feat: verify server pull access before deployment

2026-07-29 16:17:54 +02:00
parent 430d40354b
commit ae6c41ff90
8 changed files with 196 additions and 16 deletions
@@ -1585,6 +1585,27 @@
      syncState();
      return { profile: clone(target), created: true, remoteSha: target.state?.giteaSha || repo.localStatus?.head };
    },
+    async verifyServerGitProfile(repository, profileId) {
+      const repo = repositories.find((item) => item.fullName === repository.fullName);
+      const target = repo?.deploymentProfiles.find((item) => item.id === profileId);
+      if (!target) throw new Error("Deployment profile not found.");
+      const branchSha = target.state?.giteaSha || repo.localStatus?.head || null;
+      const liveSha = target.state?.liveSha || null;
+      return {
+        readiness: branchSha && liveSha === branchSha ? "Ready" : "Commit mismatch",
+        ready: true,
+        checkedAt: iso(),
+        repository: repo.fullName,
+        profileId,
+        branchSha,
+        liveSha,
+        checks: [
+          { id: "remote-branch", label: "Gitea branch", status: "pass", detail: "Exact branch resolved." },
+          { id: "deploy-key-scope", label: "Repository deploy key", status: "pass", detail: "Repository-scoped and read-only." },
+          { id: "server-git-access", label: "Unraid to Gitea", status: "pass", detail: "Pinned SSH access verified." },
+        ],
+      };
+    },
    async refreshOperations(operationId = null) {
      await wait(300);
      if (operationId) {