weichen/Agent-System
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
2,524 Commits 10 Branches 15 Tags
dev
Commit Graph
119 Commits
Author SHA1 Message Date
agent-bot 2ad1ef393a feat(bootstrap): instance identity, single-start lock, root checks (U10c slice 1)
CI / backup-restore-drill (pull_request) Successful in 27s
Details
CI / web (pull_request) Successful in 32s
Details
CI / go-vet (pull_request) Successful in 14s
Details
CI / short-tests-report (pull_request) Failing after 36s
Details 
- internal/bootstrap.EnsureInstance on the serve path: normalized writable
  roots, symlink-aware validation, data-root vs vault containment rejection,
  filesystem-root refusal
- instance-marker.json in data root: first boot creates; foreign instance
  ID fails closed (explicit adopt/migrate required, KTD18)
- instance.lock non-blocking flock detects duplicate starts locally without
  any governance tooling; ownership held until process exit
- Config.InstanceID (INSTANCE_ID env/file key; default 'default') joins the
  instance-settings bootstrap denylist (identity cannot be self-overwritten)
- auth is Bearer+localStorage per origin (no cookies) - browser isolation
  holds across ports; documented in the unit template
- deploy/systemd/agent-system@.service template (instance %i: env file,
  DATA_DIR, hardened service scope)
- tests: marker create/foreign reject, vault overlap, invalid IDs, root
  refusal, in-process duplicate-start detection
 2026-09-29 08:32:15 +00:00
agent-bot 2c75dcaf69 refactor(squad): AssetProvider port replaces direct template dependency
CI / go-vet (pull_request) Successful in 13s
Details
CI / short-tests-report (pull_request) Failing after 35s
Details
CI / backup-restore-drill (pull_request) Successful in 36s
Details
CI / web (pull_request) Successful in 32s
Details 
KTD1 fifth step (behavior preserved):
- squad.AssetProvider{DocTemplate,RenderDoc,AgentInstruction,
  AgentInstructionFile} injected via Options.Assets into Service,
  WorkspaceEngine and AdaptivePlanner
- bizdev templateAssetProvider maps port to internal/template (assembly side)
- nil-provider paths degrade to the same fallbacks the old error branches
  used (placeholder template, role header) — fail-visible, no guessing
- squad -> template import eliminated; arch edge moved bizdev->template
- verified: build/vet/arch green, squad+bizdev short tests pass
 2026-09-29 06:29:51 +00:00
agent-bot 8c2dd49e80 refactor(squad): quote preparation moves to Core via TaskPreparer hook
CI / web (pull_request) Successful in 32s
Details
CI / go-vet (pull_request) Successful in 14s
Details
CI / short-tests-report (pull_request) Failing after 35s
Details
CI / backup-restore-drill (pull_request) Successful in 33s
Details 
KTD1 fourth step:
- squad.Options.TaskPreparer + TaskPreparation (Attachment + Backfills +
  MirrorTemplateToOutput); squad stays sole writer of its workspace files
- CDO quote calc/xlsx/backfill implementation moves to bizdev
  (quote_preparer.go); squad/quote_backfill.go relocated to bizdev
- arch path rule enforced the boundary: bizdev may not name/write
  output.md; mirroring decided squad-side via flag
- squad -> quote import eliminated; engine.go delegations now local
- verified: build/vet/arch green, squad+bizdev short tests pass
 2026-09-29 06:16:19 +00:00
agent-bot f034a80c09 refactor(squad): drop dead WorkspaceRefForRun adapter (zero callers) 
squad -> workspace import eliminated; physical workspace refs stay
product-side per KTD1. Arch edge removed from allowlist.
 2026-09-29 06:11:55 +00:00
agent-bot e47cfd8f4e refactor(extract): move text extraction to internal/textextract
CI / go-vet (pull_request) Successful in 12s
Details
CI / short-tests-report (pull_request) Failing after 36s
Details
CI / backup-restore-drill (pull_request) Successful in 24s
Details
CI / web (pull_request) Successful in 32s
Details 
KTD1 third step: material parsing returns to its own capability.
- ExtractTextWithAnchors + docx/anchor helpers move from squad/extract.go
  to internal/textextract (pure stdlib, no workflowdef dep)
- squad/extract.go keeps only ExtractAdvisorBriefing (squad domain logic)
- callers updated: squad context builders, bizdev materials, server
  chat_document_reader, materialindex pipeline
- reverse dependency materialindex -> squad eliminated (KTD1 explicit goal)
- module-boundaries.yaml: textextract declared + 4 edges
- verified: build/vet clean, arch green, textextract/squad/materialindex/
  bizdev tests green; server pre-existing env-dependent failure unchanged
  (issue #2, fails with and without this change)
 2026-09-29 06:11:20 +00:00
agent-bot 97879e5956 arch(boundaries): declare bizdev->agent assembly edge
CI / go-vet (pull_request) Successful in 11s
Details
CI / short-tests-report (pull_request) Failing after 34s
Details
CI / backup-restore-drill (pull_request) Successful in 29s
Details
CI / web (pull_request) Successful in 32s
Details 
bizdev is the composition point injecting the backend factory into
squad.Options (KTD1: assembly stays in the product app); the new import is
intentional and now owned by the machine contract, same PR as the code.
 2026-09-29 05:13:54 +00:00
weichen 5d762fb206 merge: candidate subagent-process-view-impl-2026-09-28 into dev 
# Conflicts:
#	.doc/ops/CURRENT.md
 2026-09-28 10:36:26 +00:00
weichen 6a461dec0c docs(system-design): 小队过程流式展示与 subagent 子页面设计 
七断点打通方案（reasoning 解析→agentx 转发→Backend OnEvent 回调→squad 桥接→runner 流式→includeDetails 参数化→前端 detail 分支）+ subagent 子页面设计（hash 路由/成员卡/ThinkingBlock/ToolCallCard/过程流聚合）；P0–P5 分期路线与风险边界。纯设计稿，无代码实施。

任务: subagent-process-view-design-2026-09-28
 2026-09-28 06:04:14 +00:00
weichen 87888213da chore(arch): 补记 coordinator 对 projectworkflow 的既有依赖 
block 模式基线为 0，该 import 在本修复之前已在 engine_task.go。
 2026-09-28 05:15:10 +00:00
weichen 73a3aa9286 docs(errcode): 登记错误码目录、任务和验证报告 
目录按注册表列出稳定码，测试报告记录工程门禁与无测试库时的审计跳过。
 2026-09-28 02:27:29 +00:00
weichen f3f23a3018 feat(errcode): 用稳定错误码记录 HTTP 与异步失败 
失败响应此前不写日志，request_id 无法对照原因。注册表不覆盖处理器已经给出的 HTTP 状态。
 2026-09-28 02:27:16 +00:00
weichen 6a3a0dc201 fix(security): harden bypass authz, gate blind spot, command exec, validated_only (review P0/P1) 
- FIND-SEC-01: GetUserContext requires session ownership (handler 403 +
  SQL/memory owner filter); in-memory HTTP + isolated-PG regressions
- FIND-ARCH-01: archtest fails closed on untracked table writes (+noise
  exemption) and registers 50 existing writer tables in table_owners
- FIND-SEC-02: Authorizer without pool denies by default; explicit
  NewInMemoryAuthorizer seam opt-in via ALLOW_IN_MEMORY at composition
- FIND-SEC-03: swboot commands run argv-exec (no sh -c) with exact
  basename allowlist match; prefix-spoof and no-shell-eval tests
- FIND-FLOW-01: confirm rejects validated_only plans; ExecuteClaimed
  hard-refuses validated_only steps (new error codes + HTTP mapping)
- FIND-QUAL-01: intentflow.ValidateFlagConsistency fail-fast at Assemble
 2026-09-26 02:00:14 +00:00
weichen 83561682eb feat(swboot): wire SWBOOT-10 controlled patch executor (fail-closed) 
DB-backed repo_path_allowlist reader (deny-all until admin seeds), per-prefix
admin test_commands (goose 00075), execution evidence table (goose 00074),
isolated git-worktree patch executor with command allowlist/time/output caps
and failure-stops evidence; controlled_patch creation/preview unlocked only
with an allowlisted repo binding (projectworkflow gate + catalog flag);
creator-only server endpoints for bindings/executions; merge/push/deploy stay
behind a typed separate-authorization boundary. Module boundary: app->swboot
composition import registered.
 2026-09-26 00:56:59 +00:00
weichen 6733205d58 docs(design): 非容器化单二进制三环境交付方案（自 single-binary-deploy-design 分支落地；CURRENT 认领行已废弃不入） 2026-09-25 20:22:45 +00:00
weichen 6e76a35943 docs(system-design): 修复 README t20 设计文档迁址后的失效链接（remediation→system-design） 2026-09-25 20:21:43 +00:00
weichen 86881bef6e docs(system-design): 新增项目成员权限总览（对话/任务/补充/文档三权整合） 
- 三层正交模型：系统角色能力矩阵 / 项目成员角色 / 文档三权（author-reviewer-approver）
- 四类核心动作权限矩阵：发起对话、执行任务、补充信息、文档编制与修改（deny_only_submit）
- 认证与路由分层、管理台两类 gate、前端 capabilities fail-closed 消费方式
- 如实标注已知缺口：member/viewer 服务端不区分写、visibility 键仅前端消费、system:* 未拆分
- 更新 system-design/README.md 索引与目录清单

task: member-permissions-doc-2026-09-24
 2026-09-25 20:20:58 +00:00
weichen b5a782bb38 feat(chat): dialogue triggers for comments/reopen/pending-supplements with mistouch guards 
Wire intent→coordinator DocResolver confirm cards→action_executor kinds for comment, reopen, pending-supplements query, and real submit-review execution.
 2026-09-25 20:14:10 +00:00
weichen 2e56ba9719 feat(docgov): complete review lifecycle gaps for lock/notify/comment/reopen 
Defer locked-period supplements to a pending ledger, route duty-holder
notifications, persist stage-scoped comments, and prefer Approver for reopen.
 2026-09-25 20:08:56 +00:00
weichen 1da17a282c merge: candidate dialogue-context-layout-fix-2026-09-25 into dev 2026-09-25 04:01:46 +00:00
weichen 86e9d3706b feat(sysadmin): admin env settings + maintenance FD handoff 
Persist agent/secrets settings with masked secrets and runner hot-reload;
add maintenance windows, maintpage binary, and zero-downtime listener handoff.
 2026-09-24 23:20:20 +00:00
weichen dc29b84cdf feat(ctx): inject cleaned project dialogue into squad and assistant 
Add dialoguectx packaging, conflictresolve adjudication with HITL routing,
workspace context/dialogue/ injection (default on), and goose 00071.
 2026-09-24 17:04:04 +00:00
weichen d0b4d3d4dd fix(arch): allow server→supplementimpact and tighten HTTP batch ExpiresAt 2026-09-24 11:45:54 +00:00
weichen 4e0e6a1418 feat(notification): digest aggregates, supplement-impact batch, and free-collab hooks 
Add notification digests with ON CONFLICT DO UPDATE, migrations 00068-00070,
supplementimpact module (analyze → confirm → claim-aware split), and wire
coordinator/mutate hooks plus proposal_required digests.
 2026-09-24 11:44:20 +00:00
weichen 45f21e84c7 feat(jevdecide): product shadow client with offline eval gates 
Add typed jevdecide HTTP client (circuit, metrics) and coordinator
DecideAssist wiring behind JEV_DECIDE_MODE (default off). Offline eval
and synthetic soak evidence gate realtime/profile before assist rollout.
 2026-09-23 17:40:40 +00:00
weichen 3e01f18756 merge: integrate final-artifact-vault into local_dev (authorized exception) 
User authorized lifting CURRENT FAV whole-branch merge protection on
2026-09-23. Keep FAV_DEGRADED_READ/FAV_PUBLISHER_ENABLED default false.
Drop duplicate goose 00034 (local_dev already has 00036). Preserve
agentx workspace admin routes and pin-export wiring.
 2026-09-23 13:57:08 +00:00
weichen 6032dbaa16 merge: integrate go-agentx runtime into local_dev candidate 
Bring pinative/agentx workspace registry and A-B harness onto current
local_dev; renumber goose agentx registry 00062→00066 to avoid clash
with chat-summary/provenance migrations. Keep CURRENT/MATRIX as ours
for later docs apply; union module-boundaries agentx import tree.
Path literals use workspace constants for arch-check.
 2026-09-23 13:25:32 +00:00
weichen e6ddfab9e8 merge: sync origin/dev into local dev (closeout batch) 
Resolve conflicts: both CURRENT claim tables (slot preserved), local
multi-host coordination plan + origin phased companion, origin
module-boundaries, combined PG isolation with remote product tests.
FEATURE-MATRIX takes origin record_id layout; A-G done bump deferred
pending evidence row apply.
 2026-09-23 12:45:30 +00:00
WeiCHEN 2006c7103a fix(arch): restore coordinator→docgov allowlist after engine-split 
Engine split kept the existing production import; vocabulary allowlist rewrite had dropped the key and left arch-check red on tip.
 2026-09-22 22:14:52 +08:00
WeiCHEN f77cf953d5 merge(dev): sync track-s1 shadow onto current local dev 2026-09-22 22:13:31 +08:00
WeiCHEN 08af12b936 merge: feature/g2-g3-exception-clearance-2026-09-22 
Keep G1 cleared sql_write; land G2/G3 path clearances; baseline to zero.
 2026-09-22 22:08:53 +08:00
WeiCHEN a8c6eb6638 refactor(boundaries): clear U5 path leaks and U8 task_runs write 
Route deliverable/workspace paths through workspace constants and cancel
open runs via taskrun.CancelOpenByProject so G2/G3 exceptions can drop.
 2026-09-22 22:01:14 +08:00
WeiCHEN 0c572ddaca test(chat): align semantic shadow tests with async pending path 
Drain/wait after GenerateRollingSummary; register summary table writers;
document consolidation discarding duplicate S1 dirty worktrees.
 2026-09-22 21:59:12 +08:00
WeiCHEN 52c7828339 merge: feature/docgov-vocabulary-2026-09-22 
Keep contracts/vocabulary with G1 uow/workspace duty ports; chat stays decoupled.
 2026-09-22 21:58:16 +08:00
WeiCHEN 265de19725 merge: feature/chat-app-decouple-2026-09-22 2026-09-22 21:53:38 +08:00
WeiCHEN 2c80129421 merge: feature/g1-exception-clearance-2026-09-22 2026-09-22 21:53:25 +08:00
WeiCHEN 9a5b8a5ed5 docs(ops): finalize T20 W4 design decisions packaging 2026-09-22 21:51:21 +08:00
WeiCHEN 7d51e40b1c refactor(boundaries): clear data/dev path leaks; start output.md via DeliverableKey 
Remove coordinator/bizdev/storage data/dev fallbacks and register
agent→workspace so default agent targets use workspace.DeliverableKey.
Remaining U5 path and G3 task_runs clearance stay open.
 2026-09-22 21:44:57 +08:00
WeiCHEN 381b56dafc refactor(docgov): converge shared lifecycle vocab into contracts 
Introduce internal/contracts/vocabulary for state/role/error sentinels,
alias through docgov, and retarget hot production consumers so
coordinator no longer imports docgov for vocabulary-only use.
 2026-09-22 21:44:57 +08:00
WeiCHEN 9c7a5be209 feat(arch): clear G1 U3/U4 sql_write and path exceptions 
Move document_records duty-slot writes into docgov, project ledger
heads through docgov/freedoc ports, and workspace deliverable I/O
through DeliverableStore so arch-check baseline drops to sql_write:1
path:13.
 2026-09-22 21:40:12 +08:00
WeiCHEN 485572dce2 docs(ops): T20 W4 hardening design decisions 
Record recommended approaches, risks, acceptance, and product/env
blockers for audit-remainder design items; cross-link F5/I8 to lowrisk.
 2026-09-22 21:29:47 +08:00
WeiCHEN 9229b94c32 docs(ops): T20 W4 design decisions for hardening backlog 
Record recommended approaches, risks, acceptance, and product/env
blockers for B1/B3–B5/B7/B11, F1/F4/F7/F8, I1/I4/I6; cross-link F5/I8
to t20-lowrisk without duplicating.
 2026-09-22 21:27:25 +08:00
WeiCHEN a2eabe01b1 refactor(chat): break chat→app import cycle via owned ports 
Invert chat dependencies on chatflow/intentflow/stageflow through
composition-root adapters; replace AssembleRequest coordinator embeds
with local DTOs and tighten the module-boundaries allowlist.
 2026-09-22 21:25:44 +08:00
weichen 9814a67ee6 docs(architecture): define reusable module contracts and adoption plan 2026-09-22 11:13:51 +00:00
weichenandCursor 3c2c7f9ccc test+arch: unblock production gate (import SSOT + isolated test DSN) 
arch-check --mode block failed on frozen dev (23 NEW import findings):
modules materialindex/mineru/workflowscope and edges shipped via their
own accepted tasks were never registered in module-boundaries.yaml.
Register the intentional allowlist edges (precedent 97b868a9); no new
exceptions are added.

7 PG tests fell back to a hardcoded dev DB (127.0.0.1:5433) when
TEST_DATABASE_URL/CONTEXT_DB_DSN were unset, contradicting the isolated
test-DB contract (BUG-08) and polluting dev on a bare 'go test -short'.
Change the fallback to skip when no isolated DB env is provided.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-09-22 18:04:02 +08:00
weichen 0a1efb73dd fix(arch): sync module-boundaries import allowlist for materialindex, mineru, workflowscope 
注册 2026-09-21 已合入 dev 的新包与跨模块边（force-material-chunk-index、
mineru-doc-parsing、workflow-scope-weighting、doc-notify 等遗留的登记漂移），
恢复 arch-check --mode block 在 dev HEAD 的可通过性。纯注册表同步，无代码改动。
 2026-09-21 18:19:20 +00:00
weichen 174e59e692 test(agentx): compare pi-native with the container backend 
Record token usage and nearest-rank latency so the replacement gate matches the written bar.
 2026-09-21 15:11:29 +00:00
weichen fed87ad14b feat(governance): enforce managed worktrees and scoped agent operations 
Consolidate approved policies and add local lease, document CAS, commit, candidate and environment gates. Preserve conservative recovery and cleanup limits.
 2026-09-21 14:41:40 +00:00
weichenandCursor e4b4e0dde8 feat(api): expose the trace index, reopen, and recheck routes 
Use the record tables when migration 00059 is present, and hide statements from documents the caller cannot see.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-09-20 15:35:07 +00:00
weichenandCursor 54c8a3d107 docs(design): specify stage backtrack and impact loop 
Record how later materials can affect earlier stages without hard gates, and split the implementation into planned slices.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-09-20 15:09:06 +00:00
weichenandCursor fe46705b67 docs(system-design): list the module standards file in the design index 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-09-20 13:22:21 +00:00