aios/aios
1
0
Fork 0
Code Issues Pull Requests 5 Actions Packages Projects Releases Wiki Activity
674 Commits 317 Branches 24 Tags
abe81d7f64882541f25c2977a407074e31b20f84
T
Clone
Open with VS Code Open with VSCodium Open with Intellij IDEA
Download ZIP Download TAR.GZ Download BUNDLE
AIOS Governed Continuation abe81d7f64 fix(sec): port G7 security-critical closure (S1-S5 + negative tests) onto final integration tree 
Ported from authority branch agent/g7-security-critical-closure-20260914 (d5f5c9b, base=beabd053).
S1 auth: role/user from server token->identity mapping, ignore client X-AIOS-* headers.
S2 bootstrap credential: PBKDF2 random-salt, fail-closed SECRET, no plaintext fallback, session HMAC+expiry.
S3 path containment + control-plane file-read hardening.
S4 admin UI XSS + real governed approval + dashboard CSRF/branch validation.
S5 runtime delivery: registry.yaml conflict, openapi securityScheme, install.sh fail propagation, do_POST shadowing.
Tests: 5 negative suites (66 tests). Evidence pack in deliverables/g7-evidence/.
2026-09-14 22:11:51 +08:00
.agent
clarify-synthetic-wechat-and-evidence-index
2026-07-22 09:52:56 +08:00
active-runtime
fix(sec): port G7 security-critical closure (S1-S5 + negative tests) onto final integration tree
2026-09-14 22:11:51 +08:00
adapters
fix(sec): port G7 security-critical closure (S1-S5 + negative tests) onto final integration tree
2026-09-14 22:11:51 +08:00
agent-instructions
feat(V1R2C2): complete autonomous recovery chain integration with 8/8 tests passing
2026-07-07 19:45:51 +08:00
agents
fix(sec): port G7 security-critical closure (S1-S5 + negative tests) onto final integration tree
2026-09-14 22:11:51 +08:00
approvals
correct-v2r1c7-superseded-plan-id
2026-08-07 11:37:09 +08:00
architecture
chore(release): bump baseline to V1R2C3 and create version record
2026-07-08 01:09:02 +08:00
artifacts
feat: shard-a governed provider-auth integration (V2R2C2 Round3)
2026-09-10 11:54:49 +08:00
audit
v1r4c1: batch commit - arch change api + tests + owner gate
2026-07-09 12:12:02 +08:00
baseline
finalize-V2R1C2-production-registry
2026-07-22 09:45:10 +08:00
cmd/command-plane
chore: add evidence for CMD-20260708-enable-aios-autonomous-operation-and-notification
2026-07-08 16:15:16 +08:00
config
feat: shard-a governed provider-auth integration (V2R2C2 Round3)
2026-09-10 11:54:49 +08:00
data
feat(V1R2C2): complete autonomous recovery chain integration with 8/8 tests passing
2026-07-07 19:45:51 +08:00
db/migrations
feat(V1R2C2): complete autonomous recovery chain integration with 8/8 tests passing
2026-07-07 19:45:51 +08:00
deliverables/g7-evidence
fix(sec): port G7 security-critical closure (S1-S5 + negative tests) onto final integration tree
2026-09-14 22:11:51 +08:00
delta-fix
fix(sec): port G7 security-critical closure (S1-S5 + negative tests) onto final integration tree
2026-09-14 22:11:51 +08:00
deploy
fix(sec): port G7 security-critical closure (S1-S5 + negative tests) onto final integration tree
2026-09-14 22:11:51 +08:00
deployments/V1R4C6
audit: record V1R4C6 production deployment blocker
2026-07-12 00:57:05 +08:00
docs
fix(sec): port G7 security-critical closure (S1-S5 + negative tests) onto final integration tree
2026-09-14 22:11:51 +08:00
evidence
update-v2r1c7-premerge-evidence
2026-08-07 11:29:44 +08:00
execution
authorize OpenClaw to execute V1R4C6 merge tests deploy pipeline
2026-07-11 20:41:31 +08:00
fixes
fix(weixin): resolve outbound quotes by exact create time
2026-07-12 21:41:10 +08:00
migrations
init(baseline): import AIOS V1R1C0 multiuser gitops custom llm baseline
2026-07-06 14:44:09 +08:00
openapi
Add unified Agent Event Bus OpenAPI operation ids
2026-07-08 16:50:07 +08:00
ops
fix(sec): port G7 security-critical closure (S1-S5 + negative tests) onto final integration tree
2026-09-14 22:11:51 +08:00
overlays/user-control-center
fix(sec): port G7 security-critical closure (S1-S5 + negative tests) onto final integration tree
2026-09-14 22:11:51 +08:00
patches
chore(governance): bootstrap repair lease branch
2026-08-06 14:53:28 +08:00
proposals
feat(agent-os): add V1R1C5 evolution proposal
2026-07-07 11:11:57 +08:00
recovery
feat(openbao): add autonomy runtime v1 candidate
2026-08-26 16:51:07 +08:00
release-manifests
feat(release): implement V2R1C7 production health contract
2026-08-07 10:49:40 +08:00
reports
docs: record restart persistence evidence
2026-08-25 16:30:54 +08:00
runbooks
docs: add unattended V2R2C2 convergence execution contract
2026-08-25 19:04:51 +08:00
runtime/agent-os
Merge: resolve conflict in aios_chatgpt_actions_api.py, remove patches conflict
2026-07-08 21:07:54 +08:00
scripts
fix(sec): port G7 security-critical closure (S1-S5 + negative tests) onto final integration tree
2026-09-14 22:11:51 +08:00
security/incidents
fix-gitops-close-tag-publication-governance-gaps
2026-07-23 14:11:23 +08:00
services
fix(sec): port G7 security-critical closure (S1-S5 + negative tests) onto final integration tree
2026-09-14 22:11:51 +08:00
skills/gitops-platform-validation
feat(V1R2C2): complete autonomous recovery chain integration with 8/8 tests passing
2026-07-07 19:45:51 +08:00
source-baseline
init(baseline): import AIOS V1R1C0 multiuser gitops custom llm baseline
2026-07-06 14:44:09 +08:00
test
chore(chatgpt): update test/cmd-permission-check.txt
2026-07-08 15:33:52 +08:00
tests
fix(sec): port G7 security-critical closure (S1-S5 + negative tests) onto final integration tree
2026-09-14 22:11:51 +08:00
tools
feat: shard-b governed provider-auth integration (V2R2C2 Round3)
2026-09-10 12:09:47 +08:00
versions
fix: include canonical V2R2C1 staging registry projection
2026-08-25 15:22:21 +08:00
.gitignore
feat: deploy group-owner-agent-context-isolation patch
2026-07-09 10:45:21 +08:00
.gitleaks.toml
fix(v2r2c2): gate recovery — normalize LF, EOF blank lines, deterministic test path-mode, secret-scan allowlist for release-freeze OIDs
2026-09-12 02:44:54 +08:00
AGENT_DEPLOYMENT_REQUIREMENTS.md
feat(gitops): add authorized task writer bridge
2026-08-06 09:29:28 +08:00
AGENT_OWNER_AUTHORIZATION_BROKER_DEPLOYMENT.md
feat(governance): add owner authorization broker
2026-08-06 09:30:19 +08:00
AGENT_TASK_IDENTITY_OVERLAY_DEPLOYMENT.md
feat(governance): add task-scoped identity overlay
2026-08-06 09:31:20 +08:00
BUILD_RECEIPT_V2R1C7.json
feat(release): implement V2R1C7 production health contract
2026-08-07 10:49:40 +08:00
FULL_PACKAGE_FILE_MANIFEST.sha256
init(baseline): import AIOS V1R1C0 multiuser gitops custom llm baseline
2026-07-06 14:44:09 +08:00
FULL_PACKAGE_MANIFEST.json
init(baseline): import AIOS V1R1C0 multiuser gitops custom llm baseline
2026-07-06 14:44:09 +08:00
MANIFEST.sha256
fix(v2r1c7): regenerate release source manifest
2026-08-07 11:15:15 +08:00
package_verify_full.sh
init(baseline): import AIOS V1R1C0 multiuser gitops custom llm baseline
2026-07-06 14:44:09 +08:00
pytest.ini
test: make whole-suite collection deterministic
2026-08-09 18:25:42 +08:00
README.md
init(baseline): import AIOS V1R1C0 multiuser gitops custom llm baseline
2026-07-06 14:44:09 +08:00
release_version.py
fix: repair staging action contracts and release overlay
2026-08-25 15:02:10 +08:00
TEST_RESULTS.json
feat(gitops): add authorized task writer bridge
2026-08-06 09:29:28 +08:00
verify_round3_integration.py
feat: shard-b governed provider-auth integration (V2R2C2 Round3)
2026-09-10 12:09:47 +08:00
VERSION
fix(v2r1c7): close release identity before protected merge
2026-08-07 11:14:42 +08:00

README.md

AIOS V1R1C0 MultiUser GitOps Custom LLM 生产工程部署包

本包基于 AIOS_v23_v5_digital_life_WEBOPS_PROD_FULL_DEPLOY_20260706 刷新，版本号升级为：V1R1C0。

本版新增能力

  1. 借鉴 MultiUserClaw 的 Platform Gateway / shared + dedicated runtime 思路，但复用现有 AIOS WebOps、NPM、Casdoor、OpenClaw、Hermes。
  2. 建立 GitOps 在线基线机制，后续不再定期上传 ZIP，通过 Git branch / patch / tag / diff 刷新。
  3. 支持 VxRxCx 版本体系：V=架构，R=功能，C=修复。
  4. 支持用户在基础模型之外添加自定义 LLM 模型，并自主设置模型优先级与 fallback 顺序。
  5. 新增 GitOps + Model Registry + Runtime Selector API 适配器，默认监听 127.0.0.1:18890。
  6. 保留短链接：/git /base /ver /diff /patch /run /api /model /hook。
  7. 通过 NPM 暴露入口，避免新增裸 Nginx 配置。

推荐执行

cd <解压目录>
bash scripts/install_v1r1c0_gitops_model_overlay.sh
bash tests/run_v1r1c0_acceptance.sh

给 Codex 的完整执行文档

docs/CODEX_FULL_EXECUTION_PROMPT_V1R1C0.md

本包是 V1R1C0 全量工程部署包，包含文档、脚本、迁移、接口适配器、测试用例。部署时应由 Codex 在服务器上定位当前生产包和运行目录，按增量方式叠加，不得破坏现有 WebOps/NPM/Casdoor/OpenClaw/Hermes。

Reference in New Issue View Git Blame Copy Permalink
S
Description
AIOS online GitOps baseline
Readme
23 MiB
Languages
Python 96.5%
HTML 1.7%
Shell 1.3%
JavaScript 0.5%