Aug 8, 2026

1. Z
   refactor(lib): trim verbose doc comments across dvcs/gitsmart, dvcs/gitssh, lib/repo, lib/issues

   zhenyi · 2 months ago

   68129bc
2. Z
   refactor(agent): simplify agent/llm types, error, fallback, register, skill and token modules

   zhenyi · 2 months ago

   6286449
3. Z
   Merge H1-H9 security fixes from worktree-h5-deny-list

   zhenyi · 2 months ago

   8d8ade6
4. Z
   chore(workspace): add agent/llm to workspace members and regenerate lockfile

   zhenyi · 2 months ago

   63c0b1c
5. Z
   refactor(export): make fmt_ts public for cross-crate timestamp formatting reuse

   zhenyi · 2 months ago

   21dc66f
6. Z
   feat(agent): add agent/llm crate (LLM abstraction layer with providers, embeddings, fallback, skills, types)

   zhenyi · 2 months ago

   579d39a
7. Z
   fix(git): enforce branch/tag protection at receive-pack time + schema columns (H6)

   zhenyi · 2 months ago

   ae79314
8. Z
   fix(ssh): per-channel buffer cap + enforce max_sessions (H7)

   zhenyi · 2 months ago

   086661f
9. Z
   fix(chat): scope idempotency keys by sender + ownership-check lookup (H8)

   zhenyi · 2 months ago

   0b1bd0b
10. Z
    fix(repo): enforce per-repo Read authz on all read-side usecases (H2)

    zhenyi · 2 months ago

    c298621
11. Z
    fix(auth): issue channel-membership check + profile PII redaction + end_room pre-authz (H3/H4/H9)

    zhenyi · 2 months ago

    aaf1302
12. Z
    fix(auth): wire JWT deny-list across repo/issues/chat + restrict SSH + suspend-as-inactive (H5)

    zhenyi · 2 months ago

    b782c17
13. Z
    chore(workspace): add lib/mcp to workspace, regenerate lockfile, add mcp defaults to default.yaml

    zhenyi · 2 months ago

    deeed92
14. Z
    feat(webapi): mount MCP routes and initialize MCP server in apphost

    zhenyi · 2 months ago

    52a935e
15. Z
    feat(config): add mcp section to central lib/config crate and refresh app/lib wiring

    zhenyi · 2 months ago

    087d727
16. Z
    feat(mcp): add lib/mcp crate (Model Context Protocol server with auth, access_key, ip_filter, tools, router, service)

    zhenyi · 2 months ago

    5562e7e
17. Z
    refactor(lib): trim CWE-fix follow-up comments and unused helpers across auth, webhook, gitauth, gitssh

    zhenyi · 2 months ago

    34204f3
18. Z
    refactor(repo): drop unused permission helpers and lifecycle authz scaffolding

    zhenyi · 2 months ago

    3609d73
19. Z
    refactor(obs): drop unused features and trim verbose comments in lib/obs and config obs section

    zhenyi · 2 months ago

    87e7190
20. Z
    docs: add cybersecurity notes

    zhenyi · 2 months ago

    41414ba
21. Z
    Merge branch 'worktree-fix-c3-ssh-authz'

    zhenyi · 2 months ago

    d5a1a44
22. Z
    fix(gitssh): drop unconditional RepoRead scope for SSH actors (CWE-863)

    zhenyi · 2 months ago

    32223f2
23. Z
    fix(repo): populate ActorContext.credential_max after C2 merge

    zhenyi · 2 months ago

    e77f56a
24. Z
    Merge branch 'worktree-fix-c1-repo-authz'

    zhenyi · 2 months ago

    a437e2c
25. Z
    fix(repo): 接入生命周期与全部写接口的权限校验 (CWE-306)

    zhenyi · 3 months ago

    ceb547e
26. Z
    fix(gitauth): bind git credentials to the account; auth via access keys (PAT)

    zhenyi · 3 months ago

    1588610
27. Z
    chore(workspace): wire obs/webhook deps, add opentelemetry stack, refresh default.yaml and lockfile

    zhenyi · 3 months ago

    d192872
28. Z
    refactor(webhook): refresh dispatcher to integrate with new obs and config

    zhenyi · 3 months ago

    1317a07
29. Z
    refactor(app): wire all 5 binary apps to lib/obs for tracing init

    zhenyi · 3 months ago

    4d7cf67
30. Z
    feat(config): add obs and webhook sections to central lib/config crate, refresh app and lib

    zhenyi · 3 months ago

    34f06b0