chenchen/heicode-win
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
151 Commits 1 Branch 0 Tags
8135798e9e4aef6125f2b8c1033ece21484eed82
Commit Graph
49 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
gongzhiyongandOmX bf134dec86 Make Agnet runs submit resource-scoped work safely 
Manager now exposes a Resource Grant manifest and the Agnet control-plane response carries runtime state, agent instances, and permission_manifest so frontend runs can submit bounded resource grants without plaintext credentials.

Constraint: Manager remains the user console while NewAPI stays independent and OpenBao is referenced through secret_ref only.

Rejected: platform-side high-risk approval | client approval is the product boundary; Agnet only validates approval evidence.

Confidence: medium

Scope-risk: moderate

Directive: Do not mix child Agnet runtime model selection with NewAPI billing or expose OpenBao as a public route.

Tested: git diff --check; jq empty locale JSON; go vet ./controller ./model ./router; go test -count=1 ./controller ./model ./router

Not-tested: frontend typecheck/build because local node_modules tooling is absent and user requested builds happen on the VM.

Co-authored-by: OmX <omx@oh-my-codex.dev>
 2026-05-04 18:55:53 +08:00
gongzhiyong ba02ae5be7 feat: align manager agnet boundaries 
- add Manager user_context, NewAPI billing_context, and Agnet agent_runtime deployment fields

- move resource binding/grant scope toward user-owned binding_scope and secret_ref-only paths

- document OpenBao internal access and unified heicode.xinghanlab.com routing boundaries

- fix Manager session user id preservation after external auth login
 2026-05-04 09:28:03 +08:00
gongzhiyongandOmX 5fb432f7c8 docs: clarify auth billing and secret boundaries 
Document Manager user reuse, NewAPI billing mapping, OpenBao short-lived credential injection, and Agnet-owned model configuration.

Tested: git diff --check

Co-authored-by: OmX <omx@oh-my-codex.dev>
 2026-05-04 08:46:05 +08:00
gongzhiyongandOmX d9eb7dcd74 feat: wire resource secrets to OpenBao 
Manager needs a platform-owned secret handoff path so resource bindings can keep only vault references while OpenBao stores tenant-scoped credential payloads.

Tested: go test ./controller ./model ./router && go vet ./controller ./model ./router
Co-authored-by: OmX <omx@oh-my-codex.dev>
 2026-05-03 23:41:55 +08:00
gongzhiyong a7588e1bc8 chore: remove plaintext postgres retry credentials 2026-05-03 21:49:55 +08:00
gongzhiyong 50bf3de6f0 agnet: add deployment logs metrics readiness endpoints 2026-05-03 21:48:26 +08:00
gongzhiyong fb61f385fb deploy: make azure vm deploy helper executable 2026-05-03 21:17:34 +08:00
gongzhiyong e7b1fd81ec Merge commit 'd39e462ff2de4f82765159a18159f3f00c7f434f' 2026-05-03 20:50:46 +08:00
gongzhiyong f182610793 Merge commit '18a7b316a1da1fb16817387c586ba3db1ca84b1c' 2026-05-03 20:50:45 +08:00
gongzhiyong 36eb0159bc Merge commit '91617b5d64fcf528a34befea1d7a9168efe070c6' 2026-05-03 20:50:44 +08:00
gongzhiyongandOmX 18a7b316a1 Validate focused docs and backend checks 
Worker 3 completed the assigned validation pass without source edits, recording backend pass evidence plus environment and contract findings for leader integration.

Tested: go vet ./controller ./model ./router; go test focused resource and Agnet grant cases; go test ./controller ./model ./router; git diff --check; focused docs secret scan.

Not-tested: frontend tsc/eslint require bun or full web dependencies; live Agnet curl checks require credentials and service URL.

Co-authored-by: OmX <omx@oh-my-codex.dev>
 2026-05-03 18:11:48 +08:00
gongzhiyong 91617b5d64 docs: tighten Agnet secret placeholders 2026-05-03 18:09:41 +08:00
gongzhiyong 660670d2fc docs: add azure deploy guardrails 2026-05-03 18:09:07 +08:00
gongzhiyong 0d7491c9a1 omx(team): auto-checkpoint worker-5 [unknown] 2026-05-03 18:09:04 +08:00
gongzhiyong b4413cc230 omx(team): merge worker-1 2026-05-03 18:09:01 +08:00
gongzhiyong d39e462ff2 docs: add azure deploy guardrails 2026-05-03 18:08:15 +08:00
gongzhiyong 6a3e918787 docs: complete Agnet platform contract 2026-05-03 18:05:45 +08:00
gongzhiyong aba1ce28df docs: add daily work summary 2026-05-02 23:49:18 +08:00
gongzhiyong ab71d5b72b docs: add agnet platform request contract 2026-05-02 23:42:51 +08:00
gongzhiyong 57a86ce060 Merge commit '8878d4040c9f4c1a94184ed7a9755e9d7f73a745' 2026-05-02 23:42:18 +08:00
gongzhiyong 8878d4040c task: implement P1 manager resource model 2026-05-02 23:36:33 +08:00
gongzhiyong 24405519a9 omx(team): auto-checkpoint worker-1 [1] 2026-05-02 23:32:00 +08:00
gongzhiyong 05182f0277 task: implement manager resource grants 2026-05-02 23:30:23 +08:00
gongzhiyong 5e4648e608 omx(team): auto-checkpoint worker-5 [5] 2026-05-02 23:29:39 +08:00
gongzhiyong 1aa3643278 omx(team): auto-checkpoint worker-3 [3] 2026-05-02 23:29:37 +08:00
gongzhiyong 0a01f36f1b omx(team): auto-checkpoint worker-2 [2] 2026-05-02 23:29:34 +08:00
gongzhiyong 33fa9f20a6 omx(team): auto-checkpoint worker-5 [5] 2026-05-02 23:28:40 +08:00
gongzhiyong a8be398087 omx(team): auto-checkpoint worker-4 [4] 2026-05-02 23:28:37 +08:00
gongzhiyong 30e0b0b4c6 omx(team): auto-checkpoint worker-2 [2] 2026-05-02 23:28:34 +08:00
gongzhiyong bf42bbda8a omx(team): auto-checkpoint worker-4 [4] 2026-05-02 23:26:17 +08:00
gongzhiyong f0cda510a7 omx(team): merge worker-3 2026-05-02 23:24:29 +08:00
gongzhiyong 6fa8dbcb20 omx(team): auto-checkpoint worker-3 [3] 2026-05-02 23:24:29 +08:00
gongzhiyong 912e3155fd docs: converge heicode plan entrypoint 2026-05-02 23:21:16 +08:00
gongzhiyong a19b90c858 docs: split heicode plan documents 2026-05-02 22:26:44 +08:00
gongzhiyong e08a5d4dcc docs: consolidate current heicode plan 2026-05-02 22:15:33 +08:00
gongzhiyong 72d0e095a4 docs: remove obsolete agnet plans 2026-05-02 22:11:19 +08:00
gongzhiyong f585d26fe7 docs: define saas manager agnet architecture 2026-05-02 22:07:02 +08:00
gongzhiyong 63fe529b36 feat(agnet): allow users to bind git sources 2026-05-01 20:55:58 +08:00
gongzhiyong 75bc93b47a docs(agnet): capture user deployment flow 2026-05-01 20:36:30 +08:00
gongzhiyong 0b4d4f811e fix(auth): establish Manager session cookie after Heicode password login 
External IdP login alone did not set Gin session; proxied API calls returned 401 and triggered session-expired toast. Call POST /api/user/login after token exchange, support Turnstile on sign-in, handle 2FA pending session, and clear Manager cookie on logout.

Made-with: Cursor
 2026-05-01 01:59:26 +08:00
gongzhiyong 1f21309597 refactor: rename manager codebase dir new-api → heicode, module github.com/heicode/manager 
Remove user-facing new-api naming; Docker/network/container names use heicode.
Go imports updated; Dockerfiles and workflows ldflags fixed.

Made-with: Cursor
 2026-05-01 01:47:23 +08:00
gongzhiyong d5e95fa97b docs(integration): 明确 Agnet 子 agent 与 SK（Git/上传）对平台接口要求 
- §5.0.1：部署、SK 快照、Git/制品只读、刷新与禁止项
- 术语：子 agent 为 Agnet 平台内；README/M3 引用更新

Made-with: Cursor
 2026-04-30 11:28:18 +08:00
gongzhiyong 0dd1976519 docs: Agnet 可视化分工与 M5/愿景对齐；README 更新；同步 _all-in-one-upload 
Made-with: Cursor
 2026-04-30 11:06:58 +08:00
gongzhiyong abbbf7210c website: 迁移为 Next.js（App Router），替换静态 HTML 站点 
- 移除静态 website/Dockerfile、nginx、旧 css/js
- 新增 Next.js 应用、组件与样式；pnpm 依赖

Made-with: Cursor
 2026-04-30 01:06:54 +08:00
gongzhiyong acc9632104 docs: 里程碑拆分、Agnet 集成 API 设计；官网增强；愿景与 README 称谓更新 
- docs/milestones: M1～M5 交付里程碑与索引
- docs/integration: Agnet 权限、隔离、编排与可视化接口草案
- website: 能力矩阵、优势对比、典型场景与样式
- vision/README/new-api/cc-haha: Heicode Manager / 客户端命名与愿景收敛

Made-with: Cursor
 2026-04-30 00:55:23 +08:00
gongzhiyong 68f7b568c5 merge: 合并 Gitea xiaohei/heicode 与本地 Heicode 文档/官网 
- 解决 README 冲突：合并愿景说明与 Taiji 网关/快速启动说明
- 解决 mac_helper.py：统一为可执行脚本

Made-with: Cursor
 2026-04-30 00:40:24 +08:00
gongzhiyong 90586571ba docs: README 补充官网 Docker 本地预览说明 
Made-with: Cursor
 2026-04-30 00:39:01 +08:00
gongzhiyong ca6289fab4 feat: 静态官网与 Docker Compose 本地部署 
- website: 单页落地（愿景、架构、路径、团队范式、生命周期）
- nginx:alpine 镜像与 docker-compose（端口 8888）

Made-with: Cursor
 2026-04-30 00:38:58 +08:00
gongzhiyong 0c84dde85b docs: Heicode 愿景范式、瀑布/敏捷子 Agnet 角色与规模 
- 新增 docs/vision-heicode-full-stack-agentic-dev.md（完整范式与 W1-W9 / A1-A8 角色）
- 新增根 README.md 与 .gitignore（排除 node_modules、target 等）

Made-with: Cursor
 2026-04-30 00:33:20 +08:00