WeiCHEN d49c8f8cfc feat(sysadmin): system permission checks and settings audit list ...

Expose fine-grained system:* checks (admin grants all) and list
system_setting_policy_audits for settings change visibility.

2026-09-23 10:11:46 +08:00

..

access_log_middleware_test.go

feat(trace): strengthen T2/T3 evidence and access-log design

2026-09-22 21:51:19 +08:00

access_log_middleware.go

feat(trace): strengthen T2/T3 evidence and access-log design

2026-09-22 21:51:19 +08:00

admin_permissions_handlers.go

feat(api): add additive HTTP/SSE error envelopes

2026-09-15 14:40:56 +00:00

admin_roles_handlers.go

feat(api): add additive HTTP/SSE error envelopes

2026-09-15 14:40:56 +00:00

admin_system_handlers_test.go

feat(sysadmin): add system:* permissions and settings audit log

2026-09-23 10:09:10 +08:00

admin_system_handlers.go

feat(sysadmin): add system:* permissions and settings audit log

2026-09-23 10:09:10 +08:00

admin_template_handlers.go

feat(api): add additive HTTP/SSE error envelopes

2026-09-15 14:40:56 +00:00

admin_workflow_handlers.go

refactor(workflowdef): make definition/runtime deps unidirectional

2026-09-22 21:44:57 +08:00

asset_handlers_test.go

test: cover dedup hint, reparse guard, store gate and CoW contract

2026-09-21 09:47:06 +00:00

asset_handlers.go

fix(server): gate parse enqueue to store-backed pipeline

2026-09-21 09:47:06 +00:00

auth_gate_a_test.go

test(server): adapt fixtures to IAM dual-gate fail-closed

2026-09-16 09:42:07 +00:00

auth_handlers_test.go

fix(auth): resolve session and user status once per request

2026-09-19 09:54:10 +00:00

auth_handlers.go

fix(authz): harden permissions, chat gate, and project create idempotency

2026-09-20 07:04:57 +00:00

auth_helpers.go

refactor(docgov): converge shared lifecycle vocab into contracts

2026-09-22 21:44:57 +08:00

auth_middleware.go

fix(server): enforce principal identity and docgov project access (H1-H3)

2026-09-19 05:33:38 +00:00

auth_phase1_test.go

test(server): adapt fixtures to IAM dual-gate fail-closed

2026-09-16 09:42:07 +00:00

bizdev_stage_gate.go

feat(authz): implement six-phase permissions, settings and workflow v2

2026-09-13 02:50:23 +00:00

body_limit_middleware_test.go

feat(taskrun): resume interrupted runs and harden P1 security gaps

2026-09-13 02:50:23 +00:00

body_limit_middleware.go

feat(upload): reuse MIME validator for workflow template uploads.

2026-09-13 02:50:23 +00:00

chat_digest_api.go

feat(chatflow): authorize rolling summary and surface digest freshness

2026-09-16 15:37:50 +00:00

chat_document_reader_test.go

feat(server): allow weighted cross-workflow reads after a view check

2026-09-21 09:11:47 +00:00

chat_document_reader.go

feat(server): allow weighted cross-workflow reads after a view check

2026-09-21 09:11:47 +00:00

chat_export_api.go

feat(api): add additive HTTP/SSE error envelopes

2026-09-15 14:40:56 +00:00

chat_history_api_test.go

feat(bizdev): snapshot collaborators onto Runtime and Server ports

2026-09-15 13:00:33 +00:00

chat_history_auth.go

feat(api): add additive HTTP/SSE error envelopes

2026-09-15 14:40:56 +00:00

chat_history_refresh_pg_test.go

test: align official bd_intake task key and scoped task-run fixtures

2026-09-22 18:15:29 +08:00

chat_project_access_authz_test.go

fix(api): require project membership before chat and chat SSE

2026-09-13 12:25:22 +00:00

chat_recategorize_api_test.go

fix(authz): close preference, session project, and recategorize IDOR gaps

2026-09-20 10:42:58 +00:00

chat_recategorize_api.go

fix(authz): close preference, session project, and recategorize IDOR gaps

2026-09-20 10:42:58 +00:00

chat_restore_test.go

fix(authz): close preference, session project, and recategorize IDOR gaps

2026-09-20 10:42:58 +00:00

chat_search_and_digest_api_test.go

feat(bizdev): snapshot collaborators onto Runtime and Server ports

2026-09-15 13:00:33 +00:00

chat_search_api.go

feat(api): add additive HTTP/SSE error envelopes

2026-09-15 14:40:56 +00:00

chat_session_ownership_pg_test.go

test(server): 跨用户会话挂靠负例测试（PG + 内存双实现）

2026-09-18 03:39:08 +00:00

chat_session_ownership_test.go

fix(web): version chat window cache and cover cross-user session list

2026-09-19 09:28:11 +00:00

chat_turn_api.go

fix(server): enforce principal identity and docgov project access (H1-H3)

2026-09-19 05:33:38 +00:00

chat_unread_and_export_api_test.go

feat(bizdev): snapshot collaborators onto Runtime and Server ports

2026-09-15 13:00:33 +00:00

chat_unread_api.go

feat(api): add additive HTTP/SSE error envelopes

2026-09-15 14:40:56 +00:00

chat_window_api_test.go

fix(server): fail-closed chat import when Env is empty

2026-09-17 17:03:08 +00:00

chat_window_api.go

fix(server): fail-closed chat import when Env is empty

2026-09-17 17:03:08 +00:00

chatflow_http.go

feat(api): add additive HTTP/SSE error envelopes

2026-09-15 14:40:56 +00:00

cors.go

fix(authz): harden permissions, chat gate, and project create idempotency

2026-09-20 07:04:57 +00:00

docgov_comment_audit_nonmember_pg_test.go

test(server): reject non-member comment and audit reads on postgres

2026-09-19 13:22:37 +00:00

document_revision_access.go

feat(arch): clear G1 U3/U4 sql_write and path exceptions

2026-09-22 21:40:12 +08:00

document_revision_authz_test.go

feat(bizdev): snapshot collaborators onto Runtime and Server ports

2026-09-15 13:00:33 +00:00

document_revision_duty_write_test.go

feat(bizdev): snapshot collaborators onto Runtime and Server ports

2026-09-15 13:00:33 +00:00

document_revision_handlers.go

merge: feature/docgov-vocabulary-2026-09-22

2026-09-22 21:58:16 +08:00

document_revision_patch_order_test.go

fix(docrevision): ack content projection only after the fact source is written

2026-09-19 09:35:14 +00:00

document_revision_upload_register_test.go

feat(api): expose POST /freeform-documents for upload registration

2026-09-13 11:12:03 +00:00

domain_http_test.go

refactor(server): drop Server pool; route health/heal/vault via Runtime

2026-09-22 21:44:56 +08:00

domain_http.go

refactor(server): drop Server pool; route health/heal/vault via Runtime

2026-09-22 21:44:56 +08:00

duty_reassign_handlers.go

feat(projectworkflow): controlled post-activation document duty reassign

2026-09-20 09:48:27 +00:00

e2e_test.go

feat(security): complete P0 release blocking remediation

2026-09-13 02:50:22 +00:00

e2e_workflow_governance_test.go

test(server): align test_manager task key to tm_system_verification in e2e test

2026-09-20 00:45:33 +00:00

freeform_create_authz_test.go

feat(api): expose POST /freeform-documents for upload registration

2026-09-13 11:12:03 +00:00

freeform_create_nonmember_pg_test.go

feat(api): expose POST /freeform-documents for upload registration

2026-09-13 11:12:03 +00:00

freeform_doc_api_test.go

feat(api): add additive HTTP/SSE error envelopes

2026-09-15 14:40:56 +00:00

freeform_doc_api.go

fix(freedoc): widen freeform project_id to BIGINT for snowflake IDs

2026-09-23 00:45:31 +08:00

handlers_chat_history.go

refactor(server): split handlers.go by domain

2026-09-23 09:54:18 +08:00

handlers_chat_task.go

refactor(server): split handlers.go by domain

2026-09-23 09:54:18 +08:00

handlers_context.go

refactor(server): split handlers.go by domain

2026-09-23 09:54:18 +08:00

handlers_docgov_lease.go

refactor(server): split handlers.go by domain

2026-09-23 09:54:18 +08:00

handlers_docgov.go

refactor(server): split handlers.go by domain

2026-09-23 09:54:18 +08:00

handlers_health.go

refactor(server): split handlers.go by domain

2026-09-23 09:54:18 +08:00

handlers_http.go

refactor(server): split handlers.go by domain

2026-09-23 09:54:18 +08:00

handlers.go

refactor(server): split handlers.go by domain

2026-09-23 09:54:18 +08:00

idor_hotfixes_test.go

fix(authz): close preference, session project, and recategorize IDOR gaps

2026-09-20 10:42:58 +00:00

intent_plan_handlers_test.go

feat(intent): wire production QueryOwner and confirm dispatcher

2026-09-22 21:44:56 +08:00

intent_plan_handlers.go

feat(intent): wire production QueryOwner and confirm dispatcher

2026-09-22 21:44:56 +08:00

lease_concurrency_test.go

feat(bizdev): snapshot collaborators onto Runtime and Server ports

2026-09-15 13:00:33 +00:00

lineage_access_test.go

fix(authz): separate capability readiness from configured flags

2026-09-20 03:45:16 +00:00

lineage_access.go

refactor(docgov): converge shared lifecycle vocab into contracts

2026-09-22 21:44:57 +08:00

login_rate_limit_test.go

fix(server): login/register rate limiting + compose secret hygiene (H4/H8/M8)

2026-09-19 06:00:30 +00:00

login_rate_limit.go

fix(server): login/register rate limiting + compose secret hygiene (H4/H8/M8)

2026-09-19 06:00:30 +00:00

me_settings_handlers.go

feat(auth): show real names in duty pickers and enable profile edits

2026-09-23 09:39:41 +08:00

multi_intent_u8_piagent_pg_test.go

test(server): add Wave 2 real-PI evidence for U8 and full/none

2026-09-16 10:42:20 +00:00

notification_handlers.go

feat(api): add additive HTTP/SSE error envelopes

2026-09-15 14:40:56 +00:00

notification_reminder_loop.go

fix(server): 后台 ticker 纳入 Shutdown；vault Drain 告警；bizdev 心跳超时（R-6）

2026-09-18 03:44:08 +00:00

phase5_acceptance_pg_test.go

fix(authz): close project-context ABAC gap and repair CI PG fixtures

2026-09-22 18:12:26 +08:00

phase5_fault_injection_pg_test.go

test: align official bd_intake task key and scoped task-run fixtures

2026-09-22 18:15:29 +08:00

phase5_finalize_fault_pg_test.go

test: align official bd_intake task key and scoped task-run fixtures

2026-09-22 18:15:29 +08:00

phase5_soak_test.go

feat(ops): compose runner auth, upload MIME validation, and test soak

2026-09-13 02:50:23 +00:00

pi_agent_datadir_test.go

fix(test): pin real-PI DATA_DIR to runner-mounted data/dev

2026-09-22 19:40:28 +08:00

piagent_e2e_test.go

fix(kb): return offline client instead of Fatalf under require-online

2026-09-17 02:04:51 +00:00

principal_context.go

feat(sysadmin): system permission checks and settings audit list

2026-09-23 10:11:46 +08:00

project_create_pg_test.go

fix(projectworkflow): generate UTF-8 safe project codes for Chinese names

2026-09-13 02:50:23 +00:00

project_doc_content_error_test.go

feat(docquery): serve ledger when projection is missing

2026-09-14 14:07:05 +00:00

project_doc_handlers.go

merge: feature/server-assembly-2026-09-22

2026-09-22 22:04:53 +08:00

project_handlers_test.go

test(server): adapt fixtures to IAM dual-gate fail-closed

2026-09-16 09:42:07 +00:00

project_handlers.go

merge: feature/capability-enablement-impact-plan; renumber chat_summaries to 00058

2026-09-20 10:38:12 +00:00

project_members_authz_test.go

test+arch: unblock production gate (import SSOT + isolated test DSN)

2026-09-22 18:04:02 +08:00

project_members_handlers.go

refactor(server): drop Server pool; route health/heal/vault via Runtime

2026-09-22 21:44:56 +08:00

project_members_role_test.go

fix(authz): clear reviewer/approver slots in the member-write transaction

2026-09-13 22:37:24 +00:00

project_settings_author_only_error_test.go

test(projectinstance): cover author_only planning and activation

2026-09-17 09:39:59 +00:00

project_settings_handlers.go

feat(projectinstance): allow live workflow config edits except switching

2026-09-21 05:20:01 +00:00

project_workflow_api_test.go

fix(authz): separate capability readiness from configured flags

2026-09-20 03:45:16 +00:00

reconcile_handlers.go

feat(api): add additive HTTP/SSE error envelopes

2026-09-15 14:40:56 +00:00

reply_export_api_test.go

test(server): adapt fixtures to IAM dual-gate fail-closed

2026-09-16 09:42:07 +00:00

reply_export_api.go

feat(api): add additive HTTP/SSE error envelopes

2026-09-15 14:40:56 +00:00

security_p0_test.go

fix(authz): harden permissions, chat gate, and project create idempotency

2026-09-20 07:04:57 +00:00

security_penetration_test.go

test(server): adapt fixtures to IAM dual-gate fail-closed

2026-09-16 09:42:07 +00:00

server_test.go

feat(docgov): expose proposal HTTP and wire frontend decide flow

2026-09-17 14:07:52 +00:00

server.go

feat(sysadmin): add system:* permissions and settings audit log

2026-09-23 10:09:10 +08:00

session_cap_test.go

fix(coordinator): use the caller name and reject non-decimal user ids

2026-09-19 09:19:36 +00:00

software_project_handlers.go

feat(api): SWBOOT-05..08 wizard hooks and SWBOOT-10 allowlist stub

2026-09-16 15:43:13 +00:00

sse_wave0_test.go

fix(server): extend SSE write deadline for chat and run/stream

2026-09-17 16:42:56 +00:00

sse.go

fix(authz): harden permissions, chat gate, and project create idempotency

2026-09-20 07:04:57 +00:00

stage_access_helpers_test.go

feat(api): duty-check canonical docs before they are persisted

2026-09-14 08:39:44 +00:00

stage_access_helpers.go

feat(server): allow weighted cross-workflow reads after a view check

2026-09-21 09:11:47 +00:00

static_assets_test.go

feat(server): negotiate static compression and fix asset SPA fallback

2026-09-17 08:18:11 +00:00

static_assets.go

feat(server): negotiate static compression and fix asset SPA fallback

2026-09-17 08:18:11 +00:00

task_finalize_test.go

refactor(bizdev): delete eight locator getters

2026-09-15 13:08:25 +00:00

task_finalize.go

refactor(bizdev): delete eight locator getters

2026-09-15 13:08:25 +00:00

task_run_auth.go

fix(authz): harden permissions, chat gate, and project create idempotency

2026-09-20 07:04:57 +00:00

task_run_authz_pg_test.go

fix(api): 任务同步与SSE入口补齐项目成员鉴权

2026-09-13 02:50:23 +00:00

task_run_busy_preflight_test.go

fix(server): persist chat when a document task scope cannot be resolved

2026-09-21 05:03:08 +00:00

task_run_handlers.go

merge: feature/server-assembly-2026-09-22

2026-09-22 22:04:53 +08:00

task_run_idempotent_sse_test.go

fix(server): drain taskrun workers before TempDir cleanup

2026-09-16 09:33:41 +00:00

task_run_json_test.go

test(server): assert snake_case task run response

2026-09-21 03:05:49 +00:00

task_run_observer_test.go

feat(security): complete P0 release blocking remediation

2026-09-13 02:50:22 +00:00

task_run_persistence_pg_test.go

test: align official bd_intake task key and scoped task-run fixtures

2026-09-22 18:15:29 +08:00

task_run_request_build_test.go

fix(docgov): pass dynamic StageKey into document ledger create

2026-09-17 09:46:09 +00:00

task_run_resume_pg_test.go

test: align official bd_intake task key and scoped task-run fixtures

2026-09-22 18:15:29 +08:00

taskstream_test.go

test(server,app): delete dead resume-workspace test; clarify plan_owner redirect

2026-09-18 03:02:06 +00:00

test_auth_helper_test.go

feat(security): complete P0 release blocking remediation

2026-09-13 02:50:22 +00:00

test_auth_helpers.go

fix(auth): restrict demo seed users to dev/test environments

2026-09-13 02:50:22 +00:00

test_helpers_test.go

fix(test): pin real-PI DATA_DIR to runner-mounted data/dev

2026-09-22 19:40:28 +08:00

trace_handlers.go

feat(trace): strengthen T2/T3 evidence and access-log design

2026-09-22 21:51:19 +08:00

user_directory_handlers.go

feat(auth): show real names in duty pickers and enable profile edits

2026-09-23 09:39:41 +08:00

user_profile_directory_test.go

feat(auth): show real names in duty pickers and enable profile edits

2026-09-23 09:39:41 +08:00

vault_test.go

feat(events): add FAV subscriber shadow without live writes

2026-09-17 04:25:17 +00:00

vault.go

refactor(server): drop Server pool; route health/heal/vault via Runtime

2026-09-22 21:44:56 +08:00

web_assets_test.go

test(server): adapt fixtures to IAM dual-gate fail-closed

2026-09-16 09:42:07 +00:00

workflow_approval_hook.go

feat(app): drop production outbox and approval hook registration

2026-09-15 14:23:07 +00:00

workflow_catalog_handlers.go

feat(workflow): SWBOOT-02..04 software manifests and catalog allowlist

2026-09-16 15:39:01 +00:00

workflow_governance_full_none_piagent_pg_test.go

test: use official bd_intake key in FullNone real-PI fixture

2026-09-22 19:20:11 +08:00

workflow_governance_pg_test.go

test: align official bd_intake task key and scoped task-run fixtures

2026-09-22 18:15:29 +08:00

workflow_governance_piagent_pg_test.go

fix(kb): return offline client instead of Fatalf under require-online

2026-09-17 02:04:51 +00:00

workflow_instance_handlers.go

feat(api): add additive HTTP/SSE error envelopes

2026-09-15 14:40:56 +00:00

workflow_terminate_handlers.go

feat(api): add additive HTTP/SSE error envelopes

2026-09-15 14:40:56 +00:00