feat(ql3): harden copilot mcp host deployment

This commit is contained in:
whyour
2026-08-16 03:41:38 +08:00
parent 58025ede55
commit da4e7cf688
25 changed files with 734 additions and 48 deletions
+5 -3
View File
@@ -1,8 +1,10 @@
# `@qinglong/cluster-admin`
This private QingLong 3.0 package is a short-lived cluster administration
authority. It is intentionally separate from the resident `cluster-control`
artifact and requires a distinct PostgreSQL role.
This private QingLong 3.0 package owns explicit cluster operations and the
bounded Cluster Copilot MCP product surface. Database/Kubernetes administration
remains short-lived and requires distinct purpose-bound authority; the MCP
subpath has only the remote API client, opens no database or Kubernetes
authority, and is intentionally separate from resident `cluster-control`.
The admin role can append Identity/API Credential mutations and their security
audit in one serializable transaction, and can perform bounded read-only audit