| event_payload |
{"ref":"refs/heads/main","befo {"ref":"refs/heads/main","before":"3baec4ad9f8c27a94f514af7e4e340c1c763b923","after":"eb275b10c470d5db1907473c40e6c831d1e7a1c6","compare_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/compare/3baec4ad9f8c27a94f514af7e4e340c1c763b923...eb275b10c470d5db1907473c40e6c831d1e7a1c6","commits":[{"id":"eb275b10c470d5db1907473c40e6c831d1e7a1c6","message":"feat(治理): check:fact-pii 进 @juhai/governance 包——并补上让它在消费者仓真能跑的两处\n\n把 check-fact-pii.mjs 与 fact-pii-rules.json 加进包的 files、在 bin/cli.mjs 注册\ncheck:fact-pii 子命令。但**只加 files 是个摆设**，装到消费者仓会是个永远扫到 0 个 Fact、\n永远 exit 0 的门禁——它原先硬编码扫 contracts/schemas/facts，还硬读仓内的\ngovernance/fact-pii-rules.json。两处都补了：\n\n --dir \u003c目录\u003e… 指定 Fact schema 目录（可重复），缺省仍是本仓那两处。消费者的 Fact\n 定义不在 contracts/schemas/facts，指不过去这道门禁就没有判据对象。\n 判据回落 仓内 governance/fact-pii-rules.json 优先，缺失则用包自带的那份。\n 消费者仓没有 governance/ 目录，硬读仓内路径会让门禁在他们那儿直接崩。\n 要收紧就在自己仓里放一份同名文件覆盖。\n\n一个 Fact 都没扫到时打警告而不是静默通过——多半是目录指错了，不是「真的没有 Fact」。\n报告里记下 scanDirs 与 rulesSource，事后能看出这次扫的是哪儿、判据是谁的。\n\n消费者场景端到端验过（临时目录，无 governance/、Fact 放在 domain/facts/）：\n juhai-governance check:fact-pii --root \u003cdir\u003e --dir domain/facts\n → 抓到 buyer_phone、exit 1；报告 rulesSource=bundled、scanDirs=[\"domain/facts\"]\n → 不给 --dir 时明确警告「未找到任何 Fact schema」\n本仓行为不变：21 个 Fact / 116 字段 / 0 违规，rulesSource=repo。测试 8 → 10 例。\n\nREADME 两处同步（判据表 + check 链顺序）——它随包发布，说明必须与实现一致。\n\n**时间差要知道：rc.5 昨天刚发，这些进不了 rc.5。** 包里现在这道门禁的代码要等下一个 RC\n才出得去；在那之前消费者拿到的 @juhai/governance@1.0.0-rc.5 仍不含 fact-pii。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/eb275b10c470d5db1907473c40e6c831d1e7a1c6","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-18T16:54:59-07:00","added":[],"removed":[],"modified":["governance/README.md","governance/bin/cli.mjs","governance/check-fact-pii.mjs","governance/package.json","governance/test/check-fact-pii.test.mjs"]},{"id":"475704b56896c09a0408e1e95a87d9a9994b0667","message":"test(contracts): 跨域流程接上 refresh——10 处未接线的第 1 处，也是我自己那轮留下的\n\ngovernance/fixture-coverage.mjs 加上结构比对后第一轮就报出 LocalWorkflowPlanner.refresh() 未接线：\nplanner 三个公开方法里只有 plan 有规则，「版本必须前进」「坏候选保留 last-known-good」两条纪律\n此前只有单测看着。这是我 13c7eb7 那轮留下的口子。\n\n顺带把 plan 的判据从 `\"reasons\" in r` 改为按 kind。今天 WorkflowPlannerResult 只有 PLAN / REJECT\n两支、行为逐字不变，但按字段存在与否判放行意味着将来加一个不带 reasons 的非放行出口就会被静默放过\n——注册中心的 BLOCKED 正是这么漏的。\n\n接上规则后覆盖度先变差，这是预期的：refresh 那一面第一次被变异探针走到，立刻冒出 4 条「夹具与单测\n都没有」（WORKFLOW_ID_REQUIRED / WORKFLOW_DOMAINS_REQUIRED / WORKFLOW_TENANTS_REQUIRED /\nWORKFLOW_REVISION_REQUIRED）与 1 条「仅单测」（WORKFLOW_VERSION_INVALID），逐条钉完回到 0。\n\n覆盖：夹具 18 → 28 例（正 3 / 反 25），规则数 3 → 4；该套件三档（都没有 / 仅单测 / 未接线）均为 0。\n判定逻辑一行未改，只动评估器与夹具。\n\n剩余 9 处未接线全在运行时模块侧（ai-gateway 2 / permission 3 / audit / credential / fact / scope 各 1），\n每个 planner 300—734 行、各自要造一份合法快照，按模块逐个收。\n\n证据：node --test contracts/test/*.test.mjs 408/408、该套件夹具 28/28 失败 0、fixture-coverage 三档全 0。\n负向实测：把 N20（通配租户那条）的声明改成 WORKFLOW_VERSION_NOT_FORWARD → 门禁 exit 1 并点名该例，\n还原后 exit 0。本次不回绑任何 reports/。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/475704b56896c09a0408e1e95a87d9a9994b0667","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-18T16:54:50-07:00","added":[],"removed":[],"modified":["contracts/SOURCE.md","contracts/src/domain/cross-domain-workflow/fixture-evaluator.ts","contracts/test/fixtures/cross-domain-workflow.fixtures.json"]}],"total_commits":0,"head_commit":{"id":"eb275b10c470d5db1907473c40e6c831d1e7a1c6","message":"feat(治理): check:fact-pii 进 @juhai/governance 包——并补上让它在消费者仓真能跑的两处\n\n把 check-fact-pii.mjs 与 fact-pii-rules.json 加进包的 files、在 bin/cli.mjs 注册\ncheck:fact-pii 子命令。但**只加 files 是个摆设**，装到消费者仓会是个永远扫到 0 个 Fact、\n永远 exit 0 的门禁——它原先硬编码扫 contracts/schemas/facts，还硬读仓内的\ngovernance/fact-pii-rules.json。两处都补了：\n\n --dir \u003c目录\u003e… 指定 Fact schema 目录（可重复），缺省仍是本仓那两处。消费者的 Fact\n 定义不在 contracts/schemas/facts，指不过去这道门禁就没有判据对象。\n 判据回落 仓内 governance/fact-pii-rules.json 优先，缺失则用包自带的那份。\n 消费者仓没有 governance/ 目录，硬读仓内路径会让门禁在他们那儿直接崩。\n 要收紧就在自己仓里放一份同名文件覆盖。\n\n一个 Fact 都没扫到时打警告而不是静默通过——多半是目录指错了，不是「真的没有 Fact」。\n报告里记下 scanDirs 与 rulesSource，事后能看出这次扫的是哪儿、判据是谁的。\n\n消费者场景端到端验过（临时目录，无 governance/、Fact 放在 domain/facts/）：\n juhai-governance check:fact-pii --root \u003cdir\u003e --dir domain/facts\n → 抓到 buyer_phone、exit 1；报告 rulesSource=bundled、scanDirs=[\"domain/facts\"]\n → 不给 --dir 时明确警告「未找到任何 Fact schema」\n本仓行为不变：21 个 Fact / 116 字段 / 0 违规，rulesSource=repo。测试 8 → 10 例。\n\nREADME 两处同步（判据表 + check 链顺序）——它随包发布，说明必须与实现一致。\n\n**时间差要知道：rc.5 昨天刚发，这些进不了 rc.5。** 包里现在这道门禁的代码要等下一个 RC\n才出得去；在那之前消费者拿到的 @juhai/governance@1.0.0-rc.5 仍不含 fact-pii。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/eb275b10c470d5db1907473c40e6c831d1e7a1c6","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-18T16:54:59-07:00","added":[],"removed":[],"modified":["governance/README.md","governance/bin/cli.mjs","governance/check-fact-pii.mjs","governance/package.json","governance/test/check-fact-pii.test.mjs"]},"repository":{"id":116,"owner":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"law@g-hi.com","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"name":"enterprise-platform","full_name":"luoanwu/enterprise-platform","description":"","empty":false,"private":false,"fork":false,"template":false,"mirror":false,"size":21388,"language":"","languages_url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform/languages","html_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform","url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform","link":"","ssh_url":"git@gitea.g-hi.com:luoanwu/enterprise-platform.git","clone_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform.git","original_url":"","website":"","stars_count":0,"forks_count":0,"watchers_count":1,"branch_count":44,"open_issues_count":0,"open_pr_counter":0,"release_counter":0,"default_branch":"main","archived":false,"created_at":"2026-09-11T07:33:25+08:00","updated_at":"2026-09-19T07:54:03+08:00","archived_at":"1970-01-01T08:00:00+08:00","permissions":{"admin":true,"push":true,"pull":true},"has_code":true,"has_issues":true,"internal_tracker":{"enable_time_tracker":true,"allow_only_contributors_to_track_time":true,"enable_issue_dependencies":true},"has_wiki":true,"has_pull_requests":true,"has_projects":true,"projects_mode":"all","has_releases":true,"has_packages":true,"has_actions":true,"ignore_whitespace_conflicts":false,"allow_merge_commits":true,"allow_rebase":true,"allow_rebase_explicit":true,"allow_squash_merge":true,"allow_fast_forward_only_merge":true,"allow_rebase_update":true,"allow_manual_merge":false,"autodetect_manual_merge":false,"default_delete_branch_after_merge":false,"default_merge_style":"merge","default_allow_maintainer_edit":true,"avatar_url":"","internal":false,"mirror_interval":"","object_format_name":"sha1","mirror_updated":"0001-01-01T00:00:00Z","topics":[],"licenses":[]},"pusher":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"sender":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"}}... |