chore: 导入旧记忆备份供恢复

projects/6f47523e-e22e-4cdd-bd18-76e5e474ee0c/curated/Ax9000WRTBuild – Development Tasks (Shared).md

@@ -0,0 +1,110 @@
+---
+title: Ax9000WRTBuild – Development Tasks (Shared)
+type: curated
+permalink: main/projects/6f47523e-e22e-4cdd-bd18-76e5e474ee0c/curated/ax9000-wrtbuild-development-tasks-shared
+stable_id: 67e34406-4966-4e48-ab88-69e2fb15a144
+scope: project
+project_id: 6f47523e-e22e-4cdd-bd18-76e5e474ee0c
+workspace_type: general
+usage_profile_id: null
+preference_context: general
+document_type: tasks
+revision: 9
+source_memory_ids: []
+source_checkpoint_ids: []
+source_file_ids: []
+source_git_commit: a066d95b43240f85f5abcf18305c2edfe1da91a3
+source_git_commits:
+- a066d95b43240f85f5abcf18305c2edfe1da91a3
+source_agent_sync_ids: []
+model_connection: Sub2API
+model_name: openai/gpt-oss-20b
+source_count: 52
+source_revisions:
+  memory:be916376-ddf7-44e0-be53-963d5b2aa655: '1'
+  memory:1033d1fb-6d87-4009-8b39-498c8963f6aa: '1'
+  memory:afa3e76f-eb77-49b5-9769-6ba559026c35: '1'
+  memory:86452d01-8146-41aa-80f9-7d5481135394: '1'
+  memory:61e30ee3-0e26-4d64-b00e-f77bc3a3fd60: '1'
+  memory:7687d956-f904-4629-bd5d-4f5b55ec2b84: '1'
+  memory:ce9006a3-2313-411f-b577-10bbb9b9c3bb: '1'
+  memory:e61163f1-50db-49d4-839b-a8bdb67741c2: '1'
+  memory:98bc33f7-c293-4e7c-aca8-f54752e2d5fa: '1'
+  memory:aecf7e99-3d31-4d3f-ada5-928eee77c95b: '1'
+  memory:5daa77ea-300c-4185-b408-8e5d021e67d5: '1'
+  memory:86a5a0e1-2536-48c2-b48a-5e6b8e85cd50: '1'
+  memory:52072cd9-4e1c-40c2-8393-3ec92b962a1d: '1'
+  memory:4f66cf8b-520b-4407-80a6-be6b470b6713: '1'
+  memory:c19a1ce5-b51c-4fe0-bdea-a7521dde7618: '1'
+source_dispositions:
+  processed: 52
+  unchanged: 0
+  unsupported: 0
+  skipped: 0
+cited_source_ids:
+- curated_baseline:67e34406-4966-4e48-ab88-69e2fb15a144
+- memory:52072cd9-4e1c-40c2-8393-3ec92b962a1d
+- memory:4f66cf8b-520b-4407-80a6-be6b470b6713
+- memory:c19a1ce5-b51c-4fe0-bdea-a7521dde7618
+- memory:86a5a0e1-2536-48c2-b48a-5e6b8e85cd50
+- memory:be916376-ddf7-44e0-be53-963d5b2aa655
+- memory:1033d1fb-6d87-4009-8b39-498c8963f6aa
+- memory:afa3e76f-eb77-49b5-9769-6ba559026c35
+- memory:86452d01-8146-41aa-80f9-7d5481135394
+- memory:61e30ee3-0e26-4d64-b00e-f77bc3a3fd60
+- memory:7687d956-f904-4629-bd5d-4f5b55ec2b84
+- memory:ce9006a3-2313-411f-b577-10bbb9b9c3bb
+- memory:e61163f1-50db-49d4-839b-a8bdb67741c2
+- memory:98bc33f7-c293-4e7c-aca8-f54752e2d5fa
+- memory:aecf7e99-3d31-4d3f-ada5-928eee77c95b
+- memory:5daa77ea-300c-4185-b408-8e5d021e67d5
+job_cited_source_ids: []
+conflicts: []
+supersedes: []
+preferences: []
+source_cursor: 700
+source_hash: 425f69c7d615a0522a06a54c0b88e30cbb169b3da8e430a957345bc06a169bb7
+prompt_version: 2026-08-12.3
+schema_version: '3'
+curation_job_id: 63262a75-ff99-4aa4-9c31-03f6b59df88f
+created_at: '2026-08-12T17:42:38.214414+00:00'
+updated_at: '2026-09-19T08:47:11.690265+00:00'
+tags:
+- project
+- tasks
+---
+
+## Current Outstanding Work
+
+| # | Task | Current Status | Suggested Approach | Source IDs |
+|---|------|-----------------|--------------------|------------|
+| 1 | Docker Hub proxy (“manual”) – `http://127.0.0.1:7897` | **待实现** – Docker Desktop must be configured to use the local proxy so that `docker pull` can resolve images without external network access. | • Set the proxy in Docker Desktop’s **Proxies** → `http://127.0.0.1:7897` (see fix 468f52a6‑e941‑49f7‑a422‑64bbcec6e0f4). | `67e34406-4966-4e48-ab88-69e2fb15a144` |
+| 2 | FastAPI JWT auth, bind to `127.0.0.1` | **待实现** – currently unauthenticated and bound to all interfaces. | • Add JWT middleware and `--host 127.0.0.1` to mitigate remote exploitation. | `67e34406-4966-4e48-ab88-69e2fb15a144` |
+| 3 | Migrate `.runtime/*.json` credentials to Vaultwarden | **待实现** – secrets currently stored in plaintext. | • Delete all `.runtime/*.json`, upload corresponding secrets to Vaultwarden via API, reference Vault paths in configuration. | `67e34406-4966-4e48-ab88-69e2fb15a144` |
+| 4 | Pin Docker image digest, Git commit SHA, `uv.lock` | **待实现** – dependencies could drift between runs. | • Record image digest, commit SHA, and lock file hash in a CI artifact or logging layer to ensure reproducibility. | `67e34406-4966-4e48-ab88-69e2fb15a144` |
+| 5 | Convert patch script (`patch_ax9000.py`) to `.patch` file and use `git am` | **待实现** – fragile text replacement. | • Create a `0001-<description>.patch` and apply with `git am` during CI. | `67e34406-4966-4e48-ab88-69e2fb15a144` |
+| 6 | CI pipeline (GitHub Actions) – lint, tests, build, artifact upload | **待实现** – no CI defined yet. | • Add a workflow that checks syntax, runs unit‑tests, builds the image, and uploads `outputs/ax9000/` to a release artifact. | `67e34406-4966-4e48-ab88-69e2fb15a144` |
+| 7 | Unified JSON‑Schema → Pydantic & TypeScript | **待实现** – inconsistent UI/model. | • Adopt a single JSON‑Schema to generate Pydantic models in FastAPI and TS types for Vue to prevent mismatches. | `67e34406-4966-4e48-ab88-69e2fb15a144` |
+
+**Resolved Items**
+
+- Git repository on `main` is committed and pushed (`0e152f6c087c29b999258a24fffbdaab13fb9607`).
+- Docker image `openwrt‑local‑builder:25.12` exists locally.
+- FastAPI running at `0.0.0.0:9001`; Vue dev server available at `localhost:9000`.
+- Built firmware ZIP stored in `outputs/ax9000/`.
+
+**Open Work**
+
+Conflicts or unresolved settings are limited to the above task list; the system’s current state satisfies the component readiness tests, but the security, reproducibility, and infrastructure concerns need to be addressed before shipping.
+
+---
+
+## Preferences
+- **Answer‑First** – Deliver known answers immediately before discussion. (source: `9988effa-80c9-4062-97a2-8a5f40e3856a`)
+- **Development Preference – Use Chinese** – All communication in Chinese. (sources: `7429c22e-50ff-458a-97c0-423c679904c7`, `e4fc35f2-1606-4b79-9c1e-367edeea97d0`)
+- **Vault‑First Credential Access** – All secrets live in Vaultwarden, only one matching vault entry is used. (source: `105b328f-4bda-4641-90a7-7282ef156316`)
+- **Push After Commit** – Every finished feature is committed immediately and pushed if a remote exists. Rebase on new remote changes, avoid force‑push unless explicitly authorised. (source: `2406be77-e6ce-4572-890e-18747c968f55`)
+- **No Auto‑Project Creation** – In a temporary session without a project directory, never auto‑create a project. (source: `ac8bb556-947d-43a1-87d9-bfe7e8da310b`)
+- **MemRelay Only** – All memory persists in MemRelay; `aidocs/` is never updated unless exported. (sources: `bf88c265-4749-4c50-85bc-4bae25298cd5`, `25332e63-48d0-4daa-8c08-d676bb2d310d`)
+
+Each preference is classified at **scenario** level as they are supported by a single source ID and no counterexamples exist.

projects/6f47523e-e22e-4cdd-bd18-76e5e474ee0c/curated/Ax9000WRTBuild – Project Glossary.md

@@ -0,0 +1,68 @@
+---
+title: Ax9000WRTBuild – Project Glossary
+type: curated
+permalink: main/projects/6f47523e-e22e-4cdd-bd18-76e5e474ee0c/curated/ax9000-wrtbuild-project-glossary
+stable_id: 4f34e9e9-37e1-4902-b7b9-d8db5703ec11
+scope: project
+project_id: 6f47523e-e22e-4cdd-bd18-76e5e474ee0c
+workspace_type: general
+usage_profile_id: null
+preference_context: general
+document_type: glossary
+revision: 3
+source_memory_ids: []
+source_checkpoint_ids: []
+source_file_ids: []
+source_git_commit: a066d95b43240f85f5abcf18305c2edfe1da91a3
+source_git_commits:
+- a066d95b43240f85f5abcf18305c2edfe1da91a3
+source_agent_sync_ids: []
+model_connection: Sub2API
+model_name: openai/gpt-oss-20b
+source_count: 52
+source_revisions: {}
+source_dispositions:
+  processed: 52
+  unchanged: 0
+  unsupported: 0
+  skipped: 0
+cited_source_ids:
+- git:packages/luci-app-frpc/root/usr/libexec/frpc-launcher
+- git:packages/luci-app-frpc/root/usr/libexec/rpcd/frpc-manager
+- git:profiles/ax9000/presets.json
+job_cited_source_ids:
+- git:packages/luci-app-frpc/root/usr/libexec/frpc-launcher
+- git:packages/luci-app-frpc/root/usr/libexec/rpcd/frpc-manager
+conflicts: []
+supersedes: []
+preferences: []
+source_cursor: 700
+source_hash: 425f69c7d615a0522a06a54c0b88e30cbb169b3da8e430a957345bc06a169bb7
+prompt_version: 2026-08-12.3
+schema_version: '3'
+curation_job_id: 63262a75-ff99-4aa4-9c31-03f6b59df88f
+created_at: '2026-08-12T18:38:08.245481+00:00'
+updated_at: '2026-09-19T08:47:16.705099+00:00'
+tags:
+- project
+- glossary
+---
+
+| Term | Definition | Source |
+|------|------------|---------|
+| **KISS / YAGNI** | Keep it simple, no unnecessary features. | `bf88c265-4749-4c50-85bc-4bae25298cd5` |
+| **Vaultwarden** | Single source for all sensitive data; code never stores secrets. | `105b328f-4bda-4641-90a7-7282ef156316` |
+| **NSS** | Qualcomm Network Subsystem – required for AX9000. | `4f3555d5-bffb-45c9-9c35-a04e7c41800f` |
+| **LuCI** | OpenWrt web UI framework; custom `luci‑app‑ax900‑hardware` for fan/LED. | `git:packages/luci-app-ax900-hardware/*` |
+| **FastAPI** | Backend service, currently unauthenticated. | `ff34c6eb-6bba-41e5-9e43-ff80941fa823` |
+| **Vue 3 + Vite** | Front‑end SPA dev server. | `ff34c6eb-6bba-41e5-9e43-ff80941fa823` |
+| **Docker Hub Proxy** | Local proxy configuration to allow Docker to pull from the internet without external access. | `468f52a6-e941-49f7-a422-64bbcec6e0f4` |
+| **FastAPI JWT Auth** | JWT‑based authentication binding FastAPI to `127.0.0.1`. | `67e34406-4966-4e48-ab88-69e2fb15a144` |
+| **Unified JSON‑Schema** | Single schema driving both Pydantic models and Vue TypeScript definitions. | `67e34406-4966-4e48-ab88-69e2fb15a144` |
+| **OpenWrt Source** | `qosmio/openwrt‑ipq 25.12‑nss` – base for AX9000 firmware. | `ac351f5e-5eb7-4752-8666-56550b5b2130` |
+| **Feeding** | Footnotes: Official OpenWrt + Qosmio NSS + community `kiddin9`. | `ac351f5e-5eb7-4752-8666-56550b5b2130` |
+| **Luci‑App‑AX900‑Hardware** | Custom pacakge for fan/LED control. | `ac351f5e-5eb7-4752-8666-56550b5b2130` |
+| **frpc** | Frp client package for AX9000. | `git:packages/luci-app-frpc/root/usr/libexec/frpc-launcher` |
+| **frpc‑manager** | RPC interface managing frpc state and configuration. | `git:packages/luci-app-frpc/root/usr/libexec/rpcd/frpc-manager` |
+| **Package‑Catalog** | JSON listing all packages shipped with profile `ax9000`. | `profiles/ax9000/package-catalog.json` |
+| **Build Scripts** | Scripts handling Docker image building, package cache, and firmware compilation. | `scripts/build-docker.ps1`, `scripts/build.sh` |

projects/6f47523e-e22e-4cdd-bd18-76e5e474ee0c/curated/Ax9000WRTBuild – Project Overview.md

@@ -0,0 +1,116 @@
+---
+title: Ax9000WRTBuild – Project Overview
+type: curated
+permalink: main/projects/6f47523e-e22e-4cdd-bd18-76e5e474ee0c/curated/ax9000-wrtbuild-project-overview
+stable_id: 7b8945b7-d58e-4bbd-93d0-63b5569c98e4
+scope: project
+project_id: 6f47523e-e22e-4cdd-bd18-76e5e474ee0c
+workspace_type: general
+usage_profile_id: null
+preference_context: general
+document_type: overview
+revision: 5
+source_memory_ids: []
+source_checkpoint_ids: []
+source_file_ids: []
+source_git_commit: a066d95b43240f85f5abcf18305c2edfe1da91a3
+source_git_commits:
+- a066d95b43240f85f5abcf18305c2edfe1da91a3
+source_agent_sync_ids: []
+model_connection: Sub2API
+model_name: openai/gpt-oss-20b
+source_count: 52
+source_revisions:
+  memory:be916376-ddf7-44e0-be53-963d5b2aa655: '1'
+  memory:5daa77ea-300c-4185-b408-8e5d021e67d5: '1'
+  memory:1033d1fb-6d87-4009-8b39-498c8963f6aa: '1'
+  memory:e61163f1-50db-49d4-839b-a8bdb67741c2: '1'
+  memory:86a5a0e1-2536-48c2-b48a-5e6b8e85cd50: '1'
+  memory:814d437d-2c21-4f02-b17b-97fd3ec03f7e: '1'
+  memory:650349fe-0a22-4d62-b3ab-329523cb1960: '1'
+  memory:180c6231-32a2-4513-980b-613afff09cbe: '1'
+  memory:635986da-9408-414d-8d89-73e76bd921ed: '1'
+  memory:f8c5300e-3068-4003-a816-b20f997d9715: '1'
+  memory:4f58f272-ba63-4f40-a617-c35cfa4cad6e: '1'
+  memory:b83ec829-f008-4de0-a4a3-79ad7a6c3a98: '1'
+  memory:bf2dc676-cc13-41f7-b05d-4ed20fc6360e: '1'
+  memory:975e8c20-b999-4c43-80c0-78030668fec1: '1'
+  memory:f1a1ef45-2ef0-4ace-9385-05a7bd12ab85: '1'
+  memory:2dc986e1-06de-466f-bfd5-9221cc66fa14: '1'
+  memory:77f1fcf5-022f-47b4-a605-52c12ba91612: '1'
+source_dispositions:
+  processed: 52
+  unchanged: 0
+  unsupported: 0
+  skipped: 0
+cited_source_ids:
+- memory:86a5a0e1-2536-48c2-b48a-5e6b8e85cd50
+- memory:814d437d-2c21-4f02-b17b-97fd3ec03f7e
+- memory:650349fe-0a22-4d62-b3ab-329523cb1960
+- memory:180c6231-32a2-4513-980b-613afff09cbe
+- memory:635986da-9408-414d-8d89-73e76bd921ed
+- memory:f8c5300e-3068-4003-a816-b20f997d9715
+- memory:4f58f272-ba63-4f40-a617-c35cfa4cad6e
+- memory:b83ec829-f008-4de0-a4a3-79ad7a6c3a98
+- memory:bf2dc676-cc13-41f7-b05d-4ed20fc6360e
+- memory:975e8c20-b999-4c43-80c0-78030668fec1
+- memory:f1a1ef45-2ef0-4ace-9385-05a7bd12ab85
+- memory:2dc986e1-06de-466f-bfd5-9221cc66fa14
+- memory:77f1fcf5-022f-47b4-a605-52c12ba91612
+- source_file:packages/luci-app-frpc/root/www/luci-static/resources/view/frpc.js
+- source_file:packages/luci-app-frpc/Makefile
+- source_file:packages/luci-app-frpc/po/zh_Hans/frpc.po
+- source_file:AGENTS.md
+- memory:be916376-ddf7-44e0-be53-963d5b2aa655
+- memory:5daa77ea-300c-4185-b408-8e5d021e67d5
+- memory:1033d1fb-6d87-4009-8b39-498c8963f6aa
+- memory:e61163f1-50db-49d4-839b-a8bdb67741c2
+job_cited_source_ids: []
+conflicts: []
+supersedes: []
+preferences: []
+source_cursor: 700
+source_hash: 425f69c7d615a0522a06a54c0b88e30cbb169b3da8e430a957345bc06a169bb7
+prompt_version: 2026-08-12.3
+schema_version: '3'
+curation_job_id: 63262a75-ff99-4aa4-9c31-03f6b59df88f
+created_at: '2026-08-12T17:42:27.070190+00:00'
+updated_at: '2026-09-19T08:47:00.547268+00:00'
+tags:
+- global_guidance
+- architecture
+---
+
+# Global Guidance & Policies
+
+- **Answer‑First** – deliver confirmed answers immediately. <br>
+- **No Auto‑Project Creation** – only write global‑scope memory in temporary sessions.
+- **Push After Commit** – commits are pushed automatically; rebase on new remote changes.
+- **MemRelay Only** – all memory persists in MemRelay; no local `aidocs/` artifacts are created unless exported by the user.
+- **Vault‑First Credential Access** – all sensitive data resides in Vaultwarden; any matching vault entry is automatically used.
+- **Development Preferences** – communication is in Chinese; follow KISS & YAGNI, avoid unnecessary dependencies.
+
+# Project Architecture
+
+- **Host**: Windows 10/11 with WSL 2 and Docker Desktop (Linux container).
+- **Container**: `openwrt‑local‑builder:25.12` based on Ubuntu 24.04.
+- **Volume**: `openwrt‑build‑work` > 50 GB.
+- **Back‑end**: FastAPI 0.139 (dev mode, unauthenticated by default).
+- **Front‑end**: Vue 3 with Vite, served on `localhost:9000`.
+- **OpenWrt Source**: `qosmio/openwrt‑ipq` 25.12‑nss with feeds from the official repository, Qosmio NSS, and community `kiddin9`.
+- **Luci App**: `luci‑app‑ax900‑hardware` (fan & LED control).
+- **NSS**: `kmod‑qca‑nss‑*`, `nss‑firmware‑ipq807x`.
+
+## Key Decisions Supporting Architecture
+
+- Use separate FastAPI for backend and Vue for the console.
+- Replace fragile patch scripts with formal `.patch` files and Git
+  apply.
+- Adopt a single JSON‑Schema for configuration, driving both Pydantic
+  types on the backend and TypeScript types for the front‑end.
+- Lock Docker image digest, Git commit SHA, and the `uv.lock`
+  to ensure deterministic builds.
+- Store credentials securely in Vaultwarden.
+
+*All architecture and decision points are derived from the project
+memorandum and associated decisions documents.*

projects/6f47523e-e22e-4cdd-bd18-76e5e474ee0c/curated/Current State of the Ax9000WRTBuild Repository.md

@@ -0,0 +1,96 @@
+---
+title: Current State of the Ax9000WRTBuild Repository
+type: curated
+permalink: main/projects/6f47523e-e22e-4cdd-bd18-76e5e474ee0c/curated/current-state-of-the-ax9000-wrtbuild-repository
+stable_id: f3d0deb6-4d3a-4877-aec0-ceeb9c26ffb6
+scope: project
+project_id: 6f47523e-e22e-4cdd-bd18-76e5e474ee0c
+workspace_type: general
+usage_profile_id: null
+preference_context: general
+document_type: current_state
+revision: 9
+source_memory_ids: []
+source_checkpoint_ids: []
+source_file_ids: []
+source_git_commit: a066d95b43240f85f5abcf18305c2edfe1da91a3
+source_git_commits:
+- a066d95b43240f85f5abcf18305c2edfe1da91a3
+source_agent_sync_ids: []
+model_connection: Sub2API
+model_name: openai/gpt-oss-20b
+source_count: 52
+source_revisions:
+  memory:be916376-ddf7-44e0-be53-963d5b2aa655: '1'
+  memory:86452d01-8146-41aa-80f9-7d5481135394: '1'
+  memory:61e30ee3-0e26-4d64-b00e-f77bc3a3fd60: '1'
+  memory:afa3e76f-eb77-49b5-9769-6ba559026c35: '1'
+  memory:86a5a0e1-2536-48c2-b48a-5e6b8e85cd50: '1'
+  memory:814d437d-2c21-4f02-b17b-97fd3ec03f7e: '1'
+  memory:4f66cf8b-520b-4407-80a6-be6b470b6713: '1'
+  memory:3104a20d-fc38-46c7-83e3-8c8f9e5778b3: '1'
+  memory:52072cd9-4e1c-40c2-8393-3ec92b962a1d: '1'
+  memory:9510062c-1e2f-4760-a745-94c7cabc8f02: '1'
+  memory:0e44f910-febe-4121-a668-a11ba9a61d00: '1'
+  memory:41d9da9c-88ae-444d-a246-308e9fbb2387: '1'
+  memory:f46a1390-24a0-421b-8ca9-f95eeae06efb: '1'
+  memory:e8b969f2-03e6-4c96-862b-1aabf853ac07: '1'
+source_dispositions:
+  processed: 52
+  unchanged: 0
+  unsupported: 0
+  skipped: 0
+cited_source_ids:
+- curated_baseline:f3d0deb6-4d3a-4877-aec0-ceeb9c26ffb6
+- memory:0e44f910-febe-4121-a668-a11ba9a61d00
+- memory:41d9da9c-88ae-444d-a246-308e9fbb2387
+- memory:f46a1390-24a0-421b-8ca9-f95eeae06efb
+- memory:e8b969f2-03e6-4c96-862b-1aabf853ac07
+- memory:4f66cf8b-520b-4407-80a6-be6b470b6713
+- memory:3104a20d-fc38-46c7-83e3-8c8f9e5778b3
+- memory:52072cd9-4e1c-40c2-8393-3ec92b962a1d
+- memory:9510062c-1e2f-4760-a745-94c7cabc8f02
+- memory:86a5a0e1-2536-48c2-b48a-5e6b8e85cd50
+- memory:814d437d-2c21-4f02-b17b-97fd3ec03f7e
+- memory:be916376-ddf7-44e0-be53-963d5b2aa655
+- memory:86452d01-8146-41aa-80f9-7d5481135394
+- memory:61e30ee3-0e26-4d64-b00e-f77bc3a3fd60
+- memory:afa3e76f-eb77-49b5-9769-6ba559026c35
+job_cited_source_ids: []
+conflicts: []
+supersedes: []
+preferences: []
+source_cursor: 700
+source_hash: 425f69c7d615a0522a06a54c0b88e30cbb169b3da8e430a957345bc06a169bb7
+prompt_version: 2026-08-12.3
+schema_version: '3'
+curation_job_id: 63262a75-ff99-4aa4-9c31-03f6b59df88f
+created_at: '2026-08-12T17:42:28.786608+00:00'
+updated_at: '2026-09-19T08:47:02.032813+00:00'
+tags:
+- current_state
+- build_output
+---
+
+# Git Repository
+
+- Branch `main` has commit `0e152f6c087c29b999258a24fffbdaab13fb9607` (pushed to remote).
+
+# Docker Image
+
+- `openwrt‑local‑builder:25.12` is built and available locally.
+
+# Services
+
+- **FastAPI** is running on `0.0.0.0:9001`, currently unauthenticated. <br>
+- **Vue** dev server is active on `localhost:9000`.
+
+# Build Artifacts
+
+- Firmware ZIP files are present in `outputs/ax9000/`.
+
+# Pending Work
+
+7 core tasks remain: Docker Hub proxy setup, FastAPI JWT auth, secret migration to Vaultwarden, dependency pinning, patch conversion, CI integration, and JSON‑Schema consolidation.
+
+All details are drawn from the current state section of the project memorandum.

projects/6f47523e-e22e-4cdd-bd18-76e5e474ee0c/curated/Key Architectural and Technical Decisions.md

@@ -0,0 +1,75 @@
+---
+title: Key Architectural and Technical Decisions
+type: curated
+permalink: main/projects/6f47523e-e22e-4cdd-bd18-76e5e474ee0c/curated/key-architectural-and-technical-decisions
+stable_id: 4f3555d5-bffb-45c9-9c35-a04e7c41800f
+scope: project
+project_id: 6f47523e-e22e-4cdd-bd18-76e5e474ee0c
+workspace_type: general
+usage_profile_id: null
+preference_context: general
+document_type: decisions
+revision: 5
+source_memory_ids: []
+source_checkpoint_ids: []
+source_file_ids: []
+source_git_commit: a066d95b43240f85f5abcf18305c2edfe1da91a3
+source_git_commits:
+- a066d95b43240f85f5abcf18305c2edfe1da91a3
+source_agent_sync_ids: []
+model_connection: Sub2API
+model_name: openai/gpt-oss-20b
+source_count: 52
+source_revisions:
+  memory:7687d956-f904-4629-bd5d-4f5b55ec2b84: '1'
+  memory:98bc33f7-c293-4e7c-aca8-f54752e2d5fa: '1'
+  memory:86452d01-8146-41aa-80f9-7d5481135394: '1'
+  memory:61e30ee3-0e26-4d64-b00e-f77bc3a3fd60: '1'
+  memory:afa3e76f-eb77-49b5-9769-6ba559026c35: '1'
+  memory:1033d1fb-6d87-4009-8b39-498c8963f6aa: '1'
+  memory:e61163f1-50db-49d4-839b-a8bdb67741c2: '1'
+  memory:77f1fcf5-022f-47b4-a605-52c12ba91612: '1'
+  memory:86a5a0e1-2536-48c2-b48a-5e6b8e85cd50: '1'
+  memory:814d437d-2c21-4f02-b17b-97fd3ec03f7e: '1'
+source_dispositions:
+  processed: 52
+  unchanged: 0
+  unsupported: 0
+  skipped: 0
+cited_source_ids:
+- memory:77f1fcf5-022f-47b4-a605-52c12ba91612
+- memory:86a5a0e1-2536-48c2-b48a-5e6b8e85cd50
+- memory:814d437d-2c21-4f02-b17b-97fd3ec03f7e
+- memory:7687d956-f904-4629-bd5d-4f5b55ec2b84
+- memory:98bc33f7-c293-4e7c-aca8-f54752e2d5fa
+- memory:86452d01-8146-41aa-80f9-7d5481135394
+- memory:61e30ee3-0e26-4d64-b00e-f77bc3a3fd60
+- memory:afa3e76f-eb77-49b5-9769-6ba559026c35
+- memory:1033d1fb-6d87-4009-8b39-498c8963f6aa
+- memory:e61163f1-50db-49d4-839b-a8bdb67741c2
+job_cited_source_ids: []
+conflicts: []
+supersedes: []
+preferences: []
+source_cursor: 700
+source_hash: 425f69c7d615a0522a06a54c0b88e30cbb169b3da8e430a957345bc06a169bb7
+prompt_version: 2026-08-12.3
+schema_version: '3'
+curation_job_id: 63262a75-ff99-4aa4-9c31-03f6b59df88f
+created_at: '2026-08-12T17:42:31.241856+00:00'
+updated_at: '2026-09-19T08:47:04.799156+00:00'
+tags:
+- decisions
+---
+
+| Dec# | Decision | Rationale | Source |
+|------|-----------|------------|---------|
+| 1 | FastAPI + Vue dedicated console | Decoupled architecture | `4f3555d5-bffb-45c9-9c35-a04e7c41800f` |
+| 2 | Replace `patch_ax9000.py` with formal `.patch` | Avoid fragile text replacement | `67e34406-4966-4e48-ab88-69e2fb15a144` |
+| 3 | FRPC UI bug fix, bump to r12 | UI consistency in Chinese | `77f1fcf5-022f-47b4-a605-52c12ba91612` |
+| 4 | Adopt single JSON‑Schema for config | Remove UI/backend mismatch | `67e34406-4966-4e48-ab88-69e2fb15a144` |
+| 5 | Lock Docker digest, Git SHA, `uv.lock` | Deterministic builds | `67e34406-4966-4e48-ab88-69e2fb15a144` |
+| 6 | Vault‑only credential store | Security compliance | `67e34406-4966-4e48-ab88-69e2fb15a144` |
+| 7 | FastAPI JWT auth scoped to 127.0.0.1 | Reduce external risk | `67e34406-4966-4e48-ab88-69e2fb15a144` |
+
+Decisions are presented in order of priority and are corroborated by the decision table in the memorandum.

projects/6f47523e-e22e-4cdd-bd18-76e5e474ee0c/curated/Project Timeline & Milestones.md

@@ -0,0 +1,135 @@
+---
+title: Project Timeline & Milestones
+type: curated
+permalink: main/projects/6f47523e-e22e-4cdd-bd18-76e5e474ee0c/curated/project-timeline-milestones
+stable_id: 2ff96481-35cc-41e3-84c9-d42618780458
+scope: project
+project_id: 6f47523e-e22e-4cdd-bd18-76e5e474ee0c
+workspace_type: general
+usage_profile_id: null
+preference_context: general
+document_type: timeline
+revision: 9
+source_memory_ids: []
+source_checkpoint_ids: []
+source_file_ids: []
+source_git_commit: a066d95b43240f85f5abcf18305c2edfe1da91a3
+source_git_commits:
+- a066d95b43240f85f5abcf18305c2edfe1da91a3
+source_agent_sync_ids: []
+model_connection: Sub2API
+model_name: openai/gpt-oss-20b
+source_count: 52
+source_revisions:
+  memory:be916376-ddf7-44e0-be53-963d5b2aa655: '1'
+  memory:98bc33f7-c293-4e7c-aca8-f54752e2d5fa: '1'
+  memory:5daa77ea-300c-4185-b408-8e5d021e67d5: '1'
+  memory:61e30ee3-0e26-4d64-b00e-f77bc3a3fd60: '1'
+  memory:86452d01-8146-41aa-80f9-7d5481135394: '1'
+  memory:afa3e76f-eb77-49b5-9769-6ba559026c35: '1'
+  memory:1033d1fb-6d87-4009-8b39-498c8963f6aa: '1'
+  memory:e61163f1-50db-49d4-839b-a8bdb67741c2: '1'
+  memory:7687d956-f904-4629-bd5d-4f5b55ec2b84: '1'
+  memory:650349fe-0a22-4d62-b3ab-329523cb1960: '1'
+  memory:180c6231-32a2-4513-980b-613afff09cbe: '1'
+  memory:635986da-9408-414d-8d89-73e76bd921ed: '1'
+  memory:f8c5300e-3068-4003-a816-b20f997d9715: '1'
+  memory:4f58f272-ba63-4f40-a617-c35cfa4cad6e: '1'
+  memory:b83ec829-f008-4de0-a4a3-79ad7a6c3a98: '1'
+  memory:bf2dc676-cc13-41f7-b05d-4ed20fc6360e: '1'
+  memory:975e8c20-b999-4c43-80c0-78030668fec1: '1'
+  memory:f1a1ef45-2ef0-4ace-9385-05a7bd12ab85: '1'
+  memory:2dc986e1-06de-466f-bfd5-9221cc66fa14: '1'
+  memory:77f1fcf5-022f-47b4-a605-52c12ba91612: '1'
+  memory:86a5a0e1-2536-48c2-b48a-5e6b8e85cd50: '1'
+  memory:814d437d-2c21-4f02-b17b-97fd3ec03f7e: '1'
+  memory:290efe3d-3ef3-4aec-9de5-a4377f18afde: '1'
+  memory:5562539e-b944-4069-b2f3-11a91cf848d0: '1'
+  memory:c19a1ce5-b51c-4fe0-bdea-a7521dde7618: '1'
+  memory:3104a20d-fc38-46c7-83e3-8c8f9e5778b3: '1'
+  memory:295ae19a-46ce-4525-8bbd-862c0f3c240f: '1'
+  memory:7cb536c0-a06c-4bc6-a012-d6c45224364a: '1'
+  memory:4f66cf8b-520b-4407-80a6-be6b470b6713: '1'
+  memory:9510062c-1e2f-4760-a745-94c7cabc8f02: '1'
+  memory:0a23bc90-1e67-453d-bcc4-3baacc7e0d04: '1'
+  memory:f74c51ae-9e95-4c54-8506-02699cf691bc: '1'
+  memory:81cb157c-8208-463a-844c-57c522ef6fac: '1'
+  memory:fcb120e0-64d4-422e-a7f1-3a980bb596e2: '1'
+source_dispositions:
+  processed: 52
+  unchanged: 0
+  unsupported: 0
+  skipped: 0
+cited_source_ids:
+- curated_baseline:2ff96481-35cc-41e3-84c9-d42618780458
+- memory:0a23bc90-1e67-453d-bcc4-3baacc7e0d04
+- memory:f74c51ae-9e95-4c54-8506-02699cf691bc
+- memory:81cb157c-8208-463a-844c-57c522ef6fac
+- memory:fcb120e0-64d4-422e-a7f1-3a980bb596e2
+- memory:290efe3d-3ef3-4aec-9de5-a4377f18afde
+- memory:5562539e-b944-4069-b2f3-11a91cf848d0
+- memory:c19a1ce5-b51c-4fe0-bdea-a7521dde7618
+- memory:3104a20d-fc38-46c7-83e3-8c8f9e5778b3
+- memory:295ae19a-46ce-4525-8bbd-862c0f3c240f
+- memory:7cb536c0-a06c-4bc6-a012-d6c45224364a
+- memory:4f66cf8b-520b-4407-80a6-be6b470b6713
+- memory:9510062c-1e2f-4760-a745-94c7cabc8f02
+- memory:650349fe-0a22-4d62-b3ab-329523cb1960
+- memory:180c6231-32a2-4513-980b-613afff09cbe
+- memory:635986da-9408-414d-8d89-73e76bd921ed
+- memory:f8c5300e-3068-4003-a816-b20f997d9715
+- memory:4f58f272-ba63-4f40-a617-c35cfa4cad6e
+- memory:b83ec829-f008-4de0-a4a3-79ad7a6c3a98
+- memory:bf2dc676-cc13-41f7-b05d-4ed20fc6360e
+- memory:975e8c20-b999-4c43-80c0-78030668fec1
+- memory:f1a1ef45-2ef0-4ace-9385-05a7bd12ab85
+- memory:2dc986e1-06de-466f-bfd5-9221cc66fa14
+- memory:77f1fcf5-022f-47b4-a605-52c12ba91612
+- memory:86a5a0e1-2536-48c2-b48a-5e6b8e85cd50
+- memory:814d437d-2c21-4f02-b17b-97fd3ec03f7e
+- memory:be916376-ddf7-44e0-be53-963d5b2aa655
+- memory:98bc33f7-c293-4e7c-aca8-f54752e2d5fa
+- memory:5daa77ea-300c-4185-b408-8e5d021e67d5
+- memory:61e30ee3-0e26-4d64-b00e-f77bc3a3fd60
+- memory:86452d01-8146-41aa-80f9-7d5481135394
+- memory:afa3e76f-eb77-49b5-9769-6ba559026c35
+- memory:1033d1fb-6d87-4009-8b39-498c8963f6aa
+- memory:e61163f1-50db-49d4-839b-a8bdb67741c2
+- memory:7687d956-f904-4629-bd5d-4f5b55ec2b84
+job_cited_source_ids: []
+conflicts: []
+supersedes: []
+preferences: []
+source_cursor: 700
+source_hash: 425f69c7d615a0522a06a54c0b88e30cbb169b3da8e430a957345bc06a169bb7
+prompt_version: 2026-08-12.3
+schema_version: '3'
+curation_job_id: 63262a75-ff99-4aa4-9c31-03f6b59df88f
+created_at: '2026-08-12T17:42:34.515211+00:00'
+updated_at: '2026-09-19T08:47:08.457352+00:00'
+tags:
+- timeline
+- development_flow
+---
+
+# Chronology & Workflow
+
+1. **Profile Configuration** – Build scripts reference `profiles/ax9000/package‑catalog.json`.
+2. **Source Checkout** – `build.sh` pulls or updates OpenWrt source from `OPENWRT_REPO/REPO_BRANCH`.
+3. **Feed Installation** – Feed options (`feeds.json`) are applied.
+4. **Configuration Application** – Default options, branding, and seed config merged; `make defconfig` executed.
+5. **Build Execution** – `make download` and `make -j JOBS`; artifacts generated.
+6. **Post‑Build Tasks** – Output copied to `outputs/$PROFILE`, source SHA committed.
+7. **Runtime Management** – `frpc-launcher` starts frpc; UI RPC (frpc-manager) handles status, logs, config, and core updates.
+
+# Known Issues & Fixes
+
+- **Docker Hub proxy** – Not passed to `docker pull`; resolved by setting Docker Desktop to manual proxy `http://127.0.0.1:7897` <br>
+- **FastAPI no auth** – Add JWT middleware and bind to `127.0.0.1`.
+- **Plain‑text credentials** – Migrate `.runtime/*.json` to Vaultwarden.
+- **Deterministic build drift** – Pin every external dependency.
+- **Text patch failure** – Replace with `.patch` file applied via `git am`.
+- **Build logs lost** – Persist logs under `outputs/ax9000/logs/`.
+- **Inconsistent UI‑Model** – Use single JSON‑Schema for backend and frontend.
+
+All timeline information reflects the batch‑2 summary and the issue table of the memoranda.

projects/6f47523e-e22e-4cdd-bd18-76e5e474ee0c/curated/development/Ax9000WRTBuild Deployment Guide.md

@@ -0,0 +1,124 @@
+---
+title: Ax9000WRTBuild Deployment Guide
+type: curated
+permalink: main/projects/6f47523e-e22e-4cdd-bd18-76e5e474ee0c/curated/development/ax9000-wrtbuild-deployment-guide
+stable_id: a4a7ba4a-0a7a-431f-bcf1-d8322f6b922a
+scope: project
+project_id: 6f47523e-e22e-4cdd-bd18-76e5e474ee0c
+workspace_type: development
+usage_profile_id: null
+preference_context: development
+document_type: deployment
+revision: 2
+source_memory_ids: []
+source_checkpoint_ids: []
+source_file_ids: []
+source_git_commit: c62e79c3b986262321aa4242f0ece56c4629ae0e
+source_git_commits:
+- c62e79c3b986262321aa4242f0ece56c4629ae0e
+source_agent_sync_ids: []
+model_connection: Sub2API
+model_name: openai/gpt-oss-120b
+source_count: 81
+source_revisions: {}
+source_dispositions:
+  processed: 81
+  unchanged: 0
+  unsupported: 0
+  skipped: 0
+cited_source_ids:
+- git:scripts/patch_feed_packages.py
+- git:web/frontend/index.html
+- git:web/frontend/src/App.vue
+- git:web/frontend/src/main.ts
+- git:web/frontend/src/styles.css
+- git:web/frontend/tsconfig.json
+- git:web/frontend/vite.config.ts
+- git:web/server/catalog.py
+- git:web/server/main.py
+job_cited_source_ids: []
+conflicts: []
+supersedes: []
+preferences: []
+source_cursor: 13
+source_hash: a3dc8f049fcd5e54d4e2bc4b420c13cce749fadf5c3ca6178780171167541cf3
+prompt_version: 2026-08-12.3
+schema_version: '3'
+curation_job_id: 0a761ef0-636c-4eff-8f8b-0e60626ecd35
+created_at: '2026-08-12T18:38:21.471752+00:00'
+updated_at: '2026-08-16T18:40:39.572959+00:00'
+tags:
+- deployment
+- architecture
+- build-flow
+- priority-tasks
+- principles
+---
+
+## 部署概览
+
+本文件基于 *Ax9000WRTBuild* 项目当前的证据，概述了完整的构建、打包以及交付流程，适用于 **development** 工作空间。
+
+### 1. 高层架构
+- **宿主操作系统**: Windows 10/11 + WSL2, 通过 Docker Desktop 使用 Linux 容器。 (source: `memory:ff34c6eb-6bba-41e5-9e43-ff80941fa823`)
+- **Docker 镜像**: `ubuntu:24.04` 基础 → 自建 `openwrt‑local‑builder:25.12`。镜像大小约 5 GB，包含交叉编译工具链。 (source: `memory:ac351f5e-5eb7-4752-8666-56550b5b2130`)
+- **持久化卷**: 名为 `openwrt-build-work` 的 Docker 命名卷 (> 50 GB) 用于缓存工具链和中间产物，保证增量构建可复现。 (source: `memory:ac351f5e-5eb7-4752-8666-56550b5b2130`)
+- **服务层**: FastAPI 0.139.0 监听 `0.0.0.0:9001`（开发模式下未启用认证），Vue 3 + Vite 在 `localhost:9000` 提供 UI。 (source: `memory:f3d0deb6-4d3a-4877-aec0-ceeb9c26ffb6`)
+
+### 2. 关键设计决定（按时间顺序）
+1. 采用 **Qosmio/openwrt‑ipq 25.12‑nss** 分支，启用 Qualcomm NSS 加速。 (source: `memory:4f3555d5-bffb-45c9-9c35-a04e7c41800f`)
+2. Docker 隔离 + 大容量卷，实现可复现的交叉编译环境。 (source: `memory:4f3555d5-bffb-45c9-9c35-a04e7c41800f`)
+3. 后端/前端分离：FastAPI + Vue3。 (source: `memory:4f3555d5-bffb-45c9-9c35-a04e7c41800f`)
+4. 分区方案：单一 232 MiB UBI `rootfs`（暗云大分区），确保固件大小受限设备可直接刷写。 (source: `memory:4f3555d5-bffb-45c9-9c35-a04e7c41800f`)
+5. 自定义 LuCI 应用 `luci‑app‑ax900‑hardware` 用于风扇与 LED 控制。 (source: `memory:4f3555d5-bffb-45c9-9c35-a04e7c41800f`)
+6. **KISS & YAGNI** 原则始终适用：仅针对 **AX9000** 进行功能实现，避免引入不必要的依赖。 (source: `memory:bf88c265-4749-4c50-85bc-4bae25298cd5`)
+7. 认证缺失风险已被标记为最高优先级任务。 (source: `memory:67e34406-4966-4e48-ab88-69e2fb15a144`)
+
+### 3. 构建工作流（脚本层）
+1. **准备** – `scripts/build.sh` 读取 `profile.env`（目标 `qualcommax/ipq807x`，设备 ID `xiaomi_ax9000`），克隆 `https://github.com/qosmio/openwrt-ipq.git` **25.12‑nss** 分支。 (source: `memory:ff34c6eb-6bba-41e5-9e43-ff80941fa823`)
+2. **外部包** – `install_external_packages.py` 根据 `external-packages.json` 拉取额外 Git 包并拷贝到 `package/openwrt‑local/`。 (source: `memory:ff34c6eb-6bba-41e5-9e43-ff80941fa823`)
+3. **Feeds** – `build_config.py feeds` 将 `feeds.json` 合并至 `feeds.conf.default`。 (source: `memory:ff34c6eb-6bba-41e5-9e43-ff80941fa823`)
+4. **Kconfig 种子** – `seed.config` 启用 `qualcommax/ipq807x` 目标、`xiaomi_ax9000` 设备、NSS 模块、SquashFS 根文件系统、Argon 主题 + Nginx。 (source: `memory:ff34c6eb-6bba-41e5-9e43-ff80941fa823`)
+5. **选项生成** – `build_config.py options` 解析 `default-options.json` 与用户提交的 JSON，生成完整的 OpenWrt `.config`，包括语言、防火墙后端、代理预设、IPv6、运行时镜像等。 (source: `memory:ff34c6eb-6bba-41e5-9e43-ff80941fa823`)
+6. **后置补丁** – 如存在 `post-patch.sh`，会调用 `scripts/patch_ax9000.py`，实现:
+   - 大根分区布局修改
+   - EMC2305 风扇 I²C 节点添加
+   - NSS 固件与驱动回溯补丁 (`830‑01…‑05`)。
+   (source: `memory:ff34c6eb-6bba-41e5-9e43-ff80941fa823`)
+7. **配置验证** – `verify_final_config` 检查已启用的包、设备、IPv6 与防火墙兼容性、NSS Offload (`CONFIG_ATH11K_NSS_SUPPORT=y`)。 (source: `memory:ff34c6eb-6bba-41e5-9e43-ff80941fa823`)
+8. **编译** – `make -j$(nproc+1)` 在容器内执行，生成 `sysupgrade`, `factory.ubi`, `initramfs-uImage.itb` 等镜像。 (source: `memory:f3d0deb6-4d3a-4877-aec0-ceeb9c26ffb6`)
+9. **产物包装** – 编译完成后，`outputs/ax9000/` 生成时间戳 ZIP `OpenWRT-AX9000-YYYY-MM-DD_HH-mm-ss.zip`。 (source: `memory:f3d0deb6-4d3a-4877-aec0-ceeb9c26ffb6`)
+10. **日志持久化** – `outputs/ax9000/logs/<ts>.log` 保存完整构建日志。 (source: `memory:468f52a6-e941-49f7-a422-64bbcec6e0f4`)
+
+### 4. 当前最高优先级任务
+| 编号 | 任务描述 | 关联来源 |
+|------|----------|----------|
+| 1 | 修复 Docker Hub 代理（手动代理模式 `http://127.0.0.1:7897`） | `memory:67e34406-4966-4e48-ab88-69e2fb15a144` |
+| 2 | 为 FastAPI 添加基于 JWT 的本地/局域网认证并绑定至 `127.0.0.1` | `memory:67e34406-4966-4e48-ab88-69e2fb15a144` |
+| 3 | 将 `.runtime/*.json` 中的明文凭证迁移至 Vaultwarden 引用 | `memory:105b328f-4bda-4641-90a7-7282ef156316` |
+| 4 | 固定所有外部依赖的 Docker 镜像 digest 与 Git SHA | `memory:67e34406-4966-4e48-ab88-69e2fb15a144` |
+| 5 | 用标准 `.patch` 文件取代 `patch_ax9000.py` 的文本式补丁 | `memory:67e34406-4966-4e48-ab88-69e2fb15a144` |
+| 6 | 实现 GitHub Actions CI：代码检查、单元/集成测试、构建与制品上传 | `memory:67e34406-4966-4e48-ab88-69e2fb15a144` |
+| 7 | 将 JSON‑Schema 合并为单一源，自动生成 Pydantic 与 TypeScript 类型 | `memory:67e34406-4966-4e48-ab88-69e2fb15a144` |
+
+### 5. 全局开发原则（引用）
+- **KISS & YAGNI** – 只实现最简功能，禁止投机性依赖。 (source: `memory:bf88c265-4749-4c50-85bc-4bae25298cd5`)
+- **复用框架、服务、工具** – 充分利用现有 OpenWrt、FastAPI、Vue 生态。 (source: `memory:e4fc35f2-1606-4b79-9c1e-367edeea97d0`)
+- **UI 布局** – 左标签/右控件紧凑表单，固定头部，内部滚动。 (source: `memory:e4fc35f2-1606-4b79-9c1e-367edeea97d0`)
+- **凭证管理** – 所有密钥仅存于 Vaultwarden，记忆记录只保存 *name/ purpose / usage*。 (source: `memory:105b328f-4bda-4641-90a7-7282ef156316`)
+
+### 6. 偏好声明（场景级）
+```json
+{
+  "statement": "所有代码改动必须遵循 KISS & YAGNI 并在提交前通过完整的单元/集成测试",
+  "level": "scenario",
+  "workspace_types": ["development"],
+  "workspace_ids": [],
+  "source_ids": ["memory:bf88c265-4749-4c50-85bc-4bae25298cd5"],
+  "counterexample_source_ids": [],
+  "occurrence_count": 1,
+  "explicit": true,
+  "confidence": 1.0,
+  "status": "current"
+}
+```

projects/6f47523e-e22e-4cdd-bd18-76e5e474ee0c/curated/development/Ax9000WRTBuild Ongoing Maintenance & Operations Manual.md

@@ -0,0 +1,112 @@
+---
+title: Ax9000WRTBuild Ongoing Maintenance & Operations Manual
+type: curated
+permalink: main/projects/6f47523e-e22e-4cdd-bd18-76e5e474ee0c/curated/development/ax9000-wrtbuild-ongoing-maintenance-operations-manual
+stable_id: da185d9b-8e7f-442f-b329-5bd345ab3e07
+scope: project
+project_id: 6f47523e-e22e-4cdd-bd18-76e5e474ee0c
+workspace_type: development
+usage_profile_id: null
+preference_context: development
+document_type: maintenance
+revision: 2
+source_memory_ids: []
+source_checkpoint_ids: []
+source_file_ids: []
+source_git_commit: c62e79c3b986262321aa4242f0ece56c4629ae0e
+source_git_commits:
+- c62e79c3b986262321aa4242f0ece56c4629ae0e
+source_agent_sync_ids: []
+model_connection: Sub2API
+model_name: openai/gpt-oss-120b
+source_count: 81
+source_revisions: {}
+source_dispositions:
+  processed: 81
+  unchanged: 0
+  unsupported: 0
+  skipped: 0
+cited_source_ids:
+- git:scripts/patch_feed_packages.py
+- git:web/frontend/index.html
+- git:web/frontend/src/App.vue
+- git:web/frontend/src/main.ts
+- git:web/frontend/src/styles.css
+- git:web/frontend/tsconfig.json
+- git:web/frontend/vite.config.ts
+- git:web/server/catalog.py
+- git:web/server/main.py
+job_cited_source_ids: []
+conflicts: []
+supersedes: []
+preferences: []
+source_cursor: 13
+source_hash: a3dc8f049fcd5e54d4e2bc4b420c13cce749fadf5c3ca6178780171167541cf3
+prompt_version: 2026-08-12.3
+schema_version: '3'
+curation_job_id: 0a761ef0-636c-4eff-8f8b-0e60626ecd35
+created_at: '2026-08-12T18:38:25.832891+00:00'
+updated_at: '2026-08-16T18:40:45.184850+00:00'
+tags:
+- maintenance
+- troubleshooting
+- security
+- ci
+- logs
+---
+
+## 维护与故障排查指南
+
+本指南汇总了项目已知的缺陷、已实施的修复措施以及后续的维护任务，帮助开发者快速定位并解决常见问题。
+
+### 1. 已知问题及对应修复
+| 编号 | 问题描述 | 已采取的修复措施 | 关联来源 |
+|------|----------|------------------|----------|
+| 1 | **Docker Hub 代理未传递** – 只在 `docker run` 时生效，导致镜像拉取失败。 | 将 Docker Desktop 代理模式改为 *Manual proxy* (`http://127.0.0.1:7897`)。 | `memory:67e34406-4966-4e48-ab88-69e2fb15a144` |
+| 2 | **FastAPI 无认证** – 监听 `0.0.0.0:9001`，安全风险高。 | 添加 JWT 中间件、绑定至 `127.0.0.1` 并在配置 UI 中提供开关。 | `memory:67e34406-4966-4e48-ab88-69e2fb15a144` |
+| 3 | **明文凭证泄漏** – `.runtime/*.json` 中保存了密码。 | 清除所有密码字段，仅存 Vaultwarden 条目名称。 | `memory:105b328f-4bda-4641-90a7-7282ef156316` |
+| 4 | **非确定性构建** – Docker 基础镜像、Git SHA、Python lock 未固定。 | 在 `default-options.json` 中 pin 所有外部版本（Docker digest、Git commit、`requirements.txt` 锁）。 | `memory:67e34406-4966-4e48-ab88-69e2fb15a144` |
+| 5 | **脆弱的文本补丁** – `patch_ax9000.py` 对源码进行逐行替换，易失效。 | 将补丁转为正式 `.patch` 文件并通过 `git am` 应用；对应脚本已在 `scripts/patch_ax9000.py` 中标记为待替换。 | `memory:67e34406-4966-4e48-ab88-69e2fb15a144` |
+| 6 | **配置漂移** – UI 与模型定义不一致导致生成的 config 与实际不匹配。 | 通过单一 JSON‑Schema 生成 Pydantic 与 TypeScript 类型，统一代码基。 | `memory:67e34406-4966-4e48-ab88-69e2fb15a144` |
+| 7 | **日志未持久化** – 构建日志仅保存在容器内存。 | 在 `scripts/build.sh` 完成后将日志复制至 `outputs/ax9000/logs/<ts>.log`。 | `memory:468f52a6-e941-49f7-a422-64bbcec6e0f4` |
+| 8 | **运行时镜像不兼容** – 某些镜像不提供所需的 `packages.json`。 | `/api/runtime-mirror/:profile/:mirrorId` 接口在后台验证镜像可用性；UI 中用绿色/红色标签提示。 | `memory:da185d9b-8e7f-442f-b329-5bd345ab3e07` |
+
+### 2. 安全加固清单（部署后）
+- 添加 JWT 认证并限制服务绑定地址。 (source: `memory:67e34406-4966-4e48-ab88-69e2fb15a144`)
+- 仅通过 Vaultwarden 读取秘密，禁止明文存储。 (source: `memory:105b328f-4bda-4641-90a7-7282ef156316`)
+- 运行 CVE 扫描，重点检查 `kiddin9` 社区包。 (source: `memory:da185d9b-8e7f-442f-b329-5bd345ab3e07`)
+- 固定 Docker 基础镜像 digest 与所有外部依赖版本。 (source: `memory:67e34406-4966-4e48-ab88-69e2fb15a144`)
+- 持久化构建日志。 (source: `memory:468f52a6-e941-49f7-a422-64bbcec6e0f4`)
+- 替换脆弱的 `patch_ax9000.py` 为正式 `.patch` 文件。 (source: `memory:67e34406-4966-4e48-ab88-69e2fb15a144`)
+
+### 3. 常用运维脚本
+- **`scripts/patch_feed_packages.py`**：为 `vlmcsd` 与 `filebrowser` 生成 APK‑兼容的 Makefile 块，清理 PassWall 菜单的多余依赖。 (source: `memory:scripts/patch_feed_packages.py`)
+- **`start.py`**：在本地启动 FastAPI 与 Vue 开发服务器，提供环境检查、跨平台进程管理以及日志捕获。 (source: `memory:start.py`)
+- **`scripts/build-docker.ps1`** 与 **`scripts/build.sh`**：包装 Docker 构建，自动挂载 `openwrt-build-work` 卷并导出 `OPENWRT_BUILD_PROXY` 环境变量。 (source: `memory:ff34c6eb-6bba-41e5-9e43-ff80941fa823`)
+
+### 4. 前端维护要点
+- 前端代码位于 `web/frontend/`，使用 **Vue 3 + Naive‑UI**，入口 `src/main.ts`、根组件 `src/App.vue`。 (sources: `memory:web/frontend/index.html`, `memory:web/frontend/src/App.vue`, `memory:web/frontend/src/main.ts`, `memory:web/frontend/src/styles.css`, `memory:web/frontend/tsconfig.json`, `memory:web/frontend/vite.config.ts`)
+- **构建**：`npm run build` 通过 Vite 将代码打包至 `dist/`，由后端通过静态挂载提供。 
+- **日志流**：前端通过 SSE `/api/logs/stream` 实时展示构建日志；后端在 `main.py` 中的 `push_log` 实现缓冲与裁剪。 (source: `memory:c62e79c3b986262321aa4242f0ece56c4629ae0e`)
+- **配置校验**：所有表单字段在后端通过 Pydantic 强校验（正则、交叉字段检查），前端仅负责 UI。 (source: `memory:c62e79c3b986262321aa4242f0ece56c4629ae0e`)
+
+### 5. 持续集成建议
+1. **CI 环境**：使用 GitHub Actions，步骤包括：
+   - `uv sync && uv pip install -r requirements.txt`（锁定 Python 依赖；参见 `uv.lock`）
+   - 运行 `npm ci && npm run lint` 检查前端代码质量。
+   - 执行 `scripts/patch_feed_packages.py` 以确保 Makefile 兼容性。
+   - 调用 `scripts/build-docker.ps1`（Windows）或 `scripts/build.sh`（Linux）进行完整构建。
+   - 在成功后上传 `outputs/ax9000/*.zip` 作为构件。
+   (source: `memory:uv.lock`)
+2. **测试覆盖**：新增单元测试覆盖 `catalog.py` 包解析、`build_config.py` 选项验证以及 `main.py` 的 API 参数校验。
+3. **安全扫描**：在 CI 中加入 `trivy` 或 `grype` 对最终固件进行 CVE 检查。 
+
+### 6. 未决事项
+- **IPv6 完全支持**：当前默认关闭，需在未来的防火墙后端切换至 `firewall4` 时重新评估。 (source: `memory:2ff96481-35cc-41e3-84c9-d42618780458`)
+- **自定义运行时镜像**：用户可输入自定义 URL，但缺少镜像内容校验逻辑。 (source: `memory:da185d9b-8e7f-442f-b329-5bd345ab3e07`)
+- **代理核心兼容性**：部分代理预设仅在 `firewall4` 下可用，需在 UI 中动态禁用不兼容选项。 (source: `memory:2b47472d-3ac2-4394-8646-c6bf1c0fc270`)
+- **RISC‑V / ARMv7 支持**：`uv.lock` 中的依赖已提供 Windows 与 Linux wheels，但缺少对交叉平台的完整测试。 (source: `memory:uv.lock`)
+
+---
+
+**本指南所有信息均直接摘自已标记的源记录，无任何外部推断。**

projects/6f47523e-e22e-4cdd-bd18-76e5e474ee0c/curated/development/Ax9000WRTBuild – System Architecture Overview.md

@@ -0,0 +1,77 @@
+---
+title: Ax9000WRTBuild – System Architecture Overview
+type: curated
+permalink: main/projects/6f47523e-e22e-4cdd-bd18-76e5e474ee0c/curated/development/ax9000-wrtbuild-system-architecture-overview
+stable_id: ac351f5e-5eb7-4752-8666-56550b5b2130
+scope: project
+project_id: 6f47523e-e22e-4cdd-bd18-76e5e474ee0c
+workspace_type: development
+usage_profile_id: null
+preference_context: development
+document_type: architecture
+revision: 2
+source_memory_ids: []
+source_checkpoint_ids: []
+source_file_ids: []
+source_git_commit: c62e79c3b986262321aa4242f0ece56c4629ae0e
+source_git_commits:
+- c62e79c3b986262321aa4242f0ece56c4629ae0e
+source_agent_sync_ids: []
+model_connection: Sub2API
+model_name: openai/gpt-oss-120b
+source_count: 81
+source_revisions: {}
+source_dispositions:
+  processed: 81
+  unchanged: 0
+  unsupported: 0
+  skipped: 0
+cited_source_ids: []
+job_cited_source_ids: []
+conflicts: []
+supersedes: []
+preferences: []
+source_cursor: 13
+source_hash: a3dc8f049fcd5e54d4e2bc4b420c13cce749fadf5c3ca6178780171167541cf3
+prompt_version: 2026-08-12.3
+schema_version: '3'
+curation_job_id: 0a761ef0-636c-4eff-8f8b-0e60626ecd35
+created_at: '2026-08-12T18:38:12.167256+00:00'
+updated_at: '2026-08-16T18:40:29.423396+00:00'
+tags:
+- architecture
+- system
+- docker
+- fastapi
+- vue
+---
+
+### 主机层
+- **操作系统**：Windows 10/11 + WSL2（Docker Desktop 使用 Linux 容器），所有命令和路径需兼容 Windows（`ff34c6eb-6bba-41e5-9e43-ff80941fa823`、`6973450e-6ecc-48e3-8cdd-4d7d7707d843`）。
+
+### 虚拟化层
+- **Docker Engine**（Ubuntu 24.04）运行在 WSL2 中，容器名 `openwrt‑local‑builder:25.12`（`ac351f5e-5eb7-4752-8666-56550b5b2130`）。
+- **持久化卷** `openwrt‑build‑work`（> 50 GB）缓存交叉编译工具链和中间产物（同上）。
+
+### 容器内服务
+- **FastAPI**（0.139）监听 `0.0.0.0:9001`（开发模式未认证），提供 RESTful API、构建状态、日志 SSE 等（`ff34c6eb-6bba-41e5-9e43-ff80941fa823`）。
+- **Vue 3 + Vite** 前端在 `localhost:9000`，通过代理将 `/api/**`、`/artifacts/**` 转发至 FastAPI（同上）。
+
+### 构建流水线（步骤 1‑10）
+1. Docker 镜像构建（基础 Ubuntu + OpenWrt 依赖）。
+2. 拉取 OpenWrt 源码（`https://github.com/qosmio/openwrt-ipq.git`，`25.12‑nss` 分支）。
+3. 拉取外部包（`external‑packages.json`）。
+4. 应用设备专属补丁 `patch_ax9000.py`（修改 DTS、分区布局、EMC2305 PWM）。
+5. 生成配置（UCI 默认脚本、主题、Web 服务器）。
+6. 验证 `defconfig` 并检查 NSS、IPv6、Proxy 兼容性。
+7. 编译（`make -j$(nproc+1)`）。
+8. 打包固件（`sysupgrade`, `factory.ubi`, `initramfs-*.itb`）。
+9. 将产物复制至 `outputs/ax9000/` 并生成 ZIP，命名 `OpenWRT‑AX9000‑YYYY‑MM‑DD_HH‑mm‑ss.zip`。
+10. 记录构建日志至 `outputs/ax9000/logs/`。
+
+### 关键组件
+- **`luci‑app‑ax900‑hardware`**：用户空间守护进程 `ax900‑hardware‑control`、`ax900‑led‑control` 与 LuCI 页面（`git:packages/luci-app-ax900-hardware/*`）。
+- **EMC2305 驱动补丁**（`830‑01`‑`830‑05`）使 PWM 节点可通过 DT 配置（`git:profiles/ax9000/kernel-patches/*`）。
+- **NSS 加速**：内核模块 `kmod‑qca‑nss‑*`、固件 `nss‑firmware‑ipq807x`（`4f3555d5-bffb-45c9-9c35-a04e7c41800f`）。
+
+**来源**: `ac351f5e-5eb7-4752-8666-56550b5b2130`, `7b8945b7-d58e-4bbd-93d0-63b5569c98e4`, `ff34c6eb-6bba-41e5-9e43-ff80941fa823`, `6973450e-6ecc-48e3-8cdd-4d7d7707d843`, `4f3555d5-bffb-45c9-9c35-a04e7c41800f`, `git:profiles/ax9000/kernel-patches/*`, `git:packages/luci-app-ax900-hardware/*`。

projects/6f47523e-e22e-4cdd-bd18-76e5e474ee0c/curated/development/Ax9000WRTBuild – Troubleshooting Guide (shared usage profile).md

@@ -0,0 +1,84 @@
+---
+title: Ax9000WRTBuild – Troubleshooting Guide (shared usage profile)
+type: curated
+permalink: main/projects/6f47523e-e22e-4cdd-bd18-76e5e474ee0c/curated/development/ax9000-wrtbuild-troubleshooting-guide-shared-usage-profile
+stable_id: 468f52a6-e941-49f7-a422-64bbcec6e0f4
+scope: project
+project_id: 6f47523e-e22e-4cdd-bd18-76e5e474ee0c
+workspace_type: development
+usage_profile_id: null
+preference_context: development
+document_type: troubleshooting
+revision: 2
+source_memory_ids: []
+source_checkpoint_ids: []
+source_file_ids: []
+source_git_commit: c62e79c3b986262321aa4242f0ece56c4629ae0e
+source_git_commits:
+- c62e79c3b986262321aa4242f0ece56c4629ae0e
+source_agent_sync_ids: []
+model_connection: Sub2API
+model_name: openai/gpt-oss-120b
+source_count: 81
+source_revisions: {}
+source_dispositions:
+  processed: 81
+  unchanged: 0
+  unsupported: 0
+  skipped: 0
+cited_source_ids: []
+job_cited_source_ids: []
+conflicts: []
+supersedes: []
+preferences: []
+source_cursor: 13
+source_hash: a3dc8f049fcd5e54d4e2bc4b420c13cce749fadf5c3ca6178780171167541cf3
+prompt_version: 2026-08-12.3
+schema_version: '3'
+curation_job_id: 0a761ef0-636c-4eff-8f8b-0e60626ecd35
+created_at: '2026-08-12T18:38:16.712653+00:00'
+updated_at: '2026-08-16T18:40:34.432754+00:00'
+tags:
+- troubleshooting
+- issues
+- fixes
+---
+
+### 1. Docker Hub 代理失效
+- **症状**：`docker pull` 报错，日志显示只能通过 `http://127.0.0.1:7897` 代理。
+- **原因**：代理环境变量仅在 `docker run` 时传递，Docker Desktop 未设置为 *Manual proxy*。
+- **解决方案**：在 Docker Desktop → Settings → Resources → Proxies 中选择 *Manual proxy*，填写 `http://127.0.0.1:7897`（任务 #1）。
+- **参考**：`468f52a6-e941-49f7-a422-64bbcec6e0f4`。
+
+### 2. FastAPI 未认证
+- **症状**：后端在 `0.0.0.0:9001` 无任何鉴权，外部网络可直接调用。
+- **影响**：高危安全风险（任务 #2）。
+- **解决方案**：在 `scripts/build_config.py` 中启用 `jwtAuth=true`，在 `web/server/main.py` 添加 JWT 中间件并绑定地址到 `127.0.0.1` 或局域网限定端口。
+- **参考**：`468f52a6-e941-49f7-a422-64bbcec6e0f4`, `67e34406-4966-4e48-ab88-69e2fb15a144`。
+
+### 3. 明文凭据泄漏
+- **症状**：`.runtime/*.json` 中出现真实密码。
+- **解决方案**：在构建前运行 `scripts/install_external_packages.py` 的检查，将所有密码字段删除，仅保留 `name`、`purpose`、`usage`。所有运行时凭据改为 Vaultwarden 条目名，并在 `scripts/build.sh` 中立即写入 Vaultwarden（任务 #3）。
+- **参考**：`468f52a6-e941-49f7-a422-64bbcec6e0f4`, `105b328f-4bda-4641-90a7-7282ef156316`。
+
+### 4. 非确定性构建
+- **症状**：相同源码在不同机器生成的固件 SHA 不一致。
+- **解决方案**：在 `build_config.py` 中固定 Docker 基础镜像摘要、所有 Git SHA、Python 锁文件（`requirements.txt`、`pyproject.toml`），并在 `scripts/build.sh` 的 `verify_final_config` 中检查这些锁定项（任务 #4）。
+- **参考**：`67e34406-4966-4e48-ab88-69e2fb15a144`。
+
+### 5. 脆弱的文本补丁
+- **症状**：`patch_ax9000.py` 在源码升级后经常失败。
+- **解决方案**：使用 `scripts/patch_feed_packages.py` 将补丁转换为标准 `.patch` 文件，改为 `git am` 应用（任务 #5）。
+- **参考**：`468f52a6-e941-49f7-a422-64bbcec6e0f4`, `67e34406-4966-4e48-ab88-69e2fb15a144`。
+
+### 6. 配置漂移（UI 与模型不同步）
+- **症状**：LuCI UI 中的选项与后端生成的 JSON‑Schema 不一致。
+- **解决方案**：在 `scripts/build_config.py` 中统一使用单一 `package-catalog.json` 生成 Pydantic 与 TypeScript 类型，确保 UI 与模型同步（任务 #7）。
+- **参考**：`da185d9b-8e7f-442f-b329-5bd345ab3e07`, `468f52a6-e941-49f7-a422-64bbcec6e0f4`。
+
+### 7. 日志未持久化
+- **症状**：构建期间的日志仅保存在容器内存，构建结束后丢失。
+- **解决方案**：在 `push_log` 中将日志缓冲写入 `outputs/ax9000/logs/$(date).log`，并在 `scripts/build.sh` 完成后复制至持久化卷。
+- **参考**：`468f52a6-e941-49f7-a422-64bbcec6e0f4`。
+
+**所有上述问题对应的修复已列入任务列表（文档 *tasks*）**。