| content |
{"Commits":[{"Sha1":"fbc127c83 {"Commits":[{"Sha1":"fbc127c8341c596329f98fb1f9eb8f17e210a07e","Message":"chore(chg036): merge CHG-034 stack history and refresh declarations\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-10-12T15:12:45-07:00"},{"Sha1":"c673ed2d02b23a2eb750cbaf89b357c383cb6418","Message":"refactor(catalog): CHG-034 数字员工OS 更名为数字智能层(digital-intelligence-layer)\n\n- Catalog 项目 id、EmploymentTransferred 消费者、AppManifest 草案与用量投影契约改为新标识;fact catalogFingerprint 同步\n- 契约 id os-usage-projection-api.v1 → dil-usage-projection-api.v1(modules.json、cost-capacity、caddy-routes;网关前缀 /api/v1/cost/ 不变)\n- stack/provision:OpenBao 应用列表、Redis 库说明、Redpanda 重放 topic 与消费组名;测试、夹具、注释与文档用词同步\n- 不改:已发布 Schema 与生成代码、已应用迁移、decisions.json、docs/报告/证据、ERK 固定快照、工作区目录路径、\n os-product 协议名、凭据台账 stack/credentials/、带日期的现存资源名、旧栈卷名、2026-08 移植回灌等历史记录行\n- 用户 2026-10-12 以 Catalog Owner 签署:硬切(运行库旧登记观察期保留,A2 新增新 id 登记),现在合入\n- 生成:在 4bfc0b81 上重放 03 切换执行/工具/rename-cp.py(03 233f219)与 sync-fact-schema-digests --write\n- 材料:平台治理/doc/decisions/CHG-034-材料/(治理仓 65a87a4)\n\nCo-Authored-By: Claude Opus 5.5 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-10-12T08:36:20-07:00"},{"Sha1":"12d40ebb94d7948d7307f017585450996f513bbc","Message":"feat(workbench): EES 只读宿主接入工作台——第 19 个探针、语义目录实时读取与 /ees/* 入口路由\n\nC1 首消费者(只读正式宿主 H2/O1/I1/C1 批准记录 §5)的工作台侧实现:\n- 运行信息页新增「受托独立服务」:经入口读 EES 公开就绪探针 /ees/health/ready(不带令牌),\n 计入「读取全部 N 个探针」(dev 为 18 + 1);200+ready 就绪、503 未就绪、502/404 探测失败。\n 同源前缀登记在 features/platform/hosted-services.ts,未登记的受托服务不探测。\n- EES 服务工作区「语义目录」:登录后点按钮经 /ees/api/v1/semantics/* 读取三个语义读操作\n (按游标读完,页数有上限),对照快照 catalogRevision;401/403/404/503 各给说明,\n EES 拒绝不清平台会话;未登录不渲染,标签内容与快照逐字一致(MW-07 不变)。\n- stack/caddy/Caddyfile:handle /ees/* + uri strip_prefix 转发 {$PLATFORM_EES_UPSTREAM:host.docker.internal:4432};\n 不用 handle_path(排在全部 handle 之后,会被工作台兜底抢先)。check:caddy 与 caddy validate 通过。\n- 用例:RT-06(受托探针计数、不带令牌、502 探测失败)、MW-22(实时读取、游标、拒绝说明、会话保留),\n check-workbench-ui REQUIRED_CASES 92 → 94;MW-06 的服务入口文字随概览更新。\n- 文档:runbook 新增「EES 只读正式宿主接入工作台」(含换工作台客户端时两条单值 OIDC 信任的连带改动);\n formal-host README 补工作台接入。\n\nCo-Authored-By: Claude Opus 5.5 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-10-11T19:06:09-07:00"},{"Sha1":"45363b29810308fee90f67a8ccad12d4453507cd","Message":"Merge remote-tracking branch 'origin/main' into claude/ees-ktv-c1-20261011\n\nCo-Authored-By: Claude Opus 5.5 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-10-11T16:32:37-07:00"},{"Sha1":"0da7d0b960ffa4014061df6297eca8908196d38e","Message":"feat(permission): 决策接口新增 Human OIDC 入口,供 EES HUMAN_REQUEST_TOKEN 画像调用\n\n- 新 env PLATFORM_DECISION_HUMAN_OIDC_TRUSTS:1..8 条 {issuer, audience, endpointOrigin?},\n 逐条沿用角色管理入口的校验(开发环境才允许回环 HTTP;staging/production 拒绝),重复或非法即\n DECISION_HUMAN_ENTRY_TRUST_INVALID 启动失败;未设即关闭,行为不变\n- DecisionHumanEntryVerifier 只处理 POST /api/v1/decisions:令牌声明的 (iss, aud) 命中登记才接手,\n 按固定信任完整验签并逐请求 UserInfo 回查,失败直接拒绝、不回落;未命中交回原链(machine / 通用 JWT 不变)\n- 决策适配器:经此入口时请求体 actor 须为 human/oidc,actor_id、client_id、session_id 逐项等于已验签\n 的 subject、clientId(OIDC 客户端)与 sid,否则 context-invalid;账本 appId 仍为 clientId\n- 角色管理入口抽出 createEntryIdentityClient 共用;compose 透传与 runbook、对接说明书同步\n- 测试:新增 5 例入口测试与 2 例适配器测试;api-nestjs typecheck 通过,相关 6 个文件 72/72;\n 对「不回落」与 sid 校验做过故意破坏的负向自检\n\nCo-Authored-By: Claude Opus 5.5 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-10-11T16:15:16-07:00"}],"HeadCommit":{"Sha1":"fbc127c8341c596329f98fb1f9eb8f17e210a07e","Message":"chore(chg036): merge CHG-034 stack history and refresh declarations\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-10-12T15:12:45-07:00"},"CompareURL":"luoanwu/infra/compare/4a41adae67bcf5be2d98b33d6257c0a6de632d69...fbc127c8341c596329f98fb1f9eb8f17e210a07e","Len":5}... |