4f8e16f5cd
feat: implement S7/S8/S9 SkyEye thought-logic review + evolution + full-member identity
...
S7: Mandatory pre-execution SkyEye review for ALL instructions (cannot be disabled)
- 4 review dimensions: decision pattern, logical coherence, expression, intent
- 3 outcomes: pass / suspect (suspend) / reject
- Registered as global middleware in server.js
S8: SkyEye evolution - auto-accumulates from all agent runtime logic
- Per-person behavior history (200 records each)
- Pattern summarization: methods, paths, active hours
S9: Full-member thought-logic identity verification
- Per-person identity maturity model with cold-start threshold (10 actions)
- Cold-start members auto-suspended for manual confirmation
- Self-reinforcing: more participation = stronger identity model
Config: skyeye-policy.json v2.0.0, server.js v5.0.0
Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/6ee737eb-684b-44b8-aeaa-f73eb7c6f9c2
2026-03-25 09:18:52 +00:00
0a63716226
feat: implement S6 personal channel full autonomy rule
...
S6 Rule: Developers have full autonomy within their own channels.
- Add isChannelSelfDeploy() in autonomy-engine.js (single source of truth)
- Add channel self-deploy bypass in approval.js POST /request
- Add channelAutonomyRule S6 config in autonomy-rules.json
- Own-channel deploys skip SkyEye/approver authorization
- Cross-channel/system changes still go through full S2 approval
Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/6ee737eb-684b-44b8-aeaa-f73eb7c6f9c2
2026-03-25 09:04:51 +00:00
6fab64b1b9
feat: implement S5 冰朔直通部署规则 (direct-deploy bypass)
...
S5 Rule: When instructions come from 冰朔 (TCS-0002) or are signed by
trusted signers (AG-SY-01/TCS-0002/ICE-0002) with ZY- prefix,
deployment goes directly to production bypassing preview/SkyEye/approval.
- Add isDirectDeploySource() in autonomy-engine.js (single source of truth)
- Add direct-deploy bypass in approval.js POST /request endpoint
- Add directDeployRule config in autonomy-rules.json
- Add deploy audit log (deploy-YYYY-MM-DD.jsonl) for traceability
- Developer (Level 0-2) changes still follow full S2 approval flow
- Fix watchdog for-of destructuring to match codebase var style
Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/6ee737eb-684b-44b8-aeaa-f73eb7c6f9c2
2026-03-25 08:54:40 +00:00
721974ca76
feat: implement Phase 8 + Phase 9 (S2/S3/S4 deployment approval + system autonomy)
...
Phase 8 - Dual-Environment Deploy Flow + SkyEye Final Review Authorization:
- Add backend/api-server/routes/approval.js: request/decide/status/list endpoints
- Add backend/api-server/config/approvers.json: 肥猫(DEV-002) + 桔子(DEV-010) config
- Add docs/js/approval-ui.js: frontend approval badge + panel + decision UI
- Add docs/css/approval.css: approval panel styles
- Update permissions.js: add approval:decide, approval:create, system:internal
- Update server.js to v4.0.0: register approval routes
Phase 9 - System Autonomy Framework:
- Add backend/api-server/config/autonomy-rules.json: dual-line architecture + deploy stages
- Add backend/api-server/services/autonomy-engine.js: compliance check + mode detection
Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/6ee737eb-684b-44b8-aeaa-f73eb7c6f9c2
2026-03-25 08:48:50 +00:00
38d8afef55
feat: implement language-driven OS capabilities (ZY-LANGDRIVE)
...
Phase 3 - Write Capability Layer:
- Add backend/api-server/routes/write.js with 10 write endpoints
- Extend services/github.js with triggerWorkflow + createFile
- Add middleware/audit.js for operation audit logging
- Rate limiting: 10 writes/min per developer
Phase 4 - Intent Router Engine:
- Add config/function-tools.json with 10 operation definitions
- Add middleware/intent-router.js for NL → API routing
- Add docs/js/intent-tools.js for frontend function calling
Phase 5 - Permission Sandbox System:
- Add config/permissions.js with 4-level model (L0-L3)
- Add middleware/auth.js (identity + permission check)
- Add middleware/sandbox.js (preview environment guard)
Phase 6 - Cognitive Guidance System:
- Add config/onboarding-script.json (5-round guided dialogue)
- Add routes/onboarding.js (onboarding API + tools endpoint)
- Add docs/js/onboarding.js + docs/css/onboarding.css (UI)
Update server.js to v2.0.0 with all new routes and middleware
Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/a260ce18-279a-4490-af90-a90a7b1f46cd
2026-03-25 08:22:38 +00:00
df21bae395
feat: implement dual-channel architecture (Channel A cache + Channel B backend)
...
- Add scripts/cache/sync-notion-cache.js for comprehensive Notion sync
- Add .github/workflows/sync-notion-cache.yml (every 6h + manual trigger)
- Add .github/workflows/deploy-backend.yml for ECS auto-deploy
- Add missing dev profiles: DEV-009.json, DEV-011.json, index.json
- Add .github/notion-cache/databases/ directory
- Add backend/api-server/ with Express server (port 3001)
- Routes: health, dev, databases, chat, receipt
- Services: notion, github, cache
- Config: database ID mappings
- PM2 ecosystem config
- Update docs/index.html with dual-channel fallback:
- Channel B (realtime) → Channel A (cache) degradation
- loadDatabaseCache() for agent-registry, syslog-recent
- Enhanced system prompt with data source indicators
Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/a260ce18-279a-4490-af90-a90a7b1f46cd
2026-03-25 08:10:58 +00:00
copilot-swe-agent[bot]