Commit Graph
6 Commits
Author SHA1 Message Date
cgalo5758 619963abff Split member_products.go into the five files the layout names
member_plans.go holds the handler, the plan view models, the plans page and
the cancel prediction; member_plan_moves.go the switch, keep and cancel
handlers; member_entitlements.go the entitlements panel; member_addons.go the
add-ons page; price_text.go the price renderers. Every declaration moves with
its comment, in its old order. The two section banners that divided the old
file are not carried over. Comments that named member_products.go name the
file that now holds what they cite.

No output changes. The multiset of top-level declarations of package server,
each printed with its doc comment, is equal before and after; every line of
the old file other than the two banners appears in the new files, and the new
files add only headers and imports. gofmt, build, vet, the console lint and
the lint snapshot (removed 0, added 0) are clean. The internal/server and
fedwiki packages pass on a reset test database.

The break list is the last new-side record of each break name from the
earlier sections whose text still exists, re-pointed to the destination file:
160 records, all caught on this commit. Five names are dropped because later
sections replaced their text: the rung carries its provision, the flagged
cancellation's date, a failed attachment read refuses the page, a failed
attachment read refuses Checkout, an organization without a pool holds no paid
subscription. Two stay out because they were missed in their own section: an
unmapped price offers no enabled Checkout, and an organization without a
subscription gets no switch confirmation.
2026-10-09 04:50:39 -05:00
cgalo5758 d807446ef4 Update allowlist and default models for Kimi and OpenRouter
- Add kimi.ai and openrouter.ai to allowlist for egress
- Replace kimi-for-coding with kimi-code-plan-global in DEFAULT_MODELS
2026-10-05 21:39:47 -05:00
cgalo5758 b245bdb0a9 Fix security audit findings from 2026-09-21 scan
Remediate six confirmed security issues: deployment-only config keys,
bounded provider responses, short-lived registration sessions, private
init file mode, FedWiki workflow authorization, and switch preview
gates.

- Add DeploymentOnly config key declaration; refuse runtime overrides
  for keys that decide where secrets are sent
- Create httplimit package; bound all provider response reads at 8 MiB
- Set fifteen-minute deadline on /register sessions
- Write mc-config.yaml with 0600 permissions
- Derive FedWiki workflow IDs from site IDs; re-authorize sites before
  mutating activities
- Apply switch authorization gates to the proration preview
2026-09-21 13:57:57 -05:00
cgalo5758 bea0ffc024 Add Codex CLI harness to agent runner
Support Codex CLI as a second agent harness alongside opencode, with
per-harness credential mounting, model routing, and reasoning effort
handling.
2026-09-21 02:42:53 -05:00
cgalo5758 0c78d5f425 Move issue tracking to the forge tracker
Replace status/issues.md and status/milestones.md with the Gitea forge
tracker, add issue templates, and archive pre-forge issues as YAML.
2026-09-21 02:35:27 -05:00
cgalo5758 5829091881 Track the agent runner and its method page
The contained runner that drove the 2026-09 security audit, the README
review and four rounds of design ideation lived only inside the ignored
notebook. It moves to scripts/agent-runner/: the prepare, tools, audit,
ideation and teardown scripts, the compose and container files, the
allowlist proxy and the prompt templates, with the paths that assumed
the notebook fixed and findings written to a caller-named directory. Run
outputs, transcripts and the round-specific sheet scripts stay behind.

docs/agent-runner.md states the method: the disposable git archive
copy and the fail-closed proxy, how a task is shaped, union rather than
intersection of findings across models, separate adjudication of every
finding against the source, and the evidence a finding must carry.
2026-09-19 19:47:15 -05:00