docs(agent): 私有目的地 ACL 设计方案与实现计划

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

todo/todo.json

@@ -1,9 +1,9 @@
 {
   "meta": {
     "title": "feature+windows — 项目 TODO",
-    "updated_at": "2026-07-07T17:45:18.036Z"
+    "updated_at": "2026-07-22T16:59:57.735Z"
   },
-  "seq": 19,
+  "seq": 23,
   "items": [
     {
       "id": 1,
@@ -317,6 +317,62 @@
         "proposed_at": "2026-07-07T15:41:36.536Z",
         "approved_at": "2026-07-07T15:54:54.386Z"
       }
+    },
+    {
+      "id": 20,
+      "title": "Tablet(iPad)补通知入口 — tablet_shell 顶栏接铃铛 + content() 加 NavView.notifications 真屏(现平板铃铛/通知不可达,桌面/手机正常)",
+      "desc": null,
+      "level": "mid",
+      "tier": null,
+      "tags": [],
+      "owner": "agent",
+      "status": "done",
+      "created_at": "2026-07-12T10:48:49.013Z",
+      "done": false,
+      "completed_at": "2026-07-13T02:20:58.685Z",
+      "version": "site-v0.0.13"
+    },
+    {
+      "id": 21,
+      "title": "邀请/任务奖励明细列表 — GET /v1/invite/events(读 audit_log:action/target/days/时间)+ App 邀请页明细区(逐行:日期·事件·+N天)+ 六语;审计数据已齐(audit_log target 现带对方id),纯展示层活",
+      "desc": null,
+      "level": "mid",
+      "tier": null,
+      "tags": [],
+      "owner": "agent",
+      "status": "open",
+      "created_at": "2026-07-13T04:29:47.253Z",
+      "done": false,
+      "completed_at": null,
+      "version": null
+    },
+    {
+      "id": 22,
+      "title": "客户端私有服务域名分流(BuildClientConfig): nas/git/win.yanmeiai.com 本地DNS+resolve+私网直连+强制走隧道,smartRoute 可重开",
+      "desc": null,
+      "level": "mid",
+      "tier": null,
+      "tags": [],
+      "owner": "agent",
+      "status": "done",
+      "created_at": "2026-07-15T21:40:35.427Z",
+      "done": false,
+      "completed_at": null,
+      "version": null
+    },
+    {
+      "id": 23,
+      "title": "私有目的地 ACL（节点侧）：只有白名单 dp_uuid 能经 pangolin 出口访问 brain/nas/git/win.51yanmei.com。节点本地 acl.json + agent 渲染放行/拒绝规则对，fail-closed，SIGHUP 热生效。设计 docs/private-dest-acl-design.html，计划 docs/superpowers/plans/2026-07-23-private-dest-acl.md",
+      "desc": null,
+      "level": "mid",
+      "tier": null,
+      "tags": [],
+      "owner": "agent",
+      "status": "doing",
+      "created_at": "2026-07-22T16:59:41.945Z",
+      "done": false,
+      "completed_at": null,
+      "version": null
     }
   ]
 }