Aug 8, 2026

1. Z
   chore(git): ignore config/default.yaml and SSH host keys

   zhenyi · 2 months ago

   e034b46
2. Z
   feat(agent): add agent/lprovider crate scaffold and workspace Makefile

   zhenyi · 2 months ago

   894b502
3. Z
   chore(workspace): regenerate Cargo.toml and Cargo.lock for provider module and CLI deps

   zhenyi · 2 months ago

   815b668
4. Z
   chore: dedupe .gitignore, refresh lib/export lifecycle, drop obsolete cybersecurity.md

   zhenyi · 2 months ago

   efffb85
5. Z
   refactor(apphost): switch to clap-based CLI with serve and openapi subcommands

   zhenyi · 2 months ago

   74ba1ef
6. Z
   refactor(agent): extract OpenAI provider into agent/llm/provider/ module with openai subdir and tests

   zhenyi · 2 months ago

   2360a4a
7. Z
   refactor(lib): trim docs in lib/db repo_branch_protection_policy and lib/user profile types

   zhenyi · 2 months ago

   9d1724d
8. Z
   refactor(lib): trim verbose doc comments across dvcs/gitsmart, dvcs/gitssh, lib/repo, lib/issues

   zhenyi · 2 months ago

   68129bc
9. Z
   refactor(agent): simplify agent/llm types, error, fallback, register, skill and token modules

   zhenyi · 2 months ago

   6286449
10. Z
    Merge H1-H9 security fixes from worktree-h5-deny-list

    zhenyi · 2 months ago

    8d8ade6
11. Z
    chore(workspace): add agent/llm to workspace members and regenerate lockfile

    zhenyi · 2 months ago

    63c0b1c
12. Z
    refactor(export): make fmt_ts public for cross-crate timestamp formatting reuse

    zhenyi · 2 months ago

    21dc66f
13. Z
    feat(agent): add agent/llm crate (LLM abstraction layer with providers, embeddings, fallback, skills, types)

    zhenyi · 2 months ago

    579d39a
14. Z
    fix(git): enforce branch/tag protection at receive-pack time + schema columns (H6)

    zhenyi · 2 months ago

    ae79314
15. Z
    fix(ssh): per-channel buffer cap + enforce max_sessions (H7)

    zhenyi · 2 months ago

    086661f
16. Z
    fix(chat): scope idempotency keys by sender + ownership-check lookup (H8)

    zhenyi · 2 months ago

    0b1bd0b
17. Z
    fix(repo): enforce per-repo Read authz on all read-side usecases (H2)

    zhenyi · 2 months ago

    c298621
18. Z
    fix(auth): issue channel-membership check + profile PII redaction + end_room pre-authz (H3/H4/H9)

    zhenyi · 2 months ago

    aaf1302
19. Z
    fix(auth): wire JWT deny-list across repo/issues/chat + restrict SSH + suspend-as-inactive (H5)

    zhenyi · 2 months ago

    b782c17
20. Z
    chore(workspace): add lib/mcp to workspace, regenerate lockfile, add mcp defaults to default.yaml

    zhenyi · 2 months ago

    deeed92
21. Z
    feat(webapi): mount MCP routes and initialize MCP server in apphost

    zhenyi · 2 months ago

    52a935e
22. Z
    feat(config): add mcp section to central lib/config crate and refresh app/lib wiring

    zhenyi · 2 months ago

    087d727
23. Z
    feat(mcp): add lib/mcp crate (Model Context Protocol server with auth, access_key, ip_filter, tools, router, service)

    zhenyi · 2 months ago

    5562e7e
24. Z
    refactor(lib): trim CWE-fix follow-up comments and unused helpers across auth, webhook, gitauth, gitssh

    zhenyi · 2 months ago

    34204f3
25. Z
    refactor(repo): drop unused permission helpers and lifecycle authz scaffolding

    zhenyi · 2 months ago

    3609d73
26. Z
    refactor(obs): drop unused features and trim verbose comments in lib/obs and config obs section

    zhenyi · 2 months ago

    87e7190
27. Z
    docs: add cybersecurity notes

    zhenyi · 2 months ago

    41414ba
28. Z
    Merge branch 'worktree-fix-c3-ssh-authz'

    zhenyi · 2 months ago

    d5a1a44
29. Z
    fix(gitssh): drop unconditional RepoRead scope for SSH actors (CWE-863)

    zhenyi · 2 months ago

    32223f2
30. Z
    fix(repo): populate ActorContext.credential_max after C2 merge

    zhenyi · 2 months ago

    e77f56a