From 8fcbda4f6d47a788f13035619c0c10f9c6b3d0a0 Mon Sep 17 00:00:00 2001 From: weichen Date: Thu, 22 Oct 2026 14:16:56 +0000 Subject: [PATCH 1/4] Update Gitea endpoints after server migration Why: the Gitea server moved to https://gitea.naitangbaobao.cn with SSH on port 52222; endpoint references must follow or superproject CI checkout refuses the old URLs. Evidence: host-verified API reach and SSH auth (Dev task card fix/gitea-endpoint-migration) Impact: configuration only; no runtime behavior change. Refs: Dev PR #706 --- .gitea/workflows/ci.yml | 4 ++-- .gitea/workflows/governance.yml | 2 +- .gitmodules | 4 ++-- AGENTS.md | 6 +++--- 4 files changed, 8 insertions(+), 8 deletions(-) diff --git a/.gitea/workflows/ci.yml b/.gitea/workflows/ci.yml index fbe7402..5689af6 100644 --- a/.gitea/workflows/ci.yml +++ b/.gitea/workflows/ci.yml @@ -37,11 +37,11 @@ jobs: umask 077 trap 'rm -f "${RUNNER_TEMP}/iam-frontend-ci/ui_deploy_key" "${RUNNER_TEMP}/iam-frontend-ci/ui_known_hosts"' EXIT printf '%s' "${UI_DEPLOY_KEY}" > "${RUNNER_TEMP}/iam-frontend-ci/ui_deploy_key" - printf '%s\n' '[git-ssh.u1680832.nyat.app]:31411 ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIK55QSxDqMMZ1HIWHSPkQ7fyJkDKbdg98TeIv6SrR3qx' > "${RUNNER_TEMP}/iam-frontend-ci/ui_known_hosts" + printf '%s\n' '[gitea.naitangbaobao.cn（端口 52222）]:31411 ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIK55QSxDqMMZ1HIWHSPkQ7fyJkDKbdg98TeIv6SrR3qx' > "${RUNNER_TEMP}/iam-frontend-ci/ui_known_hosts" export GIT_SSH_COMMAND="ssh -F /dev/null -i ${RUNNER_TEMP}/iam-frontend-ci/ui_deploy_key -o IdentitiesOnly=yes -o StrictHostKeyChecking=yes -o UserKnownHostsFile=${RUNNER_TEMP}/iam-frontend-ci/ui_known_hosts -p 31411" cd "${RUNNER_TEMP}/iam-frontend-ci/ui" git init -q - git remote add origin "ssh://git@git-ssh.u1680832.nyat.app:31411/weichen/Agent-System-UI.git" + git remote add origin "ssh://git@gitea.naitangbaobao.cn:52222/weichen/Agent-System-UI.git" git fetch --depth=1 origin "${UI_SHA}" git checkout -q --detach FETCH_HEAD test "$(git rev-parse HEAD)" = "${UI_SHA}" diff --git a/.gitea/workflows/governance.yml b/.gitea/workflows/governance.yml index be24de5..f5891f1 100644 --- a/.gitea/workflows/governance.yml +++ b/.gitea/workflows/governance.yml @@ -31,7 +31,7 @@ jobs: parsed_server = urlsplit(SERVER) if parsed_server.scheme not in {"http", "https"} or not parsed_server.netloc: sys.exit("Checkout server must be the platform-injected http(s) URL") - SSH = "ssh://git@git-ssh.u1680832.nyat.app:31411/weichen/" + SSH = "ssh://git@gitea.naitangbaobao.cn:52222/weichen/" # 审查过的白名单，独立于候选 .gitmodules：仅列出两个治理 gitlink。 REPOSITORIES = { "deps/development-guidelines": "Development-Guidelines", diff --git a/.gitmodules b/.gitmodules index 49e221b..bdc7eff 100644 --- a/.gitmodules +++ b/.gitmodules @@ -1,6 +1,6 @@ [submodule "deps/development-guidelines"] path = deps/development-guidelines - url = ssh://git@git-ssh.u1680832.nyat.app:31411/weichen/Development-Guidelines.git + url = ssh://git@gitea.naitangbaobao.cn:52222/weichen/Development-Guidelines.git [submodule "deps/development-manager"] path = deps/development-manager - url = ssh://git@git-ssh.u1680832.nyat.app:31411/weichen/Development-Manager.git + url = ssh://git@gitea.naitangbaobao.cn:52222/weichen/Development-Manager.git diff --git a/AGENTS.md b/AGENTS.md index c477866..6acae71 100644 --- a/AGENTS.md +++ b/AGENTS.md @@ -24,9 +24,9 @@ 历史文档与旧链接里的 `git-panel.u1680832.nyat.app:30319` 已失效（TLS 握手失败）， 见到一律按过期处理，不要再试。当前权威通道： -- **Web / API（HTTPS）**：`https://git-home.u1680832.nyat.app:30319`（Gitea 1.27.3， +- **Web / API（HTTPS）**：`https://gitea.naitangbaobao.cn`（Gitea 1.27.3， API 前缀 `/api/v1`；偶发 broken pipe / 超时，重试即可）。 -- **Git over SSH**：`ssh://git@git-ssh.u1680832.nyat.app:31411/weichen/.git` +- **Git over SSH**：`ssh://git@gitea.naitangbaobao.cn:52222/weichen/.git` （各仓 origin 与 gitlink 均为此格式）。 - **API token**：`~/.secrets/gitea`，两行键值 `URL_PREFIX=…` 与 `ACCESS_TOKEN=<40 位 hex>`；取值 `grep ACCESS_TOKEN ~/.secrets/gitea | cut -d= -f2-`， @@ -34,7 +34,7 @@ （baseline 硬边界 2：只记录来源、字段与可用状态）。 - **SSH key**：`~/.ssh/home_gitea`（ED25519，公钥指纹 `SHA256:GYXaOXIMeloQ1fKSfdJ/ndgPQzs/Ix7Hk62ekfkfQ20`，Gitea 侧密钥名 GMKtec）； - `~/.ssh/config` 已有 `git-ssh.u1680832.nyat.app` 主机条目，克隆/推送直接可用。 + `~/.ssh/config` 已有 `gitea.naitangbaobao.cn（端口 52222）` 主机条目，克隆/推送直接可用。 ## Agent 执行与新项目准入（强制） -- 2.54.0 From bda546472d819f70c2c89af5d9acedad142ef663 Mon Sep 17 00:00:00 2001 From: weichen Date: Thu, 22 Oct 2026 14:25:44 +0000 Subject: [PATCH 2/4] Bump the development-manager pin for the endpoint migration Why: governance checks validate candidate .gitmodules URLs against the pinned development-manager scaffold, which now carries the new Gitea endpoint base after its own migration. Evidence: host-verified; see Dev PR #706 Impact: pin update only, part of the coordinated endpoint migration. Refs: Agent-System-Dev PR #706 --- deps/development-manager | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/deps/development-manager b/deps/development-manager index bd3a7de..24e8a5c 160000 --- a/deps/development-manager +++ b/deps/development-manager @@ -1 +1 @@ -Subproject commit bd3a7de57a3a9e1a4495b94c5fa5c08d71e7be8c +Subproject commit 24e8a5c8ba9833437672e8c72841de8c54db321d -- 2.54.0 From d4a1d1577f52a9a2c107437bdab620a0c0afa738 Mon Sep 17 00:00:00 2001 From: weichen Date: Thu, 22 Oct 2026 14:36:16 +0000 Subject: [PATCH 3/4] Bump migrated dependency pins for the endpoint migration Why: recursive submodule checkout reads pinned dep commits; their .gitmodules now carries the new Gitea endpoint base only in the migrated mains. Evidence: host-verified; see Dev PR #706 Impact: pin updates only, part of the coordinated endpoint migration. Refs: Agent-System-Dev PR #706 --- deps/development-guidelines | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/deps/development-guidelines b/deps/development-guidelines index 2688fd2..3ed9821 160000 --- a/deps/development-guidelines +++ b/deps/development-guidelines @@ -1 +1 @@ -Subproject commit 2688fd2be6a52c0bf110e7e6366b6f291ab5e4eb +Subproject commit 3ed982138c1ec065dc19b9871715af0c29836c21 -- 2.54.0 From a601bf9239455c1f6ea3972c87782bc616856878 Mon Sep 17 00:00:00 2001 From: weichen Date: Thu, 22 Oct 2026 15:14:25 +0000 Subject: [PATCH 4/4] Fix the UI checkout SSH port and known_hosts entry Why: the URL was migrated but the separate -p port and the known_hosts entry still referenced the old endpoint shape. Evidence: host-verified; see Dev PR #706 Impact: CI configuration only. Refs: Agent-System-Dev PR #706 --- .gitea/workflows/ci.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.gitea/workflows/ci.yml b/.gitea/workflows/ci.yml index 5689af6..d8dc68d 100644 --- a/.gitea/workflows/ci.yml +++ b/.gitea/workflows/ci.yml @@ -37,8 +37,8 @@ jobs: umask 077 trap 'rm -f "${RUNNER_TEMP}/iam-frontend-ci/ui_deploy_key" "${RUNNER_TEMP}/iam-frontend-ci/ui_known_hosts"' EXIT printf '%s' "${UI_DEPLOY_KEY}" > "${RUNNER_TEMP}/iam-frontend-ci/ui_deploy_key" - printf '%s\n' '[gitea.naitangbaobao.cn（端口 52222）]:31411 ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIK55QSxDqMMZ1HIWHSPkQ7fyJkDKbdg98TeIv6SrR3qx' > "${RUNNER_TEMP}/iam-frontend-ci/ui_known_hosts" - export GIT_SSH_COMMAND="ssh -F /dev/null -i ${RUNNER_TEMP}/iam-frontend-ci/ui_deploy_key -o IdentitiesOnly=yes -o StrictHostKeyChecking=yes -o UserKnownHostsFile=${RUNNER_TEMP}/iam-frontend-ci/ui_known_hosts -p 31411" + printf '%s\n' '[gitea.naitangbaobao.cn]:52222 ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIK55QSxDqMMZ1HIWHSPkQ7fyJkDKbdg98TeIv6SrR3qx' > "${RUNNER_TEMP}/iam-frontend-ci/ui_known_hosts" + export GIT_SSH_COMMAND="ssh -F /dev/null -i ${RUNNER_TEMP}/iam-frontend-ci/ui_deploy_key -o IdentitiesOnly=yes -o StrictHostKeyChecking=yes -o UserKnownHostsFile=${RUNNER_TEMP}/iam-frontend-ci/ui_known_hosts -p 52222" cd "${RUNNER_TEMP}/iam-frontend-ci/ui" git init -q git remote add origin "ssh://git@gitea.naitangbaobao.cn:52222/weichen/Agent-System-UI.git" -- 2.54.0