2 Commits

Include renames

Author	SHA1	Message	Date
host	9bb9a50e4e	残留批次A：成员删除、PR needs_local_worker 落库、推送 DNS TOCTOU ... - 成员删除：DELETE /projects/{id}/members/{user_id}，限 owner 或 全局管理员，禁删唯一 owner，记 remove_member 审计 （AuthStore.remove_member + server 分发，沿用 PATCH 守卫口径） - PR needs_local_worker 落库：非 local 扫到 queued 任务时 CAS 写行状态为 needs_local_worker；claim/find_open 同步认该状态， 标记过的行仍可被 local worker 认领、不被搁置；另修 claim/find_open 对裸 sqlite3 tuple 行的 dict() 兜底 （TypeError/ValueError） - 推送 DNS TOCTOU：发送改走建连时解析+判段的连接类，解析 一次、只拨判过的 IP，Host/SNI 仍为原域名；opener 直接构造 以排除 ProxyHandler 改写（build_opener 默认会塞代理）	2026-10-27 19:10:49 +00:00
host	1402dc67fd	P1 security batch: quota execution checks, cost accounting, goal/coordinator semantics, PR channel, orphan signature, control-plane and console hardening ... - Docker quota watchdog + fail-closed quota checks, system tasks need real owner - max_cost_usd actually accumulated, cancel records cost, estimated rows excluded from unpriced cap, cache_write declared non-billed - goal-resume keeps original verify on breakpoint resume, goal retry falls back to resume, goal_max_rounds capped at 100 at create and execution - coordinator children inherit parent model/effort, orphans marked interrupted with audit - PR jobs on docker workers return explicit needs_local_worker instead of silent empty - worker code signature covers 6 files and is checked before claim, fail-closed - sub2api lazy provisioning with rotation, backup whitelist + 0600, push SSRF block, repos/workers desensitized, key/project audits and limits, console buttons/quota/status wording, coordinator/automation quota reserve	2026-10-27 16:27:50 +00:00