weichen/Agent-System
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
2,524 Commits 10 Branches 15 Tags
dev
Commit Graph
3 Commits
Author SHA1 Message Date
weichenandCursor 7fdbee6c0c test(server): adapt fixtures to IAM dual-gate fail-closed 
Boot memory IAM only via explicit test env opt-in; strict auth cases
disable AllowInMemory after startup.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-09-16 09:42:07 +00:00
weichenandCursor f6813cc272 feat(api): add additive HTTP/SSE error envelopes 
Public errors now emit code, safe message, and request_id while keeping the legacy error field. Raw SQL, paths, tokens, and XSS payloads are stripped; the frontend branches on code instead of substring matching.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-09-15 14:40:56 +00:00
weichenandCursor 1ebed78bf5 test(security): add automated penetration negative test matrix. 
Cover anonymous admin/task access, body limits, MIME rejection, strict readiness, and CORS allowlist without legacy test principals.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-09-13 02:50:23 +00:00