gongzhiyong
ba02ae5be7
feat: align manager agnet boundaries
...
- add Manager user_context, NewAPI billing_context, and Agnet agent_runtime deployment fields
- move resource binding/grant scope toward user-owned binding_scope and secret_ref-only paths
- document OpenBao internal access and unified heicode.xinghanlab.com routing boundaries
- fix Manager session user id preservation after external auth login
2026-05-04 09:28:03 +08:00
gongzhiyong and OmX
d9eb7dcd74
feat: wire resource secrets to OpenBao
...
Manager needs a platform-owned secret handoff path so resource bindings can keep only vault references while OpenBao stores tenant-scoped credential payloads.
Tested: go test ./controller ./model ./router && go vet ./controller ./model ./router
Co-authored-by: OmX <omx@oh-my-codex.dev >
2026-05-03 23:41:55 +08:00
gongzhiyong
24405519a9
omx(team): auto-checkpoint worker-1 [1]
2026-05-02 23:32:00 +08:00
gongzhiyong
05182f0277
task: implement manager resource grants
2026-05-02 23:30:23 +08:00
gongzhiyong
33fa9f20a6
omx(team): auto-checkpoint worker-5 [5]
2026-05-02 23:28:40 +08:00
gongzhiyong
bf42bbda8a
omx(team): auto-checkpoint worker-4 [4]
2026-05-02 23:26:17 +08:00
gongzhiyong