|
27055
|
fix(agent): 工具按发起用户判权，堵跨租户查询和外呼白名单
|
160
|
5
|
ci.yml
|
47
|
5
|
0
|
refs/heads/main
|
0437d5a45b0f15152bdd0c11b4e941fe2f2e2e02
|
0
|
0
|
0
|
push
|
{"ref":"refs/heads/main","befo {"ref":"refs/heads/main","before":"66fad3c64105fd05dfde9686d0dd6c3dd02499b4","after":"0437d5a45b0f15152bdd0c11b4e941fe2f2e2e02","compare_url":"https://gitea.g-hi.com/luoanwu/juhi-omni-knowledge-hub-eios/compare/66fad3c64105fd05dfde9686d0dd6c3dd02499b4...0437d5a45b0f15152bdd0c11b4e941fe2f2e2e02","commits":[{"id":"0437d5a45b0f15152bdd0c11b4e941fe2f2e2e02","message":"fix(agent): 工具按发起用户判权，堵跨租户查询和外呼白名单\n\n2026-11-04 七维度验收确认三项缺陷：模型的 where 可覆盖 tenant_id，\n工具不带用户身份，外呼白名单用未锚定的正则。\n\n- database_query：where/select/orderBy 按不可信输入校验，拒绝\n tenant_id、关联字段和白名单外字段，结果按 AI 上下文规则脱敏；\n 表与字段策略收到 agent-data-policy.ts，移出无模型的 tickets\n- 四个内置工具按发起用户当前权限判定（tool-access.ts），无用户时拒绝；\n 判定放在代理层，技能依赖工具也绕不过\n- 只有创建人能驱动会话，事件只有创建人、管理员和 ai-agent:manage\n 持有人能读；否则他人可借用创建人权限\n- http_request 改为 AGENT_HTTP_ALLOWED_HOSTS 主机白名单，默认禁用；\n 只允许 GET，不跟随重定向，拒绝 IP、端口和解析到内网的主机\n- create_task 入参不能改写 agentId/userId，请求头不能改写 X-Tenant-Id\n\n同步 sandbox-tools 盘点及生成脚本、openapi、.env.eios.example 和治理经验。\n遗留：工具结果的提示注入隔离、DNS 重绑定窗口；真实库与真实模型未验证。\n\nCo-Authored-By: Claude Opus 5.5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/juhi-omni-knowledge-hub-eios/commit/0437d5a45b0f15152bdd0c11b4e941fe2f2e2e02","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-11-04T18:12:02-08:00","added":["backend/src/modules/agent-sessions/agent-session.controller.test.ts","backend/src/modules/agent-sessions/agent-session.ownership.test.ts","backend/src/modules/agent-sessions/sandbox/agent-data-policy.test.ts","backend/src/modules/agent-sessions/sandbox/agent-data-policy.ts","backend/src/modules/agent-sessions/sandbox/credential-proxy.test.ts","backend/src/modules/agent-sessions/sandbox/tool-access.ts"],"removed":[],"modified":[".env.eios.example","backend/src/config/eios/ai.test.ts","backend/src/config/eios/ai.ts","backend/src/modules/agent-sessions/agent-session.controller.ts","backend/src/modules/agent-sessions/agent-session.docs.ts","backend/src/modules/agent-sessions/agent-session.service.ts","backend/src/modules/agent-sessions/harness.service.test.ts","backend/src/modules/agent-sessions/harness.service.ts","backend/src/modules/agent-sessions/sandbox/credential-proxy.ts","backend/src/modules/agent-sessions/sandbox/sandbox.interface.ts","backend/src/modules/agent-sessions/sandbox/tools/create-task.tool.ts","backend/src/modules/agent-sessions/sandbox/tools/database-query.tool.ts","backend/src/modules/agent-sessions/sandbox/tools/http-request.tool.ts","backend/src/modules/agent-sessions/sandbox/tools/knowledge-search.tool.ts","backend/src/modules/ai-assist/context-providers/redact.ts","backend/src/shared/middleware/auth.middleware.ts","docs/api/openapi.yaml","docs/eios-transformation/inventory/sandbox-tools.md","docs/eios-transformation/inventory/scripts/gen_ai.py","docs/eios-transformation/lanes/inventory.md","docs/governance/baseline-and-experience.md"]}],"total_commits":0,"head_commit":{"id":"0437d5a45b0f15152bdd0c11b4e941fe2f2e2e02","message":"fix(agent): 工具按发起用户判权，堵跨租户查询和外呼白名单\n\n2026-11-04 七维度验收确认三项缺陷：模型的 where 可覆盖 tenant_id，\n工具不带用户身份，外呼白名单用未锚定的正则。\n\n- database_query：where/select/orderBy 按不可信输入校验，拒绝\n tenant_id、关联字段和白名单外字段，结果按 AI 上下文规则脱敏；\n 表与字段策略收到 agent-data-policy.ts，移出无模型的 tickets\n- 四个内置工具按发起用户当前权限判定（tool-access.ts），无用户时拒绝；\n 判定放在代理层，技能依赖工具也绕不过\n- 只有创建人能驱动会话，事件只有创建人、管理员和 ai-agent:manage\n 持有人能读；否则他人可借用创建人权限\n- http_request 改为 AGENT_HTTP_ALLOWED_HOSTS 主机白名单，默认禁用；\n 只允许 GET，不跟随重定向，拒绝 IP、端口和解析到内网的主机\n- create_task 入参不能改写 agentId/userId，请求头不能改写 X-Tenant-Id\n\n同步 sandbox-tools 盘点及生成脚本、openapi、.env.eios.example 和治理经验。\n遗留：工具结果的提示注入隔离、DNS 重绑定窗口；真实库与真实模型未验证。\n\nCo-Authored-By: Claude Opus 5.5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/juhi-omni-knowledge-hub-eios/commit/0437d5a45b0f15152bdd0c11b4e941fe2f2e2e02","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-11-04T18:12:02-08:00","added":["backend/src/modules/agent-sessions/agent-session.controller.test.ts","backend/src/modules/agent-sessions/agent-session.ownership.test.ts","backend/src/modules/agent-sessions/sandbox/agent-data-policy.test.ts","backend/src/modules/agent-sessions/sandbox/agent-data-policy.ts","backend/src/modules/agent-sessions/sandbox/credential-proxy.test.ts","backend/src/modules/agent-sessions/sandbox/tool-access.ts"],"removed":[],"modified":[".env.eios.example","backend/src/config/eios/ai.test.ts","backend/src/config/eios/ai.ts","backend/src/modules/agent-sessions/agent-session.controller.ts","backend/src/modules/agent-sessions/agent-session.docs.ts","backend/src/modules/agent-sessions/agent-session.service.ts","backend/src/modules/agent-sessions/harness.service.test.ts","backend/src/modules/agent-sessions/harness.service.ts","backend/src/modules/agent-sessions/sandbox/credential-proxy.ts","backend/src/modules/agent-sessions/sandbox/sandbox.interface.ts","backend/src/modules/agent-sessions/sandbox/tools/create-task.tool.ts","backend/src/modules/agent-sessions/sandbox/tools/database-query.tool.ts","backend/src/modules/agent-sessions/sandbox/tools/http-request.tool.ts","backend/src/modules/agent-sessions/sandbox/tools/knowledge-search.tool.ts","backend/src/modules/ai-assist/context-providers/redact.ts","backend/src/shared/middleware/auth.middleware.ts","docs/api/openapi.yaml","docs/eios-transformation/inventory/sandbox-tools.md","docs/eios-transformation/inventory/scripts/gen_ai.py","docs/eios-transformation/lanes/inventory.md","docs/governance/baseline-and-experience.md"]},"repository":{"id":160,"owner":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"law@g-hi.com","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"name":"juhi-omni-knowledge-hub-eios","full_name":"luoanwu/juhi-omni-knowledge-hub-eios","description":"巨嗨全域智库 EIOS 化独立改造仓（由本地改造副本推送；原 luoanwu/juhi-omni-knowledge-hub 不动）","empty":false,"private":false,"fork":false,"template":false,"mirror":false,"size":2117641,"language":"","languages_url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/juhi-omni-knowledge-hub-eios/languages","html_url":"https://gitea.g-hi.com/luoanwu/juhi-omni-knowledge-hub-eios","url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/juhi-omni-knowledge-hub-eios","link":"","ssh_url":"git@gitea.g-hi.com:luoanwu/juhi-omni-knowledge-hub-eios.git","clone_url":"https://gitea.g-hi.com/luoanwu/juhi-omni-knowledge-hub-eios.git","original_url":"","website":"","stars_count":0,"forks_count":0,"watchers_count":1,"branch_count":1,"open_issues_count":0,"open_pr_counter":0,"release_counter":0,"default_branch":"main","archived":false,"created_at":"2026-10-30T09:22:23+08:00","updated_at":"2026-11-02T19:03:52+08:00","archived_at":"1970-01-01T08:00:00+08:00","permissions":{"admin":true,"push":true,"pull":true},"has_code":true,"has_issues":true,"internal_tracker":{"enable_time_tracker":true,"allow_only_contributors_to_track_time":true,"enable_issue_dependencies":true},"has_wiki":true,"has_pull_requests":true,"has_projects":true,"projects_mode":"all","has_releases":true,"has_packages":true,"has_actions":true,"ignore_whitespace_conflicts":false,"allow_merge_commits":true,"allow_rebase":true,"allow_rebase_explicit":true,"allow_squash_merge":true,"allow_fast_forward_only_merge":true,"allow_rebase_update":true,"allow_manual_merge":false,"autodetect_manual_merge":false,"default_delete_branch_after_merge":false,"default_merge_style":"merge","default_allow_maintainer_edit":true,"avatar_url":"","internal":false,"mirror_interval":"","object_format_name":"sha1","mirror_updated":"0001-01-01T00:00:00Z","topics":[],"licenses":[]},"pusher":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"sender":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"}}...
|
push
|
3
|
20
|
1793845482
|
1793848847
|
0
|
1793844929
|
1793848847
|
group: ci-${{ gitea.ref }}
cancel-in-progress: group: ci-${{ gitea.ref }}
cancel-in-progress: "true"
...
|
ci-refs/heads/main
|
1
|
Edit
Delete
|
|
27061
|
docs(skills): 去掉部署技能的机器路径并修复索引断链
|
160
|
5
|
ci.yml
|
48
|
5
|
0
|
refs/heads/main
|
ecdb3d24afbca7b5499701f39379699724fd182d
|
0
|
0
|
0
|
push
|
{"ref":"refs/heads/main","befo {"ref":"refs/heads/main","before":"0437d5a45b0f15152bdd0c11b4e941fe2f2e2e02","after":"ecdb3d24afbca7b5499701f39379699724fd182d","compare_url":"https://gitea.g-hi.com/luoanwu/juhi-omni-knowledge-hub-eios/compare/0437d5a45b0f15152bdd0c11b4e941fe2f2e2e02...ecdb3d24afbca7b5499701f39379699724fd182d","commits":[{"id":"ecdb3d24afbca7b5499701f39379699724fd182d","message":"docs(skills): 去掉部署技能的机器路径并修复索引断链\n\njuhi-deploy-runbook 的两处 /Users/luojuhai 路径改为按仓根运行；\nsource-command-juhi-index 指向 AGENTS.md 的相对路径少一层。\n\nCo-Authored-By: Claude Opus 5.5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/juhi-omni-knowledge-hub-eios/commit/ecdb3d24afbca7b5499701f39379699724fd182d","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-11-04T19:20:45-08:00","added":[],"removed":[],"modified":[".agents/skills/juhi-deploy-runbook/SKILL.md",".agents/skills/source-command-juhi-index/SKILL.md"]}],"total_commits":0,"head_commit":{"id":"ecdb3d24afbca7b5499701f39379699724fd182d","message":"docs(skills): 去掉部署技能的机器路径并修复索引断链\n\njuhi-deploy-runbook 的两处 /Users/luojuhai 路径改为按仓根运行；\nsource-command-juhi-index 指向 AGENTS.md 的相对路径少一层。\n\nCo-Authored-By: Claude Opus 5.5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/juhi-omni-knowledge-hub-eios/commit/ecdb3d24afbca7b5499701f39379699724fd182d","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-11-04T19:20:45-08:00","added":[],"removed":[],"modified":[".agents/skills/juhi-deploy-runbook/SKILL.md",".agents/skills/source-command-juhi-index/SKILL.md"]},"repository":{"id":160,"owner":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"law@g-hi.com","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"name":"juhi-omni-knowledge-hub-eios","full_name":"luoanwu/juhi-omni-knowledge-hub-eios","description":"巨嗨全域智库 EIOS 化独立改造仓（由本地改造副本推送；原 luoanwu/juhi-omni-knowledge-hub 不动）","empty":false,"private":false,"fork":false,"template":false,"mirror":false,"size":2119100,"language":"","languages_url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/juhi-omni-knowledge-hub-eios/languages","html_url":"https://gitea.g-hi.com/luoanwu/juhi-omni-knowledge-hub-eios","url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/juhi-omni-knowledge-hub-eios","link":"","ssh_url":"git@gitea.g-hi.com:luoanwu/juhi-omni-knowledge-hub-eios.git","clone_url":"https://gitea.g-hi.com/luoanwu/juhi-omni-knowledge-hub-eios.git","original_url":"","website":"","stars_count":0,"forks_count":0,"watchers_count":1,"branch_count":1,"open_issues_count":0,"open_pr_counter":0,"release_counter":0,"default_branch":"main","archived":false,"created_at":"2026-10-30T09:22:23+08:00","updated_at":"2026-11-05T10:15:29+08:00","archived_at":"1970-01-01T08:00:00+08:00","permissions":{"admin":true,"push":true,"pull":true},"has_code":true,"has_issues":true,"internal_tracker":{"enable_time_tracker":true,"allow_only_contributors_to_track_time":true,"enable_issue_dependencies":true},"has_wiki":true,"has_pull_requests":true,"has_projects":true,"projects_mode":"all","has_releases":true,"has_packages":true,"has_actions":true,"ignore_whitespace_conflicts":false,"allow_merge_commits":true,"allow_rebase":true,"allow_rebase_explicit":true,"allow_squash_merge":true,"allow_fast_forward_only_merge":true,"allow_rebase_update":true,"allow_manual_merge":false,"autodetect_manual_merge":false,"default_delete_branch_after_merge":false,"default_merge_style":"merge","default_allow_maintainer_edit":true,"avatar_url":"","internal":false,"mirror_interval":"","object_format_name":"sha1","mirror_updated":"0001-01-01T00:00:00Z","topics":[],"licenses":[]},"pusher":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"sender":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"}}...
|
push
|
2
|
20
|
1793849837
|
1793854139
|
0
|
1793848847
|
1793854139
|
group: ci-${{ gitea.ref }}
cancel-in-progress: group: ci-${{ gitea.ref }}
cancel-in-progress: "true"
...
|
ci-refs/heads/main
|
1
|
Edit
Delete
|
|
27075
|
fix(security): 移除权限白名单里的明文 GitHub 令牌
|
160
|
5
|
ci.yml
|
49
|
5
|
0
|
refs/heads/main
|
b88957e8c3e49bfbc82d3ba8294b531bb0206f64
|
0
|
0
|
0
|
push
|
{"ref":"refs/heads/main","befo {"ref":"refs/heads/main","before":"ecdb3d24afbca7b5499701f39379699724fd182d","after":"b88957e8c3e49bfbc82d3ba8294b531bb0206f64","compare_url":"https://gitea.g-hi.com/luoanwu/juhi-omni-knowledge-hub-eios/compare/ecdb3d24afbca7b5499701f39379699724fd182d...b88957e8c3e49bfbc82d3ba8294b531bb0206f64","commits":[{"id":"b88957e8c3e49bfbc82d3ba8294b531bb0206f64","message":"fix(security): 移除权限白名单里的明文 GitHub 令牌\n\n令牌已由用户吊销。删除 .claude/settings.json 中带该令牌的 4 条 curl 放行项，\n历史提交未改写。\n\nCo-Authored-By: Claude Opus 5.5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/juhi-omni-knowledge-hub-eios/commit/b88957e8c3e49bfbc82d3ba8294b531bb0206f64","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-11-05T00:06:41-08:00","added":[],"removed":[],"modified":[".claude/settings.json"]}],"total_commits":0,"head_commit":{"id":"b88957e8c3e49bfbc82d3ba8294b531bb0206f64","message":"fix(security): 移除权限白名单里的明文 GitHub 令牌\n\n令牌已由用户吊销。删除 .claude/settings.json 中带该令牌的 4 条 curl 放行项，\n历史提交未改写。\n\nCo-Authored-By: Claude Opus 5.5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/juhi-omni-knowledge-hub-eios/commit/b88957e8c3e49bfbc82d3ba8294b531bb0206f64","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-11-05T00:06:41-08:00","added":[],"removed":[],"modified":[".claude/settings.json"]},"repository":{"id":160,"owner":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"law@g-hi.com","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"name":"juhi-omni-knowledge-hub-eios","full_name":"luoanwu/juhi-omni-knowledge-hub-eios","description":"巨嗨全域智库 EIOS 化独立改造仓（由本地改造副本推送；原 luoanwu/juhi-omni-knowledge-hub 不动）","empty":false,"private":false,"fork":false,"template":false,"mirror":false,"size":2119108,"language":"","languages_url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/juhi-omni-knowledge-hub-eios/languages","html_url":"https://gitea.g-hi.com/luoanwu/juhi-omni-knowledge-hub-eios","url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/juhi-omni-knowledge-hub-eios","link":"","ssh_url":"git@gitea.g-hi.com:luoanwu/juhi-omni-knowledge-hub-eios.git","clone_url":"https://gitea.g-hi.com/luoanwu/juhi-omni-knowledge-hub-eios.git","original_url":"","website":"","stars_count":0,"forks_count":0,"watchers_count":1,"branch_count":1,"open_issues_count":0,"open_pr_counter":0,"release_counter":0,"default_branch":"main","archived":false,"created_at":"2026-10-30T09:22:23+08:00","updated_at":"2026-11-05T11:20:47+08:00","archived_at":"1970-01-01T08:00:00+08:00","permissions":{"admin":true,"push":true,"pull":true},"has_code":true,"has_issues":true,"internal_tracker":{"enable_time_tracker":true,"allow_only_contributors_to_track_time":true,"enable_issue_dependencies":true},"has_wiki":true,"has_pull_requests":true,"has_projects":true,"projects_mode":"all","has_releases":true,"has_packages":true,"has_actions":true,"ignore_whitespace_conflicts":false,"allow_merge_commits":true,"allow_rebase":true,"allow_rebase_explicit":true,"allow_squash_merge":true,"allow_fast_forward_only_merge":true,"allow_rebase_update":true,"allow_manual_merge":false,"autodetect_manual_merge":false,"default_delete_branch_after_merge":false,"default_merge_style":"merge","default_allow_maintainer_edit":true,"avatar_url":"","internal":false,"mirror_interval":"","object_format_name":"sha1","mirror_updated":"0001-01-01T00:00:00Z","topics":[],"licenses":[]},"pusher":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"sender":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"}}...
|
push
|
3
|
10
|
1793866062
|
1793866972
|
0
|
1793866062
|
1793866973
|
group: ci-${{ gitea.ref }}
cancel-in-progress: group: ci-${{ gitea.ref }}
cancel-in-progress: "true"
...
|
ci-refs/heads/main
|
1
|
Edit
Delete
|
|
27076
|
fix(security): 移除权限白名单里的钥匙串读取放行
|
160
|
5
|
ci.yml
|
50
|
5
|
0
|
refs/heads/main
|
c7ab46af2c055a60a59c8b16648dd9f916f36891
|
0
|
0
|
0
|
push
|
{"ref":"refs/heads/main","befo {"ref":"refs/heads/main","before":"b88957e8c3e49bfbc82d3ba8294b531bb0206f64","after":"c7ab46af2c055a60a59c8b16648dd9f916f36891","compare_url":"https://gitea.g-hi.com/luoanwu/juhi-omni-knowledge-hub-eios/compare/b88957e8c3e49bfbc82d3ba8294b531bb0206f64...c7ab46af2c055a60a59c8b16648dd9f916f36891","commits":[{"id":"c7ab46af2c055a60a59c8b16648dd9f916f36891","message":"fix(security): 移除权限白名单里的钥匙串读取放行\n\n删除 .claude/settings.json 中的 security find-internet-password 放行项，\n读取钥匙串密码须重新经用户确认。\n\nCo-Authored-By: Claude Opus 5.5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/juhi-omni-knowledge-hub-eios/commit/c7ab46af2c055a60a59c8b16648dd9f916f36891","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-11-05T00:22:48-08:00","added":[],"removed":[],"modified":[".claude/settings.json"]}],"total_commits":0,"head_commit":{"id":"c7ab46af2c055a60a59c8b16648dd9f916f36891","message":"fix(security): 移除权限白名单里的钥匙串读取放行\n\n删除 .claude/settings.json 中的 security find-internet-password 放行项，\n读取钥匙串密码须重新经用户确认。\n\nCo-Authored-By: Claude Opus 5.5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/juhi-omni-knowledge-hub-eios/commit/c7ab46af2c055a60a59c8b16648dd9f916f36891","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-11-05T00:22:48-08:00","added":[],"removed":[],"modified":[".claude/settings.json"]},"repository":{"id":160,"owner":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"law@g-hi.com","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"name":"juhi-omni-knowledge-hub-eios","full_name":"luoanwu/juhi-omni-knowledge-hub-eios","description":"巨嗨全域智库 EIOS 化独立改造仓（由本地改造副本推送；原 luoanwu/juhi-omni-knowledge-hub 不动）","empty":false,"private":false,"fork":false,"template":false,"mirror":false,"size":2119116,"language":"","languages_url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/juhi-omni-knowledge-hub-eios/languages","html_url":"https://gitea.g-hi.com/luoanwu/juhi-omni-knowledge-hub-eios","url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/juhi-omni-knowledge-hub-eios","link":"","ssh_url":"git@gitea.g-hi.com:luoanwu/juhi-omni-knowledge-hub-eios.git","clone_url":"https://gitea.g-hi.com/luoanwu/juhi-omni-knowledge-hub-eios.git","original_url":"","website":"","stars_count":0,"forks_count":0,"watchers_count":1,"branch_count":1,"open_issues_count":0,"open_pr_counter":0,"release_counter":0,"default_branch":"main","archived":false,"created_at":"2026-10-30T09:22:23+08:00","updated_at":"2026-11-05T16:07:42+08:00","archived_at":"1970-01-01T08:00:00+08:00","permissions":{"admin":true,"push":true,"pull":true},"has_code":true,"has_issues":true,"internal_tracker":{"enable_time_tracker":true,"allow_only_contributors_to_track_time":true,"enable_issue_dependencies":true},"has_wiki":true,"has_pull_requests":true,"has_projects":true,"projects_mode":"all","has_releases":true,"has_packages":true,"has_actions":true,"ignore_whitespace_conflicts":false,"allow_merge_commits":true,"allow_rebase":true,"allow_rebase_explicit":true,"allow_squash_merge":true,"allow_fast_forward_only_merge":true,"allow_rebase_update":true,"allow_manual_merge":false,"autodetect_manual_merge":false,"default_delete_branch_after_merge":false,"default_merge_style":"merge","default_allow_maintainer_edit":true,"avatar_url":"","internal":false,"mirror_interval":"","object_format_name":"sha1","mirror_updated":"0001-01-01T00:00:00Z","topics":[],"licenses":[]},"pusher":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"sender":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"}}...
|
push
|
2
|
20
|
1793866976
|
1793871085
|
0
|
1793866973
|
1793871085
|
group: ci-${{ gitea.ref }}
cancel-in-progress: group: ci-${{ gitea.ref }}
cancel-in-progress: "true"
...
|
ci-refs/heads/main
|
1
|
Edit
Delete
|