| content |
{"Commits":[{"Sha1":"9237a1604 {"Commits":[{"Sha1":"9237a16049a4a9609443af1e4c43006a9b858530","Message":"merge: 冒号动词路由转义(a8d261f6)与报告回绑并入主线\n\nCo-Authored-By: Claude Opus 5.5 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-23T05:49:24-07:00"},{"Sha1":"845429ae4583b761cb2a8a123014cc2b33656def","Message":"chore(reports): 根链静态门禁与 runtime 各环回绑 @ a8d261f6\n\na8d261f6(冒号路由转义)后在干净 worktree 重跑根 pnpm check 各环,回绑通过的报告(仅 provenance 变化);\npermission-catalog 顺带在干净树上重生成,替掉 eb6e4c6 那份脏绑。\n\n未回绑、原因不在本提交:\n- runtime check:naming / check:governance(namingViolations 0 → 8):a2228779 feat(mcp) 在 apps/mcp 引入\n 禁用词 business / reservation;naming / governance / governance-status / runtime-governance 四份报告不回绑。\n- catalog:drift 与 contracts governance-linter「retired entries…」一例:按主检出解析 Catalog 证据路径,\n 主检出里并行会话已暂存删除 configuration-snapshot-api.v1.openapi.json。\n- check:evidence:workbench-catalog-snapshot 过期(作用域变更来自上游);runtime-governance 待 naming 修好后重跑。\n\nCo-Authored-By: Claude Opus 5.5 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-23T05:49:07-07:00"},{"Sha1":"a8d261f69207cc5c3c5d2727e5a44ea5df0f2232","Message":"fix(api-nestjs): 冒号动词路由转义为字面量——access:plan 不再被 access:assess 吞掉\n\nExpress 4 的 path-to-regexp 0.1.x 把 `@Post(\"access:assess\")` 读成字面量 `access` + 路径参数 `assess`,\n生成的正则 `access(?:([^/]+?))` 能匹配 `access:plan`。access:assess 先注册,于是 POST\n/api/v1/public-files/access:plan 一直落到 assessAccess,planAccess 从未被路由到;另外七条动词路由\n虽前缀互不相同、没有互吞,但都接受任意后缀(`accessX`、`effects:plan`、`policies:bogus` 均 200)。\n\n- public-file(refs:assess / access:assess / access:plan / policies:refresh)与 notification-webhook\n (effects:classify / provider-outcomes:classify / deliveries:plan / policies:refresh)八条路由的冒号\n 一律写成 `\\\\:`,编译为精确字面量;两处控制器文档注明约定与原因。全仓其余路由的冒号都是真路径参数。\n- 新增 test/platform.colon-routes.http.test.ts:真实 Nest 应用 + JWT 守卫,运行时方法包调用记录,\n 逐条证明每个动词只到自己的处理器(plan 回 ADMIT + plan,不是访问判定),未登记后缀一律 404。\n 修前 9 例红(access:plan → assessAccess;八个后缀 200),修后 16/16 绿。\n\nCo-Authored-By: Claude Opus 5.5 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-23T02:37:10-07:00"}],"HeadCommit":{"Sha1":"9237a16049a4a9609443af1e4c43006a9b858530","Message":"merge: 冒号动词路由转义(a8d261f6)与报告回绑并入主线\n\nCo-Authored-By: Claude Opus 5.5 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-23T05:49:24-07:00"},"CompareURL":"luoanwu/enterprise-platform/compare/65e5f5a7b7ee8188b5ed27fe6f0f2fe9fdd9fc85...9237a16049a4a9609443af1e4c43006a9b858530","Len":3}... |