weichen 6a3a0dc201 fix(security): harden bypass authz, gate blind spot, command exec, validated_only (review P0/P1) ...

- FIND-SEC-01: GetUserContext requires session ownership (handler 403 +
  SQL/memory owner filter); in-memory HTTP + isolated-PG regressions
- FIND-ARCH-01: archtest fails closed on untracked table writes (+noise
  exemption) and registers 50 existing writer tables in table_owners
- FIND-SEC-02: Authorizer without pool denies by default; explicit
  NewInMemoryAuthorizer seam opt-in via ALLOW_IN_MEMORY at composition
- FIND-SEC-03: swboot commands run argv-exec (no sh -c) with exact
  basename allowlist match; prefix-spoof and no-shell-eval tests
- FIND-FLOW-01: confirm rejects validated_only plans; ExecuteClaimed
  hard-refuses validated_only steps (new error codes + HTTP mapping)
- FIND-QUAL-01: intentflow.ValidateFlagConsistency fail-fast at Assemble

2026-09-26 02:00:14 +00:00

..

cache_test.go

feat(prompt+cache): implement 10-section prompt template, true KB regulation recall, behavior rules and multi-level caching (P4)

2026-09-13 02:50:20 +00:00

cache.go

feat(prompt+cache): implement 10-section prompt template, true KB regulation recall, behavior rules and multi-level caching (P4)

2026-09-13 02:50:20 +00:00

case_indexing_test.go

feat(cli): 终端自推荐标杆案例渲染与全业务链 E2E 端到端回归实操

2026-09-13 02:50:19 +00:00

case_indexing.go

fix(ctxmgr): 补齐 rows.Err() 检查（R-2，ctxmgr 包）

2026-09-18 03:40:24 +00:00

category_test.go

feat(chat): 完成分类锚点坞(CategoryDock)与双轨制未读重构 (含方案A轮次归一化与起始位置居中)

2026-09-13 02:50:20 +00:00

category.go

feat(chat): 完成分类锚点坞(CategoryDock)与双轨制未读重构 (含方案A轮次归一化与起始位置居中)

2026-09-13 02:50:20 +00:00

chat_digest_test.go

feat(history): 实现三模历史搜索、每日智能协同摘要与时间轴侧栏 (Phase P2)

2026-09-13 02:50:20 +00:00

chat_digest.go

fix(ctxmgr): 补齐 rows.Err() 检查（R-2，ctxmgr 包）

2026-09-18 03:40:24 +00:00

chat_history_test.go

feat(ctxmgr): 增加历史多轮会话列表查询、消息拉取与会话重构引擎

2026-09-13 02:50:19 +00:00

chat_history.go

fix(ctxmgr): 补齐 rows.Err() 检查（R-2，ctxmgr 包）

2026-09-18 03:40:24 +00:00

chat_memory_test.go

feat(ctxmgr): implement chat memory vectorization, privacy dual-gate retrieval and memory composer (P2)

2026-09-13 02:50:20 +00:00

chat_memory.go

fix: reclaim cancelFns, TTL idemLocks, cache scope probe, invalidate C1, SSE subscribe order

2026-09-22 21:24:20 +08:00

chat_search_test.go

feat(history): 实现三模历史搜索、每日智能协同摘要与时间轴侧栏 (Phase P2)

2026-09-13 02:50:20 +00:00

chat_search.go

fix(ctxmgr): 补齐 rows.Err() 检查（R-2，ctxmgr 包）

2026-09-18 03:40:24 +00:00

chat_turn_sweep_test.go

feat(ctxmgr,server): T20-B5 chat turn compensation observability + orphan sweeper

2026-09-25 05:26:29 +00:00

chat_turns_test.go

fix(ctxmgr): memTurns 改为实例作用域并加 TTL/容量淘汰（R-4）

2026-09-18 03:44:08 +00:00

chat_turns.go

feat(ctxmgr,server): T20-B5 chat turn compensation observability + orphan sweeper

2026-09-25 05:26:29 +00:00

chat_unread_test.go

feat(chat): 完成分类锚点坞(CategoryDock)与双轨制未读重构 (含方案A轮次归一化与起始位置居中)

2026-09-13 02:50:20 +00:00

chat_unread.go

fix(ctxmgr): 补齐 rows.Err() 检查（R-2，ctxmgr 包）

2026-09-18 03:40:24 +00:00

chat_window_test.go

test+arch: unblock production gate (import SSOT + isolated test DSN)

2026-09-22 18:04:02 +08:00

chat_window.go

fix(ctxmgr): 补齐 rows.Err() 检查（R-2，ctxmgr 包）

2026-09-18 03:40:24 +00:00

decay.go

feat(service): 实现单用户/项目多级上下文模型、时间衰减与用户习惯偏好管理

2026-09-13 02:50:19 +00:00

embed_test.go

feat(ctxmgr): 增加离线确定性高维嵌入生成器与向量字面量工具

2026-09-13 02:50:19 +00:00

embed.go

feat(cli): 终端自推荐标杆案例渲染与全业务链 E2E 端到端回归实操

2026-09-13 02:50:19 +00:00

finalize_export_test.go

feat(docgov): freeze review snapshots and terminal-finalize assistant turns

2026-09-14 10:51:33 +00:00

list_sessions_filter_test.go

fix(db): retire demo chat sessions with projects in 00046

2026-09-16 03:12:25 +00:00

manager_test.go

test+arch: unblock production gate (import SSOT + isolated test DSN)

2026-09-22 18:04:02 +08:00

manager.go

fix(security): harden bypass authz, gate blind spot, command exec, validated_only (review P0/P1)

2026-09-26 02:00:14 +00:00

message_scope_io.go

fix: reclaim cancelFns, TTL idemLocks, cache scope probe, invalidate C1, SSE subscribe order

2026-09-22 21:24:20 +08:00

message_update.go

merge: integrate final-artifact-vault into local_dev (authorized exception)

2026-09-23 13:57:08 +00:00

preference.go

feat(core): update backend coordinator, docgov lease, squad workflow and web governance integration

2026-09-13 02:50:20 +00:00

project_dialogue_records.go

feat(ctx): inject cleaned project dialogue into squad and assistant

2026-09-24 17:04:04 +00:00

project_dialogue_test.go

feat(projectcontext): bizdev 注入项目对话并完成 PG 治理 E2E

2026-09-13 02:50:23 +00:00

project_dialogue.go

fix(ctxmgr): 补齐 rows.Err() 检查（R-2，ctxmgr 包）

2026-09-18 03:40:24 +00:00

recategorize_test.go

feat(category): implement recategorize backfill engine and fallback mapping (Spec §3.4-3.5 A4-A5)

2026-09-13 02:50:20 +00:00

recategorize.go

fix(ctxmgr): 补齐 rows.Err() 检查（R-2，ctxmgr 包）

2026-09-18 03:40:24 +00:00

semantic_replace_test.go

fix(ctxmgr): keep displaced deterministic narrative for rollback-safe replace

2026-09-25 23:14:07 +00:00

semantic_summary_test.go

test(chat): align semantic shadow tests with async pending path

2026-09-22 21:59:12 +08:00

semantic_summary.go

fix(ctxmgr): keep displaced deterministic narrative for rollback-safe replace

2026-09-25 23:14:07 +00:00

shadow_task.go

fix(ctxmgr): keep displaced deterministic narrative for rollback-safe replace

2026-09-25 23:14:07 +00:00

summarizer_persist_test.go

fix(chat): stop treating failed summary writes as durable

2026-09-20 04:02:41 +00:00

summarizer_test.go

feat(ctxmgr): implement sliding window, rolling summarizer and DST task state (P1)

2026-09-13 02:50:20 +00:00

summarizer.go

fix(ctxmgr): keep displaced deterministic narrative for rollback-safe replace

2026-09-25 23:14:07 +00:00

summary_flags.go

feat(ctxmgr): wire fail-closed gray REPLACE for chat semantic narrative

2026-09-25 22:56:36 +00:00

taskstate_test.go

feat(ctxmgr): implement sliding window, rolling summarizer and DST task state (P1)

2026-09-13 02:50:20 +00:00

taskstate.go

feat(coordinator): implement determinism-first query rewrite with ellipsis completion and pronoun resolution (P3)

2026-09-13 02:50:20 +00:00

types.go

feat(ctxmgr): add SEMANTIC_SUMMARY_SHADOW with deterministic fallback

2026-09-16 15:37:50 +00:00

window_test.go

feat(ctxmgr): implement sliding window, rolling summarizer and DST task state (P1)

2026-09-13 02:50:20 +00:00

window.go

feat(ctxmgr): implement sliding window, rolling summarizer and DST task state (P1)

2026-09-13 02:50:20 +00:00