weichen and Cursor
fe0bb3a503
fix(config): layer root and env compose files with expanded overrides
...
Load agent/cursor env overrides in config loader; pass root .env plus
environment-specific env files in env-service; align compose env_file mounts.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-09-13 02:55:18 +00:00
weichen and Cursor
c60599379f
fix(agent): 将 pi-agent 默认模型对齐为 MiniMax-M2.7-highspeed
...
根因是 Go 默认 provider 误为 cc-switch-kimi-for-coding，且 app 容器未注入 PI_AGENT_*，导致 runner 收到未知 provider。
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-09-13 02:50:23 +00:00
weichen and Cursor
5856585d1d
feat(ops): compose runner auth, upload MIME validation, and test soak
...
Wire RUNNER_AUTH_TOKEN through dev/test/main Compose, validate uploads
with extension whitelist and content sniffing, add readiness soak script
and short PG loop test, and require runner token in prod when URL is set.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-09-13 02:50:23 +00:00
weichen and Cursor
d7a144de26
feat(taskrun): resume interrupted runs and harden P1 security gaps
...
Add confirm-gated resume API with resumable flag, Phase 5 finalize fault
and rolling-restart replay tests, Mermaid strict mode, request body limits,
and optional Runner Bearer auth between app and pi-agent.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-09-13 02:50:23 +00:00
weichen
171959710d
fix(security): add CORS allowlist and enforce principal on chat handlers
...
Replace wildcard CORS with configured origins and bind chat/task user
identity to the authenticated principal instead of request body fields.
2026-09-13 02:50:22 +00:00
weichen
3145550a59
feat(security): complete P0 release blocking remediation
...
Unify auth middleware and remove X-User-ID trust, add project_members
authorization, sandbox workspaces via resolver, and admin-only reconcile
by run_id. Introduce goose migrations with startup schema gate, fail closed
when DB unavailable outside explicit ALLOW_IN_MEMORY, bundle web/dist in
app Dockerfile, and remove frontend pseudo-login fallback.
2026-09-13 02:50:22 +00:00
WeiCHEN and Cursor
f4e4357ddb
fix(agent): Chat Agent 全链路 P0-P5 整改
...
封堵鉴权旁路与导出 IDOR，DocGov 改服务端身份；对话层 PendingAction 接真实 docgov/taskrun；修复流式租约假死与会话级任务流；加固配置/doc_id/NULL；补齐 slog 与测试；前端 ErrorBoundary 与受控文档重试。
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-09-13 02:50:22 +00:00
WeiCHEN
e5e80a6fc6
feat(core): update backend coordinator, docgov lease, squad workflow and web governance integration
2026-09-13 02:50:20 +00:00
WeiCHEN and Cursor
6c9ad6b61d
feat(auth): add auth data models, config and store engine
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-09-13 02:50:20 +00:00
WeiCHEN and Cursor
f769f8da4c
feat(db): 部署专属记忆与多级上下文数据库容器与pgvector初始化Schema
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-09-13 02:50:19 +00:00
WeiCHEN and Cursor
810eb26be3
feat(api): 实现HTTP服务骨架与Server-Sent Events流式交互接口
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-09-13 02:50:19 +00:00
WeiCHEN and Cursor
7cbfb33150
feat(service): 实现嵌入式多领域知识中枢与Hybrid RRF检索引擎
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-09-13 02:50:19 +00:00
WeiCHEN and Cursor
f75e5094a2
feat(squad): 实现单步评估器StepEvaluator与工作流动态加步、跳步及基准假设推断
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-09-13 02:50:19 +00:00
WeiCHEN and Cursor
b36a9ee108
feat(agent): support PI_AGENT_RUNNER_URL remote execution in PiAgentBackend
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-09-13 02:50:18 +00:00
WeiCHEN and Cursor
68d58df38f
chore(config): initialize go module and configuration loader
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-09-13 02:50:18 +00:00
