Repository navigation
feat(agent): complete desktop trust, delivery and S2 workflows - #171
Merged
Merged
Conversation
Validate relative reads against canonical roots and include scope and disabled policy in skill cache identity. Share a cancellable HTTP executor with bounded decoded bodies, pinned local DNS, explicit proxy routing and safe redirects. Cover real local proxy routing, authentication, cancellation and response limits. Remove the obsolete DNS helper and duplicate fixtures, and document remaining TLS, platform and in-flight revocation boundaries. Validation on macOS: cargo test --offline --workspace (1467 passed, 2 ignored), strengthened HTTP query roundtrip, cargo build --offline, cargo fmt check and cargo clippy --offline --all-targets (no warnings). No GUI or other-platform validation was performed in this batch.
Complete delivery evidence binding, review policy enforcement, workflow state serialization and execution-time ownership guards for desktop sessions. Refresh the read-only acceptance projection across runs and external edits. Remove the headless CLI and ACP entry points, adapters, dependencies and release paths while retaining shared desktop coordination and safety code. Preserve canonical file-lock queuing for concurrent ordinary document edits. Document the implemented workflow configuration and remaining design limits. Validation on macOS arm64: full pnpm prepr passed (1993 Rust tests, 1925 UI tests, 34 Node tests; 8 Rust and 1 platform-specific Node checks skipped by that gate). Desktop build and 3 explicit native guardian/MCP tests passed. Independent review, documentation links and diff checks passed.
Restore file-summary collapse state and persistence, remove lowercase agents.md discovery, deduplicate rejected instruction aliases, and exercise native Windows lease aliases and path comparisons.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
改动
补齐桌面 Agent 的来源信任、交付验收与工作流生产链路，使任务按冻结的需求、检查、节点依赖和真实执行证据推进，失败后只能在统一预算内修复或由用户明确启动新尝试。
验证
提交前一轮已在 macOS arm64 完成独立审查和完整
pnpm prepr（退出 0）：Rust 2013 通过、8 ignored；前端 1937 通过；Node 34 通过、1 项因缺少 PowerShell 跳过。桌面构建通过，另行执行 guardian/MCP 原生用例 3/3 通过。Rust clippy 无新增告警，Vite 保留原有动态导入提示。按本次提交指令，commit/push/创建 PR 期间没有重新运行测试或
pnpm prepr。GUI、Windows/Linux 专属行为及其余真实环境 ignored 用例未在本轮验收，清单见docs/testing.md。