hongjr03
5b55cf18a8
Revert "fix: accept SDK provider capability headers"
...
This reverts commit e7ad5580ec
2026-07-11 15:06:48 +08:00
hongjr03
b0d691d53f
Revert "fix: pass provider capability as API key"
...
This reverts commit f065f9f978
2026-07-11 15:06:48 +08:00
hongjr03
1f48c5b707
Revert "fix: provide capability for both SDK auth modes"
...
This reverts commit ebf870249f
2026-07-11 15:06:48 +08:00
hongjr03
12a2f3117f
Revert "fix: preserve run provider capability"
...
This reverts commit 63c86322de
2026-07-11 15:06:48 +08:00
hongjr03
2ee84d9543
Revert "fix: carry provider capability in dedicated header"
...
This reverts commit 3087132083
2026-07-11 15:06:47 +08:00
hongjr03
3087132083
fix: carry provider capability in dedicated header
2026-07-11 15:02:51 +08:00
hongjr03
63c86322de
fix: preserve run provider capability
2026-07-11 15:00:34 +08:00
hongjr03
ebf870249f
fix: provide capability for both SDK auth modes
2026-07-11 14:59:00 +08:00
hongjr03
f065f9f978
fix: pass provider capability as API key
2026-07-11 14:57:22 +08:00
hongjr03
e7ad5580ec
fix: accept SDK provider capability headers
2026-07-11 14:55:29 +08:00
hongjr03
19d942e812
feat: automate managed silo provisioning
2026-07-11 14:53:03 +08:00
hongjr03
e5e923dd34
feat: add repeatable alpha silo setup
2026-07-11 14:30:50 +08:00
hongjr03
df0b12e38b
fix: hide per-run cost from Feishu replies
2026-07-11 14:11:59 +08:00
hongjr03
83ec835d4c
fix: show Feishu OAuth completion page
2026-07-11 14:07:43 +08:00
hongjr03
6ed56ddfc8
feat: auto-join scoped Feishu OAuth users
2026-07-11 14:00:43 +08:00
hongjr03
3bf643ff4d
fix: guide Feishu users through onboarding
2026-07-11 13:52:19 +08:00
hongjr03
d36b00bbec
feat: make agent roles and skills dynamic
2026-07-11 12:55:05 +08:00
hongjr03
17c0536958
fix: enable only curated agent skills
2026-07-11 12:25:52 +08:00
hongjr03
96e120e02c
feat: add curated curriculum agent skills
2026-07-11 12:22:01 +08:00
hongjr03
1a892ccb54
chore: release hub 0.0.7
2026-07-11 02:42:35 +08:00
hongjr03
5a65188b5d
fix: allow arbitrary workspace file delivery
2026-07-11 02:41:14 +08:00
hongjr03
7fcb57013e
fix: restore bounded agent sandbox execution
2026-07-11 02:34:56 +08:00
hongjr03
035c264179
fix: keep agent sandbox sockets on short paths
2026-07-11 02:22:19 +08:00
hongjr03
38d9a9c6cb
fix: bootstrap fresh alpha silo
2026-07-11 01:40:20 +08:00
hongjr03
cb1a9e823a
chore: release hub 0.0.3
2026-07-11 00:29:32 +08:00
hongjr03
9e954790dc
feat: add deployable alpha silo
2026-07-11 00:25:45 +08:00
hongjr03
44557da499
feat: secure organization Feishu credentials
2026-07-10 23:13:11 +08:00
hongjr03
848f913597
feat: secure organization provider credentials
2026-07-10 22:04:43 +08:00
hongjr03
e049cb6880
fix: clear dependency security advisories
2026-07-10 18:59:03 +08:00
hongjr03
d730e51c3d
fix: enforce active organization boundary
2026-07-10 18:42:12 +08:00
hongjr03
f07f280b8f
fix: prove Linux Agent sandbox boundary
2026-07-10 17:59:56 +08:00
hongjr03
f4968d6657
fix: confine Agent and MCP data access
2026-07-10 16:38:08 +08:00
hongjr03
73fa28a178
feat: provision non-root Hub service
2026-07-10 15:59:35 +08:00
hongjr03
1094ebd651
fix: let agents download Feishu message resources
2026-07-10 12:17:07 +08:00
hongjr03
4ca4afb141
docs: define SaaS capacity controls
2026-07-10 12:07:08 +08:00
hongjr03
008c8bcd09
feat(hub): add org sessions and usage admin APIs
...
List project agent sessions/runs and aggregate AgentRun cost and token
usage by project and optional folder for org admins.
2026-07-10 00:55:43 +08:00
hongjr03
683d5674d1
feat(hub): add org members, teams, and project team-access APIs
...
Manage memberships with last-OWNER protection, team lifecycle (archive
revokes TEAM grants), and TEAM→PROJECT access under org admin auth.
2026-07-10 00:55:34 +08:00
hongjr03
1f8510a47f
feat(hub): add org project explorer admin APIs
...
Expose folder/project tree, create/move/rename/archive, and Feishu
binding archive under /api/org/:orgSlug for OWNER/ADMIN sessions.
2026-07-10 00:55:26 +08:00
hongjr03
c4f052efa2
feat(hub): add Feishu OAuth session for org admin
...
Introduce signed cookie sessions, Feishu web OAuth, requireOrgRole
guards, and the first org admin APIs (summary + project settings).
2026-07-10 00:55:19 +08:00
hongjr03
87e3d3f990
feat: let Feishu onboarding create projects in folders
2026-07-10 00:35:18 +08:00
hongjr03
519ea8144f
feat: add Feishu project onboarding card
2026-07-10 00:32:09 +08:00
hongjr03
34e07e229f
feat: add org admin project onboarding foundation
2026-07-10 00:25:00 +08:00
hongjr03
2b7aa3294f
feat: add organization tenant model
2026-07-09 23:37:20 +08:00
hongjr03
5d315fff21
fix: enforce role tool whitelist
2026-07-09 20:48:03 +08:00
hongjr03
716101eed0
feat: add agent cost reporting
2026-07-09 20:29:56 +08:00
hongjr03
fc5a5365d8
fix: reply to Feishu trigger messages
2026-07-09 20:04:13 +08:00
hongjr03
fc0df7b823
fix: label Feishu trigger senders in agent prompts
2026-07-09 19:56:47 +08:00
hongjr03
f1d29176d3
feat: add slash command help
2026-07-09 19:43:13 +08:00
hongjr03
f260195439
fix: ack Feishu card actions before interrupt work
2026-07-09 19:26:57 +08:00
hongjr03
d01ea0e1cb
feat: interrupt running agent via card button with confirm dialog
...
Add a ⛔ 中断 button to live streaming cards; Feishu's native confirm
dialog is the confirmation step, so no extra card round-trip is needed.
- builder.ts: render interrupt action (danger button + confirm) while the
run is live; new `interrupted` flag renders a 已中断 footer instead of
完成/失败 on the complete card.
- streaming-card.ts: finish(text, { interrupted }) threads the flag into
the final patch; overflow cards suppress the button.
- runner.ts: RunRequest gains abortController, passed to the SDK query;
abort surfaces as RunStatus "interrupted" (no error) in the catch.
- trigger.ts: activeRuns registry maps runId → AbortController; onCardAction
resolves the interrupt button, authorizes agent.cancel, aborts the run.
Interrupted runs persist as CANCELED (spec RunState.canceled, terminal →
lock released per ADR-0002).
- authorizer.ts: agent.cancel now consults PermissionSettings.agentCancel
(MANAGE_ONLY/DISABLED) — previously only agentTrigger was honored, but
spec/PermissionGrant deliberately splits these knobs ("谁能触发" ≠
"谁能取消"). Default role remains MANAGE (Capability.normalCancel).
Tests: runner abort unit test, trigger interrupt + denied integration
tests, three agent.cancel authorization tests (manage allowed, edit denied,
DISABLED policy denies even manage). 26 files / 175 tests pass.
2026-07-09 18:59:31 +08:00
hongjr03