weichenandCursor a4df9b966d test(security): add automated penetration negative test matrix. ...

Cover anonymous admin/task access, body limits, MIME rejection, strict readiness, and CORS allowlist without legacy test principals.

Co-authored-by: Cursor <cursoragent@cursor.com>

2026-09-12 08:59:19 +00:00

..

agent

feat(taskrun): resume interrupted runs and harden P1 security gaps

2026-09-12 08:49:23 +00:00

auth

test(docs): Phase 1 completion gates, PG integration tests, and report

2026-09-12 02:48:00 +00:00

authz

feat(authz): complete Phase 1 admin roles, sessions, and unified admin gate

2026-09-12 02:47:57 +00:00

bizdev

feat(abac): filter blended squad context and add PG governance E2E

2026-09-12 05:51:58 +00:00

chat

feat(abac): enforce stage access on chat, search and SSE streams.

2026-09-12 03:20:31 +00:00

config

feat(ops): compose runner auth, upload MIME validation, and test soak

2026-09-12 08:51:10 +00:00

coordinator

fix(agent): Chat Agent 全链路 P0-P5 整改

2026-09-11 18:22:45 +08:00

ctxmgr

feat(abac): filter blended squad context and add PG governance E2E

2026-09-12 05:51:58 +00:00

db

ci: add QA-001 gate with go vet, short tests, and migration check.

2026-09-12 08:59:19 +00:00

docgov

feat(projectinstance): refresh stage readiness after document approval.

2026-09-12 03:14:30 +00:00

freedoc

feat(export): 实现单次智能体回复导出、私密文档保存与隐私防泄露全套闭环 (Phase 0 - Phase 2)

2026-09-10 23:04:04 +08:00

intent

fix(agent): Chat Agent 全链路 P0-P5 整改

2026-09-11 18:22:45 +08:00

kb

fix(agent): Chat Agent 全链路 P0-P5 整改

2026-09-11 18:22:45 +08:00

notification

feat(notification): add 24h stage advance reminder and confirm on advance.

2026-09-12 03:26:30 +00:00

observability

fix(agent): Chat Agent 全链路 P0-P5 整改

2026-09-11 18:22:45 +08:00

projectinstance

feat(notification): add 24h stage advance reminder and confirm on advance.

2026-09-12 03:26:30 +00:00

projectworkflow

fix(projectworkflow): generate UTF-8 safe project codes for Chinese names

2026-09-12 05:58:04 +00:00

quote

fix(all): resolve whole-branch review findings on Excel labels, persona forwarding, and error handling

2026-09-07 17:00:40 +08:00

replyexport

feat(export): 实现单次智能体回复导出、私密文档保存与隐私防泄露全套闭环 (Phase 0 - Phase 2)

2026-09-10 23:04:04 +08:00

server

test(security): add automated penetration negative test matrix.

2026-09-12 08:59:19 +00:00

squad

feat(agent): unify async task FinalizeTaskRun projection to chat and runs

2026-09-11 16:46:49 +08:00

storage

feat(agent): project asset upload and squad materials assembly

2026-09-11 15:15:15 +08:00

stream

feat(api): return user_message_id in SSE turn_ack and done

2026-09-11 13:16:42 +08:00

taskrun

feat(taskrun): resume interrupted runs and harden P1 security gaps

2026-09-12 08:49:23 +00:00

template

fix(all): resolve whole-branch review findings on Excel labels, persona forwarding, and error handling

2026-09-07 17:00:40 +08:00

upload

feat(upload): reuse MIME validator for workflow template uploads.

2026-09-12 08:59:17 +00:00

workflowdef

feat(upload): reuse MIME validator for workflow template uploads.

2026-09-12 08:59:17 +00:00

workspace

feat(security): complete P0 release blocking remediation

2026-09-11 16:04:53 +00:00