fix(aur): use privacy-safe release identity

Author: speak-agent

.agents/docs/2026-08-09-pr400-handoff-zh.md

@@ -1,8 +1,10 @@
 # PR #400 中文交接文档
 
-> 更新时间：2026-08-09 23:53 CST  
-> 维护身份：`speak-agent`  
-> 状态：Draft，尚未批准合并、尚未发布  
+> 更新时间：2026-08-09 23:53 CST
+>
+> 维护身份：`speak-agent`
+>
+> 状态：Draft，尚未批准合并、尚未发布
 > 本文只记录可公开的仓库事实；本地用户名、绝对工作区路径、临时目录、凭据和个人邮箱均有意省略。
 
 ## 1. 交接结论

scripts/aur/mcpp-bin/PKGBUILD

@@ -1,4 +1,4 @@
-# Maintainer: mcpp-community <x.d2learn.org@gmail.com>
+# Maintainer: mcpp-community <speak-agent@users.noreply.github.com>
 #
 # mcpp-bin — prebuilt release binaries from GitHub, the same artifacts the
 # upstream `install.sh` one-liner downloads. See scripts/aur/README.md for

scripts/aur/reconcile_mcpp_bin.py

@@ -34,6 +34,8 @@
 AUR_RPC_URL = "https://aur.archlinux.org/rpc/v5/info?arg[]=mcpp-bin"
 ARCH_IMAGE = "archlinux:base-devel"
 MANAGED_FILES = ("PKGBUILD", ".SRCINFO", "mcpp.sh")
+AUR_COMMIT_NAME = "speak-agent"
+AUR_COMMIT_EMAIL = "speak-agent@users.noreply.github.com"
 SIDECAR_RE = re.compile(r"^([0-9a-fA-F]{64})[ \t]+\*?(\S+)$")
 T = TypeVar("T")
 
@@ -727,12 +729,12 @@ def publish_staged_repo(
 ) -> tuple[str, int]:
     _run_or_classify(
         runner,
-        ["git", "config", "user.name", "mcpp-ci"],
+        ["git", "config", "user.name", AUR_COMMIT_NAME],
         cwd=clone_dir,
     )
     _run_or_classify(
         runner,
-        ["git", "config", "user.email", "x.d2learn.org@gmail.com"],
+        ["git", "config", "user.email", AUR_COMMIT_EMAIL],
         cwd=clone_dir,
     )
     _run_or_classify(

tests/scripts/test_aur_reconcile.py

@@ -143,6 +143,10 @@ def test_renderer_consumes_manifest_and_materializes_only_mcpp_bin(self) -> None
 
         pkgbuild = (output / "PKGBUILD").read_text(encoding="utf-8")
         self.assertIn(f"pkgver={VERSION}", pkgbuild)
+        self.assertIn(
+            "# Maintainer: mcpp-community <speak-agent@users.noreply.github.com>",
+            pkgbuild,
+        )
         self.assertIn(self.desired.asset("linux", "x86_64").sha256, pkgbuild)
         self.assertIn(self.desired.asset("linux", "aarch64").sha256, pkgbuild)
         self.assertEqual(
@@ -311,6 +315,13 @@ def test_executable_automation_has_no_mcpp_m_path_or_publish_leg(self) -> None:
                 self.assertNotIn("publish mcpp-m", text)
                 self.assertNotIn("publish(mcpp-m", text)
 
+    def test_publish_uses_public_speak_agent_identity(self) -> None:
+        self.assertEqual(reconcile.AUR_COMMIT_NAME, "speak-agent")
+        self.assertEqual(
+            reconcile.AUR_COMMIT_EMAIL,
+            "speak-agent@users.noreply.github.com",
+        )
+
     def test_workflow_uses_pinned_host_key_and_recovery_triggers(self) -> None:
         workflow = (
             REPO_ROOT / ".github" / "workflows" / "aur-publish.yml"