Agent-System

2,524 Commits 10 Branches 15 Tags

3 Commits

Include renames

Author	SHA1	Message	Date
weichen	f8730791b9	fix(coordinator): 回填会话项目绑定，避免受控投影被跳过聊天入口只把项目 ID 放在授权字段，协调器仍读空的 UserCtx.Project.ID，受控任务因此以 project_id=0 跳过账本投影，回复却称正文已保存。	2026-09-28 12:34:32 +00:00
weichenandCursor	7fdbee6c0c	test(server): adapt fixtures to IAM dual-gate fail-closed Boot memory IAM only via explicit test env opt-in; strict auth cases disable AllowInMemory after startup. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-09-16 09:42:07 +00:00
weichen	3145550a59	feat(security): complete P0 release blocking remediation Unify auth middleware and remove X-User-ID trust, add project_members authorization, sandbox workspaces via resolver, and admin-only reconcile by run_id. Introduce goose migrations with startup schema gate, fail closed when DB unavailable outside explicit ALLOW_IN_MEMORY, bundle web/dist in app Dockerfile, and remove frontend pseudo-login fallback.	2026-09-13 02:50:22 +00:00

Author

SHA1

Message

Date

weichen

f8730791b9

fix(coordinator): 回填会话项目绑定，避免受控投影被跳过

聊天入口只把项目 ID 放在授权字段，协调器仍读空的 UserCtx.Project.ID，受控任务因此以 project_id=0 跳过账本投影，回复却称正文已保存。

2026-09-28 12:34:32 +00:00

weichenandCursor

7fdbee6c0c

test(server): adapt fixtures to IAM dual-gate fail-closed

Boot memory IAM only via explicit test env opt-in; strict auth cases
disable AllowInMemory after startup.

Co-authored-by: Cursor <cursoragent@cursor.com>

2026-09-16 09:42:07 +00:00

weichen

3145550a59

feat(security): complete P0 release blocking remediation

Unify auth middleware and remove X-User-ID trust, add project_members
authorization, sandbox workspaces via resolver, and admin-only reconcile
by run_id. Introduce goose migrations with startup schema gate, fail closed
when DB unavailable outside explicit ALLOW_IN_MEMORY, bundle web/dist in
app Dockerfile, and remove frontend pseudo-login fallback.

2026-09-13 02:50:22 +00:00