host 668c000394 feat: GitHub App manifest 扩到主机最大权限 ...

仓库权限除 metadata 外全部拉到最高档（contents/pull_requests/
issues/actions/checks/workflows/administration 等全部 write，
members 只读），事件补齐 push/check_run/workflow_run 等；
旧权限 contents/pull_requests write + issues read 不再是上限。
风险明示：administration=write 含删库/转移，secrets=write
含管理 secret，配 All repositories 时影响面为全账号仓库。
注意：改代码只改以后新建 App 的 manifest，线上 App
(id 5476837) 仍需在 GitHub 设置里改权限并接受新权限。

2026-10-30 02:53:46 +08:00

..

test_api_keys.py

多 key：OAuth 登录签发附加 key 不再轮换，keys 管理端点

2026-10-26 16:27:42 +08:00

test_app_token.py

App-token：推分支建 PR 改走 GitHub App installation token

2026-10-26 16:47:55 +08:00

test_approvals_server.py

feat: P1 补齐（自动评审队列、自动化+分诊、并发 caps、运行时审批队列）

2026-10-27 15:53:50 +08:00

test_approvals.py

feat: P1 补齐（自动评审队列、自动化+分诊、并发 caps、运行时审批队列）

2026-10-27 15:53:50 +08:00

test_auth.py

fix(auth): unknown project role denies instead of KeyError 500

2026-10-30 00:49:03 +08:00

test_auto_memory.py

自动记忆：官方 memories 对齐的提取+注入闭环（确定性 v1）

2026-10-28 12:12:10 +08:00

test_automation_run_due.py

fix(automations): 审计行不再显式插 TEXT id，PG identity 下不再丢审计

2026-10-30 01:55:59 +08:00

test_automations_server.py

feat: P1 补齐（自动评审队列、自动化+分诊、并发 caps、运行时审批队列）

2026-10-27 15:53:50 +08:00

test_automations.py

feat: P1 补齐（自动评审队列、自动化+分诊、并发 caps、运行时审批队列）

2026-10-27 15:53:50 +08:00

test_autoscaler.py

autoscaler: guard scale-down against live coordinators and busy victims

2026-10-29 00:19:30 +08:00

test_caps_server.py

P1 security batch: quota execution checks, cost accounting, goal/coordinator semantics, PR channel, orphan signature, control-plane and console hardening

2026-10-27 16:27:50 +00:00

test_caps.py

feat: P1 补齐（自动评审队列、自动化+分诊、并发 caps、运行时审批队列）

2026-10-27 15:53:50 +08:00

test_chat_history.py

chat: 持久化继续消息，chat-history 交替历史

2026-10-29 07:01:57 +08:00

test_chatgpt_codex_skills.py

align: ChatGPT Codex 对齐第一批：技能包 + 对照表

2026-10-30 01:16:49 +08:00

test_child_model.py

feat: 子任务默认模型/强度（child_model/child_effort）

2026-10-29 05:27:22 +08:00

test_cloud_dispatch_pr.py

P1 security batch: quota execution checks, cost accounting, goal/coordinator semantics, PR channel, orphan signature, control-plane and console hardening

2026-10-27 16:27:50 +00:00

test_console.py

console: React 生产级重写（左列表 + 中对话 + 右详情）

2026-10-29 06:32:38 +08:00

test_coord_quota_gate.py

feat: 跨 worker 真 kill（kill_requests 意图表 + 收殓器）与自动化触发入闸

2026-10-30 01:32:35 +08:00

test_coordinator_row_vanished.py

协调员行消失按中断处理：本体行消失即放槽，子任务行消失按 interrupted 合流

2026-10-28 08:57:05 +00:00

test_coordinator.py

worker: release running slot after coordinator completes

2026-10-29 02:42:52 +08:00

test_db_backend.py

Postgres real backend: psycopg adapter, schema, migration

2026-10-26 03:23:06 +08:00

test_db.py

cloud: fill gaps (memory/KB/cost/models endpoints, WAL concurrency, OAuth scaffold, push subscriptions)

2026-10-26 01:32:57 +08:00

test_docker_runtime.py

Docker tasks: --docker-runtime option (runsc support, default off)

2026-10-26 10:26:21 +08:00

test_docker_sandbox.py

fix: docker 默认 runner 支持 env + 并发开通竞态复用

2026-10-27 17:59:04 +08:00

test_fallback_retry.py

Perf: light worker poll query + tasks(status) index

2026-10-26 06:19:01 +08:00

test_github_app.py

feat: GitHub App manifest 扩到主机最大权限

2026-10-30 02:53:46 +08:00

test_github_repos.py

P1 security batch: quota execution checks, cost accounting, goal/coordinator semantics, PR channel, orphan signature, control-plane and console hardening

2026-10-27 16:27:50 +00:00

test_goal_mode.py

console: React 生产级重写（左列表 + 中对话 + 右详情）

2026-10-29 06:32:38 +08:00

test_goal_resume.py

worker: auto-resume falls back to fresh goal for never-started tasks

2026-10-29 16:45:07 +08:00

test_handler_500.py

fix: 请求处理未捕获异常回 500 JSON，不再断连变 nginx 502

2026-10-27 10:56:08 +08:00

test_harness2_tasks.py

harness2: per-role models, sweep batch, task file assets endpoint

2026-10-29 16:32:58 +08:00

test_harness2.py

harness2: recursive harness optimization wired to real codex tasks

2026-10-29 14:21:18 +08:00

test_host_sandbox_routing.py

Fix codex-host profile: capability allow + netlink (bwrap needs both)

2026-10-26 08:39:57 +08:00

test_identity_memory.py

云端身份与记忆：用户画像+分级记忆，不动 thread

2026-10-28 03:43:02 +08:00

test_kill_requests.py

feat: 跨 worker 真 kill（kill_requests 意图表 + 收殓器）与自动化触发入闸

2026-10-30 01:32:35 +08:00

test_longtask_auto_resume.py

feat: 长任务无敌补齐三件：连续失败上限 + worker退出审计 + 配额恢复自动续跑

2026-10-29 13:07:57 +08:00

test_marker_tools.py

任务内标记工具：task-create/task-poll/task-read 移植、wait-threads 接通、新增 task-cancel/task-retry

2026-10-28 10:13:40 +00:00

test_marker_wait_heartbeat.py

worker: heartbeat parent task during marker poll/wait loops

2026-10-29 04:40:47 +08:00

test_mcp_server.py

feat(mcp): 云端 MCP 工具从 8 个扩到 12 个

2026-10-30 02:00:58 +08:00

test_member_delete.py

残留批次A：成员删除、PR needs_local_worker 落库、推送 DNS TOCTOU

2026-10-27 19:10:49 +00:00

test_memory_kb.py

cloud: production control plane (API, auth/RBAC, queue, sandbox, memory/KB, fallback/cost, webhooks)

2026-10-26 01:23:21 +08:00

test_models_cost.py

逐任务真实成本：上游用量事件 + 价目表计价

2026-10-26 18:41:27 +08:00

test_multiuser_gaps.py

P0 security batch: true global admin, quota gates on all spending paths, default quota for quota-less users, fix-review author trust + docker/owner attribution, GitHub App setup issuer binding, real cancel kill, wider shell env exclusion

2026-10-27 15:35:23 +00:00

test_neverstart_fresh.py

worker: auto-resume falls back to fresh goal for never-started tasks

2026-10-29 16:45:07 +08:00

test_oauth_bind.py

多 key：OAuth 登录签发附加 key 不再轮换，keys 管理端点

2026-10-26 16:27:42 +08:00

test_oauth_real_login.py

多 key：OAuth 登录签发附加 key 不再轮换，keys 管理端点

2026-10-26 16:27:42 +08:00

test_oauth.py

cloud: fill gaps (memory/KB/cost/models endpoints, WAL concurrency, OAuth scaffold, push subscriptions)

2026-10-26 01:32:57 +08:00

test_ops_batch.py

HA stage 0: health reads workers registry, daily pg_dump timer, backup freshness in monitor (#48)

2026-10-26 23:51:54 +08:00

test_outer_hardening.py

Outer hardening: AppArmor profile, pids limit, egress allowlist proxy

2026-10-26 07:42:14 +08:00

test_p0_security.py

P0 security batch: true global admin, quota gates on all spending paths, default quota for quota-less users, fix-review author trust + docker/owner attribution, GitHub App setup issuer binding, real cancel kill, wider shell env exclusion

2026-10-27 15:35:23 +00:00

test_p0_three.py

断点镜像状态标签回落：host-state 条目写 status 不是 goal_status

2026-10-29 15:31:07 +08:00

test_p1_security_server.py

P1 security batch: quota execution checks, cost accounting, goal/coordinator semantics, PR channel, orphan signature, control-plane and console hardening

2026-10-27 16:27:50 +00:00

test_p1_security_worker.py

fix: Docker 断点续跑透传密钥环境（SUB2API_API_KEY 缺失空转修法）

2026-10-29 12:42:19 +08:00

test_p2_console.py

console: React 生产级重写（左列表 + 中对话 + 右详情）

2026-10-29 06:32:38 +08:00

test_p2_migrations.py

P2-ops: migration alignment, deploy test list, monitor alerts/single-host, backup/rollback closure, Caddy template

2026-10-27 16:37:28 +00:00

test_peer_messages_server.py

feat: 任务间互发消息（API + agent 标记块，不中断任务）

2026-10-27 14:12:28 +08:00

test_peer_messages.py

feat: 任务间互发消息（API + agent 标记块，不中断任务）

2026-10-27 14:12:28 +08:00

test_postgres_backend.py

fix(db): register auto-memory tables in _OR_REPLACE_PK

2026-10-28 22:49:06 +08:00

test_postgres_integration.py

Postgres real backend: psycopg adapter, schema, migration

2026-10-26 03:23:06 +08:00

test_pr_app_token.py

App-token：推分支建 PR 改走 GitHub App installation token

2026-10-26 16:47:55 +08:00

test_pr_commit.py

pr: commit worktree changes before push; fix merge/pr order docs

2026-10-26 15:20:02 +08:00

test_pr_jobs.py

feat: G7 分层 fail-open/fail-closed + G8 Docker 轮询掐断 + G9 worker 忽略 host 预算 + G13/G14 归属（第三批）

2026-10-28 11:14:10 +08:00

test_pr_needs_local.py

残留批次A：成员删除、PR needs_local_worker 落库、推送 DNS TOCTOU

2026-10-27 19:10:49 +00:00

test_pr_timeout.py

pr 超时：git/gh 子进程默认 120 秒超时，超时转 502 不挂 handler

2026-10-26 17:01:47 +08:00

test_prestart_stages.py

worker: cover goal docker paths with prestart stage logging

2026-10-29 17:46:12 +08:00

test_prod_gaps.py

Project repo_url: worker can run tasks from any git repo

2026-10-26 04:16:11 +08:00

test_prod_webhook_exec.py

429 限流加 Retry-After 头：值为限流窗口秒数，不改阈值与计数

2026-10-28 10:12:57 +00:00

test_prod_worker_timeout.py

feat: 长任务补齐——流式进度 + 跨进程中断 + worker 超时约定

2026-10-27 03:05:15 +08:00

test_project_repo.py

feat(repos): 仓库接入预检 + codexsvc deploy key 配给脚本

2026-10-30 01:39:46 +08:00

test_push_toctou.py

残留批次A：成员删除、PR needs_local_worker 落库、推送 DNS TOCTOU

2026-10-27 19:10:49 +00:00

test_push.py

feat: goal 断点续跑端点（G10）+ 摘要持久化与推送 outbox（G11/G12）

2026-10-28 11:09:29 +08:00

test_queue_sandbox.py

feat: 文档/图片工具进任务镜像 + 结果截断从截断 JSON 改为提取 text 上限 20000 字

2026-10-30 02:03:14 +08:00

test_rate_limit_db.py

fix: 限流清理移出请求路径，根治 rate_limit_hits 死锁

2026-10-27 05:40:30 +08:00

test_relay.py

feat: per-task model/effort/approval + relay models endpoint (#59)

2026-10-27 01:44:53 +08:00

test_review_server.py

feat: P1 补齐（自动评审队列、自动化+分诊、并发 caps、运行时审批队列）

2026-10-27 15:53:50 +08:00

test_review.py

feat: P1 补齐（自动评审队列、自动化+分诊、并发 caps、运行时审批队列）

2026-10-27 15:53:50 +08:00

test_run_all_pool.py

worker: always start capacity pool threads in run_all

2026-10-29 05:41:35 +08:00

test_server_endpoints.py

修项目成本按天接口在 Postgres 上的 Decimal 序列化崩溃

2026-10-26 23:17:25 +08:00

test_server_goal_notify.py

P1 security batch: quota execution checks, cost accounting, goal/coordinator semantics, PR channel, orphan signature, control-plane and console hardening

2026-10-27 16:27:50 +00:00

test_server_merge.py

Docker sandbox real test + cloud merge status endpoint

2026-10-26 02:46:10 +08:00

test_server_oauth_push.py

P0 security batch: true global admin, quota gates on all spending paths, default quota for quota-less users, fix-review author trust + docker/owner attribution, GitHub App setup issuer binding, real cancel kill, wider shell env exclusion

2026-10-27 15:35:23 +00:00

test_server_pr_app_token.py

App-token：推分支建 PR 改走 GitHub App installation token

2026-10-26 16:47:55 +08:00

test_server_retry.py

Worker concurrency (capacity enforced), survival (heartbeat/sweep/drain), retry endpoint

2026-10-26 06:46:20 +08:00

test_server_task_files.py

fix: task files endpoint resolves tenant docker worktrees

2026-10-29 23:16:01 +08:00

test_server.py

P0 security batch: true global admin, quota gates on all spending paths, default quota for quota-less users, fix-review author trust + docker/owner attribution, GitHub App setup issuer binding, real cancel kill, wider shell env exclusion

2026-10-27 15:35:23 +00:00

test_skill_seed_worker.py

align: 修正技能播种路径：codex-home/skills/ 才是用户技能目录

2026-10-30 01:16:49 +08:00

test_skills_mcp.py

feat: 线程操作与 skills/MCP 管理面暴露（host CLI + 服务端 API + 控制台）

2026-10-27 16:37:28 +00:00

test_sub2api.py

fix: 登录限流下开通突发不再硬失败（节流 + 429 重试）

2026-10-27 23:09:22 +08:00

test_task_attachments.py

feat: 任务附件——server/worker/console 链路打通（+ popen goal 新语义补漏）

2026-10-27 04:30:43 +08:00

test_task_continue.py

feat: 旧任务继续会话——终端任务带新消息 + 全部选项同一会话续跑

2026-10-27 04:40:11 +08:00

test_task_environments.py

console: React 生产级重写（左列表 + 中对话 + 右详情）

2026-10-29 06:32:38 +08:00

test_task_links.py

feat: 计划模式 + 后续消息 + 会话分支接云端 (#65)

2026-10-27 03:17:51 +08:00

test_task_list_pagination.py

console: 任务列表服务端分页 + 控制台分页面签

2026-10-30 02:25:48 +08:00

test_task_list_tokens.py

console: 任务详情也显示首字、总耗时、token

2026-10-30 00:39:13 +08:00

test_task_options.py

feat: G7 分层 fail-open/fail-closed + G8 Docker 轮询掐断 + G9 worker 忽略 host 预算 + G13/G14 归属（第三批）

2026-10-28 11:14:10 +08:00

test_task_quotas.py

test: G14/open 旧口径测试按 P1 口径更新

2026-10-28 11:25:17 +08:00

test_task_trace.py

fix: 租户 Docker 任务链路可见（租户目录优先、共享目录兜底）

2026-10-27 12:58:24 +08:00

test_task_turn_ids.py

console: React 生产级重写（左列表 + 中对话 + 右详情）

2026-10-29 06:32:38 +08:00

test_tenant_isolation.py

Multi-tenant isolation for Docker tasks (per-project mounts + networks + drop caps)

2026-10-26 07:24:54 +08:00

test_thread_lifecycle.py

feat: 线程生命周期对齐 15 项（bindings/refs/快照/心跳绑定/移交落点）

2026-10-28 04:56:22 +08:00

test_thread_ops.py

feat: 线程操作与 skills/MCP 管理面暴露（host CLI + 服务端 API + 控制台）

2026-10-27 16:37:28 +00:00

test_thread_resolve.py

fix: 线程解析按 home×provider 穷尽回退（共享 home + sub2api）

2026-10-28 05:36:18 +08:00

test_thread_unarchive.py

fix: thread/unarchive 走已归档解析（--archived 列表）

2026-10-28 06:10:02 +08:00

test_thread_wait_ops.py

feat: 线程等待与状态读取 8 项（wait/read/message/handoff/worktree/pr-checks/automation/sleep）

2026-10-28 04:33:20 +08:00

test_webhooks.py

cloud: production control plane (API, auth/RBAC, queue, sandbox, memory/KB, fallback/cost, webhooks)

2026-10-26 01:23:21 +08:00

test_websearch_mcp_env.py

websearch: MCP env 写进租户 config，不只靠 docker -e

2026-10-30 01:16:49 +08:00

test_websearch_mcp.py

feat: web search MCP v1 (oh-my-pi pattern, Python stdlib)

2026-10-28 17:14:22 +08:00

test_websearch_searxng.py

websearch: SearXNG 默认只查 bing,360search

2026-10-30 01:16:49 +08:00

test_websearch_worker.py

fix: pass search env into Docker task containers (SEARXNG_URL was lost)

2026-10-28 22:17:19 +08:00

test_worker_concurrency.py

Worker concurrency (capacity enforced), survival (heartbeat/sweep/drain), retry endpoint

2026-10-26 06:46:20 +08:00

test_worker_peer.py

feat: 任务间互发消息（API + agent 标记块，不中断任务）

2026-10-27 14:12:28 +08:00

test_worker_quota.py

test: G14/open 旧口径测试按 P1 口径更新

2026-10-28 11:25:17 +08:00

test_worker.py

fix(worker): 终态审计带上 error，复发卡死可定位

2026-10-30 01:38:01 +08:00