weichenandCursor c767a99807 fix(authz): close project-context ABAC gap and repair CI PG fixtures ...

enforceChatProjectAccess before allowAnyStageAccess on GET /context/project
so activated projects are no longer readable by arbitrary authenticated users.

Align failing gate fixtures with official workflow keys, isolated TEST_DATABASE_URL,
unique project names (00057), duty membership, and in-memory bizdev-cli envs.

Co-authored-by: Cursor <cursoragent@cursor.com>

2026-09-22 18:12:26 +08:00

..

access_governing_pg_test.go

fix(authz): close project-context ABAC gap and repair CI PG fixtures

2026-09-22 18:12:26 +08:00

activation_official_pg_test.go

fix(authz): close project-context ABAC gap and repair CI PG fixtures

2026-09-22 18:12:26 +08:00

activation_token_test.go

fix(governance): 统一文档访问判定与上下文快照排除计数

2026-09-13 02:50:23 +00:00

approval_test.go

test(workflow): add governance regression and activation PG coverage

2026-09-13 02:50:23 +00:00

approval.go

feat(projectinstance): refresh stage readiness after document approval.

2026-09-13 02:50:23 +00:00

doc_checker.go

feat(service): add stage gate readiness and creator-confirmed advance.

2026-09-13 02:50:23 +00:00

document_access_test.go

test(projectinstance): pin action-level duty checks

2026-09-14 07:54:43 +00:00

document_access.go

fix(projectinstance): resolve legacy task keys against namespaced snapshots

2026-09-21 05:03:08 +00:00

duty_action_test.go

test: cover author_only access matrix and duty_policy audits

2026-09-17 13:15:05 +00:00

duty_action.go

fix(projectinstance): resolve author_only duties in ABAC gates

2026-09-17 13:15:05 +00:00

duty_mode_test.go

test(projectinstance): cover author_only planning and activation

2026-09-17 09:39:59 +00:00

duty_mode.go

feat(projectinstance): support per-doc author_only duty policy

2026-09-17 09:39:59 +00:00

duty_reassign_test.go

feat(projectworkflow): controlled post-activation document duty reassign

2026-09-20 09:48:27 +00:00

duty_reassign.go

feat(projectworkflow): controlled post-activation document duty reassign

2026-09-20 09:48:27 +00:00

errors.go

feat(projectinstance): allow live workflow config edits except switching

2026-09-21 05:20:01 +00:00

gate_test.go

test: cover author_only access matrix and duty_policy audits

2026-09-17 13:15:05 +00:00

gate.go

fix(projectinstance): resolve author_only duties in ABAC gates

2026-09-17 13:15:05 +00:00

hash_test.go

test(projectinstance): cover author_only planning and activation

2026-09-17 09:39:59 +00:00

hash.go

feat(service): implement project workflow plan, preview, and activation flow.

2026-09-13 02:50:23 +00:00

live_plan_test.go

feat(projectinstance): allow live workflow config edits except switching

2026-09-21 05:20:01 +00:00

live_plan.go

feat(projectinstance): allow live workflow config edits except switching

2026-09-21 05:20:01 +00:00

materialize.go

feat(projectinstance): allow live workflow config edits except switching

2026-09-21 05:20:01 +00:00

members.go

feat(projectinstance): classify optional duties without lowering required gates

2026-09-14 06:53:21 +00:00

message_scope_test.go

fix(projectinstance): resolve legacy task keys against namespaced snapshots

2026-09-21 05:03:08 +00:00

message_scope.go

fix(projectinstance): resolve legacy task keys against namespaced snapshots

2026-09-21 05:03:08 +00:00

pg_integration_test.go

fix(authz): close project-context ABAC gap and repair CI PG fixtures

2026-09-22 18:12:26 +08:00

policy_test.go

test(projectinstance): cover author_only planning and activation

2026-09-17 09:39:59 +00:00

policy.go

feat(projectinstance): support per-doc author_only duty policy

2026-09-17 09:39:59 +00:00

rdev_pg_test.go

fix(authz): close project-context ABAC gap and repair CI PG fixtures

2026-09-22 18:12:26 +08:00

service_test.go

test(projectinstance): pin duty mode and activation governance

2026-09-14 06:53:21 +00:00

service.go

feat(projectinstance): allow live workflow config edits except switching

2026-09-21 05:20:01 +00:00

stage_access_chat_test.go

feat(abac): enforce stage access on chat, search and SSE streams.

2026-09-13 02:50:23 +00:00

stage_access_test.go

fix(authz): allow project members stage chat without document duties

2026-09-20 09:48:19 +00:00

stage_access.go

fix(projectinstance): resolve legacy task keys against namespaced snapshots

2026-09-21 05:03:08 +00:00

stage_remediation_test.go

fix(governance): 统一文档访问判定与上下文快照排除计数

2026-09-13 02:50:23 +00:00

stage_reopen_test.go

feat(workflow): reopen a completed stage without pausing the later one

2026-09-20 15:35:07 +00:00

stage_service_test.go

test(workflow): add governance regression and activation PG coverage

2026-09-13 02:50:23 +00:00

stage_service.go

feat(workflow): reopen a completed stage without pausing the later one

2026-09-20 15:35:07 +00:00

stage_store.go

feat(workflow): reopen a completed stage without pausing the later one

2026-09-20 15:35:07 +00:00

store.go

feat(projectinstance): allow live workflow config edits except switching

2026-09-21 05:20:01 +00:00

terminate_test.go

test(projectinstance): unify gate access and preview for duty modes

2026-09-14 06:58:06 +00:00

terminate.go

fix(governance): 统一文档访问判定与上下文快照排除计数

2026-09-13 02:50:23 +00:00

testutil.go

test(projectinstance): unify gate access and preview for duty modes

2026-09-14 06:58:06 +00:00

tx.go

feat(events): apply approved events onto workflow advance in one fenced transaction

2026-09-15 09:43:09 +00:00

types.go

feat(projectinstance): allow live workflow config edits except switching

2026-09-21 05:20:01 +00:00

validator_test.go

test(web): cover per-document approval toggle

2026-09-14 07:02:11 +00:00

validator.go

merge: feature/document-author-only-plan

2026-09-17 13:57:12 +00:00

workflow_scope_test.go

feat(coordinator+server): narrow document match pool to active workflow

2026-09-21 08:05:44 +00:00

workflow_scope.go

feat(coordinator+server): narrow document match pool to active workflow

2026-09-21 08:05:44 +00:00