fix: harden release gate and page delivery

2026-07-26 14:32:01 +08:00
parent d3141a3e91
commit b1577a16e9
61 changed files with 6017 additions and 89 deletions
@@ -0,0 +1,20 @@
+#!/usr/bin/env node
+import path from 'node:path';
+
+import { assertPortalRuntimePath } from '../release-gate/artifact.mjs';
+import { inspectRuntimePublicUrls } from '../release-gate/public-url.mjs';
+
+const ROOT = path.resolve(new URL('..', import.meta.url).pathname);
+const artifactArg = process.argv[2] ?? path.join(ROOT, '.runtime', 'portal');
+const runtimeRoot = assertPortalRuntimePath(path.resolve(artifactArg), { repoRoot: ROOT });
+const findings = await inspectRuntimePublicUrls(runtimeRoot);
+
+if (findings.length > 0) {
+  for (const finding of findings) {
+    console.error(`FAIL REL-05 ${finding.file}: ${finding.reason}${finding.url ? ` (${finding.url})` : ''}`);
+  }
+  process.exitCode = 1;
+} else {
+  console.log('PASS REL-05 public documents contain no loopback/private/unknown TKMind URLs');
+  console.log('PASS REL-05 production entry defaults to https://m.tkmind.cn');
+}