exclusive directory creation; keep
old artifacts intact. Also retain the latest compatible frontend pointer.

Refs: User-approved I2; Dev #483; Frontend #71/#72

2026-10-12 14:50:09 +00:00

weichen

241bea6ce7

Add immutable release dirs with switch journal and failure rollback

Why: deploy overwrote live artifacts after stopping the old service, so
a failed start or workbench check left instances in a mixed
registration-vs-artifact state with no recovery path (2026-10-12
rdm1/rdmcand); the report's U2 requires restorable updates.
Evidence: make test-governance 250 OK; five svc suites 105 OK (rows in
the task card); new tests cover layout/pidcheck stability, rollback on
start failure with desired-state restore, build failure keeping the old
service running, interrupted-switch journal resolution, and schema-
advance blocking rollback without touching the database.
Impact: agent deploys stage immutable releases/<id>/ and switch the
current symlink atomically; deploy.journal persists the switch and is
resolved at start/restart/deploy/update/recover entries; legacy layouts
are adopted on first deploy and remain readable; release/rdm tracks
verify sha256 before staging.
Refs: .task/feature-svc-u2-release-recovery.md; user goal directive
2026-10-12; Dev #474 (U1 gate); Documents unified-deploy plan r2.

2026-10-12 13:52:29 +00:00