weichenandCursor 404defced2 test(server): reject non-member comment and audit reads on postgres ...

The in-memory authorizer treats any positive user id as a member, so the HTTP negative has to run against a real project row.

Co-authored-by: Cursor <cursoragent@cursor.com>

2026-09-19 13:22:37 +00:00

..

agent

fix(pi-agent): stabilize real PI three-workflow E2E harness

2026-09-16 04:11:54 +00:00

app

feat(workflow): namespace task keys without breaking old instances

2026-09-19 10:50:25 +00:00

archtest

feat(events): register intent.plan contracts and table owners

2026-09-15 16:20:19 +00:00

artifactvault

fix(server): login/register rate limiting + compose secret hygiene (H4/H8/M8)

2026-09-19 06:00:30 +00:00

auth

fix(auth): resolve session and user status once per request

2026-09-19 09:54:10 +00:00

authz

fix(docduty): serialize heal with the project duty lock

2026-09-13 22:44:40 +00:00

bizdev

feat(workflow): namespace task keys without breaking old instances

2026-09-19 10:50:25 +00:00

chat

fix(server): thread request ctx through session bootstrap, drop Background DB calls

2026-09-19 05:03:01 +00:00

config

fix(intent,sysadmin): delete dead SEMANTIC_FALLBACK_ENABLED flag (X-1)

2026-09-18 04:02:18 +00:00

coordinator

fix(coordinator): use the caller name and reject non-decimal user ids

2026-09-19 09:19:36 +00:00

ctxmgr

docs(ctxmgr): seal SEMANTIC_SUMMARY_REPLACE with decision link (X-2)

2026-09-18 04:02:18 +00:00

dataset

feat(dataset): registry, pause/resume backfill, destroy gates, eight tracks

2026-09-15 02:40:12 +00:00

db

feat(db): add intent plan projection shadow tables

2026-09-16 00:46:09 +00:00

doccontent

feat(doccontent): extract shared markdown canonicalization and SHA

2026-09-15 10:24:24 +00:00

docduty

test: cover duty lock, heal/revoke skip, and instance duty adapter

2026-09-17 09:59:38 +00:00

docgov

fix(server): close security headers, lease clamp, replay digest, double start

2026-09-19 09:12:17 +00:00

docquery

feat(artifactvault): extract audited FAV with union-deny reads

2026-09-14 15:59:36 +00:00

docrevision

fix(docrevision): ack content projection only after the fact source is written

2026-09-19 09:35:14 +00:00

events

fix(events): hold aggregate gaps on production claim

2026-09-19 09:24:51 +00:00

freedoc

fix: 补齐 rows.Err() 检查（R-2，其余包）

2026-09-18 03:40:24 +00:00

fsutil

fix(cli): require positive live-dev identity and exclusive backups

2026-09-14 02:30:11 +00:00

httpx

feat(api): add additive HTTP/SSE error envelopes

2026-09-15 14:40:56 +00:00

intent

feat(intent): match rdev document names when the user asks to generate

2026-09-19 10:26:57 +00:00

kb

fix: 补齐 rows.Err() 检查（R-2，其余包）

2026-09-18 03:40:24 +00:00

maturity

feat(intent): depend on maturity vocabulary instead of bizdev

2026-09-15 10:29:38 +00:00

notification

feat(events): apply approved events onto workflow advance in one fenced transaction

2026-09-15 09:43:09 +00:00

observability

fix(agent): Chat Agent 全链路 P0-P5 整改

2026-09-13 02:50:22 +00:00

projectcontext

fix(governance): 统一文档访问判定与上下文快照排除计数

2026-09-13 02:50:23 +00:00

projectinstance

feat(workflow): namespace task keys without breaking old instances

2026-09-19 10:50:25 +00:00

projectworkflow

feat(workflow): namespace task keys without breaking old instances

2026-09-19 10:50:25 +00:00

quote

fix(all): resolve whole-branch review findings on Excel labels, persona forwarding, and error handling

2026-09-13 02:50:18 +00:00

replyexport

feat(export): 实现单次智能体回复导出、私密文档保存与隐私防泄露全套闭环 (Phase 0 - Phase 2)

2026-09-13 02:50:21 +00:00

server

test(server): reject non-member comment and audit reads on postgres

2026-09-19 13:22:37 +00:00

squad

feat(workflow): namespace task keys without breaking old instances

2026-09-19 10:50:25 +00:00

storage

fix: 补齐 rows.Err() 检查（R-2，其余包）

2026-09-18 03:40:24 +00:00

stream

fix(stream): classify document ledger FK failures as DOC_LEDGER_ERROR

2026-09-17 06:08:35 +00:00

swboot

docs(swboot): mark 00048 tables deferred to SWBOOT-10 (X-3)

2026-09-18 04:02:18 +00:00

sysadmin

docs(sysadmin): annotate unwired system_settings keys as phase-2 backlog (X-4)

2026-09-18 04:02:18 +00:00

taskrun

fix(intentflow): keep plan step receipts durable under PG events

2026-09-16 10:42:20 +00:00

template

feat(workflow): namespace task keys without breaking old instances

2026-09-19 10:50:25 +00:00

upload

feat(upload): reuse MIME validator for workflow template uploads.

2026-09-13 02:50:23 +00:00

workflow

feat(squad): load rdev overlays and enforce document gates

2026-09-19 10:12:10 +00:00

workflowdef

feat(workflow): namespace task keys without breaking old instances

2026-09-19 10:50:25 +00:00

workspace

feat(workspace): gate cleanup on verified receipts

2026-09-15 02:06:10 +00:00