host 1402dc67fd P1 security batch: quota execution checks, cost accounting, goal/coordinator semantics, PR channel, orphan signature, control-plane and console hardening ...

- Docker quota watchdog + fail-closed quota checks, system tasks need real owner
- max_cost_usd actually accumulated, cancel records cost, estimated rows excluded from unpriced cap, cache_write declared non-billed
- goal-resume keeps original verify on breakpoint resume, goal retry falls back to resume, goal_max_rounds capped at 100 at create and execution
- coordinator children inherit parent model/effort, orphans marked interrupted with audit
- PR jobs on docker workers return explicit needs_local_worker instead of silent empty
- worker code signature covers 6 files and is checked before claim, fail-closed
- sub2api lazy provisioning with rotation, backup whitelist + 0600, push SSRF block, repos/workers desensitized, key/project audits and limits, console buttons/quota/status wording, coordinator/automation quota reserve

2026-10-27 16:27:50 +00:00

..

test_api_keys.py

多 key：OAuth 登录签发附加 key 不再轮换，keys 管理端点

2026-10-26 16:27:42 +08:00

test_app_token.py

App-token：推分支建 PR 改走 GitHub App installation token

2026-10-26 16:47:55 +08:00

test_approvals_server.py

feat: P1 补齐（自动评审队列、自动化+分诊、并发 caps、运行时审批队列）

2026-10-27 15:53:50 +08:00

test_approvals.py

feat: P1 补齐（自动评审队列、自动化+分诊、并发 caps、运行时审批队列）

2026-10-27 15:53:50 +08:00

test_auth.py

cloud: production control plane (API, auth/RBAC, queue, sandbox, memory/KB, fallback/cost, webhooks)

2026-10-26 01:23:21 +08:00

test_automations_server.py

feat: P1 补齐（自动评审队列、自动化+分诊、并发 caps、运行时审批队列）

2026-10-27 15:53:50 +08:00

test_automations.py

feat: P1 补齐（自动评审队列、自动化+分诊、并发 caps、运行时审批队列）

2026-10-27 15:53:50 +08:00

test_autoscaler.py

hotfix: autoscaler queue_depth NULL depends_on blinded scaler

2026-10-26 07:13:45 +08:00

test_caps_server.py

P1 security batch: quota execution checks, cost accounting, goal/coordinator semantics, PR channel, orphan signature, control-plane and console hardening

2026-10-27 16:27:50 +00:00

test_caps.py

feat: P1 补齐（自动评审队列、自动化+分诊、并发 caps、运行时审批队列）

2026-10-27 15:53:50 +08:00

test_cloud_dispatch_pr.py

P1 security batch: quota execution checks, cost accounting, goal/coordinator semantics, PR channel, orphan signature, control-plane and console hardening

2026-10-27 16:27:50 +00:00

test_console.py

feat: 任务间互发消息（API + agent 标记块，不中断任务）

2026-10-27 14:12:28 +08:00

test_coordinator.py

feat: 协调员任务（并行子任务、等齐、合流汇总）

2026-10-27 15:45:17 +08:00

test_db_backend.py

Postgres real backend: psycopg adapter, schema, migration

2026-10-26 03:23:06 +08:00

test_db.py

cloud: fill gaps (memory/KB/cost/models endpoints, WAL concurrency, OAuth scaffold, push subscriptions)

2026-10-26 01:32:57 +08:00

test_docker_runtime.py

Docker tasks: --docker-runtime option (runsc support, default off)

2026-10-26 10:26:21 +08:00

test_docker_sandbox.py

fix: docker 默认 runner 支持 env + 并发开通竞态复用

2026-10-27 17:59:04 +08:00

test_fallback_retry.py

Perf: light worker poll query + tasks(status) index

2026-10-26 06:19:01 +08:00

test_github_app.py

P0 security batch: true global admin, quota gates on all spending paths, default quota for quota-less users, fix-review author trust + docker/owner attribution, GitHub App setup issuer binding, real cancel kill, wider shell env exclusion

2026-10-27 15:35:23 +00:00

test_github_repos.py

P1 security batch: quota execution checks, cost accounting, goal/coordinator semantics, PR channel, orphan signature, control-plane and console hardening

2026-10-27 16:27:50 +00:00

test_goal_mode.py

feat: goal 模式新语义——prompt 即目标，无验收命令，不限轮次，模型宣告完成 (#67)

2026-10-27 03:54:48 +08:00

test_handler_500.py

fix: 请求处理未捕获异常回 500 JSON，不再断连变 nginx 502

2026-10-27 10:56:08 +08:00

test_host_sandbox_routing.py

Fix codex-host profile: capability allow + netlink (bwrap needs both)

2026-10-26 08:39:57 +08:00

test_memory_kb.py

cloud: production control plane (API, auth/RBAC, queue, sandbox, memory/KB, fallback/cost, webhooks)

2026-10-26 01:23:21 +08:00

test_models_cost.py

逐任务真实成本：上游用量事件 + 价目表计价

2026-10-26 18:41:27 +08:00

test_multiuser_gaps.py

P0 security batch: true global admin, quota gates on all spending paths, default quota for quota-less users, fix-review author trust + docker/owner attribution, GitHub App setup issuer binding, real cancel kill, wider shell env exclusion

2026-10-27 15:35:23 +00:00

test_oauth_bind.py

多 key：OAuth 登录签发附加 key 不再轮换，keys 管理端点

2026-10-26 16:27:42 +08:00

test_oauth_real_login.py

多 key：OAuth 登录签发附加 key 不再轮换，keys 管理端点

2026-10-26 16:27:42 +08:00

test_oauth.py

cloud: fill gaps (memory/KB/cost/models endpoints, WAL concurrency, OAuth scaffold, push subscriptions)

2026-10-26 01:32:57 +08:00

test_ops_batch.py

HA stage 0: health reads workers registry, daily pg_dump timer, backup freshness in monitor (#48)

2026-10-26 23:51:54 +08:00

test_outer_hardening.py

Outer hardening: AppArmor profile, pids limit, egress allowlist proxy

2026-10-26 07:42:14 +08:00

test_p0_security.py

P0 security batch: true global admin, quota gates on all spending paths, default quota for quota-less users, fix-review author trust + docker/owner attribution, GitHub App setup issuer binding, real cancel kill, wider shell env exclusion

2026-10-27 15:35:23 +00:00

test_p1_security_server.py

P1 security batch: quota execution checks, cost accounting, goal/coordinator semantics, PR channel, orphan signature, control-plane and console hardening

2026-10-27 16:27:50 +00:00

test_p1_security_worker.py

P1 security batch: quota execution checks, cost accounting, goal/coordinator semantics, PR channel, orphan signature, control-plane and console hardening

2026-10-27 16:27:50 +00:00

test_peer_messages_server.py

feat: 任务间互发消息（API + agent 标记块，不中断任务）

2026-10-27 14:12:28 +08:00

test_peer_messages.py

feat: 任务间互发消息（API + agent 标记块，不中断任务）

2026-10-27 14:12:28 +08:00

test_postgres_backend.py

Project repo_url: worker can run tasks from any git repo

2026-10-26 04:16:11 +08:00

test_postgres_integration.py

Postgres real backend: psycopg adapter, schema, migration

2026-10-26 03:23:06 +08:00

test_pr_app_token.py

App-token：推分支建 PR 改走 GitHub App installation token

2026-10-26 16:47:55 +08:00

test_pr_commit.py

pr: commit worktree changes before push; fix merge/pr order docs

2026-10-26 15:20:02 +08:00

test_pr_jobs.py

P1 security batch: quota execution checks, cost accounting, goal/coordinator semantics, PR channel, orphan signature, control-plane and console hardening

2026-10-27 16:27:50 +00:00

test_pr_timeout.py

pr 超时：git/gh 子进程默认 120 秒超时，超时转 502 不挂 handler

2026-10-26 17:01:47 +08:00

test_prod_gaps.py

Project repo_url: worker can run tasks from any git repo

2026-10-26 04:16:11 +08:00

test_prod_webhook_exec.py

P1 security batch: quota execution checks, cost accounting, goal/coordinator semantics, PR channel, orphan signature, control-plane and console hardening

2026-10-27 16:27:50 +00:00

test_prod_worker_timeout.py

feat: 长任务补齐——流式进度 + 跨进程中断 + worker 超时约定

2026-10-27 03:05:15 +08:00

test_project_repo.py

Project repo_url: worker can run tasks from any git repo

2026-10-26 04:16:11 +08:00

test_push.py

P1 security batch: quota execution checks, cost accounting, goal/coordinator semantics, PR channel, orphan signature, control-plane and console hardening

2026-10-27 16:27:50 +00:00

test_queue_sandbox.py

P1 security batch: quota execution checks, cost accounting, goal/coordinator semantics, PR channel, orphan signature, control-plane and console hardening

2026-10-27 16:27:50 +00:00

test_rate_limit_db.py

fix: 限流清理移出请求路径，根治 rate_limit_hits 死锁

2026-10-27 05:40:30 +08:00

test_relay.py

feat: per-task model/effort/approval + relay models endpoint (#59)

2026-10-27 01:44:53 +08:00

test_review_server.py

feat: P1 补齐（自动评审队列、自动化+分诊、并发 caps、运行时审批队列）

2026-10-27 15:53:50 +08:00

test_review.py

feat: P1 补齐（自动评审队列、自动化+分诊、并发 caps、运行时审批队列）

2026-10-27 15:53:50 +08:00

test_server_endpoints.py

修项目成本按天接口在 Postgres 上的 Decimal 序列化崩溃

2026-10-26 23:17:25 +08:00

test_server_goal_notify.py

P1 security batch: quota execution checks, cost accounting, goal/coordinator semantics, PR channel, orphan signature, control-plane and console hardening

2026-10-27 16:27:50 +00:00

test_server_merge.py

Docker sandbox real test + cloud merge status endpoint

2026-10-26 02:46:10 +08:00

test_server_oauth_push.py

P0 security batch: true global admin, quota gates on all spending paths, default quota for quota-less users, fix-review author trust + docker/owner attribution, GitHub App setup issuer binding, real cancel kill, wider shell env exclusion

2026-10-27 15:35:23 +00:00

test_server_pr_app_token.py

App-token：推分支建 PR 改走 GitHub App installation token

2026-10-26 16:47:55 +08:00

test_server_retry.py

Worker concurrency (capacity enforced), survival (heartbeat/sweep/drain), retry endpoint

2026-10-26 06:46:20 +08:00

test_server.py

P0 security batch: true global admin, quota gates on all spending paths, default quota for quota-less users, fix-review author trust + docker/owner attribution, GitHub App setup issuer binding, real cancel kill, wider shell env exclusion

2026-10-27 15:35:23 +00:00

test_sub2api.py

fix: 登录限流下开通突发不再硬失败（节流 + 429 重试）

2026-10-27 23:09:22 +08:00

test_task_attachments.py

feat: 任务附件——server/worker/console 链路打通（+ popen goal 新语义补漏）

2026-10-27 04:30:43 +08:00

test_task_continue.py

feat: 旧任务继续会话——终端任务带新消息 + 全部选项同一会话续跑

2026-10-27 04:40:11 +08:00

test_task_environments.py

feat: 命令台云端环境——选、建、管 + 任务绑定环境

2026-10-27 04:07:54 +08:00

test_task_links.py

feat: 计划模式 + 后续消息 + 会话分支接云端 (#65)

2026-10-27 03:17:51 +08:00

test_task_options.py

feat: per-task model/effort/approval + relay models endpoint (#59)

2026-10-27 01:44:53 +08:00

test_task_quotas.py

P0 security batch: true global admin, quota gates on all spending paths, default quota for quota-less users, fix-review author trust + docker/owner attribution, GitHub App setup issuer binding, real cancel kill, wider shell env exclusion

2026-10-27 15:35:23 +00:00

test_task_trace.py

fix: 租户 Docker 任务链路可见（租户目录优先、共享目录兜底）

2026-10-27 12:58:24 +08:00

test_task_turn_ids.py

feat: 任务列表显示 turn_id 与 root_turn_id

2026-10-27 14:52:00 +08:00

test_tenant_isolation.py

Multi-tenant isolation for Docker tasks (per-project mounts + networks + drop caps)

2026-10-26 07:24:54 +08:00

test_webhooks.py

cloud: production control plane (API, auth/RBAC, queue, sandbox, memory/KB, fallback/cost, webhooks)

2026-10-26 01:23:21 +08:00

test_worker_concurrency.py

Worker concurrency (capacity enforced), survival (heartbeat/sweep/drain), retry endpoint

2026-10-26 06:46:20 +08:00

test_worker_peer.py

feat: 任务间互发消息（API + agent 标记块，不中断任务）

2026-10-27 14:12:28 +08:00

test_worker_quota.py

多用户生产级缺口批：sweep 鉴权、默认配额、默认 executor、 无价 token 上限

2026-10-27 17:15:09 +08:00

test_worker.py

P1 security batch: quota execution checks, cost accounting, goal/coordinator semantics, PR channel, orphan signature, control-plane and console hardening

2026-10-27 16:27:50 +00:00