wooo/awoooi
1
1
Fork 0
Code Issues 2 Pull Requests 1 Actions 3 Packages Projects Releases Wiki Activity
1,554 Commits 199 Branches 2 Tags
1dac23fd56d809a0e59ea33b1cd651b983a37039
Commit Graph

220 Commits

Author SHA1 Message Date
AWOOOI CD
1dac23fd56 chore(cd): deploy b0d560d [skip ci] 2026-04-18 10:21:41 +00:00
AWOOOI CD
c40f3506e3 chore(cd): deploy b63aed7 [skip ci] 2026-04-18 09:20:51 +00:00
AWOOOI CD
584831bace chore(cd): deploy f3960f3 [skip ci] 2026-04-18 08:39:13 +00:00
AWOOOI CD
e7bd37a5ac chore(cd): deploy a156566 [skip ci] 2026-04-18 08:14:08 +00:00
AWOOOI CD
4f70da027e chore(cd): deploy fb88512 [skip ci] 2026-04-18 08:03:46 +00:00
AWOOOI CD
7d342e3f3e chore(cd): deploy 7542e6e [skip ci] 2026-04-18 07:36:38 +00:00
AWOOOI CD
6768a375bd chore(cd): deploy 2d43751 [skip ci] 2026-04-18 05:34:11 +00:00
OG T
2d43751729 feat(ops): ADR-090-B 零信任收尾範本 — wrapper / sudoers / migrator / CI
Some checks failed
CD Pipeline / build-and-deploy (push) Successful in 12m17s
Details
run-migration / migrate (push) Failing after 14s
Details 
2026-04-18 台北時區 —— ogt + Claude Opus 4.7 (1M)

本 commit 響應本 Session 兩次憑證外洩事故
(feedback_secrets_leak_incidents_2026-04-18.md),
交付統帥可直接部署的零信任基礎設施範本.

檔案清單:

1. scripts/host-ops/awoooi-hosts-add.sh
   - 110 主機 /etc/hosts 白名單 wrapper
   - 只允許預定義主機名,idempotent,帶 IP 格式驗證
   - 安裝: /usr/local/bin/awoooi-hosts-add (root:root 0755)

2. scripts/host-ops/awoooi-wrapper.sudoers
   - 配套 sudoers 規則 (NOPASSWD for wrapper + SIGHUP only)
   - 安裝: /etc/sudoers.d/awoooi-wrapper (root:root 0440)
   - 禁 tee / bash / sh 這類 generic shell access

3. apps/api/migrations/adr090b_awoooi_migrator_role.sql
   - PG 限權角色 awoooi_migrator
   - 只能 DDL (CREATE/ALTER/DROP/INDEX/COMMENT)
   - 明確 REVOKE 所有 DML + default privileges 鎖死
   - 本檔由統帥執行 (需 superuser),不由 Claude 執行

4. k8s/awoooi-prod/awoooi-migrator-secret.template.yaml
   - K8s Secret patch 範本
   - 新增 MIGRATION_DATABASE_URL key (awoooi_migrator 連線串)
   - 與應用 DATABASE_URL 拆開

5. .gitea/workflows/run-migration.yml
   - CI 自動套用新 migration (單 transaction + ON_ERROR_STOP)
   - 用 Gitea secret MIGRATION_DATABASE_URL,不走明碼
   - 每次成功寫一筆 asset_discovery_run (audit trail)

零信任三層防線 (對應 feedback_secrets_leak_incidents):
  L1 對話無密碼 -> wrapper 內建白名單
  L2 操作經 wrapper -> sudoers + awoooi_migrator
  L3 顯示強制遮蔽 -> CI 走 secret,不走 env

本 Session 發現的 3 次憑證外洩全部在 feedback_secrets_leak
memory 登記,並有對應 P0 輪替計畫.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
 2026-04-18 13:23:39 +08:00
AWOOOI CD
d23343ac69 chore(cd): deploy 1ff3405 [skip ci] 2026-04-17 17:17:58 +00:00
AWOOOI CD
1de72fffe5 chore(cd): deploy 4f2e122 [skip ci] 2026-04-17 17:03:41 +00:00
AWOOOI CD
0bde389323 chore(cd): deploy cf50a5c [skip ci] 2026-04-17 15:17:51 +00:00
AWOOOI CD
bf835e51ac chore(cd): deploy cbb719b [skip ci] 2026-04-17 14:54:34 +00:00
AWOOOI CD
3c56f02954 chore(cd): deploy af2adb5 [skip ci] 2026-04-17 14:36:03 +00:00
AWOOOI CD
f7edae78fb chore(cd): deploy 604d8ee [skip ci] 2026-04-17 14:21:29 +00:00
AWOOOI CD
8e43d52afb chore(cd): deploy fe77e6d [skip ci] 2026-04-17 13:45:54 +00:00
AWOOOI CD
5d715e16ee chore(cd): deploy c759b4e [skip ci] 2026-04-17 08:38:18 +00:00
AWOOOI CD
f2ac5d01c6 chore(cd): deploy 9d6aa7e [skip ci] 2026-04-17 08:24:05 +00:00
AWOOOI CD
148d59a0e4 chore(cd): deploy 1ae9e9f [skip ci] 2026-04-17 07:32:22 +00:00
AWOOOI CD
b80836329e chore(cd): deploy 93205ce [skip ci] 2026-04-17 06:58:39 +00:00
AWOOOI CD
682f974a37 chore(cd): deploy 418d735 [skip ci] 2026-04-17 06:23:07 +00:00
AWOOOI CD
f677b72114 chore(cd): deploy 6baa2e9 [skip ci] 2026-04-17 06:07:05 +00:00
AWOOOI CD
f9b052d648 chore(cd): deploy 0ab92c2 [skip ci] 2026-04-17 05:37:19 +00:00
AWOOOI CD
0247058d92 chore(cd): deploy 5dae610 [skip ci] 2026-04-17 05:26:42 +00:00
AWOOOI CD
2f3d2faf4d chore(cd): deploy ce731c8 [skip ci] 2026-04-17 04:49:52 +00:00
AWOOOI CD
f5ca9bfb1b chore(cd): deploy 0388e50 [skip ci] 2026-04-17 03:30:44 +00:00
AWOOOI CD
00e9fb8d4b chore(cd): deploy d952435 [skip ci] 2026-04-17 02:46:34 +00:00
AWOOOI CD
f9d08de3a2 chore(cd): deploy 149065e [skip ci] 2026-04-16 16:05:05 +00:00
AWOOOI CD
a6a1d4d95c chore(cd): deploy 83ab5e3 [skip ci] 2026-04-16 15:24:24 +00:00
AWOOOI CD
f08d175365 chore(cd): deploy 02a2761 [skip ci] 2026-04-16 13:12:57 +00:00
AWOOOI CD
5a2bfc3699 chore(cd): deploy 513232e [skip ci] 2026-04-16 12:34:19 +00:00
AWOOOI CD
6048102139 chore(cd): deploy 9239538 [skip ci] 2026-04-16 11:08:30 +00:00
AWOOOI CD
5c4efb8d15 chore(cd): deploy ded93cb [skip ci] 2026-04-16 08:42:52 +00:00
AWOOOI CD
11a3522d39 chore(cd): deploy eff40a4 [skip ci] 2026-04-16 05:54:04 +00:00
AWOOOI CD
9a4fa5edf5 chore(cd): deploy 27ba97e [skip ci] 2026-04-15 19:12:19 +00:00
OG T
5f9c9d84a2 fix(configmap): Ollama 改指向 111 GPU + fallback 順序調整
Some checks failed
CD Pipeline / build-and-deploy (push) Has been cancelled
Details 
- OLLAMA_URL: 188(CPU-only) → 111(RTX GPU，avg 10s)
- AI_FALLBACK_ORDER: nvidia→gemini→ollama→claude
  改為 ollama→nvidia→gemini→claude
  本地 GPU 優先，外部 API 備援，雲端 Claude 最終兜底

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-04-16 03:00:16 +08:00
AWOOOI CD
44ecf609e0 chore(cd): deploy 9538f6c [skip ci] 2026-04-15 18:39:05 +00:00
AWOOOI CD
381be78344 chore(cd): deploy f5e33da [skip ci] 2026-04-15 17:55:11 +00:00
AWOOOI CD
644cae33c3 chore(cd): deploy 9bfa6fc [skip ci] 2026-04-15 17:37:10 +00:00
OG T
0760315059 fix(decision-manager): 修正 CAST 語法 + 關閉 shadow_mode
Some checks failed
CD Pipeline / build-and-deploy (push) Has been cancelled
Details 
decision_chain_persist_failed 根因:
  asyncpg 不支援 :dc::json 語法 (:: 與具名參數 : 衝突)
  改為 CAST(:dc AS jsonb) — asyncpg 標準寫法

configmap:
  AIOPS_P4_SHADOW_MODE: true → false
  真實主動監控啟用 (proactive_inspector 輸出供 PreDecisionInvestigator 讀取)

2026-04-16 Claude Sonnet 4.6 Asia/Taipei

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-04-16 01:24:48 +08:00
AWOOOI CD
3fc2c41216 chore(cd): deploy 457018c [skip ci] 2026-04-15 17:18:47 +00:00
AWOOOI CD
34dd20298a chore(cd): deploy d258a1f [skip ci] 2026-04-15 16:22:45 +00:00
OG T
d4fed639f6 fix(ai-router): DIAGNOSE 恢復 OPENCLAW_NEMO 路由，修復全部 timeout 降級問題
Some checks failed
CD Pipeline / build-and-deploy (push) Failing after 2m16s
Details 
根因: 2026-04-12 patch 把 DIAGNOSE 改為 None（複雜度路由）
→ 落入 Rule 6 → Ollama deepseek-r1:14b (CPU 238s) → timeout
→ 降級 20% 信心 + 「待分析」→ 全部 unknown

修復:
1. ai_router.py: DIAGNOSE → OPENCLAW_NEMO（via 188:8088 NVIDIA NIM, 2-27s）
2. ai_router.py: 移除 Rule 6 的 DIAGNOSE deepseek 特殊case（已無用）
3. 04-configmap.yaml: AI_FALLBACK_ORDER 改為 nvidia 優先
   gemini→ollama→nvidia（舊）→ nvidia→gemini→ollama（新）

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-04-16 00:03:04 +08:00
AWOOOI CD
b55575b56b chore(cd): deploy c9efaa3 [skip ci] 2026-04-15 15:59:47 +00:00
AWOOOI CD
7d3391cb69 chore(cd): deploy 800ab16 [skip ci] 2026-04-15 15:41:49 +00:00
AWOOOI CD
4bee14ae08 chore(cd): deploy 77a92eb [skip ci] 2026-04-15 14:39:13 +00:00
AWOOOI CD
65c8eb587c chore(cd): deploy 256a24e [skip ci] 2026-04-15 14:20:27 +00:00
OG T
76558a3cd9 feat(AIOps): 全開 P1-P6 feature flags + Nemotron + offline replay loop
Some checks failed
CD Pipeline / build-and-deploy (push) Has been cancelled
Details 
- configmap: 啟用 AIOPS_P1~P6 全部總開關與子開關
- configmap: ENABLE_NEMOTRON_COLLABORATION=true（回歸 120s timeout）
- feature_flags.py: 補齊 AIOPS_P6_GOVERNANCE_ENABLED 缺失欄位
- main.py: 掛載 run_offline_replay_loop（ADR-087 Phase 6）

2026-04-15 ogt + Claude Sonnet 4.6（亞太）

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-04-15 21:59:51 +08:00
AWOOOI CD
e449b275aa chore(cd): deploy e5e94f5 [skip ci] 2026-04-15 13:19:00 +00:00
AWOOOI CD
e23e49c13b chore(cd): deploy ff448ad [skip ci] 2026-04-15 12:47:59 +00:00
AWOOOI CD
d46f230c1f chore(cd): deploy 6583870 [skip ci] 2026-04-15 12:18:44 +00:00