host
5883169c82
feat: goal 断点续跑端点（G10）+ 摘要持久化与推送 outbox（G11/G12）
...
G10：POST /tasks/{id}/goal-resume，仅 interrupted 的 goal 任务，
走 host.py goal-resume（无 --goal-text）从 goal_rounds_done 下一轮
断点续跑，保留原线程与 worktree，状态回 queued 并置
goal_resume_pending（worker 认领后清掉），写 task_goal_resumed
审计；goal-met/unmet、failed、非 goal 一律 409；/continue 开新
循环语义不动。Local/Docker 两路新增 goal_resume_breakpoint_task，
不支持断点的执行器明确失败，绝不回落成 goal 或开新循环。
G11：digest 非失败事件持久化进 push_digest_events，worker 循环
每小时按（项目、订阅）分组汇总发一条，失败类仍即时发。
G12：webhook/slack 投递失败写 push_outbox，worker 循环后台重试
（最多 3 次、默认 60 秒退避），3 次仍失败删行并记日志，不丢
任务状态；缺凭证与无 sender 不进 outbox；文档写明 at-least-once
下 webhook/slack 可能重复，接收方须去重。
测试：cloud 769（4 跳过）、host 68、deploy 19 全过。
2026-10-28 11:09:29 +08:00
host
9bb9a50e4e
残留批次A：成员删除、PR needs_local_worker 落库、推送 DNS TOCTOU
...
- 成员删除：DELETE /projects/{id}/members/{user_id}，限 owner 或
全局管理员，禁删唯一 owner，记 remove_member 审计
（AuthStore.remove_member + server 分发，沿用 PATCH 守卫口径）
- PR needs_local_worker 落库：非 local 扫到 queued 任务时 CAS
写行状态为 needs_local_worker；claim/find_open 同步认该状态，
标记过的行仍可被 local worker 认领、不被搁置；另修
claim/find_open 对裸 sqlite3 tuple 行的 dict() 兜底
（TypeError/ValueError）
- 推送 DNS TOCTOU：发送改走建连时解析+判段的连接类，解析
一次、只拨判过的 IP，Host/SNI 仍为原域名；opener 直接构造
以排除 ProxyHandler 改写（build_opener 默认会塞代理）
2026-10-27 19:10:49 +00:00
host
1402dc67fd
P1 security batch: quota execution checks, cost accounting, goal/coordinator semantics, PR channel, orphan signature, control-plane and console hardening
...
- Docker quota watchdog + fail-closed quota checks, system tasks need real owner
- max_cost_usd actually accumulated, cancel records cost, estimated rows excluded from unpriced cap, cache_write declared non-billed
- goal-resume keeps original verify on breakpoint resume, goal retry falls back to resume, goal_max_rounds capped at 100 at create and execution
- coordinator children inherit parent model/effort, orphans marked interrupted with audit
- PR jobs on docker workers return explicit needs_local_worker instead of silent empty
- worker code signature covers 6 files and is checked before claim, fail-closed
- sub2api lazy provisioning with rotation, backup whitelist + 0600, push SSRF block, repos/workers desensitized, key/project audits and limits, console buttons/quota/status wording, coordinator/automation quota reserve
2026-10-27 16:27:50 +00:00
host
fb3a311da8
推送真发送：webhook/slack 内置真实发送端 + worker 终态自动通知
...
此前订阅与分发框架都在，但分发端点传 sender=None，
webhook/slack 永远报无 sender、从未真发过。本轮：
- push：send_webhook/send_slack（标准库 urllib POST，
单次 10 秒超时，不重试，失败记 errors）；sender=None
时用内置端，显式 sender 优先；webpush/apns/fcm 仍报
缺凭证（原因写明：webpush 需浏览器端三字段订阅与标准库
没有的 P-256 ECDH + AES-GCM；apns 需 HTTP/2；fcm 需
Firebase 服务账号，三者均无现成接收方，不造假发送）
- worker：run_one 终态（completed/failed，缺 key 与仓库
失败两条早退路径也在内）后 best-effort 调分发，通知
失败只记日志、绝不影响任务状态；取消（interrupted）
不在事件集合里，不通知
- 测试：真实发送端 6 个（本地回环服务器）、worker 终态
通知 2 个，旧无 sender 断言按新语义改写
2026-10-26 17:31:30 +08:00
host
dc3f572b2b
Postgres real backend: psycopg adapter, schema, migration
...
Replace the PostgresDatabase skeleton with a real implementation:
psycopg (v3) first, psycopg2 second, lazy load, missing driver
still raises PostgresDriverMissingError with no silent SQLite
fallback. A sqlite3-style adapter (PgConnection/PgCursor/PgRow)
translates ? placeholders to %s outside string literals, maps
UNIQUE/FK violations, lock errors and connection failures to
explicit Postgres error types, and handles INSERT OR REPLACE,
PRAGMA table_info, AUTOINCREMENT and FTS5 refusal. POSTGRES_SCHEMA
covers all business tables with tasks result columns; server
init_db uses it under CLOUD_DB_BACKEND=postgres, SQLite path
unchanged. migrate_sqlite_to_postgres.py copies rows with
ON CONFLICT DO NOTHING and reseeds identity sequences.
Tests: cloud 239 (235 pass, 4 skipped without a real server),
host 27 pass; real-server tests skip unless CLOUD_TEST_PG_DSN
is set.
2026-10-26 03:23:06 +08:00
host
631580beab
cloud: production gaps (worker loop + true cancel, task result columns + migration, DB interface migration, metrics + backup)
2026-10-26 01:53:33 +08:00
host
076ba01c74
cloud: fill gaps (memory/KB/cost/models endpoints, WAL concurrency, OAuth scaffold, push subscriptions)
2026-10-26 01:32:57 +08:00
host