# Nexus Release Index — 2026-07-08

## Status

```text
local_artifact_ready=true
online_deployed=false
remote_ssh_blocked_by_codex_approval=true
```

Codex has not modified the production server in this phase. Remote SSH/network checks were blocked by the approval auto-review endpoint returning HTTP 404.

## Artifact

```text
C:\Users\uzuma\Documents\Codex\2026-07-06\yuu\outputs\nexus-release-20260708.tar.gz
```

SHA256:

```text
46299832fb78e8cc196f85cf1928f34eea4deee82dbc83b67883394f0359036b
```

Standard checksum file:

```text
C:\Users\uzuma\Documents\Codex\2026-07-06\yuu\outputs\nexus-release-20260708.tar.gz.sha256
```

Metadata:

```text
C:\Users\uzuma\Documents\Codex\2026-07-06\yuu\outputs\nexus-release-20260708.metadata.json
C:\Users\uzuma\Documents\Codex\2026-07-06\yuu\outputs\Nexus-release-artifact-metadata-20260708.md
```

Current artifact facts:

```text
size_mb=27.02
entries=2409
files=2409
```

## Main documents

```text
C:\Users\uzuma\Documents\Codex\2026-07-06\yuu\outputs\Nexus-release-ready-checklist-20260708.md
C:\Users\uzuma\Documents\Codex\2026-07-06\yuu\outputs\Nexus-release-diff-manifest-20260708.md
C:\Users\uzuma\Documents\Codex\2026-07-06\yuu\outputs\Nexus-manual-deploy-commands-20260708.md
C:\Users\uzuma\Documents\Codex\2026-07-06\yuu\outputs\Nexus-app-v2-双后台实施说明-20260707.md
```

## One-command local preparation

Run from the source snapshot:

```cmd
.venv-py312-codex\Scripts\python.exe scripts\prepare_release_artifact.py --old-snapshot C:\Users\uzuma\Documents\Codex\2026-07-06\yuu\work\nexus_code_context\snapshots\nexus-source-20260707-070236 --output-dir C:\Users\uzuma\Documents\Codex\2026-07-06\yuu\outputs --name nexus-release-20260708
```

Verified result:

```text
[prepare-release-artifact] OK
added=381 modified=26 deleted=347
60 passed in 1.70s
OK: release bundle looks clean
Validate-only mode: tarball checksum and content validation passed
```

## Server-side apply command

Upload:

```cmd
scp C:\Users\uzuma\Documents\Codex\2026-07-06\yuu\outputs\nexus-release-20260708.tar.gz nexus:/tmp/nexus-release-20260708.tar.gz
```

If the new apply script is not yet on the server, extract it first:

```bash
cd /tmp
tar xzf nexus-release-20260708.tar.gz nexus-release/deploy/apply-release-bundle.sh
```

Validate only:

```bash
bash /tmp/nexus-release/deploy/apply-release-bundle.sh --validate-only \
  --tarball /tmp/nexus-release-20260708.tar.gz \
  --sha256 46299832fb78e8cc196f85cf1928f34eea4deee82dbc83b67883394f0359036b
```

Apply:

```bash
sudo bash /tmp/nexus-release/deploy/apply-release-bundle.sh \
  --tarball /tmp/nexus-release-20260708.tar.gz \
  --sha256 46299832fb78e8cc196f85cf1928f34eea4deee82dbc83b67883394f0359036b \
  --deploy-path /opt/nexus
```

## Online verification after deploy

```cmd
.venv-py312-codex\Scripts\python.exe scripts\verify_online_release.py --base-url https://api.synaglobal.vip
```

Expected:

```text
OK: health
OK: /app
OK: /app-v2
OK: online release verification passed
```

## BtPanel verification

After deploy:

1. Existing `/app/` works.
2. New `/app-v2/` works.
3. BtPanel one-click login works.
4. Same server duplicate one-click login is serialized; conflict returns HTTP 409.
5. Newly added BtPanel servers get hardcoded_3600 detection/repair before one-click login.
6. Multiple BtPanel sessions remain logged in after 2 hours and refresh.



## Server preflight command

Before applying the release on the production host, run:

```bash
bash /tmp/nexus-release/deploy/preflight-release-host.sh \
  --tarball /tmp/nexus-release-20260708.tar.gz \
  --sha256 46299832fb78e8cc196f85cf1928f34eea4deee82dbc83b67883394f0359036b \
  --deploy-path /opt/nexus
```

This checks required commands, checksum, release tar paths, deploy path, runtime hints, disk space, and current local endpoints before applying changes.

- `Nexus-release-text-integrity-gate-20260708.md`：本轮新增文本完整性 Gate、文档控制字符修复和最新制品 SHA 记录。
- `Nexus-release-python-publisher-20260708.md`：Python 版发布辅助脚本说明，避免 PowerShell 管道/引号/编码问题。
- `Nexus-release-publisher-tests-20260708.md`：发布辅助脚本离线测试覆盖与 diff manifest 排除 tmp 修复记录。