Enforce system-managed settings scope with admin system settings API

Conversation 0 Commits 3 Files Changed 8

+358 -89

3 Commits

Author	SHA1	Message	Date
weichen	496c784213	Merge origin/main into feature/rdm-increment-settings-duties ci / vet-and-test (pull_request) Successful in 1m2s Details	2026-10-13 04:22:36 +00:00
weichen	386afcd4a6	Point core pin at merged main 0f94e4b0 ci / vet-and-test (pull_request) Successful in 42s Details Why: Core PR #30 合入后按 pin 级联惯例把嵌套 pin 对准组件 main 合入提交。 Evidence: go test ./internal/settings/ ./internal/server/ 全绿。 Impact: 仅 gitlink 指针调整（同一能力内容，9150e6f 为其祖先）。	2026-10-13 04:20:07 +00:00
weichen	716fe9541c	Enforce system-managed settings scope with admin system settings API Why: P2——模型、密钥、Tavily、遥测与运行基础设施属系统受管项；user/project 层须整笔拒绝（含嵌套、点路径与子树覆盖），生效链剥除存量覆盖，管理员经新系统面统一配置。 Evidence: go test ./... 全绿；settings 单测覆盖嵌套/点路径/祖先标量拒绝、系统层生效、读面剥除；server e2e 覆盖 400/系统面读写/掩码；认证档 admin 门测试（普通 403、admin 200、密钥不泄漏）。 Impact: settings.go 受管标记与 mergeScope 拦截、Effective 增系统层、server 新增 GET/PUT /api/settings/system（无认证档本机即管理员）、SecretLookup 系统行回退、插件 schema 受管注入；测试基建 mock seed 与三处用例迁到系统层；svc.sh 播种改走系统面（仅 admin，无管理员时明确跳过）。Core gitlink 升至 9150e6f。 Refs: modules/documents/docs/proposals/2026-10-13-rdm-settings-members-duties-perms-increment.md P2	2026-10-13 04:05:15 +00:00

Author

SHA1

Message

Date

weichen

496c784213

Merge origin/main into feature/rdm-increment-settings-duties

ci / vet-and-test (pull_request) Successful in 1m2s

Details

2026-10-13 04:22:36 +00:00

weichen

386afcd4a6

Point core pin at merged main 0f94e4b0

ci / vet-and-test (pull_request) Successful in 42s

Details

Why: Core PR #30 合入后按 pin 级联惯例把嵌套 pin 对准组件 main 合入提交。
Evidence: go test ./internal/settings/ ./internal/server/ 全绿。
Impact: 仅 gitlink 指针调整（同一能力内容，9150e6f 为其祖先）。

2026-10-13 04:20:07 +00:00

weichen

716fe9541c

Enforce system-managed settings scope with admin system settings API

Why: P2——模型、密钥、Tavily、遥测与运行基础设施属系统受管项；user/project 层须整笔拒绝（含嵌套、点路径与子树覆盖），生效链剥除存量覆盖，管理员经新系统面统一配置。
Evidence: go test ./... 全绿；settings 单测覆盖嵌套/点路径/祖先标量拒绝、系统层生效、读面剥除；server e2e 覆盖 400/系统面读写/掩码；认证档 admin 门测试（普通 403、admin 200、密钥不泄漏）。
Impact: settings.go 受管标记与 mergeScope 拦截、Effective 增系统层、server 新增 GET/PUT /api/settings/system（无认证档本机即管理员）、SecretLookup 系统行回退、插件 schema 受管注入；测试基建 mock seed 与三处用例迁到系统层；svc.sh 播种改走系统面（仅 admin，无管理员时明确跳过）。Core gitlink 升至 9150e6f。
Refs: modules/documents/docs/proposals/2026-10-13-rdm-settings-members-duties-perms-increment.md P2

2026-10-13 04:05:15 +00:00

Enforce system-managed settings scope with admin system settings API #188