weichen
83561682eb
feat(swboot): wire SWBOOT-10 controlled patch executor (fail-closed)
...
DB-backed repo_path_allowlist reader (deny-all until admin seeds), per-prefix
admin test_commands (goose 00075), execution evidence table (goose 00074),
isolated git-worktree patch executor with command allowlist/time/output caps
and failure-stops evidence; controlled_patch creation/preview unlocked only
with an allowlisted repo binding (projectworkflow gate + catalog flag);
creator-only server endpoints for bindings/executions; merge/push/deploy stay
behind a typed separate-authorization boundary. Module boundary: app->swboot
composition import registered.
2026-09-26 00:56:59 +00:00
weichen and Cursor
37fb1ba44e
merge: feature/capability-enablement-impact-plan; renumber chat_summaries to 00058
...
Absorb stalled capability fixes and avoid goose out-of-order on schema 57 DBs by shipping chat_summaries as 00058.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-09-20 10:38:12 +00:00
weichen and Cursor
28478bdca5
fix(db): enforce global unique project names across creators
...
Replace per-creator name uniqueness with a global index among
non-retired projects, and reject cross-user duplicate creates with 409.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-09-20 09:10:55 +00:00
weichen and Cursor
5cd22c7327
fix(authz): harden permissions, chat gate, and project create idempotency
...
Add project:manage_members, CSP frame-src, task-run member view, CreateUser
tx error handling, ERR_NO_PROJECT chat gate, and creator-scoped project
name/client_key uniqueness to stop duplicate creates and auth gaps.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-09-20 07:04:57 +00:00
weichen and Cursor
033462a4e6
fix(authz): separate capability readiness from configured flags
...
管理台不再把开关值当成能力已接入。lineage 读取必须落在 URL 项目内，并按两端文档可见性裁剪，跨项目或不可见文档只返回空列表。
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-09-20 03:45:16 +00:00
weichen and Cursor
37b1aaa3ae
feat(rdev): add medical design-control workflow (13 stages / 60 docs)
...
Seed rdev.v2.json, rd_ templates, catalog policy (order 40), squad
kind orchestration, and hard precheck requiring completed main (CDO).
Includes StageKey dynamicization from P0 and docs for P2–P4 skeleton.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-09-17 09:46:26 +00:00
weichen and Cursor
eee42d1d16
feat(workflow-design): catalog-driven software create wizard and docs_only PI
...
Software projects mount only bootstrap/delivery keys and skip the medical
seven-template clone. SWBOOT-10 stays a fail-closed stub.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-09-17 04:11:03 +00:00
weichen and Cursor
f6034fad37
feat(api): SWBOOT-05..08 wizard hooks and SWBOOT-10 allowlist stub
...
Add project-types/compliance catalogs, creation-preview, software create
fields, and fail-closed repo allowlist stub without real patch/merge.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-09-16 15:43:13 +00:00
weichen and Cursor
2e586c99b8
test(projectworkflow): reject create-time active bypass
...
Creating with initial_workflow_key must stay in planning with an empty
active key while the catalog still mounts.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-09-14 07:55:51 +00:00
weichen and Cursor
ad6e38d11a
test(workflow): add governance regression and activation PG coverage
...
Cover public auth config, catalog policy, official main workflow activation on Postgres, and conn-busy metadata writeback fixes.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-09-13 02:50:23 +00:00
weichen and Cursor
12756b13e6
fix(projectworkflow): generate UTF-8 safe project codes for Chinese names
...
Truncate project codes by rune instead of byte to prevent invalid PostgreSQL UTF-8 sequences from mixed CJK and ASCII slugs.
test(server): add PG pi-agent governance E2E and Phase 5 acceptance matrix
Cover Chinese HTTP project create, pi-agent intake after workflow activate, authz negatives, activate idempotency, and migration version gate.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-09-13 02:50:23 +00:00
weichen and Cursor
dc629fc4b8
feat(service): implement project workflow plan, preview, and activation flow.
...
New projectinstance package validates three-duty separation, issues confirmation tokens, and activates immutable workflow instances; new projects start in planning mode.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-09-13 02:50:23 +00:00
WeiCHEN
f87a6ee28d
feat(workflow): Phase 1 & 2 数据库迁移、项目创建人权威化与多工作流控制面
2026-09-13 02:50:21 +00:00
weichen