fix: harden Multica self-hosted deployment and Gitea OAuth

[2233admin]

Summary

• keep the Windows CLI daemon alive when the desktop UI is closed
• track and diagnose NAS release drift and normalize uploaded shell files
• restore and deploy the self-hosted Gitea login flow, including the Gitea logo
• use the configured Gitea callback URI instead of deriving it from the browser origin
• add deployment gates for stale/incomplete Gitea OAuth callback configuration

Verification

• python -m unittest discover -p 'test_*.py' — 108 tests passed
• python -m py_compile multica_deploy.py test_multica_deploy.py — passed
• current NAS OAuth preflight — passed
• current NAS /readyz — passed

Notes

This PR contains the deployment-tool maintenance commits. The Multica source checkout was separately built and deployed to the NAS with the Gitea login fix.

[repowise-bot]

✅ Health of changed files: 2.9 (unchanged)
_{🚨 Change risk: 8.9/10 (high).}

📋 At a glance
2 files changed health · 2 hotspots touched · 3 new findings introduced · 2 files with recent fix history · 1 dead-code finding. Scoped to (root).

✅ Health gate: passed

📌 Before you merge

• Run test_fleet_apply.py, test_fleet_plan.py: they import the changed files
• Docs that usually track this code: README.md, README.zh-CN.md

🔎 More signals (3)

🗺️ Change map

flowchart LR
  subgraph PR ["Changed in this PR (1 with dependents)"]
    f_multica_deploy_py["multica_deploy.py 🔥"]:::changed
  end
  f_install_py["install.py"]
  f_multica_deploy_py --> f_install_py
  t_test_fleet_apply_py(["✅ test_fleet_apply.py"]):::guard
  t_test_fleet_apply_py -.-> f_multica_deploy_py
  classDef changed fill:#dbeafe,stroke:#1d4ed8,color:#1e3a5f
  classDef warn fill:#fef3c7,stroke:#b45309,color:#78350f
  classDef guard fill:#dcfce7,stroke:#15803d,color:#14532d

Loading

_{Solid arrows: code that imports the changed files (1 direct dependent, from the last indexed snapshot). Dashed: history/tests.}

🔥 Hotspots touched (2)

• test_multica_deploy.py: 8 commits/90d, 0 dependents
• multica_deploy.py: 10 commits/90d, 4 dependents

💀 Dead code (1 finding)

• 💀 multica_deploy.py _live_task_runner (confidence 0.65)

---

📊 See the full report for this PR
_{Your repo map with this PR's blast radius lit up, every caller of the contracts it changes, and health before and after. No sign-in. · ⭐ Star Repowise · 📥 Install bot · Silence on a single PR with [skip repowise] in the title · Per-repo toggle on repowise.dev/settings?tab=bot · Updated 2026-08-23 02:19 UTC}

[coderabbitai]

Warning

Your free Security trial is over. An organization admin can activate billing to continue.

[coderabbitai]

Important

Review skipped

Draft detected.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 99f66c0b-82cd-4e72-8f2a-e4d5a99506e5

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}