fix(jd): publish Guanghu router runtime source

server-tools/lake-lamp-authz/workorder-manager.test.js

@@ -145,6 +145,33 @@ test("public handoff can send one approval email and can recover from mail failu
   assert.equal(manager.inspectApproval(retry.approvalToken, 104).ok, true);
 });
 
+test("a broadcast console lists and approves only its bound pending cards", () => {
+  const manager = new WorkOrderManager({ approvalTtl: 60 });
+  const first = manager.request({
+    persona,
+    target: "JD-FD-PRIMARY",
+    scope: "server-login",
+    action: "read-navigation-map",
+  }, 100);
+  const second = manager.request({
+    persona: { pid: "AWEN-TECH", name: "阿文" },
+    target: "JD-FD-PRIMARY",
+    scope: "server-ops",
+    action: "inspect-services",
+  }, 100);
+  manager.bindApprover(first.handoffToken, "owner");
+  manager.bindApprover(second.handoffToken, "awen");
+
+  const cards = manager.pendingForApprover("owner", 101);
+  assert.equal(cards.length, 1);
+  assert.equal(cards[0].id, first.id);
+  assert.equal(cards[0].state, "pending");
+  assert.equal(manager.approveById(first.id, "awen", 102).reason, "authorizer_mismatch");
+  assert.equal(manager.approveById(first.id, "owner", 102).ok, true);
+  assert.equal(manager.pendingForApprover("owner", 103).length, 0);
+  assert.equal(manager.claim(first.id, first.claimToken, 104).ok, true);
+});
+
 test("session cannot switch an approved architecture resource", () => {
   const resource = `GLS-0231-JD-LAN-01-INITIAL-PROVISION-20260720@${"b".repeat(40)}`;
   const manager = new WorkOrderManager({ sessionTtl: 3600 });