[BEL] 实现不可变 Event 与永久幂等收据 #17
Closed
opened 2026-08-12 09:53:44 +08:00 by ila
·
4 comments
No Branch/Tag Specified
dev
feat/183-bell-contact-schedule
docs/171-coordination-e2e-wiki
feature/155-coordination-e2e
docs/168-sync-coordination-wiki
feature/154-coordination-deployment
docs/152-153-connectors
feature/153-event-evidence-connector
feature/152-brain-control
docs/151-machine-identity-acceptance
task/151-machine-identity
docs/150-contract-acceptance
docs/148-149-contract-acceptance
feature/149-runtime-status-contract
feature/150-event-evidence-contract
feature/148-source-config-contract
docs/8-mvp-acceptance
feature/145-sense-e2e-isolation-cleanup
feature/134-bell-independent-e2e
feature/142-bell-ui-shell-startup
feature/140-bell-minimal-admin-menu
feature/138-bell-production-captcha
feature/133-bell-alert-lifecycle
feature/132-bell-rule-alert
feature/131-bell-event-receipt
feature/16-brain-local-events
feature/15-brain-rules
feature/14-brain-vision
feature/13-brain-decode
feature/11-brain-input
main
feat/sense-79-ops-alerts
feat/sense-78-outbox
feat/77-sense-media-shards
feat/76-sense-edge-node-status
feat/75-sense-quota-capacity
feature/74-sense-operations
feature/73-sense-local-events
feature/72-sense-bulk-provisioning
feature/113-record-parallel-acceptance
feature/113-sync-parallel-implementation-docs
feature/71-sense-e2e-regression
feature/62-bell-goadmin-skeleton
feature/10-brain-python-cuda-skeleton
feature/108-sync-devharness
feature/90-sense-root-launcher
feature/106-supervisor-sense
fix/101-sense-layout-shell
feature/104-sense-login-30-days
docs/99-acceptance
feature/99-sense-app-config
feature/70-sense-windows-delivery
fix/95-sense-media-path-constraint
feature/97-sense-password-login
docs/92-acceptance
fix/92-sense-capabilities-jsonb
docs/69-acceptance
feature/69-sense-area
feature/68-sense-liveview
feature/67-sense-mediamtx-reconcile
feature/66-sense-onvif-admission
feature/65-sense-device-credential
feature/64-sense-auth-rbac-audit
feature/61-sense-goadmin-source-baseline
docs/acceptance-batch-20260814
coordination/58-finalize-branch-governance
explore
agent/codex/56-sense-device-edit-payload
agent/codex/54-sense-liveview-on-demand
agent/codex/51-sense-auto-liveview
agent/codex/50-sense-split-camera-credentials
agent/codex/48-sense-onvif-digest
agent/codex/46-sense-env-loader
agent/codex/44-sense-empty-navigation
agent/codex/42-sense-password-length-only
agent/codex/40-sense-password-min-6
agent/codex/37-sense-windows-package
agent/codex/36-bell-docs
agent/codex/9-bell-mvp
agent/codex/21-sense-mvp
agent/codex/28-current-prototypes
agent/codex/5-goadmin-baseline
agent/codex/3-go-admin-ui-reuse
agent/codex/1-collaboration-rules
No results found.
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Notifications
Due Date
No due date set.
Dependencies
No dependencies set.
Reference: ila/yovision#17
Reference in New Issue
Block a user
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
当前状态:已完成
用户于 2026-08-14 明确验收通过。
基本信息
依赖与并行
子项目影响
Bell/server/app/event/**、Bell/server/app/receipt/**、Bell/server/migrations/*event*、Bell/server/migrations/*receipt*、Bell/web/src/views/event/**协同接口
原始需求
要解决什么
Bell 需要以
(producer_id, source_event_id)永久稳定地接收入站事实,原始 Event 校验后不可变并保存结构化内容与证据引用;重复请求和跨重启重试必须返回同一收据。做什么 / 不做什么
已确认方案
内部入站端口接收经过适配器规范化的数据。数据库以
(producer_id, source_event_id)唯一约束作为并发最终防线;首次写入创建不可变 Event 和稳定 Receipt,完全相同的重试返回原收据,键相同但规范化载荷冲突时返回可定位冲突且不改写旧事实。证据只保存安全逻辑引用。预计修改文件:
Bell/server/app/event/**Bell/server/app/receipt/**Bell/server/migrations/*event*Bell/server/migrations/*receipt*Bell/web/src/views/event/**需求变化记录
文档影响
交付文档影响
验收标准
(producer_id, source_event_id)、相同载荷的串行/并发/跨重启重试返回同一 Event 与 Receipt验证方式
在独立 PostgreSQL 测试库运行迁移,并执行重复、并发冲突、事务失败回滚、服务重启后重试以及 Event 页面分页/只读检查。
未验证边界:Sense/Brain 的正式事件生产、跨项目机器身份、共享事件/证据契约、根级部署与端到端链路不在本工单验证;这些内容留待独立协同工单。
风险和回退
风险:错误幂等设计会丢事件或制造重复,迁移错误会破坏不可变性。回退:在尚无生产数据的 MVP 测试库回退本工单迁移与模块;一旦有真实 Event,不得通过更新/删除历史数据回退,需另建高风险迁移工单。
后续协同需求摘要
生产者:Sense、Brain、第三方事件源;消费者:Bell 入站适配器;目的:冻结外部事件/证据 Schema、错误码、producer identity 与兼容周期;候选事实源:未来
contracts/版本化 OpenAPI/JSON Schema;阻塞工单:正式外部接入将在 #本工单后续集成 之外;建议验证:契约测试、身份隔离、重复/冲突/版本兼容与无内部路径泄露。状态:进行中(2026-08-12)
前置 #9 已完成并推送,#12 也已按顺序完成。开始实现 PostgreSQL 原子 Event/Receipt、
(producer_id, source_event_id)永久幂等、载荷冲突拒绝、Event 数据库级不可更新/删除以及分页查询;写入限于Bell/**。实施完成,进入连续依赖验证
64a1d82(已推送)#18 的真实依赖是复用稳定 Event/Receipt 入站服务,现已满足,继续实施仅限开发测试的合成入口。
最终证据:待验收
64a1d82(PR #35)dab364664ed4docs/task/17-Bell不可变Event与永久幂等收据.mde2a4345、3c245e1git diff --check通过实现、自动测试、Wiki、镜像、提交、推送与 PR 证据已齐。人工验收前本工单保持开启,不关闭、不勾选父工单。
用户验收通过(2026-08-14)
用户已明确确认当前未验收工单通过验收。本工单的实现、测试与既有证据按记录接受,Wiki 归档状态已更新为“已完成”(revision
2535dc083740)。该交付属于重建前历史实现;Wiki 归档已完成,代码与原归档镜像继续保留在explore追溯。此验收不改变 #58 的架构决定:旧自研基础框架不会恢复为
dev基线,Sense/Bell 后续仍分别由 #61/#62 从冻结 GoAdmin 源码重建。