Agent-System/internal at 6a3a0dc201362799ba11552146558f145541e9dc - Agent-System - Gitea: Git with a cup of tea

weichen/Agent-System

Files

T

History

weichen 6a3a0dc201 fix(security): harden bypass authz, gate blind spot, command exec, validated_only (review P0/P1)

- FIND-SEC-01: GetUserContext requires session ownership (handler 403 +
  SQL/memory owner filter); in-memory HTTP + isolated-PG regressions
- FIND-ARCH-01: archtest fails closed on untracked table writes (+noise
  exemption) and registers 50 existing writer tables in table_owners
- FIND-SEC-02: Authorizer without pool denies by default; explicit
  NewInMemoryAuthorizer seam opt-in via ALLOW_IN_MEMORY at composition
- FIND-SEC-03: swboot commands run argv-exec (no sh -c) with exact
  basename allowlist match; prefix-spoof and no-shell-eval tests
- FIND-FLOW-01: confirm rejects validated_only plans; ExecuteClaimed
  hard-refuses validated_only steps (new error codes + HTTP mapping)
- FIND-QUAL-01: intentflow.ValidateFlagConsistency fail-fast at Assemble

2026-09-26 02:00:14 +00:00

..

merge: integrate go-agentx runtime into local_dev candidate

2026-09-23 13:25:32 +00:00

test(agentx): compare pi-native with the container backend

2026-09-21 15:11:29 +00:00

fix(security): harden bypass authz, gate blind spot, command exec, validated_only (review P0/P1)

2026-09-26 02:00:14 +00:00

fix(security): harden bypass authz, gate blind spot, command exec, validated_only (review P0/P1)

2026-09-26 02:00:14 +00:00

fix(artifactvault): derive staging/artifact UUIDs from idempotency key

2026-09-24 00:56:54 +00:00

feat(auth): admin password reset API and credential guards

2026-09-24 04:18:58 +00:00

fix(security): harden bypass authz, gate blind spot, command exec, validated_only (review P0/P1)

2026-09-26 02:00:14 +00:00

feat(ctx): surface dialogue conflict confirmation cards to triggering user

2026-09-25 21:01:37 +00:00

feat(chat): dialogue triggers for comments/reopen/pending-supplements with mistouch guards

2026-09-25 20:14:10 +00:00

feat(jevdecide): product shadow client with offline eval gates

2026-09-23 17:40:40 +00:00

conflictresolve

feat(ctx): inject cleaned project dialogue into squad and assistant

2026-09-24 17:04:04 +00:00

contracts/vocabulary

refactor(docgov): converge shared lifecycle vocab into contracts

2026-09-22 21:44:57 +08:00

feat(ctx): surface dialogue conflict confirmation cards to triggering user

2026-09-25 21:01:37 +00:00

fix(security): harden bypass authz, gate blind spot, command exec, validated_only (review P0/P1)

2026-09-26 02:00:14 +00:00

feat(dataset): registry, pause/resume backfill, destroy gates, eight tracks

2026-09-15 02:40:12 +00:00

feat(db,server): T20-S2 hardening batch B1/B4/B7 (XFF trust, pool statement_timeout, shutdown drain)

2026-09-25 04:45:49 +00:00

feat(ctx): inject cleaned project dialogue into squad and assistant

2026-09-24 17:04:04 +00:00

feat(doccontent): extract shared markdown canonicalization and SHA

2026-09-15 10:24:24 +00:00

feat(arch): clear G1 U3/U4 sql_write and path exceptions

2026-09-22 21:40:12 +08:00

fix(docgov): join ambient uow in persistApproveAndFAV to avoid row-lock deadlock

2026-09-26 00:25:01 +00:00

fix(server,docquery): restore durable-notify unhook and deliverable store in tests

2026-09-24 00:45:22 +00:00

feat(concurrency): T20 S3 B3 - per-docID lock split for docgov/docrevision, hydrate out of cross-doc critical path (stage A)

2026-09-25 06:52:55 +00:00

feat(notification): digest aggregates, supplement-impact batch, and free-collab hooks

2026-09-24 11:44:20 +00:00

merge: integrate final-artifact-vault into local_dev (authorized exception)

2026-09-23 13:57:08 +00:00

fix(cli): require positive live-dev identity and exclusive backups

2026-09-14 02:30:11 +00:00

fix(handoff): remove unused stubSrc from e2e test

2026-09-24 23:21:39 +00:00

fix(authz): harden permissions, chat gate, and project create idempotency

2026-09-20 07:04:57 +00:00

feat(chat): dialogue triggers for comments/reopen/pending-supplements with mistouch guards

2026-09-25 20:14:10 +00:00

feat(jevdecide): product shadow client with offline eval gates

2026-09-23 17:40:40 +00:00

fix: 补齐 rows.Err() 检查（R-2，其余包）

2026-09-18 03:40:24 +00:00

feat(dev): single-binary no-docker runtime with managed localpg

2026-09-24 15:53:50 +00:00

feat(maintenance): wire sysadmin ui.* whitelist settings to public site status

2026-09-25 16:33:56 +00:00

feat(chat): show MinerU parse progress while waiting in-turn

2026-09-23 09:55:59 +08:00

feat(intent): depend on maturity vocabulary instead of bizdev

2026-09-15 10:29:38 +00:00

docs(ops): salvage task docs and mineru gofmt in closeout batch

2026-09-23 12:49:33 +00:00

feat(chat): dialogue triggers for comments/reopen/pending-supplements with mistouch guards

2026-09-25 20:14:10 +00:00

fix(agent): Chat Agent 全链路 P0-P5 整改

2026-09-13 02:50:22 +00:00

fix(governance): 统一文档访问判定与上下文快照排除计数

2026-09-13 02:50:23 +00:00

projectinstance

feat(collab): free-lane chat, claim-on-view, lease ownership, notify inbox

2026-09-24 11:49:43 +00:00

projectworkflow

fix(projectworkflow): write repo binding into project_source_bindings.source_ref

2026-09-26 00:59:08 +00:00

feat(quote,squad): B5 input validation + review invariants; A5 non-critical step degradation

2026-09-25 17:10:35 +00:00

feat(export): 实现单次智能体回复导出、私密文档保存与隐私防泄露全套闭环 (Phase 0 - Phase 2)

2026-09-13 02:50:21 +00:00

fix(security): harden bypass authz, gate blind spot, command exec, validated_only (review P0/P1)

2026-09-26 02:00:14 +00:00

feat(quote,squad): B5 input validation + review invariants; A5 non-critical step degradation

2026-09-25 17:10:35 +00:00

fix(storage): deterministic ID ordering in memory-mode ListProjectRefs

2026-09-25 13:17:25 +00:00

fix(pi-runner): cap /v1/run response size to stop typed reject

2026-09-23 10:22:23 +08:00

supplementimpact

feat(chat): dialogue triggers for comments/reopen/pending-supplements with mistouch guards

2026-09-25 20:14:10 +00:00

fix(security): harden bypass authz, gate blind spot, command exec, validated_only (review P0/P1)

2026-09-26 02:00:14 +00:00

feat(ctxmgr): wire fail-closed gray REPLACE for chat semantic narrative

2026-09-25 22:56:36 +00:00

feat(ctx): surface dialogue conflict confirmation cards to triggering user

2026-09-25 21:01:37 +00:00

feat(workflow): namespace task keys without breaking old instances

2026-09-19 10:50:25 +00:00

feat(chat): dialogue triggers for comments/reopen/pending-supplements with mistouch guards

2026-09-25 20:14:10 +00:00

feat(upload): reuse MIME validator for workflow template uploads.

2026-09-13 02:50:23 +00:00

refactor(workflowdef): make definition/runtime deps unidirectional

2026-09-22 21:44:57 +08:00

refactor(workflowdef): make definition/runtime deps unidirectional

2026-09-22 21:44:57 +08:00

feat(server): allow weighted cross-workflow reads after a view check

2026-09-21 09:11:47 +00:00

merge: integrate go-agentx runtime into local_dev candidate

2026-09-23 13:25:32 +00:00