| event_payload |
{"ref":"refs/heads/main","befo {"ref":"refs/heads/main","before":"019f721377c4a8970dfc4064886129b1cbcbd089","after":"c48ff8853fb96ecd420890a0e933711dc5fa6a1e","compare_url":"https://gitea.g-hi.com/luoanwu/digital-employee-os/compare/019f721377c4a8970dfc4064886129b1cbcbd089...c48ff8853fb96ecd420890a0e933711dc5fa6a1e","commits":[{"id":"c48ff8853fb96ecd420890a0e933711dc5fa6a1e","message":"feat(governance): C242 租户级目录分页收口 G24① + check:list-bounds 门禁；C243 观测镜像 CVE 钉版；C244 runtime 复验自锁修复\n\nC242（G24①）\n- 双后端 10 个目录端点统一 contracts 分页信封：conversations/attachments/RAG sources/roles/permissions/skills/skills.catalog/triggers/tools.catalog/tools.assignments；callback tx 内 count+page，排序补 id 决胜键，Fastify 400 先于 403\n- 技能目录按技能名分页，任务/触发器/成长指标改为数据库 GROUP BY 只带回页内技能；contracts 新增 buildSkillCatalogPage/aggregateSkillFacts（原始行路径单测锁定逐字相等），expand-only 升 1.14.0 并重建包锁/下游锁/接入手册锁行\n- tools 目录按页内定义 id 集合取版本/激活/计数；Web 八个 fetcher 与 getRoleAssignments/getSkills 改走 requestAllPages\n- 新增 scripts/check-list-bounds.mjs：租户级 findMany 无 take 即红，身份键 in:/父级外键不在范围，// list-bound-allow 留痕（4 处：事件评估热路径、团队基准投影）；8 个负向探针自证；接入 check-all/governance/baseline 棘轮\n- 双后端各新增 list-bounds.acceptance（105 行续页无重复、越界 400、目录信封、分组指标与详情一致）；tests 692、own-test-cases 699\n\nC243\n- Loki/Tempo 在精确 release commit 上 go get x/crypto@v0.55.0 grpc@v1.83.2 并重新 vendor（modules.txt 断言）；OTel builder manifest replaces 钉版\n- 本机 Docker 经离线系统代理无法拉取基础镜像，本地构建与 runner 复验未完成，以远端 CI 构建/扫描为准；Alertmanager/Prometheus 待上游发布，扫描继续诚实红并登记 G23④\n\nC244\n- runtime runner 的 docs-truth 复验移到本轮 canonical 报告写下之后执行（原作为 plan 末步读到的是上一轮报告，一次 failed 后每轮自锁）\n\n发布状态快照/ci-gate/G14 三处同源更新（锚点 019f721），证据新鲜度三行对齐本轮报告；报告绑定 dirty 指纹 7cfa37d6\n\nCo-Authored-By: Claude Fable 5.1 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/digital-employee-os/commit/c48ff8853fb96ecd420890a0e933711dc5fa6a1e","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-02T10:31:55-07:00","added":["apps/api-fastify/test/list-bounds.acceptance.test.ts","apps/api-nestjs/test/list-bounds.acceptance.test.ts","reports/list-bounds.latest.json","scripts/check-list-bounds.mjs"],"removed":[],"modified":["CLAUDE.md","apps/api-fastify/src/modules/actors.ts","apps/api-fastify/src/modules/attachment.service.ts","apps/api-fastify/src/modules/conversation.service.ts","apps/api-fastify/src/modules/permissions.service.ts","apps/api-fastify/src/modules/rag.service.ts","apps/api-fastify/src/modules/roles.service.ts","apps/api-fastify/src/modules/tools.service.ts","apps/api-fastify/src/modules/triggers.service.ts","apps/api-fastify/src/modules/work/skills.service.ts","apps/api-fastify/src/routes/attachments.ts","apps/api-fastify/src/routes/conversations.ts","apps/api-fastify/src/routes/permissions.ts","apps/api-fastify/src/routes/rag.ts","apps/api-fastify/src/routes/roles.ts","apps/api-fastify/src/routes/skills.ts","apps/api-fastify/src/routes/tools.ts","apps/api-fastify/src/routes/triggers.ts","apps/api-fastify/test/auth.roles.acceptance.test.ts","apps/api-fastify/test/work.integration.test.ts","apps/api-nestjs/src/actors/actors.service.ts","apps/api-nestjs/src/llm-governance/attachment.controller.ts","apps/api-nestjs/src/llm-governance/attachment.service.ts","apps/api-nestjs/src/llm-governance/conversation.controller.ts","apps/api-nestjs/src/llm-governance/conversation.service.ts","apps/api-nestjs/src/llm-governance/rag.controller.ts","apps/api-nestjs/src/llm-governance/rag.service.ts","apps/api-nestjs/src/permissions/permissions.controller.ts","apps/api-nestjs/src/permissions/permissions.service.ts","apps/api-nestjs/src/roles/roles.controller.ts","apps/api-nestjs/src/roles/roles.service.ts","apps/api-nestjs/src/tools/tools.controller.ts","apps/api-nestjs/src/tools/tools.service.ts","apps/api-nestjs/src/triggers/trigger-engine.service.ts","apps/api-nestjs/src/triggers/triggers.controller.ts","apps/api-nestjs/src/triggers/triggers.service.ts","apps/api-nestjs/src/work/skills.controller.ts","apps/api-nestjs/src/work/skills.service.ts","apps/api-nestjs/test/auth.roles.acceptance.test.ts","apps/api-nestjs/test/work.integration.test.ts","apps/web/src/features/attachments/api/attachment-api.ts","apps/web/src/features/conversations/api/conversation-api.ts","apps/web/src/features/permissions/api/permissions-api.ts","apps/web/src/features/rag/api/rag-api.ts","apps/web/src/features/skills/api/skills-api.ts","apps/web/src/features/tools/api/tools-api.ts","apps/web/src/features/triggers/api/triggers-api.ts","apps/web/src/lib/api.ts","deploy/production/Dockerfile","deploy/production/otel-collector-builder.yml","docs/governance-experience.md","docs/product-extension-guide.md","kernel.downstream.lock.json","kernel.packages.json","kernel.packages.lock.json","package.json","packages/contracts/package.json","packages/contracts/src/skill.test.ts","packages/contracts/src/skill.ts","reports/agent-adapters.latest.json","reports/auth-startup.latest.json","reports/baseline.json","reports/capacity-envelope.latest.json","reports/contract-consumers.latest.json","reports/db-credential-separation.latest.json","reports/dependency-resilience.latest.json","reports/docs-truth.latest.json","reports/dual-backend-behavior.latest.json","reports/dual-backend-parity.latest.json","reports/fork-readiness.latest.json","reports/governance-docs.latest.json","reports/governance.latest.json","reports/kernel-boundaries.latest.json","reports/kernel-downstream.latest.json","reports/kernel-extensions.latest.json","reports/kernel-packages.latest.json","reports/llm-eval.latest.json","reports/migrations.latest.json","reports/mobile-export.latest.json","reports/multi-instance.latest.json","reports/naming.latest.json","reports/operations.latest.json","reports/product-acceptance-runtime.latest.json","reports/product-acceptance.latest.json","reports/product-extension-runtime.latest.json","reports/product-migrations-runtime.latest.json","reports/product-migrations.latest.json","reports/product-sql-runtime.latest.json","reports/report-transaction-lock.latest.json","reports/rls.latest.json","reports/runtime-acceptance.latest.json","reports/runtime-governance.latest.json","reports/schema-sync.latest.json","reports/statemachine-write-guard.latest.json","reports/tracing.latest.json","reports/ui-acceptance.latest.json","reports/ui-fastify-acceptance.latest.json","reports/ui-nestjs-acceptance.latest.json","reports/validation-source.latest.json","reports/write-capacity.latest.json","scripts/check-all.mjs","scripts/check-runtime-acceptance.mjs","scripts/governance-report.mjs"]}],"total_commits":0,"head_commit":{"id":"c48ff8853fb96ecd420890a0e933711dc5fa6a1e","message":"feat(governance): C242 租户级目录分页收口 G24① + check:list-bounds 门禁；C243 观测镜像 CVE 钉版；C244 runtime 复验自锁修复\n\nC242（G24①）\n- 双后端 10 个目录端点统一 contracts 分页信封：conversations/attachments/RAG sources/roles/permissions/skills/skills.catalog/triggers/tools.catalog/tools.assignments；callback tx 内 count+page，排序补 id 决胜键，Fastify 400 先于 403\n- 技能目录按技能名分页，任务/触发器/成长指标改为数据库 GROUP BY 只带回页内技能；contracts 新增 buildSkillCatalogPage/aggregateSkillFacts（原始行路径单测锁定逐字相等），expand-only 升 1.14.0 并重建包锁/下游锁/接入手册锁行\n- tools 目录按页内定义 id 集合取版本/激活/计数；Web 八个 fetcher 与 getRoleAssignments/getSkills 改走 requestAllPages\n- 新增 scripts/check-list-bounds.mjs：租户级 findMany 无 take 即红，身份键 in:/父级外键不在范围，// list-bound-allow 留痕（4 处：事件评估热路径、团队基准投影）；8 个负向探针自证；接入 check-all/governance/baseline 棘轮\n- 双后端各新增 list-bounds.acceptance（105 行续页无重复、越界 400、目录信封、分组指标与详情一致）；tests 692、own-test-cases 699\n\nC243\n- Loki/Tempo 在精确 release commit 上 go get x/crypto@v0.55.0 grpc@v1.83.2 并重新 vendor（modules.txt 断言）；OTel builder manifest replaces 钉版\n- 本机 Docker 经离线系统代理无法拉取基础镜像，本地构建与 runner 复验未完成，以远端 CI 构建/扫描为准；Alertmanager/Prometheus 待上游发布，扫描继续诚实红并登记 G23④\n\nC244\n- runtime runner 的 docs-truth 复验移到本轮 canonical 报告写下之后执行（原作为 plan 末步读到的是上一轮报告，一次 failed 后每轮自锁）\n\n发布状态快照/ci-gate/G14 三处同源更新（锚点 019f721），证据新鲜度三行对齐本轮报告；报告绑定 dirty 指纹 7cfa37d6\n\nCo-Authored-By: Claude Fable 5.1 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/digital-employee-os/commit/c48ff8853fb96ecd420890a0e933711dc5fa6a1e","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-02T10:31:55-07:00","added":["apps/api-fastify/test/list-bounds.acceptance.test.ts","apps/api-nestjs/test/list-bounds.acceptance.test.ts","reports/list-bounds.latest.json","scripts/check-list-bounds.mjs"],"removed":[],"modified":["CLAUDE.md","apps/api-fastify/src/modules/actors.ts","apps/api-fastify/src/modules/attachment.service.ts","apps/api-fastify/src/modules/conversation.service.ts","apps/api-fastify/src/modules/permissions.service.ts","apps/api-fastify/src/modules/rag.service.ts","apps/api-fastify/src/modules/roles.service.ts","apps/api-fastify/src/modules/tools.service.ts","apps/api-fastify/src/modules/triggers.service.ts","apps/api-fastify/src/modules/work/skills.service.ts","apps/api-fastify/src/routes/attachments.ts","apps/api-fastify/src/routes/conversations.ts","apps/api-fastify/src/routes/permissions.ts","apps/api-fastify/src/routes/rag.ts","apps/api-fastify/src/routes/roles.ts","apps/api-fastify/src/routes/skills.ts","apps/api-fastify/src/routes/tools.ts","apps/api-fastify/src/routes/triggers.ts","apps/api-fastify/test/auth.roles.acceptance.test.ts","apps/api-fastify/test/work.integration.test.ts","apps/api-nestjs/src/actors/actors.service.ts","apps/api-nestjs/src/llm-governance/attachment.controller.ts","apps/api-nestjs/src/llm-governance/attachment.service.ts","apps/api-nestjs/src/llm-governance/conversation.controller.ts","apps/api-nestjs/src/llm-governance/conversation.service.ts","apps/api-nestjs/src/llm-governance/rag.controller.ts","apps/api-nestjs/src/llm-governance/rag.service.ts","apps/api-nestjs/src/permissions/permissions.controller.ts","apps/api-nestjs/src/permissions/permissions.service.ts","apps/api-nestjs/src/roles/roles.controller.ts","apps/api-nestjs/src/roles/roles.service.ts","apps/api-nestjs/src/tools/tools.controller.ts","apps/api-nestjs/src/tools/tools.service.ts","apps/api-nestjs/src/triggers/trigger-engine.service.ts","apps/api-nestjs/src/triggers/triggers.controller.ts","apps/api-nestjs/src/triggers/triggers.service.ts","apps/api-nestjs/src/work/skills.controller.ts","apps/api-nestjs/src/work/skills.service.ts","apps/api-nestjs/test/auth.roles.acceptance.test.ts","apps/api-nestjs/test/work.integration.test.ts","apps/web/src/features/attachments/api/attachment-api.ts","apps/web/src/features/conversations/api/conversation-api.ts","apps/web/src/features/permissions/api/permissions-api.ts","apps/web/src/features/rag/api/rag-api.ts","apps/web/src/features/skills/api/skills-api.ts","apps/web/src/features/tools/api/tools-api.ts","apps/web/src/features/triggers/api/triggers-api.ts","apps/web/src/lib/api.ts","deploy/production/Dockerfile","deploy/production/otel-collector-builder.yml","docs/governance-experience.md","docs/product-extension-guide.md","kernel.downstream.lock.json","kernel.packages.json","kernel.packages.lock.json","package.json","packages/contracts/package.json","packages/contracts/src/skill.test.ts","packages/contracts/src/skill.ts","reports/agent-adapters.latest.json","reports/auth-startup.latest.json","reports/baseline.json","reports/capacity-envelope.latest.json","reports/contract-consumers.latest.json","reports/db-credential-separation.latest.json","reports/dependency-resilience.latest.json","reports/docs-truth.latest.json","reports/dual-backend-behavior.latest.json","reports/dual-backend-parity.latest.json","reports/fork-readiness.latest.json","reports/governance-docs.latest.json","reports/governance.latest.json","reports/kernel-boundaries.latest.json","reports/kernel-downstream.latest.json","reports/kernel-extensions.latest.json","reports/kernel-packages.latest.json","reports/llm-eval.latest.json","reports/migrations.latest.json","reports/mobile-export.latest.json","reports/multi-instance.latest.json","reports/naming.latest.json","reports/operations.latest.json","reports/product-acceptance-runtime.latest.json","reports/product-acceptance.latest.json","reports/product-extension-runtime.latest.json","reports/product-migrations-runtime.latest.json","reports/product-migrations.latest.json","reports/product-sql-runtime.latest.json","reports/report-transaction-lock.latest.json","reports/rls.latest.json","reports/runtime-acceptance.latest.json","reports/runtime-governance.latest.json","reports/schema-sync.latest.json","reports/statemachine-write-guard.latest.json","reports/tracing.latest.json","reports/ui-acceptance.latest.json","reports/ui-fastify-acceptance.latest.json","reports/ui-nestjs-acceptance.latest.json","reports/validation-source.latest.json","reports/write-capacity.latest.json","scripts/check-all.mjs","scripts/check-runtime-acceptance.mjs","scripts/governance-report.mjs"]},"repository":{"id":76,"owner":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"law@g-hi.com","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"name":"digital-employee-os","full_name":"luoanwu/digital-employee-os","description":"","empty":false,"private":false,"fork":false,"template":false,"mirror":false,"size":78546,"language":"","languages_url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/digital-employee-os/languages","html_url":"https://gitea.g-hi.com/luoanwu/digital-employee-os","url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/digital-employee-os","link":"","ssh_url":"git@gitea.g-hi.com:luoanwu/digital-employee-os.git","clone_url":"https://gitea.g-hi.com/luoanwu/digital-employee-os.git","original_url":"","website":"","stars_count":0,"forks_count":1,"watchers_count":1,"branch_count":2,"open_issues_count":0,"open_pr_counter":0,"release_counter":0,"default_branch":"main","archived":false,"created_at":"2026-08-20T14:46:28+08:00","updated_at":"2026-09-02T23:06:34+08:00","archived_at":"1970-01-01T08:00:00+08:00","permissions":{"admin":true,"push":true,"pull":true},"has_code":true,"has_issues":true,"internal_tracker":{"enable_time_tracker":true,"allow_only_contributors_to_track_time":true,"enable_issue_dependencies":true},"has_wiki":true,"has_pull_requests":true,"has_projects":true,"projects_mode":"all","has_releases":true,"has_packages":true,"has_actions":true,"ignore_whitespace_conflicts":false,"allow_merge_commits":true,"allow_rebase":true,"allow_rebase_explicit":true,"allow_squash_merge":true,"allow_fast_forward_only_merge":true,"allow_rebase_update":true,"allow_manual_merge":false,"autodetect_manual_merge":false,"default_delete_branch_after_merge":false,"default_merge_style":"merge","default_allow_maintainer_edit":true,"avatar_url":"","internal":false,"mirror_interval":"","object_format_name":"sha1","mirror_updated":"0001-01-01T00:00:00Z","topics":[],"licenses":[]},"pusher":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"sender":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"}}... |