openqjandhost fc8e337d0f HA 阶段 1：worktree_host + 跨主机 /pr 队列化 (#50) ...

* 部署自动化：唯一发布链路 deploy.py + host_deploy.sh，sha/commit 双重验真，失败回滚

旧链路三次栽过的坑：通用 tar 路径导致旧包误部署、传输不验 sha、
主机脚本多份漂移、health 通过不等于新代码上线。本单把四点变硬门禁：
- 产物唯一命名 codex-app-server-<commit>.tar.gz + .sha256，远端唯一路径
- git archive 产物 + DEPLOYED_COMMIT 清单，默认拒绝脏工作区
- 传输链 scp -> scp_run -> chunk 分片，每路传完远端验 sha，不符删掉重来
- 主机侧唯一脚本：先验 sha/清单，staging 解包 + 编译检查，换目录上线，
  work/ 原样保留，health + 上线 commit 不符即回滚并退出非零
- deploy.py 成功后独立 ssh 再读一次 live 清单二次核对
- CI：host-verify 加 deploy/tests；release.yml 只在手动/tag + production
  environment 审批时部署，主干推送绝不自动部署生产
- deploy.sh 标记为旧链路弃用
- health 的 commit 字段已在父提交 HA 阶段 0 里随 server.py 落地，
  本分支整体包含它；commit 为空时只靠文件核对，门禁同样成立
测试：host 32、cloud 487（4 跳过）、deploy 9，全部通过；
host_deploy.sh 仿真覆盖成功/坏 sha/清单不符/health commit 不符回滚。
生产实机部署未做，等确认后再用新链路推。

* HA stage 1: worktree_host + queued cross-host PR jobs

---------

Co-authored-by: host <host@test.local>

2026-10-27 00:05:18 +08:00

..

test_api_keys.py

多 key：OAuth 登录签发附加 key 不再轮换，keys 管理端点

2026-10-26 16:27:42 +08:00

test_app_token.py

App-token：推分支建 PR 改走 GitHub App installation token

2026-10-26 16:47:55 +08:00

test_auth.py

cloud: production control plane (API, auth/RBAC, queue, sandbox, memory/KB, fallback/cost, webhooks)

2026-10-26 01:23:21 +08:00

test_autoscaler.py

hotfix: autoscaler queue_depth NULL depends_on blinded scaler

2026-10-26 07:13:45 +08:00

test_cloud_dispatch_pr.py

pr: commit worktree changes before push; fix merge/pr order docs

2026-10-26 15:20:02 +08:00

test_db_backend.py

Postgres real backend: psycopg adapter, schema, migration

2026-10-26 03:23:06 +08:00

test_db.py

cloud: fill gaps (memory/KB/cost/models endpoints, WAL concurrency, OAuth scaffold, push subscriptions)

2026-10-26 01:32:57 +08:00

test_docker_runtime.py

Docker tasks: --docker-runtime option (runsc support, default off)

2026-10-26 10:26:21 +08:00

test_docker_sandbox.py

Worker concurrency (capacity enforced), survival (heartbeat/sweep/drain), retry endpoint

2026-10-26 06:46:20 +08:00

test_fallback_retry.py

Perf: light worker poll query + tasks(status) index

2026-10-26 06:19:01 +08:00

test_github_app.py

修 GitHub App 安装在 Postgres 上崩：适配层译 INSERT OR IGNORE，安装后增减仓库同步

2026-10-26 16:11:29 +08:00

test_host_sandbox_routing.py

Fix codex-host profile: capability allow + netlink (bwrap needs both)

2026-10-26 08:39:57 +08:00

test_memory_kb.py

cloud: production control plane (API, auth/RBAC, queue, sandbox, memory/KB, fallback/cost, webhooks)

2026-10-26 01:23:21 +08:00

test_models_cost.py

逐任务真实成本：上游用量事件 + 价目表计价

2026-10-26 18:41:27 +08:00

test_oauth_bind.py

多 key：OAuth 登录签发附加 key 不再轮换，keys 管理端点

2026-10-26 16:27:42 +08:00

test_oauth_real_login.py

多 key：OAuth 登录签发附加 key 不再轮换，keys 管理端点

2026-10-26 16:27:42 +08:00

test_oauth.py

cloud: fill gaps (memory/KB/cost/models endpoints, WAL concurrency, OAuth scaffold, push subscriptions)

2026-10-26 01:32:57 +08:00

test_ops_batch.py

HA stage 0: health reads workers registry, daily pg_dump timer, backup freshness in monitor (#48)

2026-10-26 23:51:54 +08:00

test_outer_hardening.py

Outer hardening: AppArmor profile, pids limit, egress allowlist proxy

2026-10-26 07:42:14 +08:00

test_postgres_backend.py

Project repo_url: worker can run tasks from any git repo

2026-10-26 04:16:11 +08:00

test_postgres_integration.py

Postgres real backend: psycopg adapter, schema, migration

2026-10-26 03:23:06 +08:00

test_pr_app_token.py

App-token：推分支建 PR 改走 GitHub App installation token

2026-10-26 16:47:55 +08:00

test_pr_commit.py

pr: commit worktree changes before push; fix merge/pr order docs

2026-10-26 15:20:02 +08:00

test_pr_jobs.py

HA 阶段 1：worktree_host + 跨主机 /pr 队列化 (#50)

2026-10-27 00:05:18 +08:00

test_pr_timeout.py

pr 超时：git/gh 子进程默认 120 秒超时，超时转 502 不挂 handler

2026-10-26 17:01:47 +08:00

test_prod_gaps.py

Project repo_url: worker can run tasks from any git repo

2026-10-26 04:16:11 +08:00

test_prod_webhook_exec.py

Production-grade: webhook execution, Postgres backup, rate limit, worker timeout/retry

2026-10-26 03:55:07 +08:00

test_prod_worker_timeout.py

Hotfix: stale-container cleanup must not delete infra containers

2026-10-26 03:59:54 +08:00

test_project_repo.py

Project repo_url: worker can run tasks from any git repo

2026-10-26 04:16:11 +08:00

test_push.py

推送真发送：webhook/slack 内置真实发送端 + worker 终态自动通知

2026-10-26 17:31:30 +08:00

test_queue_sandbox.py

逐任务真实成本：上游用量事件 + 价目表计价

2026-10-26 18:41:27 +08:00

test_server_endpoints.py

修项目成本按天接口在 Postgres 上的 Decimal 序列化崩溃

2026-10-26 23:17:25 +08:00

test_server_goal_notify.py

云端 goal/merge/review 三事件：goal 循环 + PR 事件通知

2026-10-26 18:11:12 +08:00

test_server_merge.py

Docker sandbox real test + cloud merge status endpoint

2026-10-26 02:46:10 +08:00

test_server_oauth_push.py

推送真发送：webhook/slack 内置真实发送端 + worker 终态自动通知

2026-10-26 17:31:30 +08:00

test_server_pr_app_token.py

App-token：推分支建 PR 改走 GitHub App installation token

2026-10-26 16:47:55 +08:00

test_server_retry.py

Worker concurrency (capacity enforced), survival (heartbeat/sweep/drain), retry endpoint

2026-10-26 06:46:20 +08:00

test_server.py

Production-grade: webhook execution, Postgres backup, rate limit, worker timeout/retry

2026-10-26 03:55:07 +08:00

test_tenant_isolation.py

Multi-tenant isolation for Docker tasks (per-project mounts + networks + drop caps)

2026-10-26 07:24:54 +08:00

test_webhooks.py

cloud: production control plane (API, auth/RBAC, queue, sandbox, memory/KB, fallback/cost, webhooks)

2026-10-26 01:23:21 +08:00

test_worker_concurrency.py

Worker concurrency (capacity enforced), survival (heartbeat/sweep/drain), retry endpoint

2026-10-26 06:46:20 +08:00

test_worker.py

逐任务真实成本：上游用量事件 + 价目表计价

2026-10-26 18:41:27 +08:00