wangheng
|
f95de7eceb
|
docs(mcp): CRM 接入手册 (REQ-20260911-0013)
|
2026-09-14 12:21:26 +08:00 |
|
xiaoqu
|
a0bae500bc
|
feat(mcp): 服务 Token 生命周期与开放通道域绑定 (REQ-20260911-0014)
- agent_api_key 增加 principal_type/subject_name(V4 Flyway + rollback),integration.context.get 按列判定主体类型\n- Open API 支持 clients 服务密钥→作用域绑定;service ensure get-or-create/无密文轮换,旧密钥禁签 service\n- 服务 Token 吊销/轮换;人员停用后 user Token 失效(60s 本地缓存);AkAuthFilter 401 返回 UNAUTHENTICATED\n- ensure 入口约束:service 仅 sync 作用域、user 禁 sync;sync 作用域预建并绑定 integration.context.get\n- 单测 157 通过;本机 test-up 冒烟通过(跨域/旧密钥/user-sync 403,service context 自检,吊销立即 401,吊销后再签发)
|
2026-09-14 09:20:48 +08:00 |
|
xiaoqu
|
795a433f35
|
feat(mcp): 新增 integration.context.get 身份与能力自检工具 (REQ-20260911-0012)
- 实时取 AkAuthFilter 鉴权上下文(ThreadLocal AuthContext)+ ToolGuard 同源能力计算,不缓存权限
- tenant_id 映射启用作用域编码;principal_type 集中在 IntegrationContextService.resolvePrincipalType
判定(当前按 token 绑定用户推导 user_delegated,5629 给 agent_api_key 加 principal_type 列后仅改该方法)
- data_scope_version = token_scope 绑定集合最大 modify_time 的 epoch 毫秒,无状态计算
- capability_levels 数据驱动:能力集合含 *.changes.list 工具即具备 SYNC,当前返回 QUERY
- seed-dev.sql operation 作用域白名单加入该工具
|
2026-09-11 23:10:19 +08:00 |
|
xiaoqu
|
f2ac17731a
|
feat(mcp): 统一输出规范与错误码体系——schema_version 双跑信封 + 8 错误码收敛 + 工具只读声明 + 日志脱敏 (REQ-20260911-0011)
|
2026-09-11 22:48:14 +08:00 |
|
xiaoqu
|
5daecc8ae8
|
docs(agent-service): 更新生产 HTTPS 部署文档(agent.ququclean.com 上线)
|
2026-09-11 10:34:09 +08:00 |
|
xiaoqu
|
52bb9faa27
|
feat(mcp): 新增合同查询工具 contract.list/detail.query (REQ-20260911-0002)
|
2026-09-11 10:21:18 +08:00 |
|
xiaoqu
|
ff452d89d8
|
feat(mcp): 新增出纸机查询工具 hardware.list/detail.query (REQ-20260910-0012)
|
2026-09-10 15:27:14 +08:00 |
|
xiaoqu
|
3d6d70604d
|
feat(mcp): 新增商城订单查询工具 mall.order.list/detail/logistics.query (REQ-20260909-0004)
- OrderTools: 订单列表(9个过滤字段+分页)、订单详情(订单+明细+收货地址合并)、订单物流(主表+轨迹)
- 新增 m1 商城库 5 个 Entity/Mapper(首次启用 m1 mapper 包)
- PermissionService.applyOrderRowFilter: 移植老接口 getSaleCompany 行级权限语义
- OrderToolsTest 6 用例;seed-dev.sql 绑定 operation scope;文档第 7~9 节
|
2026-09-09 18:06:59 +08:00 |
|
xqzp2026
|
686ce2daf8
|
feat(mcp): 新增站点列表与详情工具 (REQ-20260908-0006)
|
2026-09-08 19:25:12 +09:30 |
|
xqzp2026
|
dc2367e1cf
|
docs(mcp): align operations web integration design
|
2026-09-07 19:16:58 +09:30 |
|
xqzp2026
|
58e51e96a9
|
docs(mcp): split integration design by product
|
2026-09-07 18:53:12 +09:30 |
|
xqzp2026
|
aa12a3c71d
|
docs(mcp): unify multi-client agent integration
|
2026-09-07 17:54:33 +09:30 |
|
xiaoqu
|
8c872ac15d
|
feat(open): ensure支持二次获取明文(ak存AES-GCM密文key_cipher, app.token-cipher-key派生密钥); 历史无密文Token自动轮换; V3迁移+回滚方案; 同步文档
|
2026-09-07 12:41:03 +08:00 |
|
xqzp2026
|
1721bc15cb
|
docs: align MCP token flow to single ensure-only policy
|
2026-09-07 13:30:10 +09:30 |
|
xqzp2026
|
8af60565a1
|
docs: sync MCP token spec to one-time mobile token flow
|
2026-09-07 13:30:10 +09:30 |
|
xqzp2026
|
12f69504e4
|
docs(mcp): 统一服务文档目录
|
2026-09-07 12:27:02 +09:30 |
|