From c7af5d08303f4b61d043525457ac15e622d8d38b Mon Sep 17 00:00:00 2001 From: XingfenD Date: Wed, 30 Sep 2026 23:21:11 +0800 Subject: [PATCH] =?UTF-8?q?docs:=20P6=20D-D=20follow-up=20landed=20?= =?UTF-8?q?=E2=80=94=20crearte=209bd9372=200.19.1,=20four-leg=20green;=20r?= =?UTF-8?q?eview-vs-spec=20lesson=20noted?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- docs/CHANGELOG.md | 4 ++-- docs/ROADMAP.md | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/docs/CHANGELOG.md b/docs/CHANGELOG.md index 06a2c02..219c1de 100644 --- a/docs/CHANGELOG.md +++ b/docs/CHANGELOG.md @@ -10,8 +10,8 @@ The format loosely follows Keep a Changelog and can be adapted to the team's hab ### Done / 完成 -- P6 hosted submission delivered as plan A (owner call: author-hosted https URL, embedded play; no file hosting): crearte-server `3e11446` (0.13.0 — D-B runtime immutable on metadata_change, D-C hosted works cannot carry a bundle, unit + fresh-empty-DB integration incl. real-HTTP draft→submit→approve→hosted_url/play_origin/fallback readback and public payload runtime/hostedUrl; zero migrations, zero new deps, Approve mapping untouched — the feared hosted_url write gap was a false alarm, PayloadToWork at import.go:39 already covers it) and crearte `fee5f3b` (0.19.0 — content-layer WorkRuntime three modes with hostedUrl/fallback aligned to server json names, submit-form third radio 自托管内嵌 w/ https + fallback=external⇒url mirror validation, prefill refusal removed and hosted fields backfilled, new_version stays virtual-only; playback side zero changes per spec; vitest 492 / typecheck / admin-flow 6 / main suite 69 green; e2e hosted draft-payload flow added). Dual independent review PASS with notes; six-leg host acceptance green (incl. branch-backend full-loop 1 passed; first admin-flow 1-passed reading was stack-contention false alarm, rerun 6 passed RC=0). T5 CSP probe: deploy templates carry no main-site frame-src (the two `frame-src 'none'` hits belong to runtime-subdomain pages only) — zero deploy changes on record. Known gaps: D-D admin-hostedUrl display row missed (plan omitted it from Task 2; small follow-up) and new_version hosted rejection is server-side only (FE no hard check, spec-accepted). See spec D-A…D-F. -- P6 hosted 作品投稿以方案 A 交付（owner 拍板：作者自部署、投稿只存 https URL、站内沙箱 iframe 播；不做文件托管）：crearte-server `3e11446`（0.13.0——D-B metadata_change 禁改 runtime、D-C hosted 禁带 bundle；单测 + 空库集成含真 HTTP 草稿→提交→过审→hosted_url/play_origin/fallback 读回与公开载荷 runtime/hostedUrl；零迁移零新依赖，Approve 落库未动——此前担心的 hosted_url 落库缺口系误报，PayloadToWork 本就覆盖）与 crearte `fee5f3b`（0.19.0——内容层三档 + hostedUrl/fallback 字段与 server json 名逐字对齐；表单第三 radio「自托管内嵌」+ https 校验 + fallback 默认 external 镜像校验；预填拒绝分支删除并回填；new_version 仍 virtual-only；播放端零改动；vitest 492 / typecheck / admin-flow 6 / 主套件 69 绿；e2e 新增 hosted 草稿载荷流）。双路独立审查 PASS with notes；六腿本机验收全绿（含分支后端真栈 full-loop 1 passed；admin-flow 首轮 1 passed 为栈腿争用假警报，复跑 6 passed RC=0 坐实）。T5：deploy 模板无主站 frame-src 下发（两处 'none' 属运行时子域页），零改动记录。遗留：D-D 审核面 hostedUrl 展示行未实现（任务书漏列，后续小补丁）；new_version 拒 hosted 仅 server 拦（前端无硬校验，spec 已接受）。选型见 spec D-A…D-F。 +- P6 hosted submission delivered as plan A (owner call: author-hosted https URL, embedded play; no file hosting): crearte-server `3e11446` (0.13.0 — D-B runtime immutable on metadata_change, D-C hosted works cannot carry a bundle, unit + fresh-empty-DB integration incl. real-HTTP draft→submit→approve→hosted_url/play_origin/fallback readback and public payload runtime/hostedUrl; zero migrations, zero new deps, Approve mapping untouched — the feared hosted_url write gap was a false alarm, PayloadToWork at import.go:39 already covers it) and crearte `fee5f3b` (0.19.0 — content-layer WorkRuntime three modes with hostedUrl/fallback aligned to server json names, submit-form third radio 自托管内嵌 w/ https + fallback=external⇒url mirror validation, prefill refusal removed and hosted fields backfilled, new_version stays virtual-only; playback side zero changes per spec; vitest 492 / typecheck / admin-flow 6 / main suite 69 green; e2e hosted draft-payload flow added). Dual independent review PASS with notes; six-leg host acceptance green (incl. branch-backend full-loop 1 passed; first admin-flow 1-passed reading was stack-contention false alarm, rerun 6 passed RC=0). T5 CSP probe: deploy templates carry no main-site frame-src (the two `frame-src 'none'` hits belong to runtime-subdomain pages only) — zero deploy changes on record. Known gaps: D-D (admin hostedUrl display row) delivered same day as crearte 0.19.1 `9bd9372` — maintainer-direct follow-up patch (Task 2 brief had omitted the row; reviews passed against the brief rather than full spec §3 — lesson: review against the spec). Plain-text row, deliberately no anchor, plus fallback label row; four legs rerun green (vitest 492 / typecheck / admin-flow 7 / main suite 70). Remaining: new_version hosted rejection is server-side only (FE no hard check, spec-accepted). See spec D-A…D-F. +- P6 hosted 作品投稿以方案 A 交付（owner 拍板：作者自部署、投稿只存 https URL、站内沙箱 iframe 播；不做文件托管）：crearte-server `3e11446`（0.13.0——D-B metadata_change 禁改 runtime、D-C hosted 禁带 bundle；单测 + 空库集成含真 HTTP 草稿→提交→过审→hosted_url/play_origin/fallback 读回与公开载荷 runtime/hostedUrl；零迁移零新依赖，Approve 落库未动——此前担心的 hosted_url 落库缺口系误报，PayloadToWork 本就覆盖）与 crearte `fee5f3b`（0.19.0——内容层三档 + hostedUrl/fallback 字段与 server json 名逐字对齐；表单第三 radio「自托管内嵌」+ https 校验 + fallback 默认 external 镜像校验；预填拒绝分支删除并回填；new_version 仍 virtual-only；播放端零改动；vitest 492 / typecheck / admin-flow 6 / 主套件 69 绿；e2e 新增 hosted 草稿载荷流）。双路独立审查 PASS with notes；六腿本机验收全绿（含分支后端真栈 full-loop 1 passed；admin-flow 首轮 1 passed 为栈腿争用假警报，复跑 6 passed RC=0 坐实）。T5：deploy 模板无主站 frame-src 下发（两处 'none' 属运行时子域页），零改动记录。遗留：D-D（审核面 hostedUrl 展示行）当日补交 crearte 0.19.1 `9bd9372`——控制者直改小补丁（Task 2 任务书漏列该条；审查按任务书对照未扯出——教训：审查依据应为 spec §3 全量）。纯文本无锚点行+降级中文标签行，四腿复跑全绿（vitest 492 / typecheck / admin-flow 7 / 主套件 70）。仅剩：new_version 拒 hosted 仅 server 拦（前端无硬校验，spec 已接受）。选型见 spec D-A…D-F。 ## [0.2.6] - 2026-09-30 diff --git a/docs/ROADMAP.md b/docs/ROADMAP.md index 13b4b75..e70ab73 100644 --- a/docs/ROADMAP.md +++ b/docs/ROADMAP.md @@ -26,7 +26,7 @@ |---|--------|------|----------|------|------| | P4 | 作者主页 | `/users/:user` 聚合页（该作者全部已上架作品，前端按命名空间过滤，**零后端改动**），按最新上架排序；顺带 `/games/:user/:slug` 面包屑与作者名互链。spec：`docs/specs/2026-09-29-author-page-design.md` | crearte（前端） | 无强依赖，可提前并行 | **完成**（crearte `f12cbf1`，2026-09-29 合并推送） | | P5 | 收藏 / 评分 | 新数据表 + 用户态 API + 目录/详情页 UI；产品线里最大的一块 | 三仓 | 建议 P2 先落地 | **完成**（server `e3da246` / crearte `eb5fbed`，2026-09-30 合并推送；范围修订 deploy 零改动，见 spec） | -| P6 | hosted 作品投稿（方案 A 自托管内嵌） | 作者把游戏部署在别处，投稿填 https URL，站内沙箱 iframe 播放；播放端机件已全存在，打通的是入口：后端 D-B runtime 不可变 + D-C hosted 禁 bundle 两护栏，前端表单第三档+预填解锁 | 三仓 | owner 已拍 A | **完成**（owner 拍板方案 A：只存 URL、站内沙箱 iframe 播；server `3e11446` 0.13.0 / crearte `fee5f3b` 0.19.0，2026-09-30 合并推送。勘查正误：Approve 落库映射本就全（PayloadToWork import.go:39），无需动；真实缺口只在校验两处——D-B metadata_change 禁改 runtime（根治前端拒预填的降级风险）+ D-C hosted 禁带 bundle。前端：类型三档/表单第三 radio「自托管内嵌」/hostedUrl https+fallback 默认 external 镜像校验/预填解锁；播放端零改动（GameHost/useGameFrame 既有）。双路审查 PASS with notes；六腿全绿：容器四连、空库 -count=1 集成 151 PASS 零 FAIL（含 TestHostedPublishChainOnPostgres 真 HTTP 全链）、真栈 full-loop 分支后端 1 passed、vitest 492/typecheck/admin-flow 6（首轮 1 passed 系栈腿争用假警报，复跑坐实）/主套件 69。T5：deploy 模板层无主站 frame-src 下发（仅两处属运行时子域页 CSP），零改动记录在案。遗留：new_version 对 hosted 仅 server 拦（前端无硬校验，spec 决策）；**D-D（审核面 hostedUrl 展示行）未实现**——Task 2 任务书漏列该条，双路审查均 PASS 未扯出（审查按任务书对照而非 spec §3 全量），待补一行小补丁 | +| P6 | hosted 作品投稿（方案 A 自托管内嵌） | 作者把游戏部署在别处，投稿填 https URL，站内沙箱 iframe 播放；播放端机件已全存在，打通的是入口：后端 D-B runtime 不可变 + D-C hosted 禁 bundle 两护栏，前端表单第三档+预填解锁 | 三仓 | owner 已拍 A | **完成**（owner 拍板方案 A：只存 URL、站内沙箱 iframe 播；server `3e11446` 0.13.0 / crearte `fee5f3b` 0.19.0，2026-09-30 合并推送。勘查正误：Approve 落库映射本就全（PayloadToWork import.go:39），无需动；真实缺口只在校验两处——D-B metadata_change 禁改 runtime（根治前端拒预填的降级风险）+ D-C hosted 禁带 bundle。前端：类型三档/表单第三 radio「自托管内嵌」/hostedUrl https+fallback 默认 external 镜像校验/预填解锁；播放端零改动（GameHost/useGameFrame 既有）。双路审查 PASS with notes；六腿全绿：容器四连、空库 -count=1 集成 151 PASS 零 FAIL（含 TestHostedPublishChainOnPostgres 真 HTTP 全链）、真栈 full-loop 分支后端 1 passed、vitest 492/typecheck/admin-flow 6（首轮 1 passed 系栈腿争用假警报，复跑坐实）/主套件 69。T5：deploy 模板层无主站 frame-src 下发（仅两处属运行时子域页 CSP），零改动记录在案。遗留仅剩：new_version 对 hosted 仅 server 拦（前端无硬校验，spec 决策）。D-D（审核面 hostedUrl/fallback 展示行）当日补交：控制者直改维护者小补丁，分支 feat/p6-dd-adminrow（Task 2 任务书漏列该条；审查按任务书对照未扯出——教训：审查依据应是 spec §3 全量），纯文本无锚点+降级中文标签，四腿复跑 vitest 492/typecheck/admin-flow 7/主套件 70 全 RC=0，crearte 合主 `9bd9372`（0.19.1） | ## 第三波：治理与长尾（随时可插队）