hoelee 4693c9d684 feat(W4): daily full reconciliation — user/role drift repair + ReconcileLogs audit ...

- w4-body.js: ONE-DIRECTIONAL sync (NocoDB status = SOT, never reverse);
  drift matrix: missing user/role (provision w/ username lookup to avoid
  duplicates), dangling refs (adopt/recreate), disabled<->status, canonical
  base_path '/' + permission 16384, scopes vs calculateEffectiveGrants,
  username drift detect+log_only; verify-after-repair on every change;
  password never pushed on repair (方案 C); dry-run via ?dryRun=true
- gen_w4.js: daily 03:00 cron + webhook alist-w4-reconcile; API-import-safe
  (UUID node ids, no pinData, webhookId)
- ReconcileLogs table mktsb7le6fqr2u1 (add_reconcilelogs_table.py, idempotent,
  v2 API); FK column nc_jitu___Customers_id for bt-link writes (v2 ignores
  link column itself)
- test_w4_reconcile.js: 34 assertions / 12 mock worlds, ALL PASSED
- live-verified against production: dry-run (3 drifts + 1 error found),
  real repair (3 repaired, verify all passed, 4 log rows), idempotent rerun
- NocoDB 2026.08.x pitfalls documented (v1 col endpoints gone, row delete
  via body [{Id}]); n8n API import/activation pitfalls (activeVersionId)
- docs: W4-DESIGN.md new; DATABASE_SCHEMA 8 tables; N8N_WORKFLOWS, SETUP,
  PROJECT_STATE updated

2026-08-23 09:34:11 +08:00

..

shared

fix(shared): link-field where query must use (customer.Id,eq,N) not (customer,eq,N)

2026-08-23 06:55:04 +08:00

gen_w1.js

fix(W1): self-write-back suppression via old/new field comparison

2026-08-23 06:43:01 +08:00

gen_w2.js

feat(W1): status lifecycle (suspend/delete/resume) + shared effective-grants lib

2026-08-23 04:59:43 +08:00

gen_w3.js

feat(W1): status lifecycle (suspend/delete/resume) + shared effective-grants lib

2026-08-23 04:59:43 +08:00

gen_w4.js

feat(W4): daily full reconciliation — user/role drift repair + ReconcileLogs audit

2026-08-23 09:34:11 +08:00

inline_shared.js

feat(W1): status lifecycle (suspend/delete/resume) + shared effective-grants lib

2026-08-23 04:59:43 +08:00

SETUP.md

feat(W4): daily full reconciliation — user/role drift repair + ReconcileLogs audit

2026-08-23 09:34:11 +08:00

test_effective_grants.js

fix(shared): link-field where query must use (customer.Id,eq,N) not (customer,eq,N)

2026-08-23 06:55:04 +08:00

test_w1_lifecycle.js

feat(W1): full 5-status account lifecycle (pending/active/suspended/expired/deleted)

2026-08-23 07:17:45 +08:00

test_w3_refactored.js

fix(shared): link-field where query must use (customer.Id,eq,N) not (customer,eq,N)

2026-08-23 06:55:04 +08:00

test_w4_reconcile.js

feat(W4): daily full reconciliation — user/role drift repair + ReconcileLogs audit

2026-08-23 09:34:11 +08:00

w1-body.js

feat(W1): full 5-status account lifecycle (pending/active/suspended/expired/deleted)

2026-08-23 07:17:45 +08:00

w2-body.js

feat(W1): status lifecycle (suspend/delete/resume) + shared effective-grants lib

2026-08-23 04:59:43 +08:00

w3-body.js

feat(W1): status lifecycle (suspend/delete/resume) + shared effective-grants lib

2026-08-23 04:59:43 +08:00

w4-body.js

feat(W4): daily full reconciliation — user/role drift repair + ReconcileLogs audit

2026-08-23 09:34:11 +08:00

W1-customer-provision.json

feat(W1): full 5-status account lifecycle (pending/active/suspended/expired/deleted)

2026-08-23 07:17:45 +08:00

W2-customerproduct-sync.json

fix(shared): link-field where query must use (customer.Id,eq,N) not (customer,eq,N)

2026-08-23 06:55:04 +08:00

W2-DESIGN.md

Phase 1-3: AList stock deployment, NocoDB 7-table schema, W1/W2 n8n workflows + docs

2026-08-22 19:26:06 +08:00

W3-DESIGN.md

fix(W2/W3): expiry boundary — use <= today (expiry on today counts as expired)

2026-08-23 03:48:44 +08:00

W3-expiry-sync.json

fix(shared): link-field where query must use (customer.Id,eq,N) not (customer,eq,N)

2026-08-23 06:55:04 +08:00

W4-daily-reconcile.json

feat(W4): daily full reconciliation — user/role drift repair + ReconcileLogs audit

2026-08-23 09:34:11 +08:00