lanrtop
0bf5bd6994
docs(blueprint/agent-client-parity): 立卡 P8 一键接入
...
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-01 12:58:09 +09:00
lanrtop
0c40e1a5c9
fix(mcp/parity): 对抗审查 9 项修复——控制面保留全局、DSH 改登记白名单
...
- 控制面项目（context.json mcp_scope=global，炼境自身已声明）不写 Claude local 条目、
不入 DSH 白名单，避免遮蔽全局注册与跨项目工具（审查 high）
- DSH 托管块内嵌炼境登记的「项目根目录→project_id」白名单，不再以任意目录里的
context.json 作为取 token 依据；LOCALAPPDATA/SystemRoot 须为绝对路径
- remove_project_mcp 同步清理 Claude local 条目并剔除 DSH 白名单；SSE 消息路由复核登记
- Claude local 只替换炼境托管条目，手写不覆盖，替换失败回滚；改走 silent_cmd 并移至后台线程
- 手写 DSH 条目改用 serde_yaml 检测（引号/注释/流式写法），无法解析时保守拒绝
- shim 中 exe 路径的 % 转义为 %%；注入日志 context 统一为 JSON，诊断查询防御非 JSON 行
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-01 11:48:41 +09:00
lanrtop
9a1635a225
docs(blueprint/agent-client-parity): P1 进行中
...
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-01 10:43:58 +09:00
lanrtop
ebf43d71c0
feat(mcp/parity): 三端经稳定 helper 入口连项目专用地址
...
- P3：炼境启动写 %LOCALAPPDATA%\lian-jing\bin\lianjing-mcp-header.cmd 指向当前 exe；
Codex 项目配置改为引用该入口，不再写本机 exe 绝对路径；verify_onboarding 对旧写法报可升级
- P1：inject_mcp 以 local scope 为 Claude 注册项目专用地址 + headersHelper（不进仓库）；
DSH 机器级补丁写托管块，!!js 按启动目录选项目地址并经 cmd 调用同一入口，项目外回退全局
- 服务端：scoped route 拒绝未登记的 project_id（404，数据库不可用同样拒绝）
Feature-Confirmed: true
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-01 10:40:08 +09:00
lanrtop
5d15520e73
docs(blueprint/agent-client-parity): 定位为 agent 客户端兼容层，立卡 P6/P7
...
Push & PR Check / check (push) Successful in 1m3s
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-01 09:53:48 +09:00
lanrtop
f4e75dc91f
feat(onboarding): lian-jing skill 双投影到 Claude，接入包升至 1.6.0
...
Push & PR Check / check (push) Successful in 1m4s
- 同一模板同时写 .agents/skills（Codex、DSH）与 .claude/skills（Claude Code）
- verify_onboarding 新增「Claude 炼境技能已分发」检查
- skill 降级步骤改为三端通用，提示无开发变量工具即连的是全局地址
- capability-packs supported_clients 增加 dsh
Feature-Confirmed: true
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-01 09:11:32 +09:00
lanrtop
8babc545c3
docs(blueprint/agent-client-parity): H2/H4 零凭据实测成立，三端可共用 shim
...
Push & PR Check / check (push) Successful in 1m33s
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-01 08:58:27 +09:00
lanrtop
bbdc98b93f
docs(blueprint/agent-client-parity): 记录 H1–H4 实测与对抗复核结果
...
Push & PR Check / check (push) Successful in 1m14s
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-09-30 22:03:02 +09:00
lanrtop
d1e75d2270
docs(blueprint): 新建 agent-client-parity 模块，记录三端无头基线
...
Push & PR Check / check (push) Successful in 1m26s
- 三端（Claude Code / Codex / DSH 桌面版）同一只读任务的 A–F 矩阵作为基线证据
- 立 P1–P5：统一项目专用地址、Claude skill 投影、稳定 helper 入口、
探针固化、落地兜底；原 V17/V18 迁入 P1/P3
- manifest 项目描述同步为「管家」定位
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-09-30 19:12:03 +09:00
lanrtop
487ea86806
docs(blueprint/dev-variables): V17+V18 合并设计——稳定 helper 入口与各客户端认证
...
Push & PR Check / check (push) Successful in 1m4s
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-09-30 16:34:30 +09:00
lanrtop
9aa70eefd9
docs(blueprint/dev-variables): 记录 Enterprise 真实分发与取值证据，立卡 V14–V18
...
Push & PR Check / check (push) Successful in 1m4s
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-09-30 15:22:45 +09:00
6105c3d4a3
Merge pull request 'feat(dev-variables): 项目开发变量与测试账户补给（V1–V11）' ( #23 ) from feat/project-dev-variables into master
Push & PR Check / check (push) Successful in 1m7s
2026-09-30 13:35:23 +08:00
lanrtop
57062d6053
docs(blueprint/dev-variables): 记录两轮 UI 终验结论
...
Push & PR Check / check (push) Successful in 1m28s
Push & PR Check / check (pull_request) Successful in 1m4s
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-09-30 14:31:33 +09:00
lanrtop
663a723b3b
feat(dev-variables): 修改时显式查看原值，并提示 agent 先查炼境测试账户
...
Push & PR Check / check (push) Successful in 1m5s
Push & PR Check / check (pull_request) Successful in 1m9s
- V12：新增人用 Tauri command reveal_project_dev_variable（不进 MCP），
点「修改」预填原账号与密码，密码默认遮罩可切换显示
- V13：lian-jing skill 新增第 8 步——需要测试账号先 list/read，
没有则登记并请用户在 UI 填写；禁止对话索要明文；base-onboarding 升至 1.5.0
- 契约同步 project-context.yaml；materialize 提案顺延为 V14–V16
Feature-Confirmed: true
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-09-30 14:22:54 +09:00
lanrtop
f74fe11145
fix(ui): 确认框在 Tauri 下被绕过——改用 await plugin-dialog confirm
...
tauri-plugin-dialog 把 window.confirm 替换为 async 函数，同步判断拿到恒为真的
Promise，撤销测试账户、删除 Gitea 实例/解绑仓库、删除仓库、准备工具链 5 处
破坏性或改机器状态的操作均未弹框即执行（UI 终验发现）。统一 await
@tauri-apps/plugin-dialog 的 confirm，并加源码扫描回归测试防复发。
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-09-30 13:48:54 +09:00
lanrtop
9211883a9b
test(dev-variables/mcp): 以隔离宿主完成 V7 真实 Codex 跨会话试点
...
Push & PR Check / check (push) Successful in 1m7s
Push & PR Check / check (pull_request) Successful in 1m5s
新增 ignored 宿主 isolated_dev_variables_client_pilot：内存 DB + 随机合成账户 +
临时 scoped MCP，认证走真实 helper。真实 Codex CLI 三会话完成登记→代填→跨会话
读取→撤销后读取失败，宿主断言目录无 .env/token/密码且凭据清理。
Rules-Applied: R03,R05,R10,R13
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-09-30 12:42:44 +09:00
lanrtop
4a6fbf9863
chore(merge): 合入 master 的管家定位与设计简报
...
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-09-30 12:04:40 +09:00
lanrtop
8f3be6b948
docs(blueprint): 回收 9-23 草稿有效部分并落定管家方向设计简报
...
Push & PR Check / check (push) Successful in 1m57s
- api-keys：按现状改为 Credential Manager 存储（R2/R3/R6 已完成）
- manifest：补 project-resource-broker 两条依赖边
- notes-archive：补 R1 复盘
- blueprint-governance：指向 handoff-pilot 待议证据包
- docs/tasks：handoff-pilot（含蓝图规则并入能力包目标）+ dev-variables 落地增量提案
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-09-30 11:48:32 +09:00
lanrtop
061d377d0d
docs(agents): 凭据边界对齐 project-dev-variables 有界明文例外
...
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-09-30 11:47:03 +09:00
lanrtop
acfd54f5d3
docs(agents): 明确凭据值落地边界——只写入被 Git 忽略的本地文件
...
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-09-30 11:47:00 +09:00
lanrtop
1f316c0abb
docs(agents): 炼境根定位收敛为 agent 开发子项目的管家
...
- 项目定位改为管家：摩擦驱动沉淀跨 agent 结构化能力
- 新增「管家准入与退出」：五条准入、不做、分发 vs 查询、退出规则
- project-brief 定位同步，指向 AGENTS.md 单一来源
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-09-30 11:46:58 +09:00
lanrtop
8e13bb4cf5
docs(dev-variables/contract): 记录测试账户边界与验收证据
...
同步 scoped MCP、Tauri DTO 契约及 V8–V11 验收状态；V7 客户端限制与人工终验继续保留。
2026-09-28 01:46:19 +09:00
lanrtop
d926591ace
feat(dev-variables/ui): 一张卡填写测试账号和密码
...
项目面板一次提交两个字段到同一 Tauri 本体，列表与 React Query 仅保留非秘密状态。
Rules-Applied: R01,R08
Feature-Confirmed: true
2026-09-28 01:45:49 +09:00
lanrtop
1daef98af3
feat(dev-variables/mcp): 提供项目级测试账户登记与认证读取
...
scoped MCP 只登记非秘密元数据；读取共用 bearer 门槛，并以真实本机 HTTP 合成链路覆盖授权、复用和撤销。
Rules-Applied: R07,R10
Feature-Confirmed: true
2026-09-28 01:45:23 +09:00
lanrtop
d559b7917b
feat(dev-variables/storage): 原子托管非生产测试账户
...
新增兼容旧表的账户类型与语义登记，账号密码共用受保护引用；覆盖迁移、失败恢复和重开复用。
Rules-Applied: R05,R06,R07
Feature-Confirmed: true
2026-09-28 01:44:56 +09:00
lanrtop
0b0bc18ce4
docs(resource/dev-variables): record Codex approval blocker
...
Three isolated real-client attempts were denied before dispatch by approval policy=never. Keep V7 blocked pending an explicitly approved pilot.
Rules-Applied: R03,R10,R13
2026-09-26 16:57:58 +09:00
lanrtop
fe71536f33
docs(resource/dev-variables): record scoped plaintext exception and validation
...
Document V1-V6 evidence and keep V7 in progress until a real Codex tool-call and human UI pilot complete.
Rules-Applied: R03,R05,R10,R13
2026-09-26 16:48:57 +09:00
lanrtop
b1c6eaebac
feat(resource/dev-variables): add per-project human filling panel
...
Expose status-only Tauri types and explicit save/revoke actions without caching entered values in React Query.
Feature-Confirmed: true
Rules-Applied: R01,R12,R13
2026-09-26 16:47:24 +09:00
lanrtop
2b65c18193
feat(resource/dev-variables): add protected project variable core and scoped MCP
...
Keep values in Windows Credential Manager, require a project bearer for single-value reads, and preserve existing non-secret MCP behavior.
Feature-Confirmed: true
Rules-Applied: R01,R03,R05,R06,R07,R10,R12,R13
2026-09-26 16:46:55 +09:00
lanrtop
c2b4c30f50
docs(resource/broker): 记录 R11 客户端试点验收
...
Push & PR Check / check (push) Successful in 3m13s
Push & PR Check / check (pull_request) Successful in 3m4s
真实 Codex CLI 经临时 scoped MCP 完成非秘密 readiness、跨项目拒绝与模拟 PR；明确审批门槛及未验证边界。
Rules-Applied: R02,R03
2026-09-26 09:44:29 +09:00
lanrtop
7ae547e1f6
test(resource/broker): 添加隔离客户端试点宿主
...
Push & PR Check / check (push) Successful in 4m12s
提供仅测试可用的 scoped MCP 临时宿主和合成凭证/Gitea fixture；保留 R11 进行中状态，等待真实客户端会话终验。
Rules-Applied: R02
2026-09-26 09:30:59 +09:00
feb030431e
Merge pull request 'test(resource/broker): 补齐 scoped MCP 合成 PR 端到端回归' ( #21 ) from codex/resource-broker-daily-dev into master
Push & PR Check / check (push) Successful in 1m18s
2026-09-24 08:31:22 +08:00
lanrtop
5f23cf85b1
test(resource/broker): 补齐 scoped MCP 合成 PR 端到端回归
...
Push & PR Check / check (pull_request) Successful in 1m7s
Rules-Applied: R03,R13
2026-09-24 08:22:38 +09:00
af0adef4f2
Merge pull request 'feat(resource/broker): 实现受保护凭证代办与项目 readiness' ( #20 ) from feat/project-resource-broker into master
Push & PR Check / check (push) Successful in 1m3s
2026-09-23 20:36:21 +08:00
lanrtop
e1e98e2b7b
docs(resource/broker): 记录 PR 审查修复验收
Push & PR Check / check (push) Successful in 59s
Push & PR Check / check (pull_request) Successful in 59s
2026-09-23 21:17:32 +09:00
lanrtop
6d512fb0ad
fix(resource/api-keys): 编辑后复制当前凭证并清空旧显示状态
2026-09-23 21:16:41 +09:00
lanrtop
47ff656083
fix(resource/credentials): 保留删除失败引用并纠正迁移前状态
...
删除受保护凭证失败时回滚数据库删除，并恢复已删引用。旧凭证明确标为 pending_migration，避免误报 configured。
2026-09-23 21:16:11 +09:00
lanrtop
c7333038c5
docs(resource/broker): 记录设计边界与逐卡验收证据
...
Push & PR Check / check (push) Successful in 1m20s
Push & PR Check / check (pull_request) Successful in 58s
同步蓝图、契约映射和本机凭证迁移前备份约束；UI 与真实环境终验保持待办。
Rules-Applied: R01,R05,R07
2026-09-23 18:46:12 +09:00
lanrtop
3a560f149e
feat(resource/broker): 实现受保护凭证代办与项目 readiness
...
Gitea、webhook 与 API Key 以受保护引用替代常态明文输出；旧值先备份并校验后可恢复迁移，MCP 仅提供项目只读状态。
Rules-Applied: R01,R05,R06,R07,R10
Feature-Confirmed: true
2026-09-23 18:45:30 +09:00
lanrtop
f04cc8d43d
docs(blueprint/project-capability): 记录 P3 验收结果
...
Push & PR Check / check (push) Successful in 59s
记录隔离镜像切换与 production 双证据，并启动收益观测。
Rules-Applied: R13
2026-09-23 13:07:16 +09:00
bb3c3ae657
Merge pull request 'feat(delivery): observe production revision with dual evidence' ( #19 ) from feat/project-capability-control-plane-p3c into master
Push & PR Check / check (push) Successful in 57s
2026-09-23 11:18:15 +08:00
lanrtop
dbc1b068ab
fix(delivery): avoid false deployed timestamp
...
Push & PR Check / check (push) Successful in 59s
Push & PR Check / check (pull_request) Successful in 1m0s
Rules-Applied: R07,R13
2026-09-23 12:09:38 +09:00
lanrtop
8bc33aaab9
fix(delivery): distinguish skipped production deploy
Push & PR Check / check (push) Successful in 1m18s
Push & PR Check / check (pull_request) Successful in 58s
2026-09-23 11:08:10 +09:00
lanrtop
2b577f6902
fix(delivery): reject private DNS probe targets
...
Filter resolved connection addresses and bypass environment proxies so project-declared probes cannot reach local services through public hostnames.
2026-09-23 10:44:05 +09:00
lanrtop
02b9f1ec36
feat(delivery): observe production revision with dual evidence
...
Read project-owned production profile, verify Gitea deploy context and public version probe, and surface explicit degraded states.
Feature-Confirmed: true
2026-09-23 10:37:07 +09:00
lanrtop
7fc3011411
docs(blueprint/agent): 完成访问可靠性正式版验收
...
Push & PR Check / check (push) Successful in 1m1s
Rules-Applied: R03,R08,R13
2026-09-23 09:45:39 +09:00
lanrtop
43a4e4382a
docs(blueprint/agent): 记录设置页视觉终验
...
Push & PR Check / check (push) Successful in 57s
Rules-Applied: R08,R13
2026-09-23 04:53:04 +09:00
lanrtop
ab23784f9b
docs(blueprint/agent): 归档 A9 MCP 验收复盘
...
Push & PR Check / check (push) Successful in 56s
Rules-Applied: R03,R10,R13
2026-09-23 04:21:26 +09:00
lanrtop
42bb0a068a
docs(blueprint/agent): 收口双项目原生 MCP 验收
...
Rules-Applied: R03,R08,R10,R13
2026-09-23 04:19:08 +09:00
4c113e24bd
Merge pull request 'feat(agent/access): 强化项目级运行态接入' ( #18 ) from feat/agent-access-reliability into master
Push & PR Check / check (push) Successful in 57s
2026-09-23 03:01:58 +08:00
