zhizhi/backend/api-server
copilot-swe-agent[bot] 6fab64b1b9 feat: implement S5 冰朔直通部署规则 (direct-deploy bypass)
S5 Rule: When instructions come from 冰朔 (TCS-0002) or are signed by
trusted signers (AG-SY-01/TCS-0002/ICE-0002) with ZY- prefix,
deployment goes directly to production bypassing preview/SkyEye/approval.

- Add isDirectDeploySource() in autonomy-engine.js (single source of truth)
- Add direct-deploy bypass in approval.js POST /request endpoint
- Add directDeployRule config in autonomy-rules.json
- Add deploy audit log (deploy-YYYY-MM-DD.jsonl) for traceability
- Developer (Level 0-2) changes still follow full S2 approval flow
- Fix watchdog for-of destructuring to match codebase var style

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/6ee737eb-684b-44b8-aeaa-f73eb7c6f9c2
2026-03-25 08:54:40 +00:00
..
config feat: implement S5 冰朔直通部署规则 (direct-deploy bypass) 2026-03-25 08:54:40 +00:00
middleware feat: implement Phase 7 Execution Protection Layer (ZY-LANGDRIVE-S1) 2026-03-25 08:37:56 +00:00
routes feat: implement S5 冰朔直通部署规则 (direct-deploy bypass) 2026-03-25 08:54:40 +00:00
services feat: implement S5 冰朔直通部署规则 (direct-deploy bypass) 2026-03-25 08:54:40 +00:00
ecosystem.config.js feat: implement dual-channel architecture (Channel A cache + Channel B backend) 2026-03-25 08:10:58 +00:00
package.json feat: implement dual-channel architecture (Channel A cache + Channel B backend) 2026-03-25 08:10:58 +00:00
server.js feat: implement Phase 8 + Phase 9 (S2/S3/S4 deployment approval + system autonomy) 2026-03-25 08:48:50 +00:00