From 654fed16fb5a348cef9dd2d82320001ca40604b3 Mon Sep 17 00:00:00 2001 From: Codex Date: Mon, 13 Jul 2026 15:49:46 +0200 Subject: [PATCH] =?UTF-8?q?docs:=20=E6=94=B6=E5=8F=A3=20Gitea=20mirror=20p?= =?UTF-8?q?lan=20=E5=9B=9E=E5=BD=92?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .../R4_Task_Report.md | 23 +++++++++++++++++++ .../github-gitea-durable-source-authority.md | 2 +- 2 files changed, 24 insertions(+), 1 deletion(-) create mode 100644 docs/MDTODO/details/github-gitea-durable-source-authority/R4_Task_Report.md diff --git a/docs/MDTODO/details/github-gitea-durable-source-authority/R4_Task_Report.md b/docs/MDTODO/details/github-gitea-durable-source-authority/R4_Task_Report.md new file mode 100644 index 00000000..e0f01fd6 --- /dev/null +++ b/docs/MDTODO/details/github-gitea-durable-source-authority/R4_Task_Report.md @@ -0,0 +1,23 @@ +# R4 任务报告 + +## 结论 + +已修复 UniDesk #1933 暴露的 Gitea mirror 默认只读 plan 回归。`mirrorPlan` 现在只计算一次目标节点的 repository 集合,并由 repositories 与 credentials 两个摘要共同复用;未增加 mutation authority、锁、租约、围栏或新的运行服务。 + +## 实现 + +- 源码提交:`e3214917de130c5a8f897b286abae4323bae662d`。 +- 合并 PR:[#1936](https://github.com/pikasTech/unidesk/pull/1936)。 +- master 合并提交:`6659358f775a7572133338828e405324d00fa2fa`。 +- 变更限定在 `scripts/src/platform-infra-gitea.ts` 与既有 delivery authority 合同测试。 + +## 验证 + +- `bun test scripts/src/cicd-delivery-authority.test.ts scripts/src/platform-infra-pac-provenance.test.ts scripts/src/platform-infra-gitea-config.test.ts scripts/src/platform-infra-gitea-authority-guard.test.ts`:58 通过,0 失败。 +- NC01 原只读 plan:`mutation=false`,包含目标节点拥有的 selfmedia credential 摘要。 +- JD01 原只读 plan:`mutation=false`,不包含 NC01 的 selfmedia credential。 +- 修复后 OTel 分支的相关合同不再受 `targetRepos is not defined` 基线异常阻断。 + +## 边界 + +本任务只恢复目标范围计算与可见性,不改变 Gitea mirror、PaC 或 GitHub 的正式写入 authority;后续自动交付仍仅由普通 GitHub PR merge 触发。 diff --git a/docs/MDTODO/github-gitea-durable-source-authority.md b/docs/MDTODO/github-gitea-durable-source-authority.md index a2236b36..12f25b39 100644 --- a/docs/MDTODO/github-gitea-durable-source-authority.md +++ b/docs/MDTODO/github-gitea-durable-source-authority.md @@ -50,6 +50,6 @@ 依赖 R3.2,覆盖仓库缺失、ref 缺失、重复 delivery、controller 重启、retry exhaustion 与恢复测试;只用修复 PR merge 产生的新自动事件验收 resource bundle 获取成功,禁止人工 mirror、sync、flush、trigger 或 direct GitHub 补洞,完成任务后将详细报告写入[任务报告](./details/github-gitea-durable-source-authority/R3.3_Task_Report.md)。 -## R4 [in_progress] +## R4 [completed] 修复 [UniDesk #1933](https://github.com/pikasTech/unidesk/issues/1933) 暴露的 Gitea mirror 默认只读 plan 回归:恢复 repository-scoped targetRepos 计算,保持 mutation authority 不变,补充最小回归验证并由独立 Artificer PR 交付,完成任务后将详细报告写入[任务报告](./details/github-gitea-durable-source-authority/R4_Task_Report.md)。