@wdyy/skills 0.1.11 → 0.1.12

package/.well-known/skills/wdyy-deployment-standard/scripts/validate-deployment-package.test.mjs

@@ -1,8 +1,6 @@
 import assert from 'node:assert/strict';
 import { createHash } from 'node:crypto';
-import {
-  access, chmod, cp, copyFile, mkdir, mkdtemp, readFile, readdir, rm, stat, symlink, unlink, writeFile,
-} from 'node:fs/promises';
+import { access, chmod, cp, copyFile, mkdir, mkdtemp, readFile, readdir, rm, symlink, unlink, writeFile } from 'node:fs/promises';
 import { tmpdir } from 'node:os';
 import { dirname, join, resolve } from 'node:path';
 import { fileURLToPath } from 'node:url';
@@ -14,12 +12,7 @@ const skillRoot = resolve(scriptsRoot, '..');
 const templatesRoot = join(skillRoot, 'templates');
 const validator = join(scriptsRoot, 'validate-deployment-package.mjs');
 const deployTemplate = join(templatesRoot, 'deploy.sh.template');
-const composeTemplate = join(templatesRoot, 'docker-compose.blue-green.yml');
-const nginxTemplate = join(templatesRoot, 'nginx-upstream.template.conf');
-const dockerignoreTemplate = join(templatesRoot, 'dockerignore.template');
-const frontendDockerfileTemplate = join(templatesRoot, 'frontend.Dockerfile.template');
-const backendDockerfileTemplate = join(templatesRoot, 'Dockerfile.template');
-const frontendNginxTemplate = join(templatesRoot, 'frontend-container.conf.template');
+const composeTemplate = join(templatesRoot, 'docker-compose.yml');
 const temporaryDirectories = [];
 
 afterEach(async () => {
@@ -53,37 +46,34 @@ DB_SCHEMA=
 
 # 部署
 PROJECT_NAME=fixture
-PROJECT_HTTP_PORT=9099
 DOCKER_BIND_IP=127.0.0.1
-FRONTEND_BLUE_PORT=19091
-FRONTEND_GREEN_PORT=19092
-BACKEND_BLUE_PORT=19093
-BACKEND_GREEN_PORT=19094
 FRONTEND_BASE_IMAGE=nginx:stable
 BACKEND_BASE_IMAGE=node:24-alpine3.24
 ${extra}`;
 }
 
+async function writeExecutable(path, content) {
+  await writeFile(path, content);
+  await chmod(path, 0o755);
+}
+
 async function createFixture({ agents = '# Target project\n', extraEnv = '' } = {}) {
-  const root = await temporary('wdyy-deploy-');
+  const root = await temporary('wdyy-direct-deploy-');
   const fakeBin = join(root, 'fake-bin');
-  const serverProjectsRoot = join(root, 'servers');
   const commandLog = join(root, 'commands.log');
   await Promise.all([
     mkdir(fakeBin, { recursive: true }),
     mkdir(join(root, 'src/frontend'), { recursive: true }),
     mkdir(join(root, 'src/backend'), { recursive: true }),
     mkdir(join(root, 'scripts/deployment'), { recursive: true }),
-    mkdir(serverProjectsRoot, { recursive: true }),
   ]);
   await Promise.all([
     copyFile(deployTemplate, join(root, 'deploy.sh')),
-    copyFile(frontendDockerfileTemplate, join(root, 'src/frontend/Dockerfile')),
-    copyFile(backendDockerfileTemplate, join(root, 'src/backend/Dockerfile')),
-    copyFile(composeTemplate, join(root, 'scripts/deployment/docker-compose.blue-green.yml')),
-    copyFile(nginxTemplate, join(root, 'scripts/deployment/nginx-site.conf')),
-    copyFile(frontendNginxTemplate, join(root, 'scripts/deployment/frontend-container.conf.template')),
-    copyFile(dockerignoreTemplate, join(root, '.dockerignore')),
+    copyFile(join(templatesRoot, 'frontend.Dockerfile.template'), join(root, 'src/frontend/Dockerfile')),
+    copyFile(join(templatesRoot, 'Dockerfile.template'), join(root, 'src/backend/Dockerfile')),
+    copyFile(composeTemplate, join(root, 'scripts/deployment/docker-compose.yml')),
+    copyFile(join(templatesRoot, 'frontend-container.conf.template'), join(root, 'scripts/deployment/frontend-container.conf.template')),
+    copyFile(join(templatesRoot, 'dockerignore.template'), join(root, '.dockerignore')),
     writeFile(join(root, 'AGENTS.md'), agents),
     writeFile(join(root, '.env'), envText(extraEnv)),
     writeFile(commandLog, ''),
@@ -95,10 +85,7 @@ async function createFixture({ agents = '# Target project\n', extraEnv = '' } =
 set -euo pipefail
 printf 'pnpm %s\n' "$*" >> "$COMMAND_LOG"
 [[ "\${FAIL_GATE:-}" != "\${1:-}" ]] || exit 9
-if [[ "\${1:-}" == build ]]; then
-  mkdir -p src/frontend/dist
-  printf '<!doctype html><div id="app"></div>\n' > src/frontend/dist/index.html
-fi
+if [[ "\${1:-}" == build ]]; then mkdir -p src/frontend/dist; printf '<div id="app"></div>\n' > src/frontend/dist/index.html; fi
 `);
   await writeExecutable(join(fakeBin, 'docker'), `#!/usr/bin/env bash
 set -euo pipefail
@@ -106,89 +93,41 @@ printf 'docker %s\n' "$*" >> "$COMMAND_LOG"
 case "\${1:-}" in
   build) exit 0 ;;
   image)
-    if [[ "\${2:-}" == inspect ]]; then tag="\${!#}"; printf '%s\n' "\${tag##*:}";
-    elif [[ "\${2:-}" == ls ]]; then printf '%s\n' "\${DOCKER_IMAGE_LIST:-fixture_frontend:20260808-001
-fixture_backend:20260808-001
-other_project_frontend:shared}"; fi
+    [[ "\${2:-}" == inspect ]] || exit 10
+    tag="\${!#}"; printf '%s\n' "\${tag##*:}"
     ;;
   save)
     shift; output=; tag=
-    while [[ "$#" -gt 0 ]]; do
-      if [[ "$1" == -o ]]; then output="$2"; shift 2; else tag="$1"; shift; fi
-    done
-    work="$(mktemp -d)"
-    printf '[{"Config":"config.json","RepoTags":["%s"],"Layers":[]}]\n' "$tag" > "$work/manifest.json"
-    printf '{}\n' > "$work/config.json"
-    /usr/bin/tar -cf "$output" -C "$work" manifest.json config.json
-    /bin/rm -rf "$work"
+    while [[ "$#" -gt 0 ]]; do if [[ "$1" == -o ]]; then output="$2"; shift 2; else tag="$1"; shift; fi; done
+    work="$(mktemp -d)"; printf '[{"Config":"config.json","RepoTags":["%s"],"Layers":[]}]\n' "$tag" > "$work/manifest.json"; printf '{}\n' > "$work/config.json"
+    /usr/bin/tar -cf "$output" -C "$work" manifest.json config.json; /bin/rm -rf "$work"
     ;;
   load) exit 0 ;;
   compose) exit 0 ;;
-  ps)
-    if [[ "\${2:-}" == -aq ]]; then
-      printf '%s\n' "\${DOCKER_CONTAINER_IDS:-c111
-c222}"
-    elif [[ "\${2:-}" == --format && -n "\${DOCKER_RUNNING_PORTS:-}" ]]; then
-      printf '%s\n' "$DOCKER_RUNNING_PORTS"
-    fi
-    ;;
-  network)
-    if [[ "\${2:-}" == ls ]]; then printf '%s\n' "\${DOCKER_NETWORK_IDS:-n111}"; fi
-    ;;
-  rm) exit 0 ;;
   *) echo "unexpected docker command: $*" >&2; exit 10 ;;
 esac
 `);
   await writeExecutable(join(fakeBin, 'curl'), `#!/usr/bin/env bash
 set -euo pipefail
 url="\${!#}"
-if [[ "\${FAIL_PUBLIC_ENDPOINT:-0}" == 1 && "$url" == *:9099/* ]]; then exit 26; fi
+if [[ "\${FAIL_HEALTH:-}" == frontend && "$url" == *:5173/* ]]; then exit 26; fi
+if [[ "\${FAIL_HEALTH:-}" == backend && "$url" == *:3000/* ]]; then exit 27; fi
 if [[ "$url" == */version ]]; then printf '%s' "\${EXPECTED_VERSION:?}"; else printf 'ok'; fi
 `);
-  await writeExecutable(join(fakeBin, 'nginx'), `#!/usr/bin/env bash
-set -euo pipefail
-printf 'nginx %s\n' "$*" >> "$COMMAND_LOG"
-if [[ "\${1:-}" == -t ]]; then [[ "\${FAIL_NGINX_TEST:-0}" != 1 ]] || exit 23; exit 0; fi
-if [[ "\${1:-}" == -T ]]; then
-  [[ ! -f "$SERVER_ROOT/nginx/site.conf" ]] || cat "$SERVER_ROOT/nginx/site.conf"
-  [[ -z "\${EXTRA_NGINX_CONFIG:-}" ]] || printf '%s\n' "$EXTRA_NGINX_CONFIG"
-  exit 0
-fi
-if [[ "\${1:-}" == -s && "\${2:-}" == reload && "\${FAIL_NGINX_RELOAD_ONCE:-0}" == 1 && ! -f "$NGINX_FAIL_MARKER" ]]; then
-  : > "$NGINX_FAIL_MARKER"; exit 24
-fi
-`);
-  await writeExecutable(join(fakeBin, 'flock'), '#!/usr/bin/env bash\nexit 0\n');
-  await writeExecutable(join(fakeBin, 'install'), `#!/usr/bin/env bash
-set -euo pipefail
-target="\${!#}"
-if [[ "\${FAIL_STATE_INSTALL:-0}" == 1 && "$target" == */state/active.env ]]; then exit 25; fi
-exec /usr/bin/install "$@"
-`);
-
-  return { root, fakeBin, serverProjectsRoot, commandLog };
+  return { root, fakeBin, commandLog };
 }
 
-async function writeExecutable(path, content) {
-  await writeFile(path, content);
-  await chmod(path, 0o755);
-}
-
-function run(root, args, fixture, extraEnv = {}) {
+function run(fixture, args, { input, extraEnv = {}, cwd = fixture.root } = {}) {
   return spawnSync('bash', args, {
-    cwd: root,
+    cwd,
     encoding: 'utf8',
-    env: {
-      ...process.env,
-      PATH: `${fixture.fakeBin}:${process.env.PATH}`,
-      COMMAND_LOG: fixture.commandLog,
-      ...extraEnv,
-    },
+    input,
+    env: { ...process.env, PATH: `${fixture.fakeBin}:${process.env.PATH}`, COMMAND_LOG: fixture.commandLog, ...extraEnv },
   });
 }
 
 function runBuild(fixture, extraEnv = {}, ...extraArgs) {
-  return run(fixture.root, ['deploy.sh', 'build', ...extraArgs], fixture, extraEnv);
+  return run(fixture, ['deploy.sh', 'build', ...extraArgs], { extraEnv });
 }
 
 async function releaseVersion(root) {
@@ -199,30 +138,44 @@ function runValidator(root, version) {
   return spawnSync(process.execPath, [
     validator,
     join(root, 'deploy/deploy.sh'),
-    join(root, `deploy/${version}/nginx/site.conf`),
-    join(root, `deploy/${version}/docker/docker-compose.blue-green.yml`),
+    join(root, `deploy/${version}/docker/docker-compose.yml`),
     join(root, 'deploy'),
   ], { encoding: 'utf8' });
 }
 
 async function installOnServer(fixture) {
-  const serverRoot = join(fixture.serverProjectsRoot, 'fixture');
+  const serverRoot = await temporary('wdyy-server-root-');
   await cp(join(fixture.root, 'deploy'), serverRoot, { recursive: true, force: true });
   await chmod(join(serverRoot, 'deploy.sh'), 0o755);
   return serverRoot;
 }
 
-function runServer(fixture, serverRoot, command, extraEnv = {}, argument) {
-  const args = [join(serverRoot, 'deploy.sh'), command];
-  if (argument) args.push(argument);
-  return run(fixture.root, args, fixture, {
-    SERVER_ROOT: serverRoot,
-    NGINX_FAIL_MARKER: join(fixture.root, 'nginx-failed-once'),
-    ...extraEnv,
+function runServer(fixture, serverRoot, choice, extraEnv = {}, args = []) {
+  return run(fixture, [join(serverRoot, 'deploy.sh'), ...args], {
+    cwd: fixture.root,
+    input: `${choice}\n`,
+    extraEnv,
   });
 }
 
-test('build 生成根 .env、双镜像和四服务完整包', async () => {
+async function rewriteManifest(versionRoot) {
+  const files = [];
+  async function walk(current) {
+    for (const entry of await readdir(current, { withFileTypes: true })) {
+      const path = join(current, entry.name);
+      if (entry.isDirectory()) await walk(path);
+      else if (entry.isFile() && entry.name !== 'manifest.sha256') files.push(path);
+    }
+  }
+  await walk(versionRoot);
+  const lines = await Promise.all(files.sort().map(async (path) => {
+    const relativePath = path.slice(versionRoot.length + 1).split('\\').join('/');
+    return `${createHash('sha256').update(await readFile(path)).digest('hex')}  ${relativePath}`;
+  }));
+  await writeFile(join(versionRoot, 'manifest.sha256'), `${lines.join('\n')}\n`);
+}
+
+test('build 导出带版本号双镜像和双服务完整包', async () => {
   const fixture = await createFixture();
   const result = runBuild(fixture);
   assert.equal(result.status, 0, `stdout:\n${result.stdout}\nstderr:\n${result.stderr}`);
@@ -234,57 +187,27 @@ test('build 生成根 .env、双镜像和四服务完整包', async () => {
   ]);
   const validation = runValidator(fixture.root, version);
   assert.equal(validation.status, 0, validation.stderr);
-  assert.match(validation.stdout, /valid dual-image deployment package/);
+  assert.match(validation.stdout, /valid direct dual-image deployment package/);
   const log = await readFile(fixture.commandLog, 'utf8');
   assert.match(log, new RegExp(`--tag fixture_frontend:${version}`));
   assert.match(log, new RegExp(`--tag fixture_backend:${version}`));
-  assert.match(log, /--build-arg BACKEND_PORT=3000/);
-  assert.doesNotMatch(await readFile(join(fixture.root, `deploy/${version}/docker/docker-compose.blue-green.yml`), 'utf8'), /FRONTEND_CONTAINER_PORT|BACKEND_CONTAINER_PORT|_HEALTH_URL|_VERSION_URL/);
+  const compose = await readFile(join(fixture.root, `deploy/${version}/docker/docker-compose.yml`), 'utf8');
+  assert.deepEqual([...compose.matchAll(/^  ([a-z-]+):$/gm)].map((match) => match[1]), ['frontend', 'backend']);
+  assert.doesNotMatch(compose, /blue|green|PROJECT_HTTP_PORT|nginx\/site/);
 });
 
-test('发布包不包含数据库迁移文件或迁移参数', async () => {
+test('连续构建保持 deploy.sh 与 Compose 字节一致', async () => {
   const fixture = await createFixture();
   assert.equal(runBuild(fixture).status, 0);
-  const version = await releaseVersion(fixture.root);
-  await assert.rejects(stat(join(fixture.root, `deploy/${version}/database`)));
-  assert.doesNotMatch(await readFile(join(fixture.root, 'deploy/deploy.sh'), 'utf8'), /apply-migrations\.sh|database\/migrations|\bpsql\b/);
-});
-
-test('连续构建的 deploy.sh、Compose 和 Nginx 配置字节一致', async () => {
-  const fixture = await createFixture();
-  assert.equal(runBuild(fixture).status, 0);
-  const firstVersion = await releaseVersion(fixture.root);
-  const first = await configurationHashes(fixture.root, firstVersion);
+  const first = await releaseVersion(fixture.root);
+  const hashes = await Promise.all(['deploy/deploy.sh', `deploy/${first}/docker/docker-compose.yml`].map(async (path) => createHash('sha256').update(await readFile(join(fixture.root, path))).digest('hex')));
   assert.equal(runBuild(fixture).status, 0);
-  const secondVersion = await releaseVersion(fixture.root);
-  const second = await configurationHashes(fixture.root, secondVersion);
-  assert.notEqual(firstVersion, secondVersion);
-  assert.deepEqual(second, first);
+  const second = await releaseVersion(fixture.root);
+  assert.notEqual(second, first);
+  const nextHashes = await Promise.all(['deploy/deploy.sh', `deploy/${second}/docker/docker-compose.yml`].map(async (path) => createHash('sha256').update(await readFile(join(fixture.root, path))).digest('hex')));
+  assert.deepEqual(nextHashes, hashes);
 });
 
-async function configurationHashes(root, version) {
-  const paths = ['deploy/deploy.sh', `deploy/${version}/docker/docker-compose.blue-green.yml`, `deploy/${version}/nginx/site.conf`];
-  return Promise.all(paths.map(async (path) => createHash('sha256').update(await readFile(join(root, path))).digest('hex')));
-}
-
-async function rewriteManifest(versionRoot, directory = versionRoot) {
-  const files = [];
-  async function walk(current) {
-    for (const entry of await readdir(current, { withFileTypes: true })) {
-      const path = join(current, entry.name);
-      if (entry.isDirectory()) await walk(path);
-      else if (entry.isFile() && entry.name !== 'manifest.sha256') files.push(path);
-    }
-  }
-  await walk(directory);
-  const lines = await Promise.all(files.sort().map(async (path) => {
-    const relative = path.slice(versionRoot.length + 1).split('\\').join('/');
-    const hash = createHash('sha256').update(await readFile(path)).digest('hex');
-    return `${hash}  ${relative}`;
-  }));
-  await writeFile(join(versionRoot, 'manifest.sha256'), `${lines.join('\n')}\n`);
-}
-
 test('失败构建保留上一发布包和发布账本', async () => {
   const fixture = await createFixture();
   assert.equal(runBuild(fixture).status, 0);
@@ -296,197 +219,148 @@ test('失败构建保留上一发布包和发布账本', async () => {
   assert.equal(await readFile(join(fixture.root, 'AGENTS.md'), 'utf8'), agents);
 });
 
-test('dotenv 被作为数据解析，不执行命令替换或覆盖脚本 PATH', async () => {
-  const fixture = await createFixture({ extraEnv: 'UNUSED_VALUE=$(touch should-not-exist)\nPATH=/malicious\n' });
-  const result = runBuild(fixture);
-  assert.equal(result.status, 0, result.stderr);
-  await assert.rejects(access(join(fixture.root, 'should-not-exist')));
-});
-
-test('build 接受带标签基础镜像并拒绝重复键和额外版本参数', async () => {
-  const duplicate = await createFixture({ extraEnv: 'PROJECT_NAME=duplicate\n' });
-  assert.notEqual(runBuild(duplicate).status, 0);
-  const tagged = await createFixture();
-  assert.equal(runBuild(tagged).status, 0);
+test('build 拒绝额外参数、旧部署键和日志目录配置', async () => {
   const extra = await createFixture();
   assert.equal(runBuild(extra, {}, '20260808-001').status, 2);
-  const logDirectory = await createFixture({ extraEnv: 'LOG_DIR=/tmp/logs\n' });
-  const rejected = runBuild(logDirectory);
-  assert.notEqual(rejected.status, 0);
-  assert.match(rejected.stderr, /must not configure log directories/);
-  const legacy = await createFixture({ extraEnv: 'FRONTEND_CONTAINER_PORT=8080\n' });
-  const legacyRejected = runBuild(legacy);
-  assert.notEqual(legacyRejected.status, 0);
-  assert.match(legacyRejected.stderr, /legacy duplicate environment key/);
-  const migration = await createFixture({ extraEnv: 'DATABASE_MIGRATION_MODE=none\n' });
-  const migrationRejected = runBuild(migration);
-  assert.notEqual(migrationRejected.status, 0);
-  assert.match(migrationRejected.stderr, /legacy duplicate environment key/);
-  const reverseInclude = await createFixture();
-  await writeFile(join(reverseInclude.root, '.dockerignore'), `${await readFile(join(reverseInclude.root, '.dockerignore'), 'utf8')}!.env\n`);
-  const reverseRejected = runBuild(reverseInclude);
-  assert.notEqual(reverseRejected.status, 0);
-  assert.match(reverseRejected.stderr, /forbidden reverse include/);
+  for (const setting of ['PROJECT_HTTP_PORT=9099\n', 'FRONTEND_BLUE_PORT=19091\n', 'LOG_DIR=/tmp/logs\n', 'DATABASE_MIGRATION_MODE=none\n']) {
+    const fixture = await createFixture({ extraEnv: setting });
+    const result = runBuild(fixture);
+    assert.notEqual(result.status, 0);
+    assert.match(result.stderr, /removed deployment configuration/);
+  }
 });
 
-test('validator 拒绝缺失前端镜像、镜像 fallback 和嵌套日志', async () => {
+test('validator 拒绝镜像 fallback、嵌套日志和符号链接', async () => {
   const fixture = await createFixture();
   assert.equal(runBuild(fixture).status, 0);
-  const version = await releaseVersion(fixture.root);
-  await unlink(join(fixture.root, `deploy/${version}/frontend-image.tar`));
-  assert.notEqual(runValidator(fixture.root, version).status, 0);
-
-  assert.equal(runBuild(fixture).status, 0);
-  const next = await releaseVersion(fixture.root);
-  const composePath = join(fixture.root, `deploy/${next}/docker/docker-compose.blue-green.yml`);
+  let version = await releaseVersion(fixture.root);
+  let composePath = join(fixture.root, `deploy/${version}/docker/docker-compose.yml`);
   await writeFile(composePath, (await readFile(composePath, 'utf8')).replace('${FRONTEND_IMAGE:?FRONTEND_IMAGE is required}', '${FRONTEND_IMAGE:-fallback}').replace('../../logs:/app/logs', '../../logs/frontend:/app/logs'));
-  const validation = runValidator(fixture.root, next);
+  let validation = runValidator(fixture.root, version);
   assert.notEqual(validation.status, 0);
   assert.match(validation.stderr, /fallback|logs/);
-});
 
-test('validator 拒绝版本目录符号链接', async () => {
-  const fixture = await createFixture();
   assert.equal(runBuild(fixture).status, 0);
-  const version = await releaseVersion(fixture.root);
+  version = await releaseVersion(fixture.root);
   await symlink('../outside', join(fixture.root, `deploy/${version}/linked-file`));
-  const validation = runValidator(fixture.root, version);
+  validation = runValidator(fixture.root, version);
   assert.notEqual(validation.status, 0);
   assert.match(validation.stderr, /symbolic links/);
 });
 
-test('服务器拒绝标签不匹配的镜像归档且不执行 docker load', async () => {
+test('菜单可独立运行或替换前端且记录成功日志', async () => {
   const fixture = await createFixture();
   assert.equal(runBuild(fixture).status, 0);
   const version = await releaseVersion(fixture.root);
-  const versionRoot = join(fixture.root, `deploy/${version}`);
-  const badArchiveRoot = await temporary('bad-image-');
-  await writeFile(join(badArchiveRoot, 'manifest.json'), `[{"Config":"config.json","RepoTags":["fixture_frontend:${version}","other_frontend:bad"],"Layers":[]}]\n`);
-  await writeFile(join(badArchiveRoot, 'config.json'), '{}\n');
-  const tarResult = spawnSync('/usr/bin/tar', ['-cf', join(versionRoot, 'frontend-image.tar'), '-C', badArchiveRoot, 'manifest.json', 'config.json'], { encoding: 'utf8' });
-  assert.equal(tarResult.status, 0, tarResult.stderr);
-  await rewriteManifest(versionRoot);
   const serverRoot = await installOnServer(fixture);
   await writeFile(fixture.commandLog, '');
-  const started = runServer(fixture, serverRoot, 'start', { EXPECTED_VERSION: version });
-  assert.notEqual(started.status, 0);
-  assert.match(started.stderr, /exactly one expected tag/);
-  assert.doesNotMatch(await readFile(fixture.commandLog, 'utf8'), /docker load/);
+  const result = runServer(fixture, serverRoot, '1', { EXPECTED_VERSION: version });
+  assert.equal(result.status, 0, result.stderr);
+  const commands = await readFile(fixture.commandLog, 'utf8');
+  assert.match(commands, /docker load -i .*frontend-image\.tar/);
+  assert.doesNotMatch(commands, /docker load -i .*backend-image\.tar/);
+  assert.match(commands, /compose .* up -d --force-recreate --no-deps frontend/);
+  assert.doesNotMatch(commands, /--no-deps backend/);
+  assert.match(await readFile(join(serverRoot, 'logs/deploy.log'), 'utf8'), new RegExp(`version=${version} operation=run-or-replace-frontend result=success`));
 });
 
-test('start、replace 和 rollback 成对切换前后端', async () => {
+test('菜单可独立运行后端、同时运行前后端并同时停止', async () => {
   const fixture = await createFixture();
   assert.equal(runBuild(fixture).status, 0);
-  const first = await releaseVersion(fixture.root);
+  const version = await releaseVersion(fixture.root);
   const serverRoot = await installOnServer(fixture);
-  const started = runServer(fixture, serverRoot, 'start', { EXPECTED_VERSION: first });
-  assert.equal(started.status, 0, started.stderr);
-  assert.match(await readFile(join(serverRoot, 'state/active.env'), 'utf8'), new RegExp(`ACTIVE_COLOR=blue[\\s\\S]*${first}`));
 
-  assert.equal(runBuild(fixture).status, 0);
-  const second = await releaseVersion(fixture.root);
-  await cp(join(fixture.root, 'deploy'), serverRoot, { recursive: true, force: true });
-  const replaced = runServer(fixture, serverRoot, 'replace', { EXPECTED_VERSION: second });
-  assert.equal(replaced.status, 0, replaced.stderr);
-  assert.match(await readFile(join(serverRoot, 'state/active.env'), 'utf8'), /ACTIVE_COLOR=green/);
-  assert.match(await readFile(join(serverRoot, 'state/previous.env'), 'utf8'), new RegExp(first));
-  const upstream = await readFile(join(serverRoot, 'nginx/active-upstreams.conf'), 'utf8');
-  assert.match(upstream, /fixture_frontend_active/);
-  assert.match(upstream, /fixture_backend_active/);
-
-  const rolledBack = runServer(fixture, serverRoot, 'rollback', { EXPECTED_VERSION: first }, first);
-  assert.equal(rolledBack.status, 0, rolledBack.stderr);
-  assert.match(await readFile(join(serverRoot, 'state/active.env'), 'utf8'), new RegExp(first));
+  await writeFile(fixture.commandLog, '');
+  assert.equal(runServer(fixture, serverRoot, '2', { EXPECTED_VERSION: version }).status, 0);
+  let commands = await readFile(fixture.commandLog, 'utf8');
+  assert.match(commands, /docker load -i .*backend-image\.tar/);
+  assert.doesNotMatch(commands, /docker load -i .*frontend-image\.tar/);
+  assert.match(commands, /--no-deps backend/);
+
+  await writeFile(fixture.commandLog, '');
+  assert.equal(runServer(fixture, serverRoot, '3', { EXPECTED_VERSION: version }).status, 0);
+  commands = await readFile(fixture.commandLog, 'utf8');
+  assert.match(commands, /up -d --force-recreate frontend backend/);
+
+  await writeFile(fixture.commandLog, '');
+  assert.equal(runServer(fixture, serverRoot, '4').status, 0);
+  commands = await readFile(fixture.commandLog, 'utf8');
+  assert.match(commands, /stop frontend backend/);
+  const operationLog = await readFile(join(serverRoot, 'logs/deploy.log'), 'utf8');
+  assert.match(operationLog, /operation=run-or-replace-backend result=success/);
+  assert.match(operationLog, /operation=run-or-replace-both result=success/);
+  assert.match(operationLog, /operation=stop-both result=success/);
 });
 
-test('restart、stop、status 只操作当前颜色的一对容器', async () => {
+test('健康检查失败返回非零并记录失败，不自动回滚', async () => {
   const fixture = await createFixture();
   assert.equal(runBuild(fixture).status, 0);
   const version = await releaseVersion(fixture.root);
   const serverRoot = await installOnServer(fixture);
-  assert.equal(runServer(fixture, serverRoot, 'start', { EXPECTED_VERSION: version }).status, 0);
-  await writeFile(fixture.commandLog, '');
-  assert.equal(runServer(fixture, serverRoot, 'restart', { EXPECTED_VERSION: version }).status, 0);
-  assert.equal(runServer(fixture, serverRoot, 'stop', { EXPECTED_VERSION: version }).status, 0);
-  const statusResult = runServer(fixture, serverRoot, 'status', { EXPECTED_VERSION: version });
-  assert.equal(statusResult.status, 0, statusResult.stderr);
-  assert.match(statusResult.stdout, new RegExp(version));
-  const log = await readFile(fixture.commandLog, 'utf8');
-  assert.match(log, /up -d --force-recreate frontend-blue backend-blue/);
-  assert.match(log, /stop frontend-blue backend-blue/);
+  const result = runServer(fixture, serverRoot, '2', { EXPECTED_VERSION: version, FAIL_HEALTH: 'backend' });
+  assert.notEqual(result.status, 0);
+  const commands = await readFile(fixture.commandLog, 'utf8');
+  assert.match(commands, /up -d --force-recreate --no-deps backend/);
+  assert.doesNotMatch(commands, /docker .*rollback|nginx -(?:t|s)/);
+  assert.match(await readFile(join(serverRoot, 'logs/deploy.log'), 'utf8'), /operation=run-or-replace-backend result=failure/);
 });
 
-test('remove 只删除本项目容器、网络和两个镜像仓库并保留日志', async () => {
+test('非法菜单输入和额外命令参数不执行 Docker 状态变更', async () => {
   const fixture = await createFixture();
   assert.equal(runBuild(fixture).status, 0);
   const serverRoot = await installOnServer(fixture);
-  await mkdir(join(serverRoot, 'logs'), { recursive: true });
-  await writeFile(join(serverRoot, 'logs/backend.log'), 'keep\n');
   await writeFile(fixture.commandLog, '');
-  const removed = runServer(fixture, serverRoot, 'remove');
-  assert.equal(removed.status, 0, removed.stderr);
-  const log = await readFile(fixture.commandLog, 'utf8');
-  assert.match(log, /docker rm -f c111 c222/);
-  assert.match(log, /docker network rm n111/);
-  assert.match(log, /docker image rm -f fixture_backend:20260808-001 fixture_frontend:20260808-001|docker image rm -f fixture_frontend:20260808-001 fixture_backend:20260808-001/);
-  assert.doesNotMatch(log, /other_project_frontend:shared/);
-  assert.equal(await readFile(join(serverRoot, 'logs/backend.log'), 'utf8'), 'keep\n');
-  await access(join(serverRoot, 'release.env'));
+  const invalid = runServer(fixture, serverRoot, '9');
+  assert.notEqual(invalid.status, 0);
+  assert.doesNotMatch(await readFile(fixture.commandLog, 'utf8'), /docker (?:load|compose)/);
+  const extra = runServer(fixture, serverRoot, '1', {}, ['start']);
+  assert.equal(extra.status, 2);
 });
 
-test('replace 的 Nginx reload 失败时恢复旧 upstream 和状态', async () => {
+test('服务器拒绝标签不匹配的镜像归档且不执行 docker load', async () => {
   const fixture = await createFixture();
   assert.equal(runBuild(fixture).status, 0);
-  const first = await releaseVersion(fixture.root);
+  const version = await releaseVersion(fixture.root);
+  const versionRoot = join(fixture.root, `deploy/${version}`);
+  const badArchiveRoot = await temporary('bad-image-');
+  await writeFile(join(badArchiveRoot, 'manifest.json'), `[{"Config":"config.json","RepoTags":["fixture_frontend:${version}","other_frontend:bad"],"Layers":[]}]\n`);
+  await writeFile(join(badArchiveRoot, 'config.json'), '{}\n');
+  assert.equal(spawnSync('/usr/bin/tar', ['-cf', join(versionRoot, 'frontend-image.tar'), '-C', badArchiveRoot, 'manifest.json', 'config.json']).status, 0);
+  await rewriteManifest(versionRoot);
   const serverRoot = await installOnServer(fixture);
-  assert.equal(runServer(fixture, serverRoot, 'start', { EXPECTED_VERSION: first }).status, 0);
-  const oldUpstream = await readFile(join(serverRoot, 'nginx/active-upstreams.conf'), 'utf8');
-  const oldState = await readFile(join(serverRoot, 'state/active.env'), 'utf8');
-  assert.equal(runBuild(fixture).status, 0);
-  const second = await releaseVersion(fixture.root);
-  await cp(join(fixture.root, 'deploy'), serverRoot, { recursive: true, force: true });
-  const failed = runServer(fixture, serverRoot, 'replace', { EXPECTED_VERSION: second, FAIL_NGINX_RELOAD_ONCE: '1' });
-  assert.notEqual(failed.status, 0);
-  assert.equal(await readFile(join(serverRoot, 'nginx/active-upstreams.conf'), 'utf8'), oldUpstream);
-  assert.equal(await readFile(join(serverRoot, 'state/active.env'), 'utf8'), oldState);
+  await writeFile(fixture.commandLog, '');
+  const result = runServer(fixture, serverRoot, '1', { EXPECTED_VERSION: version });
+  assert.notEqual(result.status, 0);
+  assert.match(result.stderr, /exactly one expected tag/);
+  assert.doesNotMatch(await readFile(fixture.commandLog, 'utf8'), /docker load/);
 });
 
-test('首次切流后的外部端口验证失败时不提交状态并移除候选 Nginx 文件', async () => {
+test('服务器部署根由脚本物理路径确定', async () => {
   const fixture = await createFixture();
   assert.equal(runBuild(fixture).status, 0);
   const version = await releaseVersion(fixture.root);
   const serverRoot = await installOnServer(fixture);
-  const failed = runServer(fixture, serverRoot, 'start', { EXPECTED_VERSION: version, FAIL_PUBLIC_ENDPOINT: '1' });
-  assert.notEqual(failed.status, 0);
-  assert.match(failed.stderr, /public endpoint verification failed/);
-  await assert.rejects(access(join(serverRoot, 'state/active.env')));
-  await assert.rejects(access(join(serverRoot, 'nginx/site.conf')));
-  await assert.rejects(access(join(serverRoot, 'nginx/active-upstreams.conf')));
+  const unrelated = await temporary('unrelated-cwd-');
+  const result = run(fixture, [join(serverRoot, 'deploy.sh')], { cwd: unrelated, input: '1\n', extraEnv: { EXPECTED_VERSION: version } });
+  assert.equal(result.status, 0, result.stderr);
+  await access(join(serverRoot, 'logs/deploy.log'));
+  await assert.rejects(access(join(unrelated, 'logs/deploy.log')));
 });
 
-test('状态提交失败时恢复旧流量和旧状态', async () => {
+test('validator 拒绝缺失镜像和宿主机 Nginx 文件', async () => {
   const fixture = await createFixture();
   assert.equal(runBuild(fixture).status, 0);
-  const first = await releaseVersion(fixture.root);
-  const serverRoot = await installOnServer(fixture);
-  assert.equal(runServer(fixture, serverRoot, 'start', { EXPECTED_VERSION: first }).status, 0);
-  const oldUpstream = await readFile(join(serverRoot, 'nginx/active-upstreams.conf'), 'utf8');
-  const oldState = await readFile(join(serverRoot, 'state/active.env'), 'utf8');
-  assert.equal(runBuild(fixture).status, 0);
-  const second = await releaseVersion(fixture.root);
-  await cp(join(fixture.root, 'deploy'), serverRoot, { recursive: true, force: true });
-  const failed = runServer(fixture, serverRoot, 'replace', { EXPECTED_VERSION: second, FAIL_STATE_INSTALL: '1' });
-  assert.notEqual(failed.status, 0);
-  assert.equal(await readFile(join(serverRoot, 'nginx/active-upstreams.conf'), 'utf8'), oldUpstream);
-  assert.equal(await readFile(join(serverRoot, 'state/active.env'), 'utf8'), oldState);
-});
+  let version = await releaseVersion(fixture.root);
+  await unlink(join(fixture.root, `deploy/${version}/frontend-image.tar`));
+  assert.notEqual(runValidator(fixture.root, version).status, 0);
 
-test('服务器命令拒绝额外参数且部署根由脚本位置确定', async () => {
-  const fixture = await createFixture();
   assert.equal(runBuild(fixture).status, 0);
-  const serverRoot = await installOnServer(fixture);
-  assert.equal(runServer(fixture, serverRoot, 'start', {}, 'unexpected').status, 2);
-  const alternateRoot = join(fixture.root, 'alternate');
-  await cp(join(fixture.root, 'deploy'), alternateRoot, { recursive: true });
-  assert.equal(runServer(fixture, alternateRoot, 'status').status, 0);
+  version = await releaseVersion(fixture.root);
+  const nginxDir = join(fixture.root, `deploy/${version}/nginx`);
+  await mkdir(nginxDir);
+  await writeFile(join(nginxDir, 'site.conf'), 'server {}\n');
+  await rewriteManifest(join(fixture.root, `deploy/${version}`));
+  const validation = runValidator(fixture.root, version);
+  assert.notEqual(validation.status, 0);
+  assert.match(validation.stderr, /must not contain host Nginx/);
 });