zhizhi/backend/api-server/services
copilot-swe-agent[bot] 6fab64b1b9 feat: implement S5 冰朔直通部署规则 (direct-deploy bypass)
S5 Rule: When instructions come from 冰朔 (TCS-0002) or are signed by
trusted signers (AG-SY-01/TCS-0002/ICE-0002) with ZY- prefix,
deployment goes directly to production bypassing preview/SkyEye/approval.

- Add isDirectDeploySource() in autonomy-engine.js (single source of truth)
- Add direct-deploy bypass in approval.js POST /request endpoint
- Add directDeployRule config in autonomy-rules.json
- Add deploy audit log (deploy-YYYY-MM-DD.jsonl) for traceability
- Developer (Level 0-2) changes still follow full S2 approval flow
- Fix watchdog for-of destructuring to match codebase var style

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/6ee737eb-684b-44b8-aeaa-f73eb7c6f9c2
2026-03-25 08:54:40 +00:00
..
atomic-executor.js fix: address code review feedback for execution protection layer 2026-03-25 08:43:45 +00:00
autonomy-engine.js feat: implement S5 冰朔直通部署规则 (direct-deploy bypass) 2026-03-25 08:54:40 +00:00
cache.js fix: address code review feedback - timer leaks, CORS, validation, cache TTL 2026-03-25 08:15:48 +00:00
checkpoint.js fix: address code review feedback for execution protection layer 2026-03-25 08:43:45 +00:00
execution-watchdog.js feat: implement S5 冰朔直通部署规则 (direct-deploy bypass) 2026-03-25 08:54:40 +00:00
github.js feat: implement language-driven OS capabilities (ZY-LANGDRIVE) 2026-03-25 08:22:38 +00:00
notion.js feat: implement dual-channel architecture (Channel A cache + Channel B backend) 2026-03-25 08:10:58 +00:00