Files
Agent-System-Dev/docs/svc-deploy/u4-task-card-draft.md
T
weichenandCursor 2a03dd58f9 Bind svc user CLI to instance storage and reject lock bypass
Why: U1 requires account ops to hit manifest data_root/DSN with OpenExisting and refuse missing flock or default ./data.
Evidence: python3 -m unittest tests.test_svc_user_binding (T1–T5) + test_svc_identity
Impact: svc <env> user … calls ENV_BIN with --open-existing; deploy/user fail closed without flock.
Refs: docs/svc-deploy/u1-instance-account-binding.md; Backend OpenExisting (PR #171)
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-10-12 03:55:24 +00:00

1.1 KiB
Raw Blame History

草稿:feature/svc-deploy-u4-login-key 任务卡

状态:待授权。主提案批准并获实施授权后,在共享主检出执行:

RECEIPT=/tmp/precheck-svc-deploy-u4.json CMD="make precheck" make evidence
make task-start NAME=feature/svc-deploy-u4-login-key PRECHECK_RECEIPT=/tmp/precheck-svc-deploy-u4.json

将本草稿字段拷入新卡并删除本文件或改为「已启动」链接。

建议填写

  • 主记录:modules/documents/docs/proposals/2026-10-12-svc-unified-deploy-and-login-key.md r1 §7 U4
  • 规格:docs/svc-deploy/u4-one-time-login-key.md v0.1
  • 目标:独立 login_keys;原子兑换;受限会话中间件;设密事务;无密码开户/恢复签发;OpenExisting 最小集
  • 非目标:svc 账户接线与登录页(U5);部署来源(U2/U3)
  • 组件:Backend 为主;Dev 仅 gitlink / 文档引用;Frontend 不强制本增量改动
  • 兄弟任务:可与 feature/svc-deploy-u1-account-binding 共用同一 R0
  • 验收:规格 §7 T1–T11;SQLite+PG;并发兑换;治理/Backend 测试
  • 启动授权:未授权(须主提案阶段批准 + 明确实施授权)