weichen
83561682eb
feat(swboot): wire SWBOOT-10 controlled patch executor (fail-closed)
...
DB-backed repo_path_allowlist reader (deny-all until admin seeds), per-prefix
admin test_commands (goose 00075), execution evidence table (goose 00074),
isolated git-worktree patch executor with command allowlist/time/output caps
and failure-stops evidence; controlled_patch creation/preview unlocked only
with an allowlisted repo binding (projectworkflow gate + catalog flag);
creator-only server endpoints for bindings/executions; merge/push/deploy stay
behind a typed separate-authorization boundary. Module boundary: app->swboot
composition import registered.
2026-09-26 00:56:59 +00:00
WeiCHEN
dca33c705d
refactor(boundaries): split five oversized packages by use-case
...
Move bizdev/freedoc/intent/projectworkflow/squad giant files into
≤800-line use-case siblings without behavior change; short tests green.
2026-09-23 09:52:16 +08:00
weichen and Cursor
37fb1ba44e
merge: feature/capability-enablement-impact-plan; renumber chat_summaries to 00058
...
Absorb stalled capability fixes and avoid goose out-of-order on schema 57 DBs by shipping chat_summaries as 00058.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-09-20 10:38:12 +00:00
weichen and Cursor
28478bdca5
fix(db): enforce global unique project names across creators
...
Replace per-creator name uniqueness with a global index among
non-retired projects, and reject cross-user duplicate creates with 409.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-09-20 09:10:55 +00:00
weichen and Cursor
5cd22c7327
fix(authz): harden permissions, chat gate, and project create idempotency
...
Add project:manage_members, CSP frame-src, task-run member view, CreateUser
tx error handling, ERR_NO_PROJECT chat gate, and creator-scoped project
name/client_key uniqueness to stop duplicate creates and auth gaps.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-09-20 07:04:57 +00:00
weichen and Cursor
033462a4e6
fix(authz): separate capability readiness from configured flags
...
管理台不再把开关值当成能力已接入。lineage 读取必须落在 URL 项目内，并按两端文档可见性裁剪，跨项目或不可见文档只返回空列表。
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-09-20 03:45:16 +00:00
weichen and Cursor
9038c65329
fix: 补齐 rows.Err() 检查（R-2，其余包）
...
覆盖 kb/storage/projectworkflow/docgov/freedoc 与两个 document CLI。
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-09-18 03:40:24 +00:00
weichen and Cursor
eee42d1d16
feat(workflow-design): catalog-driven software create wizard and docs_only PI
...
Software projects mount only bootstrap/delivery keys and skip the medical
seven-template clone. SWBOOT-10 stays a fail-closed stub.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-09-17 04:11:03 +00:00
weichen and Cursor
f6034fad37
feat(api): SWBOOT-05..08 wizard hooks and SWBOOT-10 allowlist stub
...
Add project-types/compliance catalogs, creation-preview, software create
fields, and fail-closed repo allowlist stub without real patch/merge.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-09-16 15:43:13 +00:00
weichen and Cursor
bdc6415944
fix(db): retire goose-seeded demo projects from lists
...
Mark projects 6001–6010 as demo_retired and exclude them from default
project list queries so demo seeds no longer pollute real workspaces.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-09-16 02:50:34 +00:00
weichen and Cursor
f07178fa73
feat(service): enforce three-workflow governance and instance lifecycle
...
Wire catalog policy, v2 manifests, stage access, activation metadata fixes, and coordinator instance advance around frozen workflow snapshots.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-09-13 02:50:23 +00:00
weichen and Cursor
90f77eac93
feat(authz): implement six-phase permissions, settings and workflow v2
...
Close P0 auth gaps for lineage/runs, stage ABAC fail-closed, and
project:create; add IAM migrations 00021-23, me settings APIs, schema v2
manifests, orchestrator skeleton, and gate A regression coverage.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-09-13 02:50:23 +00:00
weichen and Cursor
dc629fc4b8
feat(service): implement project workflow plan, preview, and activation flow.
...
New projectinstance package validates three-duty separation, issues confirmation tokens, and activates immutable workflow instances; new projects start in planning mode.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-09-13 02:50:23 +00:00
WeiCHEN and Cursor
a9fe69ac16
fix(workflow): reconcile version conflicts in review mode and UI retry
...
Auto-adopt current workflow selection version in review/demo backend
paths, and retry frontend workflow switch after refreshing project version.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-09-13 02:50:21 +00:00
WeiCHEN
60d4df4319
fix(chat): resolve intent recognition, workflow auth, and message ordering
2026-09-13 02:50:21 +00:00
WeiCHEN
42e3ece2c6
fix(workflow): fix 405/404/403 errors on workflow switcher by updating CORS, 5201 demo permissions and server restart
2026-09-13 02:50:21 +00:00
WeiCHEN
f87a6ee28d
feat(workflow): Phase 1 & 2 数据库迁移、项目创建人权威化与多工作流控制面
2026-09-13 02:50:21 +00:00
weichen