111 lines
6.5 KiB
Markdown
111 lines
6.5 KiB
Markdown
---
|
||
title: Ax9000WRTBuild – Development Tasks (Shared)
|
||
type: curated
|
||
permalink: main/projects/6f47523e-e22e-4cdd-bd18-76e5e474ee0c/curated/ax9000-wrtbuild-development-tasks-shared
|
||
stable_id: 67e34406-4966-4e48-ab88-69e2fb15a144
|
||
scope: project
|
||
project_id: 6f47523e-e22e-4cdd-bd18-76e5e474ee0c
|
||
workspace_type: general
|
||
usage_profile_id: null
|
||
preference_context: general
|
||
document_type: tasks
|
||
revision: 1
|
||
source_memory_ids: []
|
||
source_checkpoint_ids: []
|
||
source_file_ids: []
|
||
source_git_commit: a066d95b43240f85f5abcf18305c2edfe1da91a3
|
||
source_git_commits:
|
||
- a066d95b43240f85f5abcf18305c2edfe1da91a3
|
||
source_agent_sync_ids: []
|
||
model_connection: Sub2API
|
||
model_name: git-restore
|
||
source_count: 52
|
||
source_revisions:
|
||
memory:be916376-ddf7-44e0-be53-963d5b2aa655: '1'
|
||
memory:1033d1fb-6d87-4009-8b39-498c8963f6aa: '1'
|
||
memory:afa3e76f-eb77-49b5-9769-6ba559026c35: '1'
|
||
memory:86452d01-8146-41aa-80f9-7d5481135394: '1'
|
||
memory:61e30ee3-0e26-4d64-b00e-f77bc3a3fd60: '1'
|
||
memory:7687d956-f904-4629-bd5d-4f5b55ec2b84: '1'
|
||
memory:ce9006a3-2313-411f-b577-10bbb9b9c3bb: '1'
|
||
memory:e61163f1-50db-49d4-839b-a8bdb67741c2: '1'
|
||
memory:98bc33f7-c293-4e7c-aca8-f54752e2d5fa: '1'
|
||
memory:aecf7e99-3d31-4d3f-ada5-928eee77c95b: '1'
|
||
memory:5daa77ea-300c-4185-b408-8e5d021e67d5: '1'
|
||
memory:86a5a0e1-2536-48c2-b48a-5e6b8e85cd50: '1'
|
||
memory:52072cd9-4e1c-40c2-8393-3ec92b962a1d: '1'
|
||
memory:4f66cf8b-520b-4407-80a6-be6b470b6713: '1'
|
||
memory:c19a1ce5-b51c-4fe0-bdea-a7521dde7618: '1'
|
||
source_dispositions:
|
||
processed: 52
|
||
unchanged: 0
|
||
unsupported: 0
|
||
skipped: 0
|
||
cited_source_ids:
|
||
- curated_baseline:67e34406-4966-4e48-ab88-69e2fb15a144
|
||
- memory:52072cd9-4e1c-40c2-8393-3ec92b962a1d
|
||
- memory:4f66cf8b-520b-4407-80a6-be6b470b6713
|
||
- memory:c19a1ce5-b51c-4fe0-bdea-a7521dde7618
|
||
- memory:86a5a0e1-2536-48c2-b48a-5e6b8e85cd50
|
||
- memory:be916376-ddf7-44e0-be53-963d5b2aa655
|
||
- memory:1033d1fb-6d87-4009-8b39-498c8963f6aa
|
||
- memory:afa3e76f-eb77-49b5-9769-6ba559026c35
|
||
- memory:86452d01-8146-41aa-80f9-7d5481135394
|
||
- memory:61e30ee3-0e26-4d64-b00e-f77bc3a3fd60
|
||
- memory:7687d956-f904-4629-bd5d-4f5b55ec2b84
|
||
- memory:ce9006a3-2313-411f-b577-10bbb9b9c3bb
|
||
- memory:e61163f1-50db-49d4-839b-a8bdb67741c2
|
||
- memory:98bc33f7-c293-4e7c-aca8-f54752e2d5fa
|
||
- memory:aecf7e99-3d31-4d3f-ada5-928eee77c95b
|
||
- memory:5daa77ea-300c-4185-b408-8e5d021e67d5
|
||
job_cited_source_ids: []
|
||
conflicts: []
|
||
supersedes: []
|
||
preferences: []
|
||
source_cursor: 700
|
||
source_hash: 425f69c7d615a0522a06a54c0b88e30cbb169b3da8e430a957345bc06a169bb7
|
||
prompt_version: 2026-08-12.3
|
||
schema_version: '3'
|
||
curation_job_id: null
|
||
created_at: '2026-08-12T17:42:38.214414+00:00'
|
||
updated_at: '2026-09-23T14:58:40.170692+00:00'
|
||
tags:
|
||
- project
|
||
- tasks
|
||
restored_from_commit: 6a6a895eafcca6052e81a14fca103a42635dd1c2
|
||
---
|
||
|
||
## Current Outstanding Work
|
||
|
||
| # | Task | Current Status | Suggested Approach | Source IDs |
|
||
|---|------|-----------------|--------------------|------------|
|
||
| 1 | Docker Hub proxy (“manual”) – `http://127.0.0.1:7897` | **待实现** – Docker Desktop must be configured to use the local proxy so that `docker pull` can resolve images without external network access. | • Set the proxy in Docker Desktop’s **Proxies** → `http://127.0.0.1:7897` (see fix 468f52a6‑e941‑49f7‑a422‑64bbcec6e0f4). | `67e34406-4966-4e48-ab88-69e2fb15a144` |
|
||
| 2 | FastAPI JWT auth, bind to `127.0.0.1` | **待实现** – currently unauthenticated and bound to all interfaces. | • Add JWT middleware and `--host 127.0.0.1` to mitigate remote exploitation. | `67e34406-4966-4e48-ab88-69e2fb15a144` |
|
||
| 3 | Migrate `.runtime/*.json` credentials to Vaultwarden | **待实现** – secrets currently stored in plaintext. | • Delete all `.runtime/*.json`, upload corresponding secrets to Vaultwarden via API, reference Vault paths in configuration. | `67e34406-4966-4e48-ab88-69e2fb15a144` |
|
||
| 4 | Pin Docker image digest, Git commit SHA, `uv.lock` | **待实现** – dependencies could drift between runs. | • Record image digest, commit SHA, and lock file hash in a CI artifact or logging layer to ensure reproducibility. | `67e34406-4966-4e48-ab88-69e2fb15a144` |
|
||
| 5 | Convert patch script (`patch_ax9000.py`) to `.patch` file and use `git am` | **待实现** – fragile text replacement. | • Create a `0001-<description>.patch` and apply with `git am` during CI. | `67e34406-4966-4e48-ab88-69e2fb15a144` |
|
||
| 6 | CI pipeline (GitHub Actions) – lint, tests, build, artifact upload | **待实现** – no CI defined yet. | • Add a workflow that checks syntax, runs unit‑tests, builds the image, and uploads `outputs/ax9000/` to a release artifact. | `67e34406-4966-4e48-ab88-69e2fb15a144` |
|
||
| 7 | Unified JSON‑Schema → Pydantic & TypeScript | **待实现** – inconsistent UI/model. | • Adopt a single JSON‑Schema to generate Pydantic models in FastAPI and TS types for Vue to prevent mismatches. | `67e34406-4966-4e48-ab88-69e2fb15a144` |
|
||
|
||
**Resolved Items**
|
||
|
||
- Git repository on `main` is committed and pushed (`0e152f6c087c29b999258a24fffbdaab13fb9607`).
|
||
- Docker image `openwrt‑local‑builder:25.12` exists locally.
|
||
- FastAPI running at `0.0.0.0:9001`; Vue dev server available at `localhost:9000`.
|
||
- Built firmware ZIP stored in `outputs/ax9000/`.
|
||
|
||
**Open Work**
|
||
|
||
Conflicts or unresolved settings are limited to the above task list; the system’s current state satisfies the component readiness tests, but the security, reproducibility, and infrastructure concerns need to be addressed before shipping.
|
||
|
||
---
|
||
|
||
## Preferences
|
||
- **Answer‑First** – Deliver known answers immediately before discussion. (source: `9988effa-80c9-4062-97a2-8a5f40e3856a`)
|
||
- **Development Preference – Use Chinese** – All communication in Chinese. (sources: `7429c22e-50ff-458a-97c0-423c679904c7`, `e4fc35f2-1606-4b79-9c1e-367edeea97d0`)
|
||
- **Vault‑First Credential Access** – All secrets live in Vaultwarden, only one matching vault entry is used. (source: `105b328f-4bda-4641-90a7-7282ef156316`)
|
||
- **Push After Commit** – Every finished feature is committed immediately and pushed if a remote exists. Rebase on new remote changes, avoid force‑push unless explicitly authorised. (source: `2406be77-e6ce-4572-890e-18747c968f55`)
|
||
- **No Auto‑Project Creation** – In a temporary session without a project directory, never auto‑create a project. (source: `ac8bb556-947d-43a1-87d9-bfe7e8da310b`)
|
||
- **MemRelay Only** – All memory persists in MemRelay; `aidocs/` is never updated unless exported. (sources: `bf88c265-4749-4c50-85bc-4bae25298cd5`, `25332e63-48d0-4daa-8c08-d676bb2d310d`)
|
||
|
||
Each preference is classified at **scenario** level as they are supported by a single source ID and no counterexamples exist. |