From ae251cf70e5d5fca4083fe29411beda4725eff2c Mon Sep 17 00:00:00 2001
From: chenchen <chenchen@xinghanlab.com>
Date: Wed, 3 Jun 2026 00:31:47 +0800
Subject: [PATCH] feat(resource): add vm/database/blob binding types; KV now
 provisioned

Resource binding backend (CRUD + secret-to-KV) is now fully functional after
provisioning the Key Vault. Added vm/database/blob to allowedResourceTypes for
the desktop binding set (gitea/github use type=git + provider). git binding +
KV secret write verified end-to-end (secret lands in heicode-kv).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
---
 heicode/controller/resource.go | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/heicode/controller/resource.go b/heicode/controller/resource.go
index a6163a0..310010d 100644
--- a/heicode/controller/resource.go
+++ b/heicode/controller/resource.go
@@ -17,7 +17,10 @@ import (
 )
 
 var allowedResourceTypes = map[string]bool{
-	"git":              true,
+	"git":              true, // github / gitea — distinguished by provider
+	"vm":               true, // 虚拟机 (ssh)
+	"database":         true, // 数据库
+	"blob":             true, // 对象存储
 	"sk":               true,
 	"project_document": true,
 	"cloud_account":    true,