Repository navigation
Description
状态:HTTP 持久频道、组织邀请和单频道访客切片已合并并有 UAT/native 证据;WebSocket、活动连接撤权及完整成员/平台验收未完成。 Human 于 2026-10-18 授权合并既有 Draft;不授权 Prod 部署。
Parent
What to build
已登录的 Human 在自己有权管理的组织中,通过手机创建 Cloud Group Channel,使用另一客户端/CLI 收发文本。关闭再打开或断线重连后仍看到已确认消息。
所有业务走生产目标 owner、持久存储及公开接口;同时交付所需界面、CLI 与回归证据,不交付隔离的横向层。
Acceptance criteria
- 手机可建群、查看成员和发送/读取文本;CLI 可执行同样操作。组织建群政策与群访问权限由服务端检查。
- Org DO 的目录与 Channel DO 初始化使用同一稳定操作身份,失败重试不会产生第二个群;未完成初始化不展示为可用群。
- Cloud Channel 持久保存群、成员、消息与序号。消息同键同内容返回既有结果,异内容冲突;提交后才发送回执。
- HTTP 历史/游标与休眠 WebSocket 经过同一身份和群校验;重连后补齐,UI 区分待发、已提交、失败。
- 另一个组织、非群成员、伪造作者、越权游标都被拒绝;组织列表不泄露未获权私有群;新加入身份默认只有加入后历史。
- WorkOS 失效事实传到活动群,现有连接也检查过期/撤权;首次可见路径即含拒绝行为,不把全部授权留到最后测试票。
- 实例未配对电脑仍可聊天。最小 schema 迁移及重启持久化可复现,连接状态不假装是任务执行状态。
- 公开 API/WS 回归、CLI 实跑与真实手机 Human QA 通过;保留既有本地 Host 功能。
群角色设计约束:Human/Agent 的身份类型与群主/管理员/成员角色分离,不把群主归属硬编码为 Human。当前切片仍验证既定 Human 建群路径;Agent 群主授权、撤销/接管及入群申请审批放到 T1–T5 之后的群管理切片,验收目标见 spec §8。不提前发放新的管理权限。
Blocked by
#2 — T1 完成并通过 Human QA。
TOB 公开仓库及规划迁移已获授权;本任务仍未启动,不授权实现、部署、配置 WorkOS、发信或收费。
合并检查点 — 2026-10-18
TOB #17–24 已依次合并,main 44dbb505ae6ba36a82372d7e11f3c356e3651931;DeepSeekBot #2103/#2121/#2131/#2138/#2146/#2150/#2152/#2154 的原始提交由 #2157 整合,main f9ed710b5a718526cc97a30583af80fa14e28424。上述最新 Human 授权取代历史“暂不启动/不合并”描述;未运行的验收仍不算通过。此次没有部署或发布,Prod 未变。
HTTP 持久频道、组织邀请和单频道访客切片已合并并有 UAT/native 证据;WebSocket、活动连接撤权及完整成员/平台验收未完成。 本总任务保持开放。
Activity
DoodleBears commentedon Oct 17, 2026
Agent work claim
codex/local/01a148ae-ec7f-74b2-8157-961411ce54c9(not a DSH Session)codex/3-cloud-channelsThe Human's newer autonomous UAT goal authorizes this next slice and supersedes the original not-started/admin-only scheduling restriction. Stack on unmerged #18; do not merge, touch Prod, or claim T1 complete. T1 revocation/event gates remain open; WebSocket active-session revocation must be qualified before treating the full T2 ticket as complete. First prove mobile create/multiple channels/text plus independent CLI and denial/retry evidence, then expand the remaining T2 transport gates.
docs: record channel HTTP UAT acceptance (refs #3)
DoodleBears commentedon Oct 17, 2026
UAT HTTP channel sub-slice verified
Task:
codex/local/01a148ae-ec7f-74b2-8157-961411ce54c9; the overall goal remains active.b26150224a60808d89daf7e9cd8863faf26ed75f, documentation head46b04ec. Mobile #2138: runtime5d2ef0fe8, evidence head29785b357.Next bounded claim: organization owner A invites verified user B as member; B accepts, switches organization, sees existing channels and exchanges only allowed messages through public API/CLI/mobile. Branch
codex/3-org-invitationsstacks on unmerged #19. Direct guests and Agent credentials follow separately. Existing T2 claim remains active under the explicit UAT goal.docs: record real UAT member invitation checks
docs: record native invitation UAT and remaining collaboration gates (#3
DoodleBears commentedon Oct 18, 2026
UAT invitation slice outcome
Task:
codex/local/01a148ae-ec7f-74b2-8157-961411ce54c9— bounded slice handed off for review; larger goal remains active.b6b717d044ff4a787de287c31d2029025bbbb7f9, D1/Org/Channel 4/4/1; current docs head1f07075. Real API/CLI and shared iOS Simulator A→B invitation/acceptance passed.acfbc581b805a0a6b47687b7f5c23c2ca363cfcf; reviewer evidence93a332ab6. B sees the same four channels, cannot see seven pre-join messages, sends message 8 read by owner CLI. Member channel-create/invite/org-update refusals are real server checks. Native revoke leaves no membership; revoked recipient cannot accept.DoodleBears commentedon Oct 18, 2026
Agent work claim — direct channel guests
codex/local/01a148ae-ec7f-74b2-8157-961411ce54c9(not a DSH Session)codex/3-channel-guests, stacked on unmerged feat: organization member invitations through API and CLI #20.Channel DO owns invitation/grant and the join sequence. D1 is a bounded recipient lookup projection, never an authorization source; retries repair incomplete indexing. First end-to-end target uses existing verified A/B synthetic users. New-account delivery, Agent credentials, WebSocket and group-channel bridging are not silently substituted into this slice. Full T1/T2 remains open.
docs: record real UAT channel guest boundaries
docs: record native UAT channel guest verification
DoodleBears commentedon Oct 18, 2026
Agent work claim — invitation journey
codex/local/01a148ae-ec7f-74b2-8157-961411ce54c9codex/3-invitation-linksRecord invitation preview UAT evidence and native gates
DoodleBears commentedon Oct 18, 2026
UAT API/CLI tracer is verified at service
f10437bfbe46c4cbcbfb71bc6b599e9551669051(CI, sanitized evidence): recipient preview does not join; wrong account/anonymous refused; landing reveals no destination; mismatched origin refused before sending credentials; revoked acceptance denied; no organization membership or sibling access. Schemas remain D1/Org/Channel 5/4/5. No Prod or authentication-setting change.Companion mobile #2169 is Draft. Native invitation acceptance, pending-target restart recovery and before/after screenshots are still pending the assigned Simulator window; real camera QR, QR display/save and workspace drawer remain separate unfinished gates. T1/#3 stays open.
Task:
codex/local/01a148ae-ec7f-74b2-8157-961411ce54c9.docs: record native guest invitation acceptance and open gates (#3)
DoodleBears commentedon Oct 18, 2026
Assigned Batch21 iOS Simulator acceptance is now verified and published in DeepSeekBot #2169. Evidence, recording, first failures and limits.
1a2c1c385fd842958a078da05bb85c841d69934e; UAT servicef10437b, schemas 5/4/5. Runtime CI passes. Screenshot links render in the PR; video is published. Evidence/doc-only heads have their own CI.Still open: sender native copy/share, new-instance trust and Hosted AuthKit return carrying an invitation, real camera/Android; QR rendering/save, unified workspace drawer, organization-wide Agents and remaining umbrella gates. Synthetic login does not prove interactive Hosted AuthKit. No Prod or new PR merge. Task
codex/local/01a148ae-ec7f-74b2-8157-961411ce54c9.DoodleBears commentedon Oct 18, 2026
Agent work claim — unified workspace drawer tracer
Task
codex/local/01a148ae-ec7f-74b2-8157-961411ce54c9; mobile branchcodex/2161-workspace-drawer, stacked on #2169. Service companion branchcodex/3-guest-workspace-projection, stacked on TOB #25.Reuse the existing left drawer for Computers + Cloud workspaces. Merge actual organization memberships with server-authorized guest-channel organization identity, keyed by instance/organization. A channel guest sees the organization entry and only its granted channels; membership takes precedence without duplicate entries. Moving between cloud and computer preserves their independent authority. Include public CLI readback, pagination/retry/revoke checks and assigned native evidence. No new visibility model, Prod or merge. Existing invitation sharing/authentication acceptance gaps remain open.
Record real UAT guest workspace projection and revoke checks (#3)
Map current collaboration evidence and unresolved goal requirements (#3)