2 Commits

Include renames

Author	SHA1	Message	Date
host	1402dc67fd	P1 security batch: quota execution checks, cost accounting, goal/coordinator semantics, PR channel, orphan signature, control-plane and console hardening ... - Docker quota watchdog + fail-closed quota checks, system tasks need real owner - max_cost_usd actually accumulated, cancel records cost, estimated rows excluded from unpriced cap, cache_write declared non-billed - goal-resume keeps original verify on breakpoint resume, goal retry falls back to resume, goal_max_rounds capped at 100 at create and execution - coordinator children inherit parent model/effort, orphans marked interrupted with audit - PR jobs on docker workers return explicit needs_local_worker instead of silent empty - worker code signature covers 6 files and is checked before claim, fail-closed - sub2api lazy provisioning with rotation, backup whitelist + 0600, push SSRF block, repos/workers desensitized, key/project audits and limits, console buttons/quota/status wording, coordinator/automation quota reserve	2026-10-27 16:27:50 +00:00
host	5ee9d291dd	云端 goal/merge/review 三事件：goal 循环 + PR 事件通知 ... 此前 goal-unmet/merge-failed/review-requested 只有允许列表， 云端没有生产者（概念只在本地 host.py）。本轮给三者接真生产者： - goal：POST /tasks 接受 goal/verify_command/goal_max_rounds （迁移补列，SQLite 与 Postgres 两支）；带 verify_command 的 任务走 host.py goal 循环（Local/Docker 执行器 goal_task， turn→验测→喂回重试，缺省 3 轮）；达标 completed，未达标 failed 且只发 goal-unmet、不重复发 failed；goal 模式下 worker 级重试/fallback 关闭，同任务 /retry 会撞 host 任务名已存在 （已在文档写明，须新建任务）；CloudExecutor 无 goal 概念， 如实失败不降级 - review-requested：POST /tasks/{id}/pr 建 PR 成功时发 （payload 含 pr_url/pr_number） - merge-failed：PR 落盘（push/建 PR）失败 502 时发（payload 含 step/error），任务保持 merged、可重调 /pr；跳过时不发 测试：host 29、cloud 469 全过。	2026-10-26 18:11:12 +08:00