5 Commits

Include renames

Author	SHA1	Message	Date
agent-bot	ee1e53b510	fix(tests): per-package test databases + legitimate approval fixtures (issue #2 close) ... Root causes of the remaining 5 CI PG failures (and the hidden flaky set): 1. All PG-integration packages shared ONE database under parallel package execution - migrations/seeds/truncates raced (nondeterministic failure sets, locally and in CI). Fix: RequireTestDatabaseURL/SkipIfNoTestDatabaseURL now derive a per-package database (<base>_<pkgHash>, advisory-lock-guarded CREATE); 9 raw-env straggler tests funnelled through the helpers; db-package tests call it unqualified (no import cycle). 2. Approval-chain fixtures were not production-shaped: freezeReviewSnapshot only honors head_snapshot_id, fake content hashes never froze a snapshot, so ApproverApprove rejected with 'approved requires frozen review_snapshot_id'. Errors were swallowed (_, _ =) hiding this. Fix (ownership-respecting, arch-enforced): - docrevision.SeedContentSnapshotForTest seeds the ledger tables it owns - docgov GovernanceEngine.FreezeHeadSnapshotForTest freezes head/review pointers on document_records (docgov-owned) and clears engine cache - all four integration fixtures use the pair; swallowed errors checked 3. Fixed-name fixtures collide once a package shares one DB (projects uq_projects_name_global): uniquified in projectinstance + server tests. 4. CAS/ctxmgr tests never bootstrapped migrations (relied on other packages having migrated the shared DB): explicit RunMigrationsOnceForTest. Verified: full parallel short suite = 75 packages, 0 failures against an isolated throwaway PG. CI skip list removed - short tests fully required.	2026-09-29 09:54:43 +00:00
weichen	e9c0281404	feat(ctxmgr): wildcard session allowlist for semantic replace rollout ... - SEMANTIC_SUMMARY_REPLACE_SESSIONS supports * (all sessions, present and future), mirroring INTENT_PLAN_PROJECT_ALLOWLIST; empty allowlist still replaces nothing (fail-closed defense in depth unchanged) - declare SEMANTIC_SUMMARY_REPLACE(_SESSIONS) in dev/test/main compose app env (stale Wave2 "REPLACE unwired" comment fixed); extend A-4 declaration test; .env.example key docs updated - sysadmin feature catalog: SESSIONS description + REPLACE reason note * Prepares dev degraded-flags enable (task degraded-flags-enable-2026-09-26-r4): user-authorized all-session replace, plan tier confirm, shadow summary, PI change-report narrative; env ops and runtime verification follow.	2026-09-26 02:29:29 +00:00
weichen	ffa41d78df	feat(ctxmgr): wire fail-closed gray REPLACE for chat semantic narrative ... Unseal SEMANTIC_SUMMARY_REPLACE under explicit user authorization with a defense-in-depth session allowlist (SEMANTIC_SUMMARY_REPLACE_SESSIONS): swap happens only for allowlisted sessions after result digests and served watermark validation, bounded narrative size; facts/counts stay deterministic and the daily digest stays advisory. Master flag alone replaces nothing.	2026-09-25 22:56:36 +00:00
weichenandCursor	6c61a5bc37	docs(ctxmgr): seal SEMANTIC_SUMMARY_REPLACE with decision link (X-2) ... Co-authored-by: Cursor <cursoragent@cursor.com>	2026-09-18 04:02:18 +00:00
weichenandCursor	209c997b22	feat(ctxmgr): add SEMANTIC_SUMMARY_SHADOW with deterministic fallback ... Shadow evaluates a no-tool summarizer on caller-supplied messages; served narrative stays deterministic and REPLACE remains unwired. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-09-16 15:37:50 +00:00