feat(W3): expiry sync / full reconciliation sweep (schedule */5) + design + tested compute

Browse Source

- Single Code-node sweep: desired = CP-active paths UNION active AccessGrants;
  expiry excluded -> role/update rewrite; optional auto-disable (env-gated, default off)
- disable guard: only when had scopes before (never fresh empty-role customer)
- loop guard: no NocoDB Customers.status flip (avoids W1 re-provision loop)
- test_w3.js mock-verified both AUTO_DISABLE modes; gen_w3.js builds JSON from w3-compute.js

...

This commit is contained in:

hoelee

2026-08-23 01:58:58 +08:00

parent 543f4a7885

commit a907a85a57

6 changed files with 435 additions and 0 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

n8n/W3-expiry-sync.json

+55

File diff suppressed because one or more lines are too long