fix: proxy code queue direct docker publish

This commit is contained in:
Codex
2026-05-23 21:19:57 +00:00
parent 086dc5645a
commit 97fe2a6b51
2 changed files with 39 additions and 0 deletions
@@ -160,6 +160,9 @@ assertCondition(ciSource.includes('options.transport === "direct-docker"'), "ci
assertCondition(ciSource.includes('options.transport === "auto" && options.serviceId === "code-queue"'), "auto transport should select direct-docker for Code Queue artifacts");
assertCondition(ciSource.includes("dependsOnLocalUnideskDatabase: false"), "direct-docker publish must not depend on local unidesk-database dispatch");
assertCondition(ciSource.includes("CODE_QUEUE_BASE_IMAGE=unidesk-code-queue:d601"), "direct-docker Code Queue publish must use the warmed D601 base image");
assertCondition(ciSource.includes("directDockerBuildNetworkArgs"), "direct-docker Code Queue publish must own scoped build network args");
assertCondition(ciSource.includes('"--network"') && ciSource.includes('"host"'), "direct-docker Code Queue publish must use host networking for the D601 provider proxy");
assertCondition(ciSource.includes("providerGatewayWsEgressProxyUrl") && ciSource.includes("HTTP_PROXY") && ciSource.includes("HTTPS_PROXY"), "direct-docker Code Queue publish must pass scoped provider-gateway proxy build args");
assertCondition(ciSource.includes("code-queue-base-image-missing"), "direct-docker Code Queue publish should fail fast when the warmed base image is missing");
assertCondition(ciSource.includes("no deploy apply, no rollout, no Code Queue restart, no active task mutation"), "direct-docker publish boundary should forbid runtime mutation");
assertCondition(ciSource.includes("repo-owned Docker artifact publish without backend-core/database dispatch"), "ci help should describe the repo-owned direct-docker delivery path");
@@ -173,5 +176,6 @@ process.stdout.write(`${JSON.stringify({
"prod Code Queue boundary forbids self-deploy, prod mutation, interrupt and cancel actions",
"artifact-registry dev dry-run is non-mutating while prod remains unsupported",
"ci publish-user-service exposes direct-docker Code Queue artifact publish without local database dispatch",
"direct-docker Code Queue artifact publish uses scoped provider-gateway build proxy args",
],
}, null, 2)}\n`);