From e3214917de130c5a8f897b286abae4323bae662d Mon Sep 17 00:00:00 2001
From: Codex <codex@local>
Date: Mon, 13 Jul 2026 15:15:38 +0200
Subject: [PATCH] fix: restore repository-scoped Gitea mirror plan

---
 scripts/src/cicd-delivery-authority.test.ts | 10 ++++++++--
 scripts/src/platform-infra-gitea.ts         |  3 ++-
 2 files changed, 10 insertions(+), 3 deletions(-)

diff --git a/scripts/src/cicd-delivery-authority.test.ts b/scripts/src/cicd-delivery-authority.test.ts
index fc9a06c8..1a2cc73d 100644
--- a/scripts/src/cicd-delivery-authority.test.ts
+++ b/scripts/src/cicd-delivery-authority.test.ts
@@ -498,9 +498,13 @@ describe("migrated CLI 执行 guard 与提示清理", () => {
   });
 
   test("Gitea 与 mirror 默认 plan 只返回只读 Next", async () => {
+    const giteaPlan = await runPlatformInfraGiteaCommand({} as never, ["plan", "--target", "NC01", "--raw"]) as Record<string, unknown>;
+    const nc01MirrorPlan = await runPlatformInfraGiteaCommand({} as never, ["mirror", "plan", "--target", "NC01", "--raw"]) as Record<string, unknown>;
+    const jd01MirrorPlan = await runPlatformInfraGiteaCommand({} as never, ["mirror", "plan", "--target", "JD01", "--raw"]) as Record<string, unknown>;
     const plans = [
-      await runPlatformInfraGiteaCommand({} as never, ["plan", "--target", "NC01", "--raw"]),
-      await runPlatformInfraGiteaCommand({} as never, ["mirror", "plan", "--target", "NC01", "--raw"]),
+      giteaPlan,
+      nc01MirrorPlan,
+      jd01MirrorPlan,
     ] as Record<string, unknown>[];
     for (const plan of plans) {
       expect(plan.mutation).toBe(false);
@@ -508,6 +512,8 @@ describe("migrated CLI 执行 guard 与提示清理", () => {
       expect(JSON.stringify(plan.next)).toContain("status");
       expect(JSON.stringify(plan.next)).toContain(PAC_AUTOMATIC_DELIVERY_REFERENCE);
     }
+    expect(JSON.stringify(nc01MirrorPlan.credentials)).toContain("github-upstream:selfmedia-nc01");
+    expect(JSON.stringify(jd01MirrorPlan.credentials)).not.toContain("github-upstream:selfmedia-nc01");
   });
 
   test("PaC history detail 只按唯一 consumer 生成 Next，四类前缀无默认 consumer 回退", () => {
diff --git a/scripts/src/platform-infra-gitea.ts b/scripts/src/platform-infra-gitea.ts
index 0f01c99b..5cfb4e25 100644
--- a/scripts/src/platform-infra-gitea.ts
+++ b/scripts/src/platform-infra-gitea.ts
@@ -314,6 +314,7 @@ async function mirrorWebhookCommand(config: UniDeskConfig, args: string[]): Prom
 function mirrorPlan(options: CommonOptions): Record<string, unknown> {
   const gitea = readGiteaConfig();
   const target = resolveCommandTarget(gitea, options.targetId);
+  const targetRepos = repositoriesForTarget(gitea, target);
   return {
     ok: true,
     action: "platform-infra-gitea-mirror-plan",
@@ -321,7 +322,7 @@ function mirrorPlan(options: CommonOptions): Record<string, unknown> {
     target: targetSummary(target),
     sourceAuthority: sourceAuthoritySummary(gitea, target),
     responsibilities: gitea.sourceAuthority.responsibilities.map(responsibilitySummary),
-    repositories: repositoriesForTarget(gitea, target).map((repo) => repositorySummary(gitea, repo)),
+    repositories: targetRepos.map((repo) => repositorySummary(gitea, repo)),
     credentials: credentialSummaries(gitea, targetRepos),
     next: mirrorReadOnlyNextCommands(target.id),
   };