2 Commits

Include renames

Author	SHA1	Message	Date
hoelee	7f12804f47	fix(W3): remove incorrect 'Bearer' prefix in Authorization header ... AList expects bare token (not 'Bearer <token>'). With 'Bearer' prefix, all role/get calls returned non-data responses -> currentPaths degraded to [] -> W3 kept re-applying same scopes every run (false toAdd) and never detected expired scopes (false toRemove). This is the root cause of W3 not showing hoe's expiry removal.	2026-08-23 03:08:59 +08:00
hoelee	a907a85a57	feat(W3): expiry sync / full reconciliation sweep (schedule */5) + design + tested compute ... - Single Code-node sweep: desired = CP-active paths UNION active AccessGrants; expiry excluded -> role/update rewrite; optional auto-disable (env-gated, default off) - disable guard: only when had scopes before (never fresh empty-role customer) - loop guard: no NocoDB Customers.status flip (avoids W1 re-provision loop) - test_w3.js mock-verified both AUTO_DISABLE modes; gen_w3.js builds JSON from w3-compute.js	2026-08-23 01:58:58 +08:00