v0.41.8: BB-11 OCI ping case

Register `OCI ping` in scripts/oci_client_smoke_storage_only.sh
(plan-20261001 BB-11): anonymous GET /v2/ is 200 with an exact
Docker-Distribution-API-Version: registry/2.0 header, and an invalid
Bearer token gets 401 with WWW-Authenticate. Adds the bounded oci_curl
and exact oci_header helpers and lists the case in deploy-trunk §10.4.
Marks BB-10 done.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_018bJDjze83ToyPysYzmxxWS
Signed-off-by: Eli Ma <eli@patch.sh>

Author: genedna

Cargo.lock

@@ -1,6 +1,6 @@
 [package]
 name = "mega2"
-version = "0.41.7"
+version = "0.41.8"
 edition = "2024"
 license = "MIT OR Apache-2.0"
 description = "Monorepo engine and Git hosting server for AI agents: trunk-based storage, Git Smart HTTP, Git LFS, OCI registry, and Agent Session Capture"

Cargo.toml

@@ -395,5 +395,7 @@ CASE='OCI ping'   # 换成要跑的 case 名
 docker compose -p mega2-trunk -f docker/docker-compose-storage-only.yml --profile interop exec -T -e MEGA2_SMOKE_CASE="$CASE" interop-smoke bash /repo/scripts/oci_client_smoke_storage_only.sh 2>&1 | tee target/tmp/bb-oci-case.log
 ```
 
+已登记 case：`OCI ping`。
+
 不设 `MEGA2_SMOKE_CASE` 时整跑全部默认栈 case；opt-in case（auth-none）只经 `scripts/bb_optin_run.sh none oci_client_smoke_storage_only.sh '<case>' <log>` 运行。
 

docs/deploy-trunk.md

@@ -952,7 +952,7 @@
 ### Task BB-10: OCI client smoke 脚本骨架
 
 **Task type:** `implementation`  
-**Lifecycle / Acceptance:** `in-progress` / `remote-pending`（v0.41.7；Codex R4 PASS；C 组 2023 测试通过（`RUST_TEST_THREADS=4`、`NO_PROXY` 环境下；此前三次环境抖动）；待 D 组 `docker` job）  
+**Lifecycle / Acceptance:** `done` / `complete`（v0.41.7；Codex R4 PASS；C 组 2023 测试通过；D 组 docker run 36923427965 success）  
 **Description:** 新建 `scripts/oci_client_smoke_storage_only.sh`：引入共享 runner 库、生成 `RUN_ID`（ADR-BB-07）、做前置检查、**零 case**；同步 `docs/deploy-trunk.md` §10.4。唯一行为轴：oci client smoke 运行框架。  
 **Out of scope:** 任何 case（本域场景卡逐一承接）；改既有 smoke 脚本（GC-BB-06）。  
 **Current evidence:**
@@ -1021,7 +1021,7 @@
 ### Task BB-11: OCI ping
 
 **Task type:** `implementation`  
-**Lifecycle / Acceptance:** `pending` / （空）  
+**Lifecycle / Acceptance:** `in-progress` / `remote-pending`（v0.41.8；Codex R2 PASS；C 组 2023 测试通过；待 D 组 `docker` job）  
 **Description:** 在 `scripts/oci_client_smoke_storage_only.sh` 注册 case `OCI ping`。匿名 `GET /v2/` 与无效 Bearer 的质询。 唯一行为轴：OCI 匿名 ping。  
 **Out of scope:** 其它 case（各自成卡）；改 `src/**`（产品缺陷按 ADR-BB-08 立 `FIX-BB-*`）；改既有 smoke 脚本（GC-BB-06）；以 cargo IT 作 VER（GC-BB-04）。  
 **Current evidence:**

docs/plan/plan-20261001.md

@@ -19,7 +19,7 @@ SCRIPT_DIR="${BASH_SOURCE[0]%/*}"
 source "$SCRIPT_DIR/lib/smoke-runner.sh"
 
 smoke_init "oci client"
-require_tools curl jq oras sha256sum mktemp date rm perl
+require_tools curl jq oras sha256sum mktemp date rm perl awk tr
 
 MEGA2_BASE_URL="${MEGA2_BASE_URL:-http://127.0.0.1:9000}"
 MEGA2_BASE_URL="${MEGA2_BASE_URL%/}"
@@ -37,4 +37,27 @@ code=$(curl -sS --connect-timeout 3 --max-time 5 -o /dev/null -w '%{http_code}'
 
 export REGISTRY RUN_ID WORK TOKEN MEGA2_BASE_URL
 
+# --- shared OCI helpers -------------------------------------------------
+# oci_curl: curl with bounded connection and total time.
+oci_curl() { curl -sS --connect-timeout 5 --max-time 30 "$@"; }
+# oci_header <file> <name>: exact value of a response header (case-insensitive name).
+oci_header() {
+    awk -v n="$(printf '%s' "$2" | tr '[:upper:]' '[:lower:]')" \
+        'tolower($1) == n":" {sub(/^[^:]*:[ \t]*/, ""); sub(/\r$/, ""); print; exit}' "$1"
+}
+
+# --- BB-11 OCI ping -----------------------------------------------------
+case_oci_ping() {
+    local hdr="$WORK/ping.hdr" code
+    code=$(oci_curl -D "$hdr" -o /dev/null -w '%{http_code}' "$MEGA2_BASE_URL/v2/")
+    [ "$code" = 200 ] || { echo "anonymous GET /v2/ returned $code" >&2; return 1; }
+    [ "$(oci_header "$hdr" docker-distribution-api-version)" = "registry/2.0" ] \
+        || { echo "Docker-Distribution-API-Version is not registry/2.0" >&2; return 1; }
+    code=$(oci_curl -D "$hdr" -o /dev/null -w '%{http_code}' -H 'Authorization: Bearer bb-invalid-token' "$MEGA2_BASE_URL/v2/")
+    [ "$code" = 401 ] || { echo "invalid Bearer returned $code" >&2; return 1; }
+    [ -n "$(oci_header "$hdr" www-authenticate)" ] || { echo "401 without WWW-Authenticate" >&2; return 1; }
+}
+
+run_case "OCI ping" case_oci_ping
+
 finish