3 Commits

Include renames

Author	SHA1	Message	Date
gongzhiyongandOmX	bf134dec86	Make Agnet runs submit resource-scoped work safely ... Manager now exposes a Resource Grant manifest and the Agnet control-plane response carries runtime state, agent instances, and permission_manifest so frontend runs can submit bounded resource grants without plaintext credentials. Constraint: Manager remains the user console while NewAPI stays independent and OpenBao is referenced through secret_ref only. Rejected: platform-side high-risk approval | client approval is the product boundary; Agnet only validates approval evidence. Confidence: medium Scope-risk: moderate Directive: Do not mix child Agnet runtime model selection with NewAPI billing or expose OpenBao as a public route. Tested: git diff --check; jq empty locale JSON; go vet ./controller ./model ./router; go test -count=1 ./controller ./model ./router Not-tested: frontend typecheck/build because local node_modules tooling is absent and user requested builds happen on the VM. Co-authored-by: OmX <omx@oh-my-codex.dev>	2026-05-04 18:55:53 +08:00
gongzhiyong	ba02ae5be7	feat: align manager agnet boundaries ... - add Manager user_context, NewAPI billing_context, and Agnet agent_runtime deployment fields - move resource binding/grant scope toward user-owned binding_scope and secret_ref-only paths - document OpenBao internal access and unified heicode.xinghanlab.com routing boundaries - fix Manager session user id preservation after external auth login	2026-05-04 09:28:03 +08:00
gongzhiyongandOmX	5fb432f7c8	docs: clarify auth billing and secret boundaries ... Document Manager user reuse, NewAPI billing mapping, OpenBao short-lived credential injection, and Agnet-owned model configuration. Tested: git diff --check Co-authored-by: OmX <omx@oh-my-codex.dev>	2026-05-04 08:46:05 +08:00