fix(ci): auto-merge checkout改用tar.gz方式，避免缓存损坏

.gitea/workflows/auto-merge.yml

@@ -1,4 +1,4 @@
-name: Auto Merge PRs (main)
+name: Auto Merge CI PRs
 
 on:
   pull_request:
@@ -6,13 +6,16 @@ on:
 
 jobs:
   auto-merge:
-    name: Auto Merge on CI Green + Approved (main)
-    runs-on: ubuntu-latest
-    if: github.event_name == 'pull_request' && !github.event.pull_request.draft && github.event.pull_request.base.ref == 'main'
+    name: Auto Merge on CI Green + Approved
+    runs-on: ci-check
+    if: github.event_name == 'pull_request' && !github.event.pull_request.draft && github.event.pull_request.base.ref == 'develop'
     timeout-minutes: 30
     steps:
       - name: Checkout code
-        uses: actions/checkout@v3
+        shell: sh
+        env:
+          GITHUB_TOKEN: ${{ github.token }}
+        run: "set -eu\npython3 - <<'PY'\nimport io, os, tarfile, time, urllib.request, urllib.error\nurl = f\"{os.environ['GITHUB_API_URL']}/repos/{os.environ['GITHUB_REPOSITORY']}/archive/{os.environ['GITHUB_SHA']}.tar.gz\"\nrequest = urllib.request.Request(url, headers={\"Authorization\": f\"token {os.environ['GITHUB_TOKEN']}\"})\nlast_err = None\nfor attempt in range(5):\n    try:\n        with urllib.request.urlopen(request, timeout=120) as response:\n            archive = response.read()\n        break\n    except urllib.error.HTTPError as e:\n        last_err = e\n        if e.code >= 500 and attempt < 4:\n            wait = 2 ** attempt\n            print(f\"Checkout HTTP {e.code}, retrying in {wait}s (attempt {attempt+1}/5)...\")\n            time.sleep(wait)\n            continue\n        raise\n    except Exception as e:\n        last_err = e\n        if attempt < 4:\n            wait = 2 ** attempt\n            print(f\"Checkout error: {e}, retrying in {wait}s (attempt {attempt+1}/5)...\")\n            time.sleep(wait)\n            continue\n        raise\nelse:\n    raise last_err\nwith tarfile.open(fileobj=io.BytesIO(archive), mode='r:gz') as tar:\n    root_prefix = tar.getmembers()[0].name.split('/', 1)[0] + '/'\n    for member in tar.getmembers():\n        name = member.name\n        if name == root_prefix[:-1]:\n            continue\n        if name.startswith(root_prefix):\n            member.name = name[len(root_prefix):]\n        if member.name:\n            tar.extract(member, '.')\nPY\n"
 
       - name: Auto merge when CI passes and approved
         shell: bash
@@ -20,6 +23,7 @@ jobs:
           GITHUB_TOKEN: ${{ github.token }}
           MERGE_TOKEN: ${{ secrets.REVIEW_GITEA_TOKEN }}
           PR_NUMBER: ${{ github.event.pull_request.number }}
+          PR_HEAD_SHA: ${{ github.event.pull_request.head.sha }}
           BASE_REF: ${{ github.event.pull_request.base.ref }}
         run: |
           set -eu
@@ -27,19 +31,33 @@ jobs:
           echo "PR #${PR_NUMBER} - 检查CI状态+审批并自动合并到${BASE_REF}"
           echo
 
-          # 只合main分支
-          if [ "$BASE_REF" != "main" ]; then
-            echo "Skip: 目标分支不是main"
+          # 只合develop分支
+          if [ "$BASE_REF" != "develop" ]; then
+            echo "Skip: 目标分支不是develop"
             exit 0
           fi
 
-          # main分支门禁：Validate + Frontend Lint
-          CONTEXTS=(
-            "CI/CD Pipeline / Validate Code Quality And Tests (pull_request)"
-            "Tests / test (pull_request)"
-            "CI/CD Pipeline / Frontend Lint (pull_request)"
-          )
-          echo "检查门禁: ${#CONTEXTS[@]} 项"
+          # 判断是否纯前端改动
+          FILES=$(curl -s -H "Authorization: token ${GITHUB_TOKEN}" \
+            "${GITHUB_API_URL}/repos/${GITHUB_REPOSITORY}/pulls/${PR_NUMBER}/files?limit=300" \
+            | python3 -c "import sys,json; [print(f['filename']) for f in json.load(sys.stdin)]")
+          TOTAL=$(echo "$FILES" | grep -cv '^$' || true)
+          FRONTEND_COUNT=$(echo "$FILES" | grep -c '^apps/web/' || true)
+          BACKEND_COUNT=$((TOTAL - FRONTEND_COUNT))
+          echo "变更文件: ${TOTAL} 个 (前端: ${FRONTEND_COUNT}, 后端/公共: ${BACKEND_COUNT})"
+
+          if [ "$BACKEND_COUNT" = "0" ] && [ "$FRONTEND_COUNT" -gt "0" ]; then
+            CONTEXTS=("CI/CD Pipeline / Frontend Lint (pull_request)")
+            echo "纯前端改动，只检查Frontend Lint"
+          else
+            CONTEXTS=(
+              "CI/CD Pipeline / Validate Code Quality And Tests (pull_request)"
+              "CI/CD Pipeline / Unit Tests (pull_request)"
+              "CI/CD Pipeline / Frontend Lint (pull_request)"
+              "CI/CD Pipeline / Integration Tests (pull_request)"
+            )
+            echo "检查全部四门禁"
+          fi
           echo
 
           # 轮询等待，最多30分钟（180次x10秒）
@@ -51,7 +69,7 @@ jobs:
 
             # 检查CI状态
             for ctx in "${CONTEXTS[@]}"; do
-              STATE=$(python3 scripts/check_ci_status.py "$GITHUB_TOKEN" "$GITHUB_REPOSITORY" "$GITHUB_SHA" "$ctx")
+              STATE=$(python3 scripts/check_ci_status.py "$GITHUB_TOKEN" "$GITHUB_REPOSITORY" "$PR_HEAD_SHA" "$ctx")
               echo "  CI: ${ctx##*/}: $STATE"
               if [ "$STATE" != "success" ]; then
                 ALL_SUCCESS=false
@@ -84,12 +102,12 @@ jobs:
                 exit 0
               fi
 
-              # 执行merge（main分支用merge，保留历史）
+              # 执行squash merge
               HTTP_CODE=$(curl -s -o /tmp/merge_resp.json -w "%{http_code}" \
                 -X POST \
                 -H "Authorization: token ${MERGE_TOKEN}" \
                 -H "Content-Type: application/json" \
-                -d '{"do":"merge","merge_title_field":"","merge_message_field":"","delete_branch_after_merge":true,"force_merge":false}' \
+                -d '{"do":"squash","merge_title_field":"","merge_message_field":"","delete_branch_after_merge":true,"force_merge":false}' \
                 "${GITHUB_API_URL}/repos/${GITHUB_REPOSITORY}/pulls/${PR_NUMBER}/merge")
 
               echo "合并API HTTP状态: $HTTP_CODE"