sqlite-web 0.7.2
gitea.db
action
Create
Query
access
access_token
action
action_artifact
action_run
action_run_index
action_run_job
action_runner
action_runner_token
action_schedule
action_schedule_spec
action_task
action_task_output
action_task_step
action_tasks_version
action_variable
app_state
attachment
auth_token
badge
branch
collaboration
comment
commit_status
commit_status_index
commit_status_summary
commit_sync_log
commit_sync_status
dbfs_data
dbfs_meta
deploy_key
email_address
email_hash
external_login_user
follow
gpg_key
gpg_key_import
hook_task
issue
issue_assignees
issue_content_history
issue_dependency
issue_index
issue_label
issue_pin
issue_user
issue_watch
label
language_stat
lfs_lock
lfs_meta_object
login_source
milestone
mirror
notice
notification
oauth2_application
oauth2_authorization_code
oauth2_grant
org_user
package
package_blob
package_blob_upload
package_cleanup_rule
package_file
package_property
package_version
project
project_board
project_issue
protected_branch
protected_tag
public_key
pull_auto_merge
pull_request
push_mirror
reaction
release
renamed_branch
repo_archiver
repo_hidden_file
repo_indexer_status
repo_license
repo_redirect
repo_topic
repo_transfer
repo_unit
repository
review
review_state
secret
session
sqlite_sequence
star
stopwatch
system_setting
task
team
team_invite
team_repo
team_unit
team_user
topic
tracked_time
two_factor
upload
user
user_badge
user_blocking
user_open_id
user_redirect
user_setting
version
watch
webauthn_credential
webhook
Toggle helper tables
Structure
Content
Query
Insert
Drop
Import
Export
Delete row 29905 from action
id
29905
user_id
5
op_type
5
act_user_id
5
repo_id
116
comment_id
0
is_deleted
0
ref_name
refs/heads/feat/platform-ops-candidate
is_private
0
content
{"Commits":[{"Sha1":"308a0078d
{"Commits":[{"Sha1":"308a0078ddf7de088a6c0ee7cdbe1facac9dc299","Message":"feat(platform): 平台运维命令 API 守卫 / 控制器 / 开关（OPS-2，候选契约 platform-ops-api.v1 → CHG-005）\n\n- @juhai/module-kit：operations 声明（OperationDefinition：id / kind / risk / dry_run / approval / permission_action / execution / job_kind / batch / input_schema），\n defineModule 校验与 governance/fixtures/rules/platform-ops.rules.mjs 同口径；OpsActorVerifier 接口与字符串 token OPS_ACTOR_VERIFIER\n （identity 模块提供；未提供即失败关闭）；常量 OPS_SCOPE=platform:ops（拍板 ②）、OPS_PERMISSION_RESOURCE=platform.operations\n- @repo/contracts：platform-ops.ts 请求信封 Zod 镜像（operationRequestSchema / approvalRequestSchema / OPS_REASON_CODES 22 码 / Idempotency-Key），\n 测试锚定候选 OpenAPI ReasonCode.enum 与回执状态枚举\n- api-nestjs：AuthContext / TokenVerifier 补 scopes（scope 字串 / scp 数组；demo 模式为空）；\n platform/ops/{ops.config, ops-errors, ops-auth.guard, ops.gates, ops.service, ops.controller}\n → GET /api/platform/ops/definitions、POST /{definitionId}、GET /receipts/{id}、POST /receipts/{id}/approve；\n PLATFORM_OPS_ENABLED 缺省关 → 503 OPS_DISABLED；无 scope 403 OPS_SCOPE_REQUIRED；无校验方 / 未过 403 OPS_FORBIDDEN；\n 逐操作 PermissionDecisionPort 决策（platform.operations.\u003caction\u003e），fail-closed → 403 POLICY_UNAVAILABLE；\n 门控 400 IDEMPOTENCY_KEY_REQUIRED / INPUT_INVALID、409 OPERATION_NOT_EXECUTABLE / DRY_RUN_NOT_SUPPORTED / PLAN_DIGEST_REQUIRED / APPROVAL_REQUIRED / BATCH_LIMIT_EXCEEDED；\n 处理器与回执（M6）留 OPS-3：门控全过仍 409 HANDLER_NOT_BOUND，不伪造回执；回执 / 审批一律 404 RECEIPT_NOT_FOUND；\n 本地模式动作目录并入 platform.operations.*（composeOpsActions）；createApp 拆出 createAppFromModules（测试路径 = 运行路径）\n- turbo.json globalEnv 增 PLATFORM_OPS_ENABLED；Caddyfile /api/platform/ops/* 只放内网 / 可信代理（M5 接口设计 §5.3 第 7 条）\n- 测试：kit operations 4 例、contracts platform-ops 3 例、api-nestjs 纯门控 8 例、真实 HTTP 10 例\n （隔离 PG :55476 / Redis :56387，AUTH_MODE=jwt HS256；createAppFromModules 注入 authority + shape 两个描述符与假 OpsActorVerifier）\n\n本机：runtime 13 项静态门禁 + 根 pins / modules / module-imports / caddy / facts / migration-decs 全过；typecheck 0 错；报告未随提交。\nidentity 侧 OpsActorVerifier 提供方与 platform:ops scope 登记待 Identity Owner（OPS-2 前置，随 PF-07 阶段 2）。\n\nCo-Authored-By: Claude Fable 5.1 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-13T01:37:55-07:00"}],"HeadCommit":{"Sha1":"308a0078ddf7de088a6c0ee7cdbe1facac9dc299","Message":"feat(platform): 平台运维命令 API 守卫 / 控制器 / 开关（OPS-2，候选契约 platform-ops-api.v1 → CHG-005）\n\n- @juhai/module-kit：operations 声明（OperationDefinition：id / kind / risk / dry_run / approval / permission_action / execution / job_kind / batch / input_schema），\n defineModule 校验与 governance/fixtures/rules/platform-ops.rules.mjs 同口径；OpsActorVerifier 接口与字符串 token OPS_ACTOR_VERIFIER\n （identity 模块提供；未提供即失败关闭）；常量 OPS_SCOPE=platform:ops（拍板 ②）、OPS_PERMISSION_RESOURCE=platform.operations\n- @repo/contracts：platform-ops.ts 请求信封 Zod 镜像（operationRequestSchema / approvalRequestSchema / OPS_REASON_CODES 22 码 / Idempotency-Key），\n 测试锚定候选 OpenAPI ReasonCode.enum 与回执状态枚举\n- api-nestjs：AuthContext / TokenVerifier 补 scopes（scope 字串 / scp 数组；demo 模式为空）；\n platform/ops/{ops.config, ops-errors, ops-auth.guard, ops.gates, ops.service, ops.controller}\n → GET /api/platform/ops/definitions、POST /{definitionId}、GET /receipts/{id}、POST /receipts/{id}/approve；\n PLATFORM_OPS_ENABLED 缺省关 → 503 OPS_DISABLED；无 scope 403 OPS_SCOPE_REQUIRED；无校验方 / 未过 403 OPS_FORBIDDEN；\n 逐操作 PermissionDecisionPort 决策（platform.operations.\u003caction\u003e），fail-closed → 403 POLICY_UNAVAILABLE；\n 门控 400 IDEMPOTENCY_KEY_REQUIRED / INPUT_INVALID、409 OPERATION_NOT_EXECUTABLE / DRY_RUN_NOT_SUPPORTED / PLAN_DIGEST_REQUIRED / APPROVAL_REQUIRED / BATCH_LIMIT_EXCEEDED；\n 处理器与回执（M6）留 OPS-3：门控全过仍 409 HANDLER_NOT_BOUND，不伪造回执；回执 / 审批一律 404 RECEIPT_NOT_FOUND；\n 本地模式动作目录并入 platform.operations.*（composeOpsActions）；createApp 拆出 createAppFromModules（测试路径 = 运行路径）\n- turbo.json globalEnv 增 PLATFORM_OPS_ENABLED；Caddyfile /api/platform/ops/* 只放内网 / 可信代理（M5 接口设计 §5.3 第 7 条）\n- 测试：kit operations 4 例、contracts platform-ops 3 例、api-nestjs 纯门控 8 例、真实 HTTP 10 例\n （隔离 PG :55476 / Redis :56387，AUTH_MODE=jwt HS256；createAppFromModules 注入 authority + shape 两个描述符与假 OpsActorVerifier）\n\n本机：runtime 13 项静态门禁 + 根 pins / modules / module-imports / caddy / facts / migration-decs 全过；typecheck 0 错；报告未随提交。\nidentity 侧 OpsActorVerifier 提供方与 platform:ops scope 登记待 Identity Owner（OPS-2 前置，随 PF-07 阶段 2）。\n\nCo-Authored-By: Claude Fable 5.1 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-13T01:37:55-07:00"},"CompareURL":"luoanwu/enterprise-platform/compare/0e9a0d98eb8d36f9d8ad0611e0159dd31f8484a2...308a0078ddf7de088a6c0ee7cdbe1facac9dc299","Len":1}
...
created_unix
1789444808
Delete
Cancel