| event_payload |
{"ref":"refs/heads/main","befo {"ref":"refs/heads/main","before":"afce4b4aa5caf3aec9c43c3c42b78bc883fb4121","after":"f29f666abff0abbc473b0601069a043579679c68","compare_url":"https://gitea.g-hi.com/luoanwu/juhai-thing-cloud/compare/afce4b4aa5caf3aec9c43c3c42b78bc883fb4121...f29f666abff0abbc473b0601069a043579679c68","commits":[{"id":"f29f666abff0abbc473b0601069a043579679c68","message":"chore(evidence): record U2 realtime round-2 gates on 390c6f4\n\nNative latest reports from clean 390c6f4 (worktreeHash\nsha256:eb00120b04cef3e735f19adef064ffa395e67f9b5d35b6c42a27b9a111bc0cc2):\npnpm check exit 0 (ownTests 30, ownTestCases 174; test:scripts 113/113);\ncheck:device-boundaries exit 0; check:runtime exit 0 (164 passed, floor 143,\nRLS enforce, dedicated container DB device_cloud_rt1027run2 / Redis db5 on\nthing-rt-1027-*); UI_MATRIX=1 check:ui exit 0 (nestjs/ws 9, nestjs/sse 9,\nports 45722/45723); check:evidence exit 0; test:s3:rules 46/46. CLAUDE.md\nprogress rows now name clean 390c6f4 (acceptance-successor scope only).\n\nCo-Authored-By: Claude Opus 5.5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/juhai-thing-cloud/commit/f29f666abff0abbc473b0601069a043579679c68","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-10-28T00:05:08-07:00","added":[],"removed":[],"modified":["CLAUDE.md","reports/agent-adapters.latest.json","reports/ci-evidence.latest.json","reports/conformance-matrix.latest.json","reports/contract-consumers.latest.json","reports/device-boundaries.latest.json","reports/docs-truth.latest.json","reports/dual-backend-parity.latest.json","reports/evidence-current.latest.json","reports/fork-readiness.latest.json","reports/governance-docs.latest.json","reports/governance-kit.latest.json","reports/governance-rules.latest.json","reports/governance-status.latest.json","reports/governance.latest.json","reports/migrations.latest.json","reports/naming.latest.json","reports/runtime-acceptance.latest.json","reports/runtime-governance.latest.json","reports/schema-sync.latest.json","reports/statemachine-write-guard.latest.json","reports/ui-acceptance.latest.json","reports/validation-source.latest.json"]},{"id":"390c6f436aeca8ae1d397a3a23540edc31cc28bb","message":"test(realtime): close U2 realtime verifier findings RTV-F1..F4\n\n- RTV-F1: new case \"replay window\" — envelopes published via Redis while a\n WS replay is in flight (buffered path) are withheld from the revoked\n tenant and flushed after the replay tail. Mutation Ma (buffer flush\n sends directly) turns it red (2/2 runs).\n- RTV-F2: new case \"ordering under load\" — 90 interleaved tenant-owned and\n projection-judged events; WS and SSE, live and replay, assert seq equals\n the enqueue order (strictly increasing) and no duplicate envelope id.\n Mutations Me (SSE concatMap -\u003e mergeMap) and Mf (WS without the delivery\n chain) turn it red.\n- RTV-F3: docs/u2-realtime-scope.md states that live connections do not\n re-check token expiry or session revocation after the handshake\n (pre-existing behaviour); PM-A06 here only covers device events gated by\n the current projection.\n- RTV-F4: governance.registry.json (strengthen only) registers\n realtime.audience.test.ts, realtime.device-scope.acceptance.test.ts and\n device-v1b.revocation-read.acceptance.test.ts under device-v1a\n strip.files (v1a is stripped first; the fixtures call /api/device-v1a).\n Full strip simulation residue 9 -\u003e 3 (start afce4b4: 5; the remaining 3\n are pre-existing and unrelated).\n\nNo source change under apps/api-nestjs/src. Verified before commit:\nrealtime.device-scope 7/7, check:quick 14/14.\n\nCo-Authored-By: Claude Opus 5.5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/juhai-thing-cloud/commit/390c6f436aeca8ae1d397a3a23540edc31cc28bb","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-10-28T00:02:37-07:00","added":[],"removed":[],"modified":["CLAUDE.md","apps/api-nestjs/test/realtime.device-scope.acceptance.test.ts","docs/u2-realtime-scope.md","governance.registry.json"]},{"id":"f559a293bba1d96430c1e3703670f8a3fb4a90ba","message":"chore(evidence): record U2 realtime gates on ce2619a\n\nNative latest reports from clean ce2619a (worktreeHash\nsha256:5e054037958daef5a177c715fb73f207748f4d41fc06c1d3bed39df176325016):\npnpm check exit 0 (ownTests 30, ownTestCases 172; test:scripts 113/113);\ncheck:device-boundaries exit 0; check:runtime exit 0 (162 passed, floor 143,\nRLS enforce, dedicated container DB device_cloud_rt1027run / Redis db5 on\nthing-rt-1027-*); UI_MATRIX=1 check:ui exit 0 (nestjs/ws 9, nestjs/sse 9,\nports 45722/45723); check:evidence exit 0; test:s3:rules 46/46. CLAUDE.md\nprogress rows now name clean ce2619a (acceptance-successor scope only).\n\nCo-Authored-By: Claude Opus 5.5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/juhai-thing-cloud/commit/f559a293bba1d96430c1e3703670f8a3fb4a90ba","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-10-27T23:37:46-07:00","added":[],"removed":[],"modified":["CLAUDE.md","reports/agent-adapters.latest.json","reports/ci-evidence.latest.json","reports/conformance-matrix.latest.json","reports/contract-consumers.latest.json","reports/device-boundaries.latest.json","reports/docs-truth.latest.json","reports/dual-backend-parity.latest.json","reports/evidence-current.latest.json","reports/fork-readiness.latest.json","reports/governance-docs.latest.json","reports/governance-kit.latest.json","reports/governance-rules.latest.json","reports/governance-status.latest.json","reports/governance.latest.json","reports/migrations.latest.json","reports/naming.latest.json","reports/runtime-acceptance.latest.json","reports/runtime-governance.latest.json","reports/schema-sync.latest.json","reports/statemachine-write-guard.latest.json","reports/ui-acceptance.latest.json","reports/validation-source.latest.json"]},{"id":"ce2619af08ac73bcc20ac304c29201742d3dacf9","message":"fix(realtime): judge WS/SSE envelopes against the subscriber's current device projection (U2 realtime)\n\nU2 realtime slice (01 存量应用升级/物云.md \"U2 受权只读首片\" — U2 covered HTTP\nonly; 01 权限计划 PM-06 / PM-A05 / PM-A06):\n- New events/realtime-audience.ts: every contract event type is classified\n (connection / tenant / authority / device-projection). Non-authority\n subjects need a current TenantDeviceView for device-projection events\n (topology additionally needs topology:read); control-plane device events\n (lifecycle, activation, transfer, V1a, grant.revoked incl. reason) are\n authority-only; unclassified types are refused for non-authority subjects;\n lookup errors fail closed. Device rules sit inside the devices strip markers.\n- WS gateway: per-connection ordered delivery chain; replay, replay buffer\n and live push all pass the same gate right before send.\n- SSE: concatMap gate after concat(replay, live), order preserved; refused\n persisted events do not advance Last-Event-ID.\n- Tests: realtime.device-scope.acceptance.test.ts (5 cases, JWT, real\n outbox/dispatcher/Redis/WS/SSE): revoked tenant replay (WS+SSE), revocation\n during open connections incl. in-flight rows, cross-tenant misaddressed /\n id-subscribed / replay, observer gets no control-class or unclassified\n envelopes, transfer write chain; positives for granted tenant and authority.\n realtime.audience.test.ts (7 pure cases): classification guard over\n REALTIME_EVENT_TYPES and rule semantics.\n- Before fix on afce4b4: all 5 acceptance cases red on the delivery\n assertions (guard test: module missing).\n\nNo write-chain, contract, Prisma or migration change; no new command or\ndevice action; candidate directory stays default-closed. Revoked-party\nminimal notice and device-history lower bound (Grant validFrom) remain\nbusiness decisions (docs/u2-realtime-scope.md).\n\nVerified before commit: nestjs vitest 140 passed / 6 skipped (tenant.rls\nneeds provisioned roles; full gates rerun on the committed tree),\ncheck:quick 14/14.\n\nCo-Authored-By: Claude Opus 5.5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/juhai-thing-cloud/commit/ce2619af08ac73bcc20ac304c29201742d3dacf9","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-10-27T23:32:12-07:00","added":["apps/api-nestjs/src/events/realtime-audience.ts","apps/api-nestjs/test/realtime.audience.test.ts","apps/api-nestjs/test/realtime.device-scope.acceptance.test.ts","docs/u2-realtime-scope.md"],"removed":[],"modified":["CLAUDE.md","README.md","apps/api-nestjs/src/events/events.gateway.ts","apps/api-nestjs/src/events/events.module.ts","apps/api-nestjs/src/sse/sse.controller.ts","docs/domain/owner-matrix.md","docs/u2-authorized-read.md"]}],"total_commits":0,"head_commit":{"id":"f29f666abff0abbc473b0601069a043579679c68","message":"chore(evidence): record U2 realtime round-2 gates on 390c6f4\n\nNative latest reports from clean 390c6f4 (worktreeHash\nsha256:eb00120b04cef3e735f19adef064ffa395e67f9b5d35b6c42a27b9a111bc0cc2):\npnpm check exit 0 (ownTests 30, ownTestCases 174; test:scripts 113/113);\ncheck:device-boundaries exit 0; check:runtime exit 0 (164 passed, floor 143,\nRLS enforce, dedicated container DB device_cloud_rt1027run2 / Redis db5 on\nthing-rt-1027-*); UI_MATRIX=1 check:ui exit 0 (nestjs/ws 9, nestjs/sse 9,\nports 45722/45723); check:evidence exit 0; test:s3:rules 46/46. CLAUDE.md\nprogress rows now name clean 390c6f4 (acceptance-successor scope only).\n\nCo-Authored-By: Claude Opus 5.5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/juhai-thing-cloud/commit/f29f666abff0abbc473b0601069a043579679c68","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-10-28T00:05:08-07:00","added":[],"removed":[],"modified":["CLAUDE.md","reports/agent-adapters.latest.json","reports/ci-evidence.latest.json","reports/conformance-matrix.latest.json","reports/contract-consumers.latest.json","reports/device-boundaries.latest.json","reports/docs-truth.latest.json","reports/dual-backend-parity.latest.json","reports/evidence-current.latest.json","reports/fork-readiness.latest.json","reports/governance-docs.latest.json","reports/governance-kit.latest.json","reports/governance-rules.latest.json","reports/governance-status.latest.json","reports/governance.latest.json","reports/migrations.latest.json","reports/naming.latest.json","reports/runtime-acceptance.latest.json","reports/runtime-governance.latest.json","reports/schema-sync.latest.json","reports/statemachine-write-guard.latest.json","reports/ui-acceptance.latest.json","reports/validation-source.latest.json"]},"repository":{"id":135,"owner":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"law@g-hi.com","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"name":"juhai-thing-cloud","full_name":"luoanwu/juhai-thing-cloud","description":"物云：02「物」域应用，自设备云 juhai-device-cloud 4652ce0 分叉","empty":false,"private":false,"fork":false,"template":false,"mirror":false,"size":4644,"language":"","languages_url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/juhai-thing-cloud/languages","html_url":"https://gitea.g-hi.com/luoanwu/juhai-thing-cloud","url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/juhai-thing-cloud","link":"","ssh_url":"git@gitea.g-hi.com:luoanwu/juhai-thing-cloud.git","clone_url":"https://gitea.g-hi.com/luoanwu/juhai-thing-cloud.git","original_url":"","website":"","stars_count":0,"forks_count":0,"watchers_count":1,"branch_count":2,"open_issues_count":0,"open_pr_counter":0,"release_counter":0,"default_branch":"main","archived":false,"created_at":"2026-10-12T21:14:44+08:00","updated_at":"2026-10-28T09:28:45+08:00","archived_at":"1970-01-01T08:00:00+08:00","permissions":{"admin":true,"push":true,"pull":true},"has_code":true,"has_issues":true,"internal_tracker":{"enable_time_tracker":true,"allow_only_contributors_to_track_time":true,"enable_issue_dependencies":true},"has_wiki":true,"has_pull_requests":true,"has_projects":true,"projects_mode":"all","has_releases":true,"has_packages":true,"has_actions":true,"ignore_whitespace_conflicts":false,"allow_merge_commits":true,"allow_rebase":true,"allow_rebase_explicit":true,"allow_squash_merge":true,"allow_fast_forward_only_merge":true,"allow_rebase_update":true,"allow_manual_merge":false,"autodetect_manual_merge":false,"default_delete_branch_after_merge":false,"default_merge_style":"merge","default_allow_maintainer_edit":true,"avatar_url":"","internal":false,"mirror_interval":"","object_format_name":"sha1","mirror_updated":"0001-01-01T00:00:00Z","topics":[],"licenses":[]},"pusher":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"sender":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"}}... |