weichenandCursor d421fba472 fix(api): fail closed when status update cannot set user role ...

Return the UpdateUserRole error instead of silently continuing when an
admin approves a user with an explicit role_id.

Co-authored-by: Cursor <cursoragent@cursor.com>

2026-09-13 11:37:03 +00:00

..

admin_permissions_handlers.go

feat(authz): implement six-phase permissions, settings and workflow v2

2026-09-13 02:50:23 +00:00

admin_roles_handlers.go

feat(authz): complete Phase 1 admin roles, sessions, and unified admin gate

2026-09-13 02:50:22 +00:00

admin_template_handlers.go

feat(upload): reuse MIME validator for workflow template uploads.

2026-09-13 02:50:23 +00:00

admin_workflow_handlers.go

feat(api): add admin workflow and template management endpoints

2026-09-13 02:50:22 +00:00

asset_handlers_test.go

fix(quality): 闭环 Go 质量门禁（鉴权富化/V0.5/vet/health/KB gate/记忆轮询）

2026-09-13 02:50:23 +00:00

asset_handlers.go

feat(ops): compose runner auth, upload MIME validation, and test soak

2026-09-13 02:50:23 +00:00

auth_gate_a_test.go

feat(authz): implement six-phase permissions, settings and workflow v2

2026-09-13 02:50:23 +00:00

auth_handlers_test.go

test(workflow): add governance regression and activation PG coverage

2026-09-13 02:50:23 +00:00

auth_handlers.go

fix(api): fail closed when status update cannot set user role

2026-09-13 11:37:03 +00:00

auth_helpers.go

feat(authz): implement six-phase permissions, settings and workflow v2

2026-09-13 02:50:23 +00:00

auth_middleware.go

feat(api): add workflow catalog routes and public auth config endpoint

2026-09-13 02:50:23 +00:00

auth_phase1_test.go

test(docs): Phase 1 completion gates, PG integration tests, and report

2026-09-13 02:50:22 +00:00

bizdev_stage_gate.go

feat(authz): implement six-phase permissions, settings and workflow v2

2026-09-13 02:50:23 +00:00

body_limit_middleware_test.go

feat(taskrun): resume interrupted runs and harden P1 security gaps

2026-09-13 02:50:23 +00:00

body_limit_middleware.go

feat(upload): reuse MIME validator for workflow template uploads.

2026-09-13 02:50:23 +00:00

chat_digest_api.go

fix(chat): unify history read authorization and stats filtering

2026-09-13 03:06:11 +00:00

chat_document_reader_test.go

fix(chat): add authorized readonly document summaries

2026-09-13 04:27:01 +00:00

chat_document_reader.go

fix(chat): add authorized readonly document summaries

2026-09-13 04:27:01 +00:00

chat_export_api.go

fix(agent): Chat Agent 全链路 P0-P5 整改

2026-09-13 02:50:22 +00:00

chat_history_api_test.go

feat(security): complete P0 release blocking remediation

2026-09-13 02:50:22 +00:00

chat_history_auth.go

fix(chat): rebuild path and clarify stream auth errors

2026-09-13 03:20:38 +00:00

chat_history_refresh_pg_test.go

fix(chat): unify history read authorization and stats filtering

2026-09-13 03:06:11 +00:00

chat_recategorize_api_test.go

feat(security): complete P0 release blocking remediation

2026-09-13 02:50:22 +00:00

chat_recategorize_api.go

feat(category): implement recategorize backfill engine and fallback mapping (Spec §3.4-3.5 A4-A5)

2026-09-13 02:50:20 +00:00

chat_restore_test.go

feat(security): complete P0 release blocking remediation

2026-09-13 02:50:22 +00:00

chat_search_and_digest_api_test.go

feat(security): complete P0 release blocking remediation

2026-09-13 02:50:22 +00:00

chat_search_api.go

fix(chat): unify history read authorization and stats filtering

2026-09-13 03:06:11 +00:00

chat_turn_api.go

feat(api): gate chat stream on chat_turns with session serial execution

2026-09-13 02:50:22 +00:00

chat_unread_and_export_api_test.go

feat(security): complete P0 release blocking remediation

2026-09-13 02:50:22 +00:00

chat_unread_api.go

fix(chat): unify history read authorization and stats filtering

2026-09-13 03:06:11 +00:00

chat_window_api_test.go

fix(chat): unify history read authorization and stats filtering

2026-09-13 03:06:11 +00:00

chat_window_api.go

fix(chat): unify history read authorization and stats filtering

2026-09-13 03:06:11 +00:00

cors.go

fix(security): add CORS allowlist and enforce principal on chat handlers

2026-09-13 02:50:22 +00:00

document_revision_access.go

fix(api): assert edit rights before ledger, then project body

2026-09-13 09:27:07 +00:00

document_revision_authz_test.go

fix(docgov): remove PutChangeProposal memory-seed helper

2026-09-13 10:10:56 +00:00

document_revision_handlers.go

fix(api): guide idempotent decision retry after governance mark failure

2026-09-13 10:09:18 +00:00

document_revision_patch_order_test.go

fix(docgov): assert edit duty before lease; project via SaveDocumentContent

2026-09-13 09:32:08 +00:00

document_revision_upload_register_test.go

feat(api): expose POST /freeform-documents for upload registration

2026-09-13 11:12:03 +00:00

e2e_test.go

feat(security): complete P0 release blocking remediation

2026-09-13 02:50:22 +00:00

e2e_workflow_governance_test.go

feat(projectcontext): bizdev 注入项目对话并完成 PG 治理 E2E

2026-09-13 02:50:23 +00:00

freeform_create_authz_test.go

feat(api): expose POST /freeform-documents for upload registration

2026-09-13 11:12:03 +00:00

freeform_create_nonmember_pg_test.go

feat(api): expose POST /freeform-documents for upload registration

2026-09-13 11:12:03 +00:00

freeform_doc_api_test.go

feat(security): complete P0 release blocking remediation

2026-09-13 02:50:22 +00:00

freeform_doc_api.go

feat(api): expose POST /freeform-documents for upload registration

2026-09-13 11:12:03 +00:00

handlers.go

fix(chat): add authorized readonly document summaries

2026-09-13 04:27:01 +00:00

lease_concurrency_test.go

feat(security): complete P0 release blocking remediation

2026-09-13 02:50:22 +00:00

me_settings_handlers.go

feat(authz): implement six-phase permissions, settings and workflow v2

2026-09-13 02:50:23 +00:00

notification_handlers.go

feat(api): wire document approval hook and project notifications API.

2026-09-13 02:50:23 +00:00

notification_reminder_loop.go

feat(notification): add 24h stage advance reminder and confirm on advance.

2026-09-13 02:50:23 +00:00

phase5_acceptance_pg_test.go

fix(projectworkflow): generate UTF-8 safe project codes for Chinese names

2026-09-13 02:50:23 +00:00

phase5_fault_injection_pg_test.go

feat(taskrun): add worker lease/heartbeat and Phase 5 fault injection tests

2026-09-13 02:50:23 +00:00

phase5_finalize_fault_pg_test.go

feat(taskrun): resume interrupted runs and harden P1 security gaps

2026-09-13 02:50:23 +00:00

phase5_soak_test.go

feat(ops): compose runner auth, upload MIME validation, and test soak

2026-09-13 02:50:23 +00:00

piagent_e2e_test.go

fix(squad): propagate AgentTimeout to pi-agent step execution

2026-09-13 02:50:23 +00:00

principal_context.go

feat(authz): complete Phase 1 admin roles, sessions, and unified admin gate

2026-09-13 02:50:22 +00:00

project_create_pg_test.go

fix(projectworkflow): generate UTF-8 safe project codes for Chinese names

2026-09-13 02:50:23 +00:00

project_doc_handlers.go

feat(abac): restrict workflow document access by active stage duties.

2026-09-13 02:50:23 +00:00

project_handlers_test.go

test(workflow): add governance regression and activation PG coverage

2026-09-13 02:50:23 +00:00

project_handlers.go

feat(api): add workflow catalog routes and public auth config endpoint

2026-09-13 02:50:23 +00:00

project_members_authz_test.go

test(docs): Phase 1 completion gates, PG integration tests, and report

2026-09-13 02:50:22 +00:00

project_members_handlers.go

feat(api): add workflow catalog routes and public auth config endpoint

2026-09-13 02:50:23 +00:00

project_settings_handlers.go

fix(governance): 统一文档访问判定与上下文快照排除计数

2026-09-13 02:50:23 +00:00

project_workflow_api_test.go

test(workflow): add governance regression and activation PG coverage

2026-09-13 02:50:23 +00:00

reconcile_handlers.go

feat(security): complete P0 release blocking remediation

2026-09-13 02:50:22 +00:00

reply_export_api_test.go

feat(security): complete P0 release blocking remediation

2026-09-13 02:50:22 +00:00

reply_export_api.go

fix(agent): Chat Agent 全链路 P0-P5 整改

2026-09-13 02:50:22 +00:00

security_p0_test.go

test(docs): Phase 1 IAM authz tests and test report

2026-09-13 02:50:22 +00:00

security_penetration_test.go

test(security): add automated penetration negative test matrix.

2026-09-13 02:50:23 +00:00

server_test.go

test(chat): cover readonly summary HTTP path

2026-09-13 04:29:17 +00:00

server.go

feat(api): expose POST /freeform-documents for upload registration

2026-09-13 11:12:03 +00:00

sse.go

fix(chat): add authorized readonly document summaries

2026-09-13 04:27:01 +00:00

stage_access_helpers.go

fix(chat): unify history read authorization and stats filtering

2026-09-13 03:06:11 +00:00

task_finalize_test.go

fix(chat): show pending confirmation instead of completed for high-risk

2026-09-13 09:51:15 +00:00

task_finalize.go

fix(chat): show pending confirmation instead of completed for high-risk

2026-09-13 09:51:15 +00:00

task_run_auth.go

feat(authz): implement six-phase permissions, settings and workflow v2

2026-09-13 02:50:23 +00:00

task_run_authz_pg_test.go

fix(api): 任务同步与SSE入口补齐项目成员鉴权

2026-09-13 02:50:23 +00:00

task_run_busy_preflight_test.go

fix(taskrun): reject busy documents before run creation

2026-09-13 04:43:50 +00:00

task_run_handlers.go

fix(taskrun): reject busy documents before run creation

2026-09-13 04:43:50 +00:00

task_run_observer_test.go

feat(security): complete P0 release blocking remediation

2026-09-13 02:50:22 +00:00

task_run_persistence_pg_test.go

feat(taskrun): persist runs/events and fix finalize-before-done ordering

2026-09-13 02:50:23 +00:00

task_run_resume_pg_test.go

feat(taskrun): resume interrupted runs and harden P1 security gaps

2026-09-13 02:50:23 +00:00

taskstream_test.go

feat(security): complete P0 release blocking remediation

2026-09-13 02:50:22 +00:00

test_auth_helper_test.go

feat(security): complete P0 release blocking remediation

2026-09-13 02:50:22 +00:00

test_auth_helpers.go

fix(auth): restrict demo seed users to dev/test environments

2026-09-13 02:50:22 +00:00

test_helpers_test.go

test(governance): PI Agent PG 全链路实测通过并固化运行条件

2026-09-13 02:50:23 +00:00

web_assets_test.go

feat(security): complete P0 release blocking remediation

2026-09-13 02:50:22 +00:00

workflow_approval_hook.go

feat(api): wire document approval hook and project notifications API.

2026-09-13 02:50:23 +00:00

workflow_catalog_handlers.go

feat(api): add workflow catalog routes and public auth config endpoint

2026-09-13 02:50:23 +00:00

workflow_governance_pg_test.go

feat(projectcontext): bizdev 注入项目对话并完成 PG 治理 E2E

2026-09-13 02:50:23 +00:00

workflow_governance_piagent_pg_test.go

test(governance): 补跑 product_manager PG+PI 全链路并通过

2026-09-13 02:50:23 +00:00

workflow_instance_handlers.go

feat(notification): add 24h stage advance reminder and confirm on advance.

2026-09-13 02:50:23 +00:00

workflow_terminate_handlers.go

fix(governance): 统一文档访问判定与上下文快照排除计数

2026-09-13 02:50:23 +00:00