feat(governance): 新增 owner release approval gate

apps/web/src/lib/api-client.ts

@@ -550,6 +550,11 @@ export const apiClient = {
     return handleResponse<AiAgentResultCaptureOwnerApprovedReleaseReadinessReadbackSnapshot>(res)
   },
 
+  async getAiAgentResultCaptureOwnerReleaseApprovalGate() {
+    const res = await fetch(`${API_BASE_URL}/agents/agent-result-capture-owner-release-approval-gate`)
+    return handleResponse<AiAgentResultCaptureOwnerReleaseApprovalGateSnapshot>(res)
+  },
+
   async getAiAgentOwnerApprovedFixtureDryRun() {
     const res = await fetch(`${API_BASE_URL}/agents/agent-owner-approved-fixture-dry-run`)
     return handleResponse<AiAgentOwnerApprovedFixtureDryRunSnapshot>(res)
@@ -7540,6 +7545,207 @@ export interface AiAgentResultCaptureOwnerApprovedReleaseReadinessReadbackSnapsh
   }
 }
 
+export interface AiAgentResultCaptureOwnerReleaseApprovalGateSnapshot {
+  schema_version: 'ai_agent_result_capture_owner_release_approval_gate_v1'
+  generated_at: string
+  program_status: {
+    overall_completion_percent: number
+    current_priority: 'P0' | 'P1' | 'P2' | 'P3'
+    current_task_id: 'P2-131'
+    next_task_id: 'P2-132'
+    read_only_mode: true
+    runtime_authority: 'result_capture_owner_release_approval_gate_only_no_live_write'
+    status_note: string
+  }
+  source_refs: string[]
+  prior_owner_approved_release_readiness_readback: {
+    schema_version: string
+    release_readiness_readback_count: number
+    owner_release_readiness_check_count: number
+    live_apply_readiness_gate_count: number
+    rollback_readiness_check_count: number
+    blocked_readiness_transition_count: number
+    operator_action_count: number
+    approval_required_total: number
+    blocked_total: number
+    owner_release_approved_count: number
+    maintenance_window_approved_count: number
+    rollback_owner_confirmed_count: number
+    post_release_verifier_ready_count: number
+    release_readiness_pass_count: number
+    live_apply_release_pass_count: number
+    writer_apply_count: number
+    execution_apply_count: number
+    receipt_write_count: number
+    result_capture_write_count: number
+    learning_write_count: number
+    playbook_trust_write_count: number
+    reviewer_queue_write_count: number
+    gateway_queue_write_count: number
+    telegram_send_count: number
+    bot_api_call_count: number
+    report_receipt_write_count: number
+    readiness_note: string
+  }
+  owner_release_approval_truth: {
+    p2_130_readiness_loaded: boolean
+    owner_release_approval_gate_ready: boolean
+    owner_release_review_required: boolean
+    maintenance_window_review_required: boolean
+    live_apply_approval_hold_active: boolean
+    rollback_owner_review_required: boolean
+    post_release_verifier_required: boolean
+    redaction_review_required: boolean
+    owner_release_approval_gate_only: boolean
+    owner_release_approved: boolean
+    maintenance_window_approved: boolean
+    rollback_owner_confirmed: boolean
+    post_release_verifier_ready: boolean
+    release_approval_passed: boolean
+    live_apply_release_passed: boolean
+    writer_apply_enabled: boolean
+    execution_apply_enabled: boolean
+    receipt_write_enabled: boolean
+    reviewer_queue_write_enabled: boolean
+    gateway_queue_write_enabled: boolean
+    telegram_send_enabled: boolean
+    bot_api_call_enabled: boolean
+    report_receipt_write_enabled: boolean
+    result_capture_write_enabled: boolean
+    learning_write_enabled: boolean
+    playbook_trust_write_enabled: boolean
+    production_write_enabled: boolean
+    secret_read_enabled: boolean
+    destructive_operation_enabled: boolean
+    owner_release_approved_count: number
+    maintenance_window_approved_count: number
+    rollback_owner_confirmed_count: number
+    post_release_verifier_ready_count: number
+    release_approval_pass_count: number
+    live_apply_release_pass_count: number
+    writer_apply_count: number
+    execution_apply_count: number
+    receipt_write_count: number
+    reviewer_queue_write_count: number
+    gateway_queue_write_count: number
+    telegram_send_count: number
+    bot_api_call_count: number
+    report_receipt_write_count: number
+    result_capture_write_count: number
+    learning_write_count: number
+    playbook_trust_write_count: number
+    production_write_count: number
+    secret_read_count: number
+    destructive_operation_count: number
+    truth_note: string
+  }
+  owner_release_approval_packets: Array<{
+    packet_id: string
+    display_name: string
+    owner_agent: 'openclaw' | 'hermes' | 'nemotron'
+    source_readiness: string
+    status: 'ready_for_owner_review' | 'approval_required' | 'blocked_by_policy'
+    approval_mode: 'owner_release_approval_gate'
+    owner_release_approved: false
+    release_approval_passed: false
+    approval_summary: string
+    evidence_hash: string
+  }>
+  maintenance_window_approval_gates: Array<{
+    gate_id: string
+    display_name: string
+    owner_agent: 'openclaw' | 'hermes' | 'nemotron'
+    status: 'ready_for_owner_review' | 'approval_required' | 'blocked_by_policy'
+    gate_mode: 'maintenance_window_approval_gate'
+    maintenance_window_review_required: true
+    maintenance_window_approved: false
+    required_before_live_apply: string
+  }>
+  live_apply_release_approval_gates: Array<{
+    gate_id: string
+    display_name: string
+    owner_agent: 'openclaw' | 'hermes' | 'nemotron'
+    status: 'ready_for_owner_review' | 'approval_required' | 'blocked_by_policy'
+    gate_mode: 'live_apply_release_approval_gate'
+    release_approval_passed: false
+    live_apply_release_enabled: false
+    hold_reason: string
+    release_condition: string
+  }>
+  rollback_owner_approval_checks: Array<{
+    check_id: string
+    display_name: string
+    owner_agent: 'openclaw' | 'hermes' | 'nemotron'
+    status: 'ready_for_owner_review' | 'approval_required' | 'blocked_by_policy'
+    rollback_owner_required: true
+    rollback_owner_confirmed: false
+    rollback_scope: string
+    hold_reason: string
+  }>
+  blocked_approval_transitions: Array<{
+    blocker_id: string
+    display_name: string
+    severity: 'high' | 'critical'
+    status: 'approval_required' | 'blocked_by_policy'
+    blocked_action: string
+    blocked_until: string
+    evidence_hash: string
+  }>
+  operator_actions: Array<{
+    action_id: string
+    owner_agent: 'openclaw' | 'hermes' | 'nemotron'
+    status: 'ready_for_operator_review' | 'approval_required'
+    operator_instruction: string
+    runtime_write_allowed: false
+  }>
+  display_redaction_contract: {
+    redaction_required: true
+    raw_prompt_display_allowed: false
+    private_reasoning_display_allowed: false
+    secret_value_display_allowed: false
+    raw_runtime_payload_display_allowed: false
+    internal_collaboration_content_display_allowed: false
+    frontend_display_policy: string
+  }
+  rollups: {
+    owner_release_approval_packet_count: number
+    maintenance_window_approval_gate_count: number
+    live_apply_release_approval_gate_count: number
+    rollback_owner_approval_check_count: number
+    blocked_approval_transition_count: number
+    operator_action_count: number
+    approval_required_packet_count: number
+    blocked_packet_count: number
+    approval_required_maintenance_window_count: number
+    blocked_maintenance_window_count: number
+    approval_required_live_apply_count: number
+    blocked_live_apply_count: number
+    approval_required_rollback_count: number
+    blocked_rollback_count: number
+    critical_blocker_count: number
+    owner_release_approved_count: number
+    maintenance_window_approved_count: number
+    rollback_owner_confirmed_count: number
+    post_release_verifier_ready_count: number
+    release_approval_pass_count: number
+    live_apply_release_pass_count: number
+    writer_apply_count: number
+    execution_apply_count: number
+    receipt_write_count: number
+    reviewer_queue_write_count: number
+    gateway_queue_write_count: number
+    telegram_send_count: number
+    bot_api_call_count: number
+    report_receipt_write_count: number
+    result_capture_write_count: number
+    learning_write_count: number
+    playbook_trust_write_count: number
+    production_write_count: number
+    secret_read_count: number
+    destructive_operation_count: number
+  }
+}
+
 export interface AiAgentOwnerApprovedFixtureDryRunSnapshot {
   schema_version: 'ai_agent_owner_approved_fixture_dry_run_v1'
   generated_at: string