4 Commits

Include renames

Author	SHA1	Message	Date
host	5883169c82	feat: goal 断点续跑端点（G10）+ 摘要持久化与推送 outbox（G11/G12） ... G10：POST /tasks/{id}/goal-resume，仅 interrupted 的 goal 任务， 走 host.py goal-resume（无 --goal-text）从 goal_rounds_done 下一轮 断点续跑，保留原线程与 worktree，状态回 queued 并置 goal_resume_pending（worker 认领后清掉），写 task_goal_resumed 审计；goal-met/unmet、failed、非 goal 一律 409；/continue 开新 循环语义不动。Local/Docker 两路新增 goal_resume_breakpoint_task， 不支持断点的执行器明确失败，绝不回落成 goal 或开新循环。 G11：digest 非失败事件持久化进 push_digest_events，worker 循环 每小时按（项目、订阅）分组汇总发一条，失败类仍即时发。 G12：webhook/slack 投递失败写 push_outbox，worker 循环后台重试 （最多 3 次、默认 60 秒退避），3 次仍失败删行并记日志，不丢 任务状态；缺凭证与无 sender 不进 outbox；文档写明 at-least-once 下 webhook/slack 可能重复，接收方须去重。 测试：cloud 769（4 跳过）、host 68、deploy 19 全过。	2026-10-28 11:09:29 +08:00
host	1402dc67fd	P1 security batch: quota execution checks, cost accounting, goal/coordinator semantics, PR channel, orphan signature, control-plane and console hardening ... - Docker quota watchdog + fail-closed quota checks, system tasks need real owner - max_cost_usd actually accumulated, cancel records cost, estimated rows excluded from unpriced cap, cache_write declared non-billed - goal-resume keeps original verify on breakpoint resume, goal retry falls back to resume, goal_max_rounds capped at 100 at create and execution - coordinator children inherit parent model/effort, orphans marked interrupted with audit - PR jobs on docker workers return explicit needs_local_worker instead of silent empty - worker code signature covers 6 files and is checked before claim, fail-closed - sub2api lazy provisioning with rotation, backup whitelist + 0600, push SSRF block, repos/workers desensitized, key/project audits and limits, console buttons/quota/status wording, coordinator/automation quota reserve	2026-10-27 16:27:50 +00:00
host	fb3a311da8	推送真发送：webhook/slack 内置真实发送端 + worker 终态自动通知 ... 此前订阅与分发框架都在，但分发端点传 sender=None， webhook/slack 永远报无 sender、从未真发过。本轮： - push：send_webhook/send_slack（标准库 urllib POST， 单次 10 秒超时，不重试，失败记 errors）；sender=None 时用内置端，显式 sender 优先；webpush/apns/fcm 仍报 缺凭证（原因写明：webpush 需浏览器端三字段订阅与标准库 没有的 P-256 ECDH + AES-GCM；apns 需 HTTP/2；fcm 需 Firebase 服务账号，三者均无现成接收方，不造假发送） - worker：run_one 终态（completed/failed，缺 key 与仓库 失败两条早退路径也在内）后 best-effort 调分发，通知 失败只记日志、绝不影响任务状态；取消（interrupted） 不在事件集合里，不通知 - 测试：真实发送端 6 个（本地回环服务器）、worker 终态 通知 2 个，旧无 sender 断言按新语义改写	2026-10-26 17:31:30 +08:00
host	076ba01c74	cloud: fill gaps (memory/KB/cost/models endpoints, WAL concurrency, OAuth scaffold, push subscriptions)	2026-10-26 01:32:57 +08:00