DevOS v1 + Phase 2: unified resource model, infra ops, website deployment, AI chat ops

- Monorepo: NestJS API (Fastify) + React web (antd/ProComponents) + shared packages
- PostgreSQL/Prisma (unified resources, relations graph, audit, events, jobs)
- Auth/RBAC/workspace isolation, credential vault (AES-256-GCM)
- Servers/SSH, Docker discovery & lifecycle, Job Center
- Websites & deployments (git provider credential clone, env, health verification)
- Domains/DNS (Cloudflare adapter), certificates (TLS probe), monitoring
- Automation (cron/event/webhook HMAC + notifications), AI Gateway, MCP (29 tools)
- AI chat window (LLM function-calling + rules fallback, SSE streaming, approvals)
- Notes: Vditor WYSIWYG markdown editor, non-blocking autosave
- Tests: 35 unit/security tests; UI audit clean (desktop+mobile, deep links)

Docs/devos-v1-phase2/06-PROJECT-TASK-AUTOMATION.md

@@ -0,0 +1,50 @@
+# 06 — Projects / Tasks / Automation
+
+## Project
+Project 是用户工作的顶层业务上下文，而不是简单 CRUD。
+
+Project overview 必须汇总：
+- repositories
+- websites
+- servers
+- domains
+- deployments
+- tasks
+- notes
+- documents
+- automations
+- recent activity
+
+## Task
+支持：
+- backlog/todo/doing/review/done
+- priority
+- labels
+- due date
+- relations
+- resource links
+- activity
+
+## Automation
+统一：
+```text
+Trigger → Condition → Action → Job → Event
+```
+
+Triggers:
+- manual
+- cron
+- webhook
+- event
+
+Actions 至少：
+- deployment.run
+- server.command（受权限和风险策略限制）
+- container.restart
+- task.create/update
+- note.create
+- notification.send
+
+Webhook 必须从明文 secret 比对升级到 HMAC 签名，支持 timestamp/replay protection。
+
+Automation UI 必须能创建、编辑、启停、测试、查看执行历史。