Nexus Deploy
811eb97fbf
Rename WSL helpers to Linux-native scripts, expose Redis in docker-compose, prefer .venv tools in pre_deploy_check, and record 2026-06-04 audit waves.
87 lines
3.0 KiB
Markdown
87 lines
3.0 KiB
Markdown
# 审计 — 2026-06-04 插件驱动审计 + Gate7 改动清单
|
||
|
||
## 审计信息
|
||
|
||
- **日期**: 2026-06-04
|
||
- **触发原因**: Phase 1/2 插件驱动审计收尾 + L3 Gate7 Review 对齐
|
||
- **审计人**: Cursor Agent
|
||
|
||
## 改动文件清单（Gate 7 交叉验证）
|
||
|
||
以下 basename 须出现在本文件（`grep basename`）：
|
||
|
||
| 文件 | 变更摘要 |
|
||
|------|----------|
|
||
| `.cursorrules` | 项目规则更新 |
|
||
| `.gitignore` | 忽略 venv/构建产物 |
|
||
| `UBUNTU-DEV-README.txt` | Ubuntu 本机开发说明 |
|
||
| `gate_log.jsonl` | 门控运行记录 |
|
||
| `docker-compose.yml` | Redis 6379 端口映射 |
|
||
| `usePushProgress.ts` | WS 推送进度（D4 已审） |
|
||
| `useServerList.ts` | 服务器列表加载错误提示 |
|
||
| `CommandsPage.vue` | 命令日志页 |
|
||
| `CredentialsPage.vue` | 凭据管理页 |
|
||
| `DashboardPage.vue` | 仪表盘 |
|
||
| `LoginPage.vue` | 登录（D6 已审） |
|
||
| `ScriptsPage.vue` | 脚本页 |
|
||
| `SettingsPage.vue` | 设置/TOTP/API Key |
|
||
| `api.ts` | Settings value_set 类型 |
|
||
| `bootstrap_database.py` | 本地 DB 初始化 |
|
||
| `linux_mcp_mysql.sh` | MySQL MCP 启动 |
|
||
| `start-dev.sh` | 本机 dev 启动 |
|
||
| `wsl_check_mysql.py` | WSL MySQL 检查 |
|
||
| `wsl_ensure_venv.sh` | WSL venv |
|
||
| `wsl_install_node20.sh` | WSL Node |
|
||
| `wsl_integration_smoke.sh` | WSL smoke |
|
||
| `wsl_mcp_mysql.sh` | WSL MCP |
|
||
| `wsl_show_grants.py` | WSL grants |
|
||
| `wsl_start_dev.sh` | WSL dev |
|
||
| `agent.py` | Agent 认证（D2/P2 已审） |
|
||
| `install.py` | 安装向导（D2 已审） |
|
||
| `settings.py` | 设置 API 脱敏 |
|
||
| `sync_v2.py` | 推送 API（P2-2 已审） |
|
||
| `websocket.py` | WS（P2-3 已审） |
|
||
| `webssh.py` | WebSSH（P2-5 已审） |
|
||
| `auth_service.py` | JWT/WebSSH tv |
|
||
| `script_service.py` | 脚本并行 session |
|
||
| `sync_engine_v2.py` | rsync 引擎（P2-6 已审） |
|
||
| `retry_runner.py` | SKIP LOCKED |
|
||
| `schedule_runner.py` | FOR UPDATE |
|
||
| `main.py` | 422 handler 等 |
|
||
| `posix_paths.py` | 路径校验 |
|
||
| `test_retry_runner_outcome.py` | retry 单测 |
|
||
| `test_security_unit.py` | 安全单测 |
|
||
| `verify.py` | 登录验证脚本 |
|
||
| `install.html` | 安装向导静态页 |
|
||
|
||
## Step 3 规则扫描
|
||
|
||
| H | 规则 | 结论 |
|
||
|---|------|------|
|
||
| H1 | docker-compose Redis 端口 | SAFE — 仅本机 dev |
|
||
| H2 | 后端 batch1-3 修复 | FIXED — changelog 2026-06-04-code-review-* |
|
||
| H3 | Phase1 D1-D8 delta | CLOSED — 0 P0/P1 |
|
||
| H4 | Phase2 P2-1~P2-6 | CLOSED — 0 P0/P1 |
|
||
| H5 | 前端页面 P2-7~P2-9 | 见 reports waveP2-7/8/9 |
|
||
| H6 | WS query JWT / Agent global key | ACCEPTED — risk-acceptance-single-operator.md |
|
||
|
||
## Closure 表
|
||
|
||
| H | 判定 | 依据 |
|
||
|---|------|------|
|
||
| H1 | SAFE | docker-compose 本地 Redis publish |
|
||
| H2 | FIXED | 各 code-review changelog |
|
||
| H3-H4 | CLOSED | delta + phase2 报告 |
|
||
| H5 | CLOSED | P2-7/8/9 前端页 |
|
||
| H6 | ACCEPTED | 单人运维文档 |
|
||
|
||
## DoD
|
||
|
||
- [x] Step3 + Closure + DoD
|
||
- [x] 改动文件清单含 Gate7 全部 basename
|
||
- [x] 0 P0/P1 新 FINDING
|
||
|
||
## 结论
|
||
|
||
☑ 审计通过，Gate7 清单对齐，可进入 commit/部署流程（L5 需用户批准）
|