weichen and Cursor
33ee59641f
feat(trace): add the project trace ledger and bounded impact walk
...
Keep item revisions and edge decisions as records, and refuse to treat a missing index as no impact.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-09-20 15:35:07 +00:00
weichen
e3a5b2851e
merge: feature/stage-backtrack-design
2026-09-20 15:09:31 +00:00
weichen and Cursor
c825bbb13f
docs(ops): release integration slot after stage backtrack design smoke
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-09-20 15:09:31 +00:00
weichen and Cursor
0155ac62db
docs(ops): occupy integration slot for stage backtrack design
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-09-20 15:09:15 +00:00
weichen and Cursor
54c8a3d107
docs(design): specify stage backtrack and impact loop
...
Record how later materials can affect earlier stages without hard gates, and split the implementation into planned slices.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-09-20 15:09:06 +00:00
weichen
d43ac2d893
merge: fix/workflow-seed-bootstrap-2026-09-20 closeout
2026-09-20 14:06:15 +00:00
weichen and Cursor
cc95b8445c
docs(test): archive rdev seed hotfix verification
...
dev 与 test 目录已含研发设计控制流程,test 晋升 rc-v1.0.0-beta.7 后 schema 为 58。
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-09-20 14:06:15 +00:00
weichen
950f881968
merge: fix/workflow-seed-bootstrap-2026-09-20
2026-09-20 14:03:42 +00:00
weichen and Cursor
7da2c1fdef
docs(ops): occupy integration slot for rdev seed hotfix
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-09-20 14:03:42 +00:00
weichen and Cursor
079225495e
fix(workflowdef): heal retired seeds and fall back published_by
...
启动种子不再依赖固定用户 id=1,并把白名单工作流的 retired 状态恢复为 active。
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-09-20 14:03:30 +00:00
weichen and Cursor
badfc19812
docs(ops): claim rdev workflow seed hotfix
...
dev 库 rdev 停在 retired,test 库因 publishedBy 外键失败未发布研发工作流。
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-09-20 14:03:30 +00:00
weichen
e83de73fd0
merge: docs/module-decoupling-spec-2026-09-20 slot release
2026-09-20 13:25:44 +00:00
weichen and Cursor
a3d382c6d9
docs(ops): release integration slot after docs-only smoke
...
Record that go vet passed and the two short-test failures are docker registry EOF, not this documentation change.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-09-20 13:25:44 +00:00
weichen
133ceb454c
merge: docs/module-decoupling-spec-2026-09-20
2026-09-20 13:23:54 +00:00
weichen and Cursor
a94745370d
docs(status): record module standards and planned decoupling batches
...
Mark the documentation task done and hold the integration slot while the docs merge into dev.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-09-20 13:23:41 +00:00
weichen and Cursor
22cac8dcbe
docs(remediation): plan module decoupling batches A through G
...
Keep each hotspot on its own branch and mutex so a later code fix cannot spread across modules.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-09-20 13:22:59 +00:00
weichen and Cursor
fe46705b67
docs(system-design): list the module standards file in the design index
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-09-20 13:22:21 +00:00
weichen and Cursor
e71db3dce6
docs(system-design): add module communication and isolation standards
...
Give implementers one entry for narrow ports, the event bus, and the rule that a fault stays inside its module.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-09-20 13:22:11 +00:00
weichen and Cursor
0504884e04
docs(audit): record remaining module coupling hotspots
...
Keep the modular-monolith baseline and name the seven places where a fault still crosses a module boundary.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-09-20 13:21:36 +00:00
weichen and Cursor
6b43007d7a
docs(ops): claim module decoupling spec and coupling audit
...
Register the docs-only audit so later batches do not collide with the architecture-docs mutex.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-09-20 13:21:03 +00:00
weichen
4ac8ca2308
merge: docs/p0-closeout-2026-09-20
2026-09-20 10:58:12 +00:00
weichen and Cursor
eaad5c74d4
docs(test): archive P0 hotfixes verification report and close gap rows
...
Record schema 58 / IDOR curl / credential rotation evidence and release the integration slot.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-09-20 10:58:12 +00:00
weichen
8a9fbd8280
merge: fix/credential-hardening-2026-09-20
2026-09-20 10:57:04 +00:00
weichen and Cursor
c47b437b22
fix(ops): stop hardcoding DB passwords and URL-embed git tokens
...
Load backup credentials from env/secrets files and push via a temporary credential helper so tokens never appear in process listings.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-09-20 10:57:04 +00:00
weichen
8ef95891a4
merge: fix/runtime-panic-races-2026-09-20
2026-09-20 10:54:18 +00:00
weichen and Cursor
48c985318c
docs(ops): claim integration slot for runtime-panic-races merge
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-09-20 10:54:18 +00:00
weichen and Cursor
b4388934a0
fix(runtime): hold taskrun fanout lock, guard goroutines, and escape math XSS
...
Serialize appendEvent sends under the subscriber mutex, wrap worker/memory goroutines with recover, lock synchronous chat SendMessage, and escape KaTeX error HTML.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-09-20 10:54:18 +00:00
weichen
3a3a79769e
merge: fix/authz-idor-hotfixes-2026-09-20
2026-09-20 10:42:58 +00:00
weichen and Cursor
58f0ed65c1
docs(ops): claim integration slot for authz-idor merge
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-09-20 10:42:58 +00:00
weichen and Cursor
fad7fac044
fix(authz): close preference, session project, and recategorize IDOR gaps
...
Bind preference writes and session-scoped project reads to the authenticated principal, and require an owned session_id for recategorize so empty ids cannot touch all messages.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-09-20 10:42:58 +00:00
weichen
e347c0d138
merge: fix/capability-merge-00058-2026-09-20
2026-09-20 10:39:21 +00:00
weichen and Cursor
d4b38a273b
docs(ops): claim integration slot for capability-00058 merge
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-09-20 10:39:21 +00:00
weichen and Cursor
37fb1ba44e
merge: feature/capability-enablement-impact-plan; renumber chat_summaries to 00058
...
Absorb stalled capability fixes and avoid goose out-of-order on schema 57 DBs by shipping chat_summaries as 00058.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-09-20 10:38:12 +00:00
weichen
43688fd4c3
merge: docs/p0-triage-2026-09-20
2026-09-20 10:37:18 +00:00
weichen and Cursor
1313cf19b1
docs(ops): archive 2026-09-20 system triage audit and P0 remediation plan
...
Claim P0 hotfixes waves, correct schema snapshot to 57, and park non-P0 findings in long-term backlog.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-09-20 10:37:08 +00:00
weichen and Cursor
518d5d6132
docs(ops): release integration slot after duty-reassign smoke
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-09-20 09:52:22 +00:00
weichen and Cursor
5c9f9aa57c
docs(ops): close duty-reassign task and release integration slot
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-09-20 09:52:14 +00:00
weichen and Cursor
95329aad58
docs(test): archive duty-reassign and member-chat verification report
...
Record test-env evidence for chenwei stage chat and post-activation
PATCH duty reassignment after merge and rebuild.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-09-20 09:52:04 +00:00
weichen
9d98f1ae33
merge: fix/post-activation-duty-reassign-member-chat
...
Member stage chat without duties; controlled post-activation duty reassign.
2026-09-20 09:48:59 +00:00
weichen and Cursor
2b96987ddd
docs(ops): claim integration slot for duty-reassign merge
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-09-20 09:48:59 +00:00
weichen and Cursor
c3dad4c643
docs(ops): claim post-activation duty reassign and member chat task
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-09-20 09:48:27 +00:00
weichen and Cursor
8e4beff5f8
feat(web): allow duty reassignment in frozen project settings
...
Show editable duty selects after activation when the user has
project:assign_lead, calling the new PATCH API instead of workflow-plan PUT.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-09-20 09:48:27 +00:00
weichen and Cursor
1497473186
feat(projectworkflow): controlled post-activation document duty reassign
...
Add PATCH /doc-tasks/{taskKey}/duties that updates live snapshot,
assignments, and document_records while blocking when a squad run holds
the document lease. Planning PUT remains PLAN_FROZEN.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-09-20 09:48:27 +00:00
weichen and Cursor
a82bfdb6d1
fix(authz): allow project members stage chat without document duties
...
Live workflows still restrict document actions to duty holders, but
AllowedStageKeys now include active/completed stages so members can chat.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-09-20 09:48:19 +00:00
weichen
6d04d98c5f
merge: docs/triage-task-done
2026-09-20 09:23:42 +00:00
weichen and Cursor
69cae9e4e7
docs(ops): mark test-env triage task done
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-09-20 09:23:42 +00:00
weichen
89abc757f9
merge: docs/test-env-triage-report-2026-09-20
2026-09-20 09:23:31 +00:00
weichen and Cursor
95880bf168
docs(test): archive test-env triage fixes verification report
...
Record E2E PASS for global unique names, member session visibility,
and asset raw preview; release integration slot and mark task done.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-09-20 09:23:31 +00:00
weichen
213ad0159a
merge: fix/test-env-triage-2026-09-20
...
Global unique project names, member chat session provisioning, and
project asset raw preview recovery for test-env triage.
2026-09-20 09:19:08 +00:00
weichen and Cursor
f603f63ca7
docs(ops): claim integration slot for test-env triage merge
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-09-20 09:19:08 +00:00