docs(task): record #183 rework verification

2026-11-11 17:47:31 +08:00
parent e5e087daf7
commit 70e3fda184
1 changed files with 48 additions and 2 deletions
@@ -160,5 +160,51 @@
 `node node_modules/tsx/dist/cli.mjs --test --test-concurrency=2 tests/consult-varga-house-reference-1826.test.ts tests/consult-answer-fact-guard-1789.test.ts tests/consult-fact-guard-stream-1789.test.ts tests/consult-yoga-status-wording-1825.test.ts`
 共 43 项，0 失败、0 取消。包括原误写仍恰好产生一条不符的断言，既有断言未改。

-本机全量、类型检查、lint 与生产构建待补。1844 份回答的原回放材料位于独立验收环境，
-同一套回放由验收侧复跑。
+- Gitea [门禁 7152](https://git.copse.top/root/Jyotisha/actions/runs/7152) 对返工代码
+  `e5e087daf` 通过。前端全量 3644 通过、0 失败、0 取消，Python 验证任务通过。
+- 本机 `npm test -- --test-concurrency=4` 退出码 1，3614 通过、30 失败、0 取消。当前
+  staging 与初次执行时的前端 Git tree 完全相同。对照同机 staging TAP 名录，3611 个
+  既有顶层测试名全部保留，本分支新增 13 个，其中本次返工新增 4 个。30 个失败里 29 个
+  与基线重合。数据库身份隔离用例在共享夹具目录报 `EPERM`，改用独立临时目录单独重跑
+  通过。Windows 全量启动后补了一个冒号歧义断言，最终代码已由四个定向套件和 Gitea
+  全量覆盖。
+- TypeScript `--noEmit` 和生产构建通过，首页 `/` 保持 Static。首页直接引用的 36 份 JS
+  合计 515086 字节 gzip，与 staging 基线相同。ESLint 0 error、62 warnings，隐私检查
+  62 项通过。
+- 1844 份回答的原回放材料位于独立验收环境，同一套回放由验收侧复跑。
+
+<details>
+<summary>本机首次全量的 30 个失败名</summary>
+
+- `operation-level admin email reauthentication is removed from routes and UI`
+- `a lookup does not reset the answer clock: the same 70 s signal bounds the whole answer phase`
+- `the answer clock cutting the answer step mid-sentence is truncated, recorded and not charged`
+- `service and restricted admin database identities stay separated`
+- `staging backups are encrypted, atomic, private, and retain the newest three`
+- `rejects destructive backup directory aliases and symlink components before mutation`
+- `rejects unsafe writable backup parents before creating the target`
+- `rejects a direct canonical sticky shared backup directory before chmod`
+- `creates every absent backup path component privately despite a permissive caller umask`
+- `same-second backups publish once without overwriting the completed archive`
+- `find enumeration failures preserve existing backups and do not report completion`
+- `refuses full disks and removes a failed-pipeline partial file`
+- `database env validator accepts punctuated literal required secrets`
+- `database env validator enforces an explicit staging owner uid without printing values`
+- `database env validator accepts a private valid file without printing values`
+- `personal report job migration is atomic, lease-bound, recoverable, and owner read-only`
+- `personal report sections enforce owner-read RLS and service-owned durable transitions`
+- `staging model provider env preparation removes legacy settings and keeps one stable key`
+- `staging env validator rejects selector drift, duplicates, and unsafe permissions`
+- `production env validators accept only self-hosted production selectors and role URLs`
+- `immutable Skill migration enforces RPC-only identity, legacy adoption, and cascade-safe receipts`
+- `importing the registry creates no runtime directory`
+- `a used runtime root is removed when the process exits`
+- `changed staging workflows are syntactically valid YAML`
+- `live staging sync preserves env, state, incoming files, and encrypted backups`
+- `live staging sync repairs nested deploy-tree drift without preserving foreign ownership`
+- `first immutable deployment rolls back to validated local image IDs`
+- `deployment scripts pass shell syntax validation`
+- `is-docs-only-range.sh decides from local history and refuses non-ancestor ranges`
+- `bounded npm install distinguishes forced timeout, OOM, and unknown failure and cleans its container`
+
+</details>