From 23e00df3a7393c5e22f123fd6d6ee5a5bfc5d207 Mon Sep 17 00:00:00 2001
From: OpeItcLoc03 <vitya.kuznetsov@gmail.com>
Date: Thu, 18 Jun 2026 07:00:53 +0000
Subject: [PATCH] meta(tasks): close [books-scheduler-registry-auth-cred] in
 OpeItcLoc03/admin

---
 .tasks/STATUS.md | 17 +++++++++++++----
 1 file changed, 13 insertions(+), 4 deletions(-)

diff --git a/.tasks/STATUS.md b/.tasks/STATUS.md
index 912dca4..0c45a2d 100644
--- a/.tasks/STATUS.md
+++ b/.tasks/STATUS.md
@@ -644,7 +644,7 @@ vehicles-loader (stostayer) деплоится в Docker у клиента (lite
 
 ---
 
-## ⚪ [books-scheduler-registry-auth-cred] — ## Проблема (простыми словами)
+## 🟢 [books-scheduler-registry-auth-cred] — ## Проблема (простыми словами)
 
 Планировщик books (`books-job-scheduler` на books-vds) умеет запускать «docker-таски» — для каждой такой задачи он скачивает (pull) готовый образ-инструмент из реестра `registry.kzntsv.site` и запускает его контейнером. Один из таких инструментов — `books-tool-create-picking-list-pdf` (рендерит PDF листа подбора FBS).
 
@@ -697,11 +697,20 @@ Approach ратифицирован человеком (вариант A): ко
 **weight:** needs-human
 **notify:** victor/books
 
-**Status:** ready
-**Where I stopped:** (not started)
-**Next action:** Добавить ключ docker.registryAuth (кред books-ci из pass vds-kzntsv/registry-books-ci) в config-volume scheduler'а на books-vds, затем перезапустить контейнер books-job-scheduler чтобы он перечитал config.
+**Status:** done
+**Where I stopped:** cred placed in config-volume; activation = books code deploy (no premature restart)
+**Next action:** (none — kept until merged)
 **Branch:** n/a
 **Notify:** victor/books
 <!-- created-by: OpeItcLoc03@DESKTOP-NSEF0UK / from: victor/books / 2026-06-18T06:57:04.379Z -->
 
+
+
+## Done (admin infra)
+- `docker.registryAuth = {username:"books-ci", password:<pass vds-kzntsv/registry-books-ci>, serveraddress:"registry.kzntsv.site"}` written into `/opt/books/job-scheduler/config/default.json` (bind-mount → scheduler container, verified pwlen=48, valid JSON). Backup: `default.json.bak-pre-registryauth-2026-06-18`.
+- **No restart performed** — current running code doesn't read `registryAuth` yet (inert/backward-compatible). Activation happens on books' code deploy (rebuild = restart, bind-mounted config persists). If books had already deployed the new code, a single `books-job-scheduler` restart activates it.
+- Cred itself verified against registry earlier: `books-ci` Basic → 200 on `books-tool-create-picking-list-pdf:master`, wrong-pass → 401.
+- Image + `master` tag present in registry → pull works as soon as code+cred are both live; no re-push needed.
+<!-- closed-by: OpeItcLoc03@DESKTOP-NSEF0UK / 2026-06-18T07:00:51.841Z / note: cred placed in config-volume; activation = books code deploy (no premature restart) -->
+
 ---