5 Commits

Include renames

Author	SHA1	Message	Date
agent-bot	ee1e53b510	fix(tests): per-package test databases + legitimate approval fixtures (issue #2 close) ... Root causes of the remaining 5 CI PG failures (and the hidden flaky set): 1. All PG-integration packages shared ONE database under parallel package execution - migrations/seeds/truncates raced (nondeterministic failure sets, locally and in CI). Fix: RequireTestDatabaseURL/SkipIfNoTestDatabaseURL now derive a per-package database (<base>_<pkgHash>, advisory-lock-guarded CREATE); 9 raw-env straggler tests funnelled through the helpers; db-package tests call it unqualified (no import cycle). 2. Approval-chain fixtures were not production-shaped: freezeReviewSnapshot only honors head_snapshot_id, fake content hashes never froze a snapshot, so ApproverApprove rejected with 'approved requires frozen review_snapshot_id'. Errors were swallowed (_, _ =) hiding this. Fix (ownership-respecting, arch-enforced): - docrevision.SeedContentSnapshotForTest seeds the ledger tables it owns - docgov GovernanceEngine.FreezeHeadSnapshotForTest freezes head/review pointers on document_records (docgov-owned) and clears engine cache - all four integration fixtures use the pair; swallowed errors checked 3. Fixed-name fixtures collide once a package shares one DB (projects uq_projects_name_global): uniquified in projectinstance + server tests. 4. CAS/ctxmgr tests never bootstrapped migrations (relied on other packages having migrated the shared DB): explicit RunMigrationsOnceForTest. Verified: full parallel short suite = 75 packages, 0 failures against an isolated throwaway PG. CI skip list removed - short tests fully required.	2026-09-29 09:54:43 +00:00
weichen	f3f23a3018	feat(errcode): 用稳定错误码记录 HTTP 与异步失败 ... 失败响应此前不写日志，request_id 无法对照原因。注册表不覆盖处理器已经给出的 HTTP 状态。	2026-09-28 02:27:16 +00:00
weichen	6a3a0dc201	fix(security): harden bypass authz, gate blind spot, command exec, validated_only (review P0/P1) ... - FIND-SEC-01: GetUserContext requires session ownership (handler 403 + SQL/memory owner filter); in-memory HTTP + isolated-PG regressions - FIND-ARCH-01: archtest fails closed on untracked table writes (+noise exemption) and registers 50 existing writer tables in table_owners - FIND-SEC-02: Authorizer without pool denies by default; explicit NewInMemoryAuthorizer seam opt-in via ALLOW_IN_MEMORY at composition - FIND-SEC-03: swboot commands run argv-exec (no sh -c) with exact basename allowlist match; prefix-spoof and no-shell-eval tests - FIND-FLOW-01: confirm rejects validated_only plans; ExecuteClaimed hard-refuses validated_only steps (new error codes + HTTP mapping) - FIND-QUAL-01: intentflow.ValidateFlagConsistency fail-fast at Assemble	2026-09-26 02:00:14 +00:00
weichen	a9c9a9182e	refactor(server): remove 24 mirrored Runtime fields via nil-safe accessors; fix Shutdown-vs-background-loop DATA RACE and goose 00071 duplicate version ... - Server no longer mirrors app.Runtime services (gov/svc/pwSvc/...): 574 call sites now use accessors in runtime_accessors.go - backgroundLoop (mutex+sync.Once) stops sweeper/publisher/reminder/wsGC goroutines race-free (baseline 44161d2a reproduced DATA RACE; now green under -race) - goose 00071 duplicate (dialogue merge 1da17a28 brought two 00071): context-conflict-adjudications renumbered to 00072; dev DB applied only through 00070 so zero data migration - task_finalize tests build minimal app.Runtime; test injection via serverTestOverrides + setOverride* (explicit-nil markers for fail-closed cases)	2026-09-25 13:17:22 +00:00
WeiCHEN	4c07716933	refactor(server): split handlers.go by domain ... Keep slim handlers.go core; move chat/docgov/health/http/context handlers into domain files ≤800 lines without behavior change.	2026-09-23 09:54:18 +08:00