feat(local): authorize secret config reconciliation decisions

This commit is contained in:
whyour
2026-08-23 18:52:10 +08:00
parent 5dd8678d7e
commit 74ae891070
17 changed files with 4292 additions and 23 deletions
+19
View File
@@ -2037,6 +2037,14 @@ function auditSourceImports(root, packagePath, findings) {
'@qinglong/local-sqlite/rollout-safety',
].includes(specifier)
) &&
!(
path.relative(packageDirectory, filePath) ===
'src/deployment/reconciliation/application/secret-and-config/decisionCoordinator.ts' &&
[
'@qinglong/local-owner-console/authenticated-command',
'@qinglong/local-sqlite/authentication-read',
].includes(specifier)
) &&
!(
path.relative(packageDirectory, filePath) ===
'src/deployment/reconciliation/application/automation/applyEvidence.ts' &&
@@ -2725,6 +2733,17 @@ function auditSourceImports(root, packagePath, findings) {
file: 'src/deployment/reconciliation/application/automation/applyCoordinator.ts',
specifiers: ['@qinglong/runtime-core/security'],
},
{
file: 'src/deployment/reconciliation/application/secret-and-config/decisionAuthorization.ts',
specifiers: [
'@qinglong/runtime-core/local-secret',
'@qinglong/runtime-core/security',
],
},
{
file: 'src/deployment/reconciliation/application/secret-and-config/decisionCoordinator.ts',
specifiers: ['@qinglong/runtime-core/security'],
},
].some(
({ file, specifiers }) =>
path.relative(packageDirectory, filePath) === file &&