Remove pre-1.0 audit and protected request scaffolding

This commit is contained in:
npc0-hue
2026-08-20 23:42:02 +08:00
parent 40b35b05c7
commit a7e2e4c6c0
130 changed files with 526 additions and 3767 deletions
+10 -10
View File
@@ -78,7 +78,7 @@ async function main() {
assertIncludes(plugin.bridgeActions, "artifacts.open", "plugin exposes artifacts.open bridge action");
assertIncludes(plugin.bridgeActions, "plugin-lifecycle.request", "plugin exposes Platform lifecycle bridge action");
assertIncludes(plugin.bridgeActions, "ai.invoke", "plugin exposes Platform AI bridge action");
assertIncludes(plugin.productionLifecycle?.operations, "rollback", "plugin declares rollback governance");
assertIncludes(plugin.productionLifecycle?.operations, "rollback", "plugin declares rollback operation");
assertIncludes(marketplacePlugin.capabilities, "process.start", "marketplace exposes lifecycle capability");
assertEqual(aiProvider.apiKeyConfigured, true, "AI provider key presence projection");
assertEqual(aiProvider.baseUrlConfigured, true, "AI provider base URL presence projection");
@@ -170,7 +170,7 @@ async function main() {
{
name: "系统维护",
hash: "#/maintenance",
markers: ["系统维护", "容量治理与告警闭环", "运行槽位", productionSeed.alert.title]
markers: ["系统维护", "容量与告警闭环", "运行槽位", productionSeed.alert.title]
},
{
name: "服务器详情",
@@ -598,7 +598,7 @@ async function prepareProductionOperations(headers, server, plugin) {
},
headers
);
if (admission.accepted || admission.state !== "denied" || !admission.alertId || !admission.auditEventId) {
if (admission.accepted || admission.state !== "denied" || !admission.alertId) {
throw new Error(`capacity admission did not create durable denied evidence: ${JSON.stringify(admission)}`);
}
@@ -622,13 +622,13 @@ async function prepareProductionOperations(headers, server, plugin) {
alert,
diff,
apiProof: {
admission: pick(admission, ["accepted", "state", "reason", "pressureCodes", "alertId", "auditEventId"]),
admission: pick(admission, ["accepted", "state", "reason", "pressureCodes", "alertId"]),
capacity: {
...pick(capacity, ["totalMaxJobs", "totalRunningJobs", "totalQueuedJobs", "activeAlerts", "generatedAt"]),
endpoints: capacity.endpoints.map((item) => pick(item, ["runEndpointId", "status", "maxJobs", "runningJobs", "queuedJobs", "logBacklogBatches", "artifactBacklogChunks", "pressureCodes"]))
},
alert: pick(alert, ["id", "sourceKind", "sourceId", "ruleKey", "severity", "state", "occurrenceCount", "lastAuditEventId"]),
pluginLifecycle: pick(installation, ["id", "pluginId", "serverInstanceId", "currentVersion", "targetVersion", "desiredState", "currentState", "lastOperation", "compatibility", "dependencyState", "jobId", "auditEventId"]),
alert: pick(alert, ["id", "sourceKind", "sourceId", "ruleKey", "severity", "state", "occurrenceCount"]),
pluginLifecycle: pick(installation, ["id", "pluginId", "serverInstanceId", "currentVersion", "targetVersion", "desiredState", "currentState", "lastOperation", "compatibility", "dependencyState", "jobId"]),
aiConfigDiff: pick(diff, ["id", "requestId", "serverInstanceId", "pluginId", "providerId", "model", "key", "configVersion", "diffSummary", "state", "expiresAt"])
}
};
@@ -676,7 +676,7 @@ async function verifyAlertInteraction(chrome, headers, seededAlert) {
assertNoForbiddenProjection(acknowledged, "acknowledged alert response");
return {
cancelPreservedState: stillActive.state,
persisted: pick(acknowledged, ["id", "state", "acknowledgedBy", "acknowledgedAt", "lastAuditEventId"]),
persisted: pick(acknowledged, ["id", "state", "acknowledgedBy", "acknowledgedAt"]),
forbiddenFragmentScan: "passed",
textSample: (await chrome.visibleText()).slice(0, 1200)
};
@@ -714,12 +714,12 @@ async function verifyPluginLifecycleInteraction(chrome, headers, plugin, server)
const response = await getJson(`/plugin-lifecycles?pluginId=${encodeURIComponent(plugin.id)}&serverInstanceId=${encodeURIComponent(server.id)}`, headers);
const installation = findRequired(response.items, (item) => item.pluginId === plugin.id && item.serverInstanceId === server.id, "plugin lifecycle after browser dispatch");
assertEqual(installation.lastOperation, "enable", "browser lifecycle operation persisted");
if (!installation.jobId || !installation.auditEventId) {
throw new Error(`browser lifecycle dispatch missed job/audit linkage: ${JSON.stringify(installation)}`);
if (!installation.jobId) {
throw new Error(`browser lifecycle dispatch missed job linkage: ${JSON.stringify(installation)}`);
}
assertNoForbiddenProjection(installation, "browser plugin lifecycle response");
return {
persisted: pick(installation, ["id", "pluginId", "serverInstanceId", "currentState", "desiredState", "lastOperation", "dependencyState", "jobId", "auditEventId", "alertId"]),
persisted: pick(installation, ["id", "pluginId", "serverInstanceId", "currentState", "desiredState", "lastOperation", "dependencyState", "jobId", "alertId"]),
forbiddenFragmentScan: "passed",
textSample: (await chrome.visibleText()).slice(0, 1200)
};