weichenandCursor a2cbaf1e33 feat(sysadmin): CAS author-only policy with transactional audit ...

Register the workflow total switch, require expected_revision for
updates, and expose AuthorOnlyPolicySource for activation locking.

Co-authored-by: Cursor <cursoragent@cursor.com>

2026-09-17 09:15:15 +00:00

..

agent

fix(pi-agent): stabilize real PI three-workflow E2E harness

2026-09-16 04:11:54 +00:00

app

feat(sysadmin): add system admin aggregation API and system_settings store

2026-09-17 06:56:46 +00:00

archtest

feat(events): register intent.plan contracts and table owners

2026-09-15 16:20:19 +00:00

artifactvault

feat(events): FAV publisher cmd stub gated off by default

2026-09-16 15:40:26 +00:00

auth

feat(authz): full route inventory, session interrupt test, 410/R13 freeze

2026-09-16 15:33:18 +00:00

authz

fix(docduty): serialize heal with the project duty lock

2026-09-13 22:44:40 +00:00

bizdev

test(server): adapt fixtures to IAM dual-gate fail-closed

2026-09-16 09:42:07 +00:00

chat

feat(intentflow): execute auto_read query plans from HandleTurn

2026-09-16 01:40:07 +00:00

config

fix(config): layer root .env over configs/.env.{ENV} for KB auth

2026-09-17 02:03:07 +00:00

coordinator

refactor(bizdev): delete eight locator getters

2026-09-15 13:08:25 +00:00

ctxmgr

fix(chat): drop thin semantic_shadow stub after agent PU6 merge

2026-09-16 15:46:01 +00:00

dataset

feat(dataset): registry, pause/resume backfill, destroy gates, eight tracks

2026-09-15 02:40:12 +00:00

db

feat(db): add intent plan projection shadow tables

2026-09-16 00:46:09 +00:00

doccontent

feat(doccontent): extract shared markdown canonicalization and SHA

2026-09-15 10:24:24 +00:00

docduty

fix(docduty): serialize heal with the project duty lock

2026-09-13 22:44:40 +00:00

docgov

fix(docgov): map zero duty ids to NULL on CreateOrGetDocument

2026-09-17 06:08:35 +00:00

docquery

feat(artifactvault): extract audited FAV with union-deny reads

2026-09-14 15:59:36 +00:00

docrevision

feat(docgov): wire no-tool PI change-report narrative

2026-09-17 03:02:11 +00:00

engineeringdashboard

fix(engineering-dashboard): read token from URL/meta under CSP

2026-09-17 07:39:21 +00:00

events

feat(events): register intent.plan contracts and table owners

2026-09-15 16:20:19 +00:00

freedoc

feat(app): add UnitOfWork and owner-bound repositories

2026-09-14 13:54:27 +00:00

fsutil

fix(cli): require positive live-dev identity and exclusive backups

2026-09-14 02:30:11 +00:00

httpx

feat(api): add additive HTTP/SSE error envelopes

2026-09-15 14:40:56 +00:00

intent

feat(intent): add rule segmenter and shadow PlanProposal

2026-09-15 23:14:29 +00:00

kb

fix(kb): return offline client instead of Fatalf under require-online

2026-09-17 02:04:51 +00:00

maturity

feat(intent): depend on maturity vocabulary instead of bizdev

2026-09-15 10:29:38 +00:00

notification

feat(events): apply approved events onto workflow advance in one fenced transaction

2026-09-15 09:43:09 +00:00

observability

fix(agent): Chat Agent 全链路 P0-P5 整改

2026-09-13 02:50:22 +00:00

projectcontext

fix(governance): 统一文档访问判定与上下文快照排除计数

2026-09-13 02:50:23 +00:00

projectinstance

feat(workflow): SWBOOT-02..04 software manifests and catalog allowlist

2026-09-16 15:39:01 +00:00

projectworkflow

feat(workflow-design): catalog-driven software create wizard and docs_only PI

2026-09-17 04:11:03 +00:00

quote

fix(all): resolve whole-branch review findings on Excel labels, persona forwarding, and error handling

2026-09-13 02:50:18 +00:00

replyexport

feat(export): 实现单次智能体回复导出、私密文档保存与隐私防泄露全套闭环 (Phase 0 - Phase 2)

2026-09-13 02:50:21 +00:00

server

feat(sysadmin): CAS author-only policy with transactional audit

2026-09-17 09:15:15 +00:00

squad

fix(squad): stop requiring fields.json as hard PI runner target

2026-09-17 00:55:11 +00:00

storage

fix(test): stabilize PG seed users and CI short test suite.

2026-09-13 02:50:23 +00:00

stream

fix(stream): classify document ledger FK failures as DOC_LEDGER_ERROR

2026-09-17 06:08:35 +00:00

swboot

feat(workflow-design): catalog-driven software create wizard and docs_only PI

2026-09-17 04:11:03 +00:00

sysadmin

feat(sysadmin): CAS author-only policy with transactional audit

2026-09-17 09:15:15 +00:00

taskrun

fix(intentflow): keep plan step receipts durable under PG events

2026-09-16 10:42:20 +00:00

template

fix(deploy): keep official templates in the image build context

2026-09-13 19:21:56 +00:00

upload

feat(upload): reuse MIME validator for workflow template uploads.

2026-09-13 02:50:23 +00:00

workflow

feat(workflow): SWBOOT-02..04 software manifests and catalog allowlist

2026-09-16 15:39:01 +00:00

workflowdef

feat(workflow): SWBOOT-02..04 software manifests and catalog allowlist

2026-09-16 15:39:01 +00:00

workspace

feat(workspace): gate cleanup on verified receipts

2026-09-15 02:06:10 +00:00