weichen/Agent-System
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
292 Commits 10 Branches 15 Tags
8c2c8d4c4f2e1546516b8a50288e331e6175bd33
Commit Graph
4 Commits
Author SHA1 Message Date
weichenandCursor caa98d8722 feat(db): add project workflow instance tables for Phase 3 governance. 
Introduce planning/active lifecycle, instance snapshots, duty assignments, and activation confirmation tokens with single-live-instance constraints.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-09-12 03:03:34 +00:00
weichenandCursor 7951b0f0b5 feat(db): add workflow definitions, versions, and template asset tables 
Introduce Phase 2 IAM-adjacent schema for versioned workflow definitions,
template assets/versions, and workflow_defs permissions seed.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-09-12 02:53:09 +00:00
weichen bc37debc31 feat(db): add IAM core migration for users, sessions, and RBAC 
Introduce goose migration 00015 to extend users with IAM columns and seed system roles/permissions for Phase 1 authorization.
 2026-09-12 01:39:29 +00:00
weichen 2772c9e526 feat(security): complete P0 release blocking remediation 
Unify auth middleware and remove X-User-ID trust, add project_members
authorization, sandbox workspaces via resolver, and admin-only reconcile
by run_id. Introduce goose migrations with startup schema gate, fail closed
when DB unavailable outside explicit ALLOW_IN_MEMORY, bundle web/dist in
app Dockerfile, and remove frontend pseudo-login fallback.
 2026-09-11 16:04:53 +00:00