| content |
{"Commits":[{"Sha1":"ed6b4b052 {"Commits":[{"Sha1":"ed6b4b052da885ad63113d7d7045b7c512025b0f","Message":"fix(auth): 消除匿名访客启动即触发的无效 refresh 401，并修复 auth 中间件多余括号\n\n优化 init 会话恢复：\n- 后端登录/刷新时额外种可读 session_hint cookie（非 HttpOnly，与 refresh_token 同生命周期），登出清除\n- 前端 init() 仅在存在会话信号（localStorage token/user、loopback 标记或 session_hint cookie）时才发起 /auth/refresh，匿名访客静默清状态，不再产生无效 401\n- clearLocalState() 同步过期 session_hint cookie\n- 合法 cookie-only 会话恢复路径（含 E2E storageState）不受影响\n\n顺带修复 auth.middleware.ts 中 prisma.users.findFirst select 块多余的闭合括号，该语法错误导致后端无法启动\n\nCo-Authored-By: Claude Opus 4.7 (1M context) \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"luojuhai@luojuhaideMacBook-Pro.local","AuthorName":"luojuhai","CommitterEmail":"luojuhai@luojuhaideMacBook-Pro.local","CommitterName":"luojuhai","Timestamp":"2026-05-26T22:37:58-07:00"},{"Sha1":"196258b4bf8293811ea64859f9be0f464a6c5b8d","Message":"Merge branch 'main' into refactor/payroll-uselistpage\n","AuthorEmail":"luojuhai@luojuhaideMacBook-Pro.local","AuthorName":"luojuhai","CommitterEmail":"luojuhai@luojuhaideMacBook-Pro.local","CommitterName":"luojuhai","Timestamp":"2026-05-26T22:23:29-07:00"},{"Sha1":"7ce6ae124e47fde6ee51a735062164d48e585e5e","Message":"Merge pull request #85 from laoluojuhai/governance/hr-training-readmodel-fixes\n\nGovernance/hr training readmodel fixes","AuthorEmail":"158980461+laoluojuhai@users.noreply.github.com","AuthorName":"laoluojuhai","CommitterEmail":"noreply@github.com","CommitterName":"GitHub","Timestamp":"2026-05-26T07:42:26-07:00"},{"Sha1":"f53d2e37695ff0727b0ceb47989a45e46572d54f","Message":"fix(hr-training): 治理培训管理读模型断链 + 实现能力评估/差距分析\n\n修复贯穿培训管理 15 个 Tab 的 case-transform 读模型断链（前端读的字段名 ≠\n全局 responseCaseConverter 实际产出），共 5 种形态：\n\n1. 前端虚构字段：我的学习 totalHours=NaN（durationSeconds 不存在）→ 改用\n getStats 权威总时长 + 真实字段映射\n2. 照抄 Prisma snake 列名：学习路径列表 path_type/learning_path_steps 等 →\n LearningPath/LearningPathStep 类型与组件全改 camelCase\n3. 枚举值当对象 key：9-Box buckets 与 效果看板 coachDrafts.byStatus\n （at_risk/pending_review 被转坏成 atRisk/pendingReview）→ 9-Box 从\n members 派生计数；effectiveness-summary 的 byFamily/byStatus 改数组形态\n4. _count→Count：培训计划/培训场次 报名数恒 0 → 后端 service 把 _count 聚合\n 提升为扁平字段（sessionCount/enrollmentCount），前端读扁平字段\n5. 嵌套读错提升字段：考试管理「关联课程」读 hrCourses.title → 改读\n 后端 format 提升的 course.name\n\n其他：\n- AI 教练对练：PracticeRequest 类型补齐后端 startPracticeSchema 实收字段，\n 消除 payload:any（红线6）；新增 CoachSkillSlug 联合类型\n- 课程管理：courseType 枚举漂移 blended→mixed、时长/学分字段名错配修正\n- 证书管理：模板 status←is_active 桥接（修恒「停用」）、有效期单位天、移除\n 结构不可支持的「已颁发」列\n- 能力模型：getMyAssessments/getGapAnalysis 由空桩实现为复用\n capability-graph.getRadar 的真源派生（current=真实评分、target=维度满级），\n 不杜撰数字；零前端改动\n- 效果看板：空数据窗口感知空态提示\n\n前端 vue-tsc + 后端 tsc 全绿。\n\nCo-Authored-By: Claude Opus 4.7 (1M context) \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"luoguoguo@gmail.com","AuthorName":"laoluojuhai","CommitterEmail":"luoguoguo@gmail.com","CommitterName":"laoluojuhai","Timestamp":"2026-05-26T07:39:18-07:00"},{"Sha1":"ab2d0482cb4d14233885b25cef63e58890d3044e","Message":"fix(auth): RLS 自动注入分支补 await，避免异常逃出 try/catch 挂起请求\n\n安全专审 Finding 1：authenticate 中间件 RLS_AUTO_INJECT 分支\n`return tenantContext.run(...)` 未 await，loadUserAndContinue 抛错\n(用户禁用/回源失败) 时被拒 promise 逃出外层 try/catch，next(error)\n不触发，请求挂起而非返回 401。改为 return await，与 auth.service.ts:213\n已有正确写法一致。fail-closed 无越权，属可用性/正确性修复。\n\n附带本轮治理改动：\n- auth.service.ts refresh 链路显式建立 tenantContext (R-RLS-4)\n- 新增 core-event-closed-loop / rls-staging-canary / 30d-war-plan 审计\n- .env 写入守卫 + 单文件 eslint hook；security-reviewer agent\n- serial-numbers controller + 测试；治理报告/基线刷新\n\nCo-Authored-By: Claude Opus 4.7 (1M context) \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"luoguoguo@gmail.com","AuthorName":"laoluojuhai","CommitterEmail":"luoguoguo@gmail.com","CommitterName":"laoluojuhai","Timestamp":"2026-05-26T05:14:04-07:00"}],"HeadCommit":{"Sha1":"ed6b4b052da885ad63113d7d7045b7c512025b0f","Message":"fix(auth): 消除匿名访客启动即触发的无效 refresh 401，并修复 auth 中间件多余括号\n\n优化 init 会话恢复：\n- 后端登录/刷新时额外种可读 session_hint cookie（非 HttpOnly，与 refresh_token 同生命周期），登出清除\n- 前端 init() 仅在存在会话信号（localStorage token/user、loopback 标记或 session_hint cookie）时才发起 /auth/refresh，匿名访客静默清状态，不再产生无效 401\n- clearLocalState() 同步过期 session_hint cookie\n- 合法 cookie-only 会话恢复路径（含 E2E storageState）不受影响\n\n顺带修复 auth.middleware.ts 中 prisma.users.findFirst select 块多余的闭合括号，该语法错误导致后端无法启动\n\nCo-Authored-By: Claude Opus 4.7 (1M context) \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"luojuhai@luojuhaideMacBook-Pro.local","AuthorName":"luojuhai","CommitterEmail":"luojuhai@luojuhaideMacBook-Pro.local","CommitterName":"luojuhai","Timestamp":"2026-05-26T22:37:58-07:00"},"CompareURL":"luoanwu/juhi-omni-knowledge-hub/compare/1a0e581f336639079ebba02b42516bda34f59268...ed6b4b052da885ad63113d7d7045b7c512025b0f","Len":10}... |