GenarrativeAI/Genarrative - Genarrative - 叙世AI

GenarrativeAI/Genarrative

Author	SHA1	Message	Date
kdletters	253f99d921	补齐错误 envelope 的请求上下文并扩展游戏分发审核取证 Project CI / AI game creator shell Rust crates (push) Successful in 1m30s Details Project CI / AI game creator shell Rust smoke (push) Successful in 1m59s Details Project CI / AI game creator shell Rust lane 2/2 (push) Failing after 5m26s Details Project CI / Backend tests (push) Successful in 4m13s Details Project CI / Frontend tests (push) Has been cancelled Details Project CI / Native shell tests (push) Has been cancelled Details Project CI / AI game creator shell web tests (push) Has been cancelled Details Project CI / AI game creator shell Rust lane 1/2 (push) Has been cancelled Details Project CI / Repository checks (push) Has been cancelled Details - api-server 的错误响应改用 attach_request_context 建立的 CURRENT_REQUEST_CONTEXT（tokio task_local），错误 envelope 与成功 envelope 一样带 meta.requestId / meta.operation，脱离请求任务时退回原形状 - 越权隔离脚本新增成功/失败 envelope 断言：修复前错误响应 requestId 为空让断言变红，修复后 23 项 PASS - 媒体链路脚本扩展审核治理段：普通作者不能提交审核动作、更新待审与被拒都不改变在线旧版 URL 与可玩内容、审核结论可在后台追溯，44 项 PASS - 游戏分发里程碑阶段 A 第 6 条、阶段 B 第 1/2 条改为已勾选并写入取证，阶段 B 其余条目列出具体缺口 - decision-log 补记错误 envelope 同一份 meta 与「按可消费取证」两条口径	2026-09-28 18:58:38 +08:00
kdletters	0989f9f40e	补齐游戏分发跨账号越权用例并统一送审的 404 口径 Project CI / AI game creator shell Rust crates (push) Successful in 1m40s Details Project CI / AI game creator shell Rust smoke (push) Successful in 2m9s Details Project CI / Backend tests (push) Successful in 5m4s Details Project CI / AI game creator shell Rust lane 1/2 (push) Has been cancelled Details Project CI / Frontend tests (push) Has been cancelled Details Project CI / Repository checks (push) Has been cancelled Details Project CI / AI game creator shell web tests (push) Has been cancelled Details Project CI / AI game creator shell Rust lane 2/2 (push) Has been cancelled Details Project CI / Native shell tests (push) Has been cancelled Details - 新增 scripts/check-game-distribution-owner-isolation.mjs：对本地真实栈注册两个账号，逐条验证私有版本读取、上传状态、分片写入、分包确认、送审、撤回与未认证访问的越权口径，并验证请求体伪造 owner 不生效 - api-server 的 submit_version 改用 load_owner_version_or_404：他人送审返回 404 而不是 403，不再用错误码泄露版本是否存在 - package.json 注册 check:game-distribution-owner-isolation - 游戏分发里程碑阶段 A 第 1 条改为已勾选，写入 21 项 PASS 取证与修复前的 403 变异证据	2026-09-28 18:23:52 +08:00