Nexus Agent
863e49e518
Unify upgrade-agent with install.sh via agent_deploy; auto-sync Git web/app after Docker upgrade to prevent vite hash drift; extend prod_probe for Beijing TZ checks. Co-authored-by: Cursor <cursoragent@cursor.com>
1.4 KiB
1.4 KiB
审计 — 接续 Wave0 + D-01（2026-06-09）
Changelog: docs/changelog/2026-06-09-continuation-wave0-d01.md
变更文件清单
| 文件 | 说明 |
|---|---|
scripts/prod_probe.py |
生产时区验收：422、cron next_run、bundle |
deploy/sync_webapp_to_container.sh |
upgrade 后同步 Git web/app 进容器 |
deploy/nexus-1panel.sh |
upgrade 末尾调用 sync |
deploy/deploy-production.sh |
Docker 部署后 sync |
deploy/deploy-frontend.sh |
sudo docker 运行时探测 |
server/utils/agent_deploy.py |
D-01 统一 upgrade 命令 |
server/api/servers.py |
单台 upgrade 用 agent_deploy |
server/application/services/server_batch_service.py |
批量 upgrade + agent_port |
tests/test_agent_deploy.py |
单测 |
Step 3 规则扫描
| 规则 | 结论 |
|---|---|
| 密钥 | PASS — 无凭据入仓 |
| 静默吞错 | PASS — sync 失败 warn，probe 显式断言 |
| Shell 注入 | PASS — docker cp 路径来自 NEXUS_ROOT |
| 分层 | PASS — agent_deploy 在 utils，API 薄编排 |
Closure
| 项 | 结果 |
|---|---|
test_agent_deploy.py |
passed |
pre_deploy_check.sh |
7/7 |
prod_health_check.sh origin |
passed |
生产 sync_webapp_to_container.sh |
index-mgwiCK5j.js OK |
DoD
- changelog + audit + Handoff 2026-06-09
- 门控 7/7
- 生产探针全绿
- D-01 alignment-plan ☑