| content |
{"Commits":[{"Sha1":"80c8bdabb {"Commits":[{"Sha1":"80c8bdabb7ff33364f9d270d4a771bf25a2cad71","Message":"test: record review-fix acceptance on clean 4708949 (runtime 298/floor 292, UI 14/floor 13)\n\nSupersedes the 68e37c0 reports. All reports come from committed 4708949\n(worktreeDirty=false):\n- pnpm check: pass; lint/typecheck re-run with turbo --force 19/19\n- pnpm check:runtime: 298 passed / 0 failed, floor 292; includes the 6 real\n C16 cases against an isolated 04 enterprise-platform 6ae2a13 shared clone\n- C16_BROWSER_ACCEPTANCE=1 pnpm check:ui: 14 passed (12 demo incl. real C16\n browser + 2 Keycloak OIDC) / 0 failed, floor 13\n- pnpm check:governance (required): passed, no regressions\nD3 preservation manifest: 65 files (25 SQL) sha256-identical; no migration.\n\nCo-Authored-By: Claude Opus 5.5 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-10-28T01:00:48-07:00"},{"Sha1":"4708949f3d90ebf2490bc90a2baf32d3d58850f2","Message":"fix(realtime): route permission before tenant-level bypass; replay and AST guard coverage (review WO-RT-F1..F4)\n\n- F1: unanchored (permission-class) envelopes are now checked against the\n HTTP route permission before the tenant-level shortcut, so manager without\n tenant:manage no longer receives user/order/job/inbound/notification/\n knowledge/projection-rebuild envelopes (same as HTTP 403); tenantAdmin and\n holders of the permission unchanged; ticket/project/unclassified behaviour\n for tenant-level roles unchanged. New acceptance case (SSE+WS, live+replay)\n fails on 68e37c0.\n- F2: new replay case: requester role and project-derived member reconnecting\n with a cursor on SSE and WS get hint fields only; WS and SSE \"send raw\n envelope when visible\" replay mutations both turn it red.\n- F3: guard scan now uses the TypeScript AST (same parser as\n check:write-chain); outbox.create/createMany/upsert and eventBus.publish\n calls must expose a literal, literal ternary or enumerated type, indirect\n forms such as create({ data: row }) fail.\n- F4: dated note in docs/governance-experience.md; known drift (CLAUDE.md\n stable lines, D3-preserved contracts comments, 01 layer docs) registered\n in the implementation record.\nRatchet 43/308/292/13 with pin. D3 preservation files unchanged.\nVerified so far on dirty tree: targeted tests, full api-nestjs suite,\npnpm check; full gates on this commit next.\n\nCo-Authored-By: Claude Opus 5.5 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-10-28T00:54:13-07:00"},{"Sha1":"68e37c0e4e8cdcd99f9d60bae36eee08556bfa7f","Message":"test: record PM-06 realtime object-scope acceptance on clean 563f3d3 (runtime 296/floor 290, UI 14/floor 13)\n\nSupersedes the 2b49b0f reports (bound to a5817fa, before the D3\npreservation fix). All reports come from committed 563f3d3\n(worktreeDirty=false):\n- pnpm check: pass; lint/typecheck re-run with turbo --force 19/19\n- pnpm check:runtime: 296 passed / 0 failed, floor 290; includes the 6 real\n C16 cases against an isolated 04 enterprise-platform 6ae2a13 shared clone\n- C16_BROWSER_ACCEPTANCE=1 pnpm check:ui: 14 passed (12 demo incl. real C16\n browser + 2 Keycloak OIDC) / 0 failed, floor 13\n- pnpm check:governance (required): passed, no regressions\nD3 preservation manifest: 65 files (25 SQL) sha256-identical; no migration.\n\nCo-Authored-By: Claude Opus 5.5 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-10-28T00:11:01-07:00"},{"Sha1":"563f3d3841ee758cb82b4c6a242021bec9b0efd2","Message":"fix(realtime): keep D3 preservation files byte-identical (revert contracts comment edits)\n\npackages/contracts/src/realtime.ts and subscription.ts are in the D3\npreservation manifest (65 files incl. 25 SQL, sha256-pinned). The previous\ncommit edited only their header comments; restore them to 42c886e bytes and\nrecord in CLAUDE.md dynamic region and the implementation record that those\ncomments still describe tenant-only filtering and are superseded by the\nrealtime object-scope record. No behaviour change; full gates re-run next.\n\nCo-Authored-By: Claude Opus 5.5 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-10-28T00:06:33-07:00"},{"Sha1":"2b49b0f07582f43ef225a525ae004c4df93461ff","Message":"test: record PM-06 realtime object-scope acceptance on clean a5817fa (runtime 296/floor 290, UI 14/floor 13)\n\nAll reports come from the committed candidate a5817fa (worktreeDirty=false):\n- pnpm check: pass (lint/typecheck also re-run with turbo --force, 19/19)\n- pnpm check:runtime: 296 passed / 0 failed, floor 290; includes the 6 real\n C16 cases against an isolated 04 enterprise-platform 6ae2a13 shared clone\n (permission/audit/collaboration-messaging, loopback, test-only fixtures)\n- C16_BROWSER_ACCEPTANCE=1 pnpm check:ui: 14 passed (12 demo incl. real C16\n browser + 2 Keycloak OIDC) / 0 failed, floor 13\n- pnpm check:governance (required): passed, no regressions\n\nTwo earlier check:ui attempts on the same SHA failed because of gate-env\nmistakes (platform tenant map missing the -nestjs suffix; reused UI tenant\nleft a previous run's ticket selected); both reports kept outside the repo.\n\nCo-Authored-By: Claude Opus 5.5 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-10-28T00:05:21-07:00"}],"HeadCommit":{"Sha1":"80c8bdabb7ff33364f9d270d4a771bf25a2cad71","Message":"test: record review-fix acceptance on clean 4708949 (runtime 298/floor 292, UI 14/floor 13)\n\nSupersedes the 68e37c0 reports. All reports come from committed 4708949\n(worktreeDirty=false):\n- pnpm check: pass; lint/typecheck re-run with turbo --force 19/19\n- pnpm check:runtime: 298 passed / 0 failed, floor 292; includes the 6 real\n C16 cases against an isolated 04 enterprise-platform 6ae2a13 shared clone\n- C16_BROWSER_ACCEPTANCE=1 pnpm check:ui: 14 passed (12 demo incl. real C16\n browser + 2 Keycloak OIDC) / 0 failed, floor 13\n- pnpm check:governance (required): passed, no regressions\nD3 preservation manifest: 65 files (25 SQL) sha256-identical; no migration.\n\nCo-Authored-By: Claude Opus 5.5 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-10-28T01:00:48-07:00"},"CompareURL":"luoanwu/juhai-ai-work-order-system/compare/42c886ed5e5d0a6a4d5bd1d7f6b3a99a9fc1316e...80c8bdabb7ff33364f9d270d4a771bf25a2cad71","Len":6}... |