33 lines
1019 B
Markdown
33 lines
1019 B
Markdown
|
# 2026-06-04 — Phase2 P2-6 sync_engine_v2.py 全文深审
|
|||
|
|
|
|||
|
|
## 摘要
|
|||
|
|
|
|||
|
|
P2-6：`sync_engine_v2.py` 552 行全文；17 H closure，无 P0/P1。P2-2 已审 API 层，本波补服务层 rsync 执行链。
|
|||
|
|
|
|||
|
|
## 动机
|
|||
|
|
|
|||
|
|
Phase 2 优先级第 4 项；D1 仅 delta 五文件节选，未对 engine 全文 closure。
|
|||
|
|
|
|||
|
|
## 涉及文件
|
|||
|
|
|
|||
|
|
| 文件 | 说明 |
|
|||
|
|
|------|------|
|
|||
|
|
| `docs/reports/audit-phase2-2026-06-04-waveP2-6.md` | 深审报告 |
|
|||
|
|
| `server/application/services/sync_engine_v2.py` | 552 行全文 Read |
|
|||
|
|
|
|||
|
|
## 结论
|
|||
|
|
|
|||
|
|
- 源路径经 `resolve_nexus_push_source_path`；远程路径 normalize
|
|||
|
|
- Semaphore 并发 + `_db_lock` 保护 DB 写；Redis cancel
|
|||
|
|
- rsync subprocess 参数化；临时 SSH key 0600 + finally 删除
|
|||
|
|
- sshpass 环境变量传密（RISK，内网运维工具可接受）
|
|||
|
|
- 失败自动 retry job；staging 仅全成功 manual push 后清理
|
|||
|
|
|
|||
|
|
## 验证
|
|||
|
|
|
|||
|
|
```bash
|
|||
|
|
bash scripts/local_verify.sh
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
进度：`☑实现 ☑本地验证 ☑审计8步 □部署 □健康检查 □浏览器验证 ☑changelog`
|