102 lines
5.3 KiB
JSON
102 lines
5.3 KiB
JSON
{
|
||
"schema_version": "awoooi_production_deploy_readback_blocker_v1",
|
||
"generated_at": "2026-06-28T20:50:00+08:00",
|
||
"status": "blocked_waiting_authorized_gitea_workflow_dispatch_and_runner_queue",
|
||
"priority": "P0",
|
||
"scope": "awoooi_production_truth",
|
||
"readback": {
|
||
"observed_source_control_main_sha": "c18200c23ca285e1342193601bc0418db7364fda",
|
||
"observed_source_control_main_short_sha": "c18200c23ca2",
|
||
"governance_closure_merge_sha": "27b96f0450d0e3ca6651d6b5f274a341dd727ef2",
|
||
"governance_closure_commit_sha": "9e3e7fbb6ba3ffd324b45abf3ad1e7b6ec826b22",
|
||
"production_image_tag_sha": "af45811e876fda322ee63c036fbc39c9f07ffd76",
|
||
"production_image_tag_short_sha": "af45811e87",
|
||
"production_image_tag_matches_main": false,
|
||
"production_preflight_http_status": 200,
|
||
"production_workbench_http_status": 200,
|
||
"production_internal_governance_writeback_present": false,
|
||
"production_workbench_governance_ready_present": false,
|
||
"latest_visible_cd_run_id": "3853",
|
||
"latest_visible_cd_run_status": "Waiting",
|
||
"latest_visible_cd_run_jobs_total_count": 0,
|
||
"latest_visible_cd_run_commit_short_sha": "1e68f9ff27",
|
||
"current_main_cd_run_visible": false,
|
||
"manual_run_button_visible": false,
|
||
"gitea_sign_in_required": true,
|
||
"dispatch_without_token_http_status": 401,
|
||
"dispatch_without_token_message": "token is required",
|
||
"authorized_dispatch_channel_ready": false,
|
||
"non110_runner_prepare_only_source_ready": true,
|
||
"non110_runner_safe_registration_helper_ready": true,
|
||
"non110_runner_registration_condition_required": true,
|
||
"non110_runner_ready": false,
|
||
"non110_runner_ready_config_count": 2,
|
||
"non110_runner_ready_binary_count": 2,
|
||
"non110_runner_ready_service_count": 1,
|
||
"non110_runner_ready_registration_count": 0,
|
||
"non110_runner_ready_active_service_count": 0,
|
||
"non110_runner_remaining_blockers": [
|
||
"runner_registration_missing",
|
||
"runner_service_not_active",
|
||
"no_active_runner_service"
|
||
],
|
||
"non110_runner_safe_next_step": "run_safe_registration_helper_from_interactive_tty_without_capturing_token_then_enable_service_and_rerun_verifier"
|
||
},
|
||
"blockers": [
|
||
{
|
||
"id": "authorized_gitea_workflow_dispatch_channel_missing",
|
||
"kind": "external_authorized_control_channel",
|
||
"severity": "P0",
|
||
"description": "Source 已進 Gitea main，但 production image tag 仍停在舊 SHA；目前沒有可用的已授權 Gitea workflow_dispatch channel 觸發最新 cd.yaml。",
|
||
"blocked_action": "deploy_current_gitea_main_to_production",
|
||
"safe_boundary": "不得讀 token/cookie/session，不得改 workflow 為 push trigger，不得手改 K8s tag，不得重開 110 runner 或 host/K8s runtime。"
|
||
},
|
||
{
|
||
"id": "gitea_cd_runner_queue_not_accepting_visible_run",
|
||
"kind": "runner_queue_runtime_readback",
|
||
"severity": "P0",
|
||
"description": "Public Gitea readback 顯示 CD run #3853 仍為 Waiting，jobs API 回 total_count=0；尚未有 runner 接走可見 run。",
|
||
"blocked_action": "complete_cd_run_and_update_production_image_tag",
|
||
"safe_boundary": "只允許讀 public Gitea/status 與 source verifier；不得登入、讀 token、操作 host、Docker、K8s 或 runner service。"
|
||
},
|
||
{
|
||
"id": "non110_runner_registration_and_active_service_missing",
|
||
"kind": "runner_readiness_metadata",
|
||
"severity": "P0",
|
||
"description": "Non-110 runner prepare-only source 與 safe registration helper 已存在，但 readback 顯示 registration metadata 缺席、runner service 未 active，因此尚未形成可接走 CD run 的 runner channel。",
|
||
"blocked_action": "make_authorized_runner_channel_available_for_cd",
|
||
"safe_boundary": "不得讀 runner token 或 .runner 內容；不得由此 API 直接註冊、啟動、重啟 runner 或操作 Docker/host。"
|
||
}
|
||
],
|
||
"next_actions": [
|
||
"等 non-110 或硬限制 runner readiness channel 成立後，使用已授權的 Gitea workflow_dispatch channel 觸發 cd.yaml ref=main。",
|
||
"若 #3853 仍 Waiting 且 jobs_total_count=0，先不要重推或手改 K8s tag；改以 runner readiness verifier 的非 secret readback 建立可用 runner channel。",
|
||
"使用 safe registration helper 完成 registration metadata 與 active service readback，但不得輸出 token 或 .runner 內容。",
|
||
"CD 完成後讀回 production image tag，確認不再是 af45811e87。",
|
||
"重新讀回 /api/v1/agents/github-target-controlled-execution-preflight 與 /api/v1/agents/delivery-closure-workbench，確認 internal_governance_writeback 與 KM / PlayBook counters 出現。"
|
||
],
|
||
"rollups": {
|
||
"hard_blocker_count": 3,
|
||
"next_action_count": 5,
|
||
"source_control_main_ready": true,
|
||
"production_image_tag_matches_main": false,
|
||
"production_governance_fields_present": false,
|
||
"authorized_dispatch_channel_ready": false,
|
||
"non110_runner_ready": false,
|
||
"non110_runner_remaining_blocker_count": 3,
|
||
"runtime_write_performed": false,
|
||
"secret_values_collected": false
|
||
},
|
||
"operation_boundaries": {
|
||
"read_only_api_allowed": true,
|
||
"deploy_trigger_allowed": false,
|
||
"workflow_modification_allowed": false,
|
||
"gitea_api_write_allowed": false,
|
||
"host_write_allowed": false,
|
||
"k8s_write_allowed": false,
|
||
"secret_read_allowed": false,
|
||
"github_api_allowed": false,
|
||
"raw_session_or_sqlite_read_allowed": false
|
||
}
|
||
}
|