weichen/Agent-System-Dev
1
0
Fork 0
Code Issues 1 Pull Requests 6 Actions 2 Packages Projects Releases Wiki Activity

U1: restrict role permissions to project access with R13 gate split #637

Merged
weichen merged 9 commits from feature/project-access-lifecycle-u1-role-project-access into feature/project-access-lifecycle 2026-10-19 16:21:47 +00:00
Conversation 0 Commits 9 Files Changed 3
+246 -2
9 Commits
Author SHA1 Message Date
weichen 7e3d09faf9 Fold-close the task card before merge
ci / test-pg (pull_request) Skipped
Details
ci / test (pull_request) Successful in 8m56s
Details
ci / svc-realcombo (pull_request) Skipped
Details 
Why: close the task card inside its own PR so landing it needs no post-merge backfill or separate close PR.
Evidence: .task/feature-project-access-lifecycle-u1-role-project-access.md -> .task/archive/feature-project-access-lifecycle-u1-role-project-access.md; status 已完成（合入前闭合）; PR #637 https://git-home.u1680832.nyat.app:30319/weichen/Agent-System-Dev/pulls/637.
Impact: task metadata only; the card is archived within PR #637 and lands with its merge commit.
Refs: task.sh close --self
 2026-10-19 16:09:51 +00:00
weichen 0c5a5674d6 Record independent review closure and final composition
ci / svc-realcombo (pull_request) Skipped
Details
ci / test (pull_request) Failing after 3s
Details
ci / test-pg (pull_request) Skipped
Details 
Why: the independent reviewer blocked on the missing provider-failure test
scenario; the repair transport 03646b5 added it and the filtered suite
passes. pins2 mistakenly reverted the frontend pin and pins3 restored the
final composition (backend 03646b5 + frontend 2c19439).

Evidence: /tmp/pal-u1-affected3.json (test-affected exit 0 on 7519672).

Impact: task card only.

Refs: PR #634.
 2026-10-19 16:09:27 +00:00
agent-exec-transport 75196728eb agent-exec transport 8e131e4c97857700601ef84749cea69e/f859169b4489 2026-10-19 16:08:20 +00:00
agent-exec-transport 8417e356db agent-exec transport f1fc92dcc0f0c67dbb8424a65d9ccb4c/ee07ab37e9bb 2026-10-19 16:07:10 +00:00
weichen 66578e778c Record U1 composition gate pass before independent review 
Why: the composed child (backend cf9c35a + frontend 2c19439) passed
make test-affected; recording it fixes the dirty checkout that blocked the
review dispatch.

Evidence: /tmp/pal-u1-affected.json (exit 0).

Impact: task card only.

Refs: PR #634.
 2026-10-19 15:51:34 +00:00
agent-exec-transport ef8d142a8a agent-exec transport 5aff33eabf4e1815994d44ec1c13abf3/36dd05125970 2026-10-19 15:49:29 +00:00
weichen 2fab81d3a6 Record U1 frontend delivery and verification 
Why: the U1 frontend unit (single project-access checkbox gated by
system.roles.manage, legacy dual-control model removed, tests rewritten)
was delivered in one cursor dispatch and applied as transport 2c19439.

Evidence: /tmp/pal-u1b-verify2.json (vitest suites + design guard + tsc).

Impact: task card only.

Refs: plan 2026-10-19-1440 U1; PR #634.
 2026-10-19 15:48:29 +00:00
weichen d2e78d53be Record U1 backend dispatch receipts and host verification 
Why: the U1 backend unit (single project-access boolean, R13 gate split,
admin bypass removal, legacy-row normalization) was delivered after four
dispatches — two legitimate scope-expansions (old-model test files, scratch
dir), one cursor network failure — and applied as transport cf9c35a.

Evidence: /tmp/pal-u1a-verify.json (build, filtered tests, vet, clean tree).

Impact: task card only.

Refs: plan 2026-10-19-1440 U1; PR #634.
 2026-10-19 15:41:44 +00:00
weichen a455919908 Record the task card for feature-project-access-lifecycle-u1-role-project-access 
Why: establish the authorized task workspace and its initial baseline.

Evidence: preserved precheck receipt in .task/feature-project-access-lifecycle-u1-role-project-access.md; R0=3e70d76a20a6caf6f2edfd738a86f501c31064b6.

Impact: task metadata only; the feature workspace starts at a8557f27ed.

Refs: .task/feature-project-access-lifecycle-u1-role-project-access.md
 2026-10-19 14:59:41 +00:00