feat(ql3): authorize reconciliation reviews

This commit is contained in:
whyour
2026-08-21 19:34:29 +08:00
parent 827ba5294f
commit 22f58b1eff
19 changed files with 4293 additions and 107 deletions
+30
View File
@@ -2010,6 +2010,14 @@ function auditSourceImports(root, packagePath, findings) {
'src/lifecycle/localReadiness.ts' &&
specifier === '@qinglong/local-sqlite/readiness-inspection'
) &&
!(
path.relative(packageDirectory, filePath) ===
'src/deployment/reconciliation/review/completion.ts' &&
[
'@qinglong/local-owner-console/authenticated-command',
'@qinglong/local-sqlite/authentication-read',
].includes(specifier)
) &&
!(
[
'src/deployment/compose/composeApply.ts',
@@ -2643,6 +2651,28 @@ function auditSourceImports(root, packagePath, findings) {
) {
continue;
}
if (
packagePath === 'packages/ql3-local-owner-cli' &&
[
{
file: 'src/deployment/reconciliation/review/authorization.ts',
specifiers: [
'@qinglong/runtime-core/local-secret',
'@qinglong/runtime-core/security',
],
},
{
file: 'src/deployment/reconciliation/review/issuerKeyring.ts',
specifiers: ['@qinglong/runtime-core/local-secret'],
},
].some(
({ file, specifiers }) =>
path.relative(packageDirectory, filePath) === file &&
specifiers.includes(specifier),
)
) {
continue;
}
if (
packagePath === 'packages/ql3-local-owner-cli' &&
path.relative(packageDirectory, filePath) ===