refactor(channel,settings): connection entity + preference scopes (07-16 §5.2/§5.3) - #698

Draft

kaizhou-lab wants to merge 187 commits into

mainfrom

feat/channel-settings-refactor

Commits on Jul 22, 2026

db: extend users for external identity projection
zk
committed
a8af879
auth: add trusted external user provisioning
zk
committed
24a46c2
conversation: enforce repository-level user scope
zk
committed
ada0ab2
team-cron: adapt aggregate adapters to conversation user scope
zk
committed
7287c23
test: update app checks for scoped conversation repository
zk
committed
6ad4cd7
test: update app e2e tests for scoped conversation repository
zk
committed
01032c4
test: update cron e2e checks for scoped conversation repository
zk
committed
126f6d3
test: update conversation e2e checks for scoped repository
zk
committed
54fbcd2
team-cron: enforce aggregate root user scope
zk
committed
c6f7689
db: scope configuration repositories by user
zk
committed
c0336e4
system: scope user configuration APIs
zk
committed
5f6a9ae
mcp: scope server state by current user
zk
committed
40cf766
ai-agent: resolve runtime config per user
zk
committed
ab70abb
channel: use user scoped assistant settings
zk
committed
bdfd8e5
db: consolidate user scope migration
zk
committed
404c19d
db: add mixed user scope schema
zk
committed
6b876fb
db: add user scoped skill repository methods
zk
committed
91a2f6c
extension: scope skill APIs by current user
zk
committed
00c9dc6
db: add user scoped assistant repository methods
zk
committed
8b83608
assistant: scope APIs by current user
zk
committed
57151b6
db: add user scoped agent metadata methods
zk
committed
fbec97b
ai-agent: scope agent management APIs by current user
zk
committed
50b4ff6
app: pass user scope to remaining service reads
zk
committed
e90033d
team: update provider test doubles for user scope
zk
committed
50c27d8
channel: scope repository operations by owner user
zk
committed
333999c
realtime: bind websocket events to user scope
zk
committed
a12a1c2
channel: isolate plugin runtime by owner
zk
committed
718eb5b
channel: scope pairing websocket events
zk
committed
43c79b7
app: drop unscoped websocket business events
zk
committed
8e588a3
conversation: include user scope in websocket events
zk
committed
8d45033
db: use owner-scoped channel constraints
zk
committed
7c76351
team: include user scope in websocket events
zk
committed
4e6c615
cron: include user scope in websocket events
zk
committed
6874091
app: whitelist global extension websocket events
zk
committed
4bfffed
file: scope filesystem websocket events by user
zk
committed
0e5079c
system: avoid default user keep-awake restore outside local mode
zk
committed
4c5f95b
cron: require conversation owner for background execution
zk
committed
2fe6fdd
channel: require explicit owner in aionpro mode
zk
committed
97e5093
agent: scope availability feedback by conversation user
zk
committed
f028265
auth: bind sessions to user generation
zk
committed
eb16f5a
channel: update integration tests for owner scope
zk
committed
ec8b8f3
agent: project user scoped management availability
zk
committed
a7d985b
test: align team active lease cross-user response
zk
committed
8c68df9
cron: scope jobs by user
zk
committed
f8f3093
test: cover user scope migration shape
zk
committed
2bf1396
cron: resolve assistant metadata by job user
zk
committed
ceb869a
channel: resolve assistant settings by owner
zk
committed
1e74e10
team: resolve assistant catalog by owner
zk
committed
decbc73
conversation: resolve runtime catalog by owner
zk
committed
12b59b3
cron: resolve executor registry by job user
zk
committed
a8a73c7
agent: resolve acp runtime metadata by user
zk
committed
b84849b
assistant: project generated agents by user
zk
committed
598e07b
extension: scope skill catalog sync by user
zk
committed
fb343f1
team: distinguish cross-user access from missing teams
zk
committed
68e96b6
team: preserve active lease cross-user hiding
zk
committed
b106c77
conversation: scope assistant preferences by user
zk
committed
919e2af
cron: seed assistant fixtures for scoped user
zk
committed
319be2f
cron: align owner anchor tests with user scope
zk
committed
2f33aed
db: align cron repository tests with user scope
zk
committed
eb908a9
team: hide cross-user team lookups
zk
committed
76bc1e9
app: expect hidden cross-user team access
zk
committed
e2a322a
style: apply rustfmt to team service
zk
committed
952a4f1
assistant: reduce generated reconcile arguments
zk
committed
1542c01
auth: expose user context identity fields
zk
committed
1d27099
cron: scope internal job updates by user
zk
committed
1c00d71
office: scope preview sessions by user
zk
committed
00bdf81
conversation: guard runtime ops by owner
zk
committed
4009fd0
conversation: scope active runtime count
zk
committed
96e7dc4
runtime: scope status events by user
zk
committed
08b5d89
system: scope runtime prepare events by user
zk
committed
f965a4b
realtime: validate websocket user sessions
zk
committed
9362476
auth: revoke sessions when disabling users
zk
committed
193ad41
auth: add external session revocation
zk
committed
e7e4e7d
file: add user scoped office watch cleanup
zk
committed
535f67b
realtime: add user websocket disconnect
zk
committed
ab21983
auth: disconnect websockets on external revoke
zk
committed
92f8f66
conversation: scope runtime skill resolution
zk
committed
034658a
extension: keep managed cron skills global
zk
committed
b4f1862
team: pass owner to config option lookup
zk
committed
02d85bf
db: cover cron skill user scope migration
zk
committed
5a30d94
app: require bootstrap secret for aionpro mode
zk
committed
f780400
mcp: cover user scoped oauth pending state
zk
committed
5516bd4
cron: validate helper user header
zk
committed
963fd04
app: fix test clippy warnings
zk
committed
18ff210
db: scope feedback diagnostics agents
zk
committed
563a620
agent: scope prompt skill lookup by user
zk
committed
2c7f0d2
auth: disable qr login in aionpro mode
zk
committed
00cb361
auth: reject local sessions in aionpro mode
zk
committed
9c73cff
realtime: reject local websocket sessions in aionpro mode
zk
committed
5d41afa
conversation: scope acp runtime mode persistence
zk
committed
7ae2cc4
agent: scope acp factory catalog lookup
zk
committed
45fd436
agent: scope acp catalog sync writes
zk
committed
68e0a78
conversation: override runtime extra user scope
zk
committed
7291246
config: bind CLI user selector to environment
zk
committed
e041d8a
realtime: avoid unscoped manager broadcasts
zk
committed
3c1bcbe
cron: use scoped conversation lookup for helpers
zk
committed
50df71a
db: scope diagnostics message samples by user
zk
committed
d25ba19
db: scope diagnostics detail child queries
zk
committed
08284c4
cron: scope delete hook cleanup by user
zk
committed
8515f9d
assistant: scope rule skill files by user
zk
committed
5c7c711
cron: reject cross-user conversation targets
zk
committed
95e3a36
acp: scope session persistence by user
zk
committed
ceac803
office: scope preview proxy by user
zk
committed
2fbe3c2
runtime: clear user tasks on session revoke
zk
committed
001c41d
app: clear file watches on session revoke
zk
committed
39715d2
team: clear user sessions on revoke
zk
committed
a8160c9
channel: stop user runtimes on session revoke
zk
committed
6307d81
db: validate user scope migration copies
zk
committed
1e079b8
office: scope preview snapshots by user
zk
committed
dc69be5
agent: avoid cross-user registry cache overlay
zk
committed
e31dbc2
db: test channel session owner migration guard
zk
committed
fa196c1
db: reject cross-user assistant upsert takeover
zk
committed
6a8782b
db: renumber user scope migration after main
zk
committed
8d3362f
db: reject cross-user scoped upsert takeovers
zk
committed
5a18dab
extension: isolate user skill import storage
zk
committed
d628eb8
auth: keep external session token cookie-only
zk
committed
401635e
conversation: align user-scoped snapshot calls after rebase
zk
committed
385fbd6
auth: redact internal user route secrets
zk
committed
b6bf9d8
db: remove unscoped acp session trait methods
zk
committed
04a4551
team: scope mailbox and task repository access
zk
committed
45ae676
cron: reject cross-user conversation bindings
zk
committed
afc5174
assistant: resolve agent bindings within user scope
zk
committed
a2b0a5f
db: require user-scoped agent metadata methods
zk
committed
b80394a
db: require user-scoped skill repository methods
zk
committed
cb4bd70
db: require user-scoped assistant repository methods
zk
committed
d3b906c
assistant: scope legacy bootstrap to default user
zk
committed
7f00788
channel: use structured runtime plugin keys
zk
committed
8894d1c
office: use structured preview session keys
zk
committed
c1dd23a
office: stop preview sessions on user revoke
zk
committed
15cde42
db: require user scope for acp session create
zk
committed
9936ea3
test: cover user scope migration integrity
zk
committed
6b63ce1
cron: report cross-account conversation links
zk
committed
427a55a
channel: report cross-account session links
zk
committed
61c6aba
conversation: report cross-account acp session links
zk
committed
37aa082
conversation: ignore forged extra user scope
zk
committed
dbb2821
db: validate user scope migration parent links
zk
committed
bbba3e4
system: cover user-scoped settings and providers
zk
committed
19fd4e6
cron: mark unscoped repository paths as system only
zk
committed
9fa3fc2
mcp: cover cross-user server isolation
zk
committed
8d8b770

Commits on Jul 23, 2026

fix: complete multi-account user scoping
zk
committed
94b04df
Merge remote-tracking branch 'origin/main' into feat/multi-account-user-scope
zk
committed
8744f6a
cron: scope per-job skills to job owner
zk
committed
d62c2f5
test: authenticate office proxy ssrf e2e coverage
zk
committed
33e94f6
test: seed users for websocket e2e and remove sleep races
zk
committed
c55938a
assistant: migrate legacy locale-less rules on locale reads
zk
committed
dc84743
Merge remote-tracking branch 'origin/main' into feat/multi-account-user-scope
zk
committed
a556520
Merge remote-tracking branch 'origin/main' into feat/multi-account-user-scope
zk
committed
c4890a6
Merge remote-tracking branch 'origin/main' into feat/multi-account-user-scope
zk
committed
26c05df
Merge remote-tracking branch 'origin/main' into feat/multi-account-user-scope
zk
committed
abe599f
feat(auth): adopt system_default_user data into first external user
zk
committed
5644716
Merge origin/main (project-bind foundation) into feat/multi-account-user-scope
zk
committed
c4f8fb3
Merge origin/main (session-port: direct-CLI SessionAgentTask) into feat/multi-account-user-scope
zk
committed
48c5558

Commits on Jul 24, 2026

Merge origin/main (project-bind wiring + unified CLI probe pipeline) into feat/multi-account-user-scope
zk
committed
9cdfad0
refactor(db): give agent_metadata a surrogate row key and logical agent_id
zk
committed
fdd2c0a
test(app): add project-bind fields to cron_e2e conversation fixture
zk
committed
949f0a2
test(cron): add project-bind fields to conversation fixtures
zk
committed
22529f8
Merge remote-tracking branch 'origin/main' into feat/multi-account-user-scope
zk
committed
f5e37cc
feat(auth): authenticate the in-conversation helper CLI via conversation-scoped runtime tokens
zk
committed
4acdc3b
fix(project): scope project-bind tables by owning user
zk
committed
7bdc8b1
Merge origin/main (codex slash commands + dead resume anchor recovery) into feat/multi-account-user-scope
zk
committed
8e6dc3e
feat(auth): adopt owner_user_id tables and gate table classification for AionPro adoption
zk
committed
fc5ba13
test(db): fixate channel-binding adoption in the upgrade e2e
zk
committed
f924634
refactor(agent): make agent_metadata one row per agent with a per-user delta table
zk
committed
7dd46a7
feat(common): add user_dir_name for per-user on-disk directory naming
zk
committed
d658526
feat(extension): move per-user skills to type-first skills/users/{dir}
zk
committed
a7dc9ca
feat(assistant): move per-user rules/skills to type-first users/{dir}
zk
committed
535a211
Merge remote-tracking branch 'origin/main' into feat/multi-account-user-scope
zk
committed
131d6fa
feat(assistant): scope avatars per user under assistant-avatars/users/{dir}
zk
committed
1d4997b
feat(conversation): scope new-conversation and team workspaces per user
zk
committed
3c542f2
feat(auth): move system_default_user files to adopter on AionUi->AionPro adoption
zk
committed
2fa509f
test(app): per-user filesystem isolation + adoption e2e on the real backend
zk
committed
d931dea
test(app): update assistant/skill/avatar e2e path assertions to per-user layout
zk
committed
9066de1

Commits on Jul 27, 2026

fix(agent): drop unused UpsertAgentMetadataParams import in registry tests
zk
committed
e8dad64
refactor(agent): make agent enabled machine-level, drop per-user agent state table
zk
committed
5d1742f
fix(multi-account): apply user-scope review must-fixes and cleanups
zk
committed
88c55e2
test(multi-account): close the review's three e2e coverage gaps
zk
committed
8409ed3
Merge origin/main (aionrs 0.2.8) into feat/multi-account-user-scope
zk
committed
6839cc0
Merge origin/main (team run-scoped wake convergence) into feat/multi-account-user-scope
zk
committed
c84f699
feat(settings): make client_preferences['language'] the single language truth
zk
committed
49d31f4
feat(channel): introduce connection entity, rename assistant_plugins to channel_connections
zk
committed
7dd9517
feat(channel): attach users and pairing requests to connections with soft revoke and hashed codes
zk
committed
0c789a5
feat(channel): reshape sessions into connection-scoped conversation bindings
zk
committed
d1bb745
feat(settings): split client_preferences into device and account scopes
zk
committed
13a9287
feat(channel): scope agent/model preference keys per connection
zk
committed
f43cfd6

Commits on Jul 28, 2026

Merge branch 'feat/settings-dedup' into feat/channel-settings-refactor
zk
committed
01863a1
refactor(db): fold the settings-scope migration into migration 030
zk
committed
d867587

Commits on Jul 29, 2026

Merge remote-tracking branch 'origin/main' into feat/channel-settings-refactor
zk
committed
95b68b4