feat(ql3): add profile-aware run log reads

2026-09-23 20:15:19 +08:00 · 2026-08-12 01:43:14 +08:00
parent c699c32461
commit 308aa75d89
33 changed files with 2880 additions and 306 deletions
@@ -308,6 +308,13 @@ export function createClusterControlAdmissionPipeline(
        now,
      );
      if (decision.effect === 'deny') {
+        if (route.permission === 'artifact.read') {
+          throw securityError(
+            404,
+            'artifact_not_found',
+            'Cluster-control Artifact is not available',
+          );
+        }
        throw securityError(
          403,
          'forbidden',
@@ -315,6 +322,13 @@ export function createClusterControlAdmissionPipeline(
        );
      }
      if (decision.effect === 'require_approval') {
+        if (route.permission === 'artifact.read') {
+          throw securityError(
+            404,
+            'artifact_not_found',
+            'Cluster-control Artifact is not available',
+          );
+        }
        throw securityError(
          403,
          'approval_required',