wip: 2026-08-11 工作树快照（docs/memory/h5.py/scripts 等 447 项未评审改动，安全提交到 feat 分支）

jumpserver-webcli/deploy_0802_clean_cmds.txt

@@ -0,0 +1,18 @@
+cd && rm -rf dist dist.bak.0802
+sudo mv /opt/wecom-it-desk/frontend-agent/dist /opt/wecom-it-desk/frontend-agent/dist.bak.0802_contam
+sudo mkdir /opt/wecom-it-desk/frontend-agent/dist.new
+sudo tar -xzf /tmp/frontend-agent-dist-0802-clean.tar.gz -C /opt/wecom-it-desk/frontend-agent/dist.new --strip-components=1
+sudo mv /opt/wecom-it-desk/frontend-agent/dist.new /opt/wecom-it-desk/frontend-agent/dist
+echo '=== Workspace chunks on server (expect 1) ==='
+ls /opt/wecom-it-desk/frontend-agent/dist/assets/Workspace-*.js | wc -l
+ls /opt/wecom-it-desk/frontend-agent/dist/assets/Workspace-*.js
+echo '=== total js chunks on server ==='
+ls /opt/wecom-it-desk/frontend-agent/dist/assets/*.js | wc -l
+docker restart wecom_it_nginx
+sleep 6
+echo '=== served index.html assets ==='
+curl -s http://127.0.0.1/itagent/index.html | grep -o 'assets/[^"]*' | sort -u
+echo '=== served Workspace chunk TodoPanel refs (expect 0) ==='
+curl -s http://127.0.0.1/itagent/assets/Workspace-D0Lbi52U.js | grep -o 'TodoPanel' | wc -l
+echo '=== served AiAssistantPanel chunk TodoPanel refs (expect 1) ==='
+curl -s http://127.0.0.1/itagent/assets/AiAssistantPanel-DEzJ9GRb.js | grep -o 'TodoPanel' | wc -l

jumpserver-webcli/deploy_0802_cmds.txt

@@ -0,0 +1,15 @@
+# Replace agent dist with the newly uploaded 0802 bundle
+cd /opt/wecom-it-desk/src/frontend-agent
+mv dist dist.bak.0802
+mkdir dist
+tar -xzf /tmp/frontend-agent-dist-0802.tar.gz -C dist --strip-components=1
+ls dist | head
+
+# Full restart of nginx container (critical: bind mount dentry cache invalidation)
+docker restart wecom_it_nginx
+
+# Wait for container to come back, then verify
+sleep 6
+docker ps --filter name=wecom_it_nginx
+curl -s -o /dev/null -w 'itagent_http=%{http_code}\n' http://127.0.0.1/itagent/
+curl -s http://127.0.0.1/itagent/index.html | grep -o 'assets/[^"]*AiAssistantPanel[^"]*' | head -1

jumpserver-webcli/deploy_0802_v2_cmds.txt

@@ -0,0 +1,20 @@
+# --- Recovery: clean home-dir pollution from failed first attempt ---
+cd
+ls -la dist dist.bak.0802 2>/dev/null
+rm -rf dist dist.bak.0802
+
+# --- Deploy at the REAL path (server layout: /opt/wecom-it-desk/frontend-agent, NO src/) ---
+cd /opt/wecom-it-desk/frontend-agent
+mv dist dist.bak.0802
+mkdir dist
+tar -xzf /tmp/frontend-agent-dist-0802.tar.gz -C dist --strip-components=1
+ls dist | head
+
+# --- Full restart nginx (bind mount dentry cache invalidation) ---
+docker restart wecom_it_nginx
+
+# --- Verify: container + HTTP 200 + NEW bundle hash ---
+sleep 6
+docker ps --filter name=wecom_it_nginx
+curl -s -o /dev/null -w 'itagent_http=%{http_code}\n' http://127.0.0.1/itagent/
+curl -s http://127.0.0.1/itagent/index.html | grep -o 'assets/[^"]*AiAssistantPanel[^"]*' | head -1

jumpserver-webcli/deploy_0802_v3_cmds.txt

@@ -0,0 +1,13 @@
+cd
+rm -rf dist dist.bak.0802
+sudo mv /opt/wecom-it-desk/frontend-agent/dist /opt/wecom-it-desk/frontend-agent/dist.bak.0802
+sudo mkdir /opt/wecom-it-desk/frontend-agent/dist.new
+sudo tar -xzf /tmp/frontend-agent-dist-0802.tar.gz -C /opt/wecom-it-desk/frontend-agent/dist.new --strip-components=1
+sudo mv /opt/wecom-it-desk/frontend-agent/dist.new /opt/wecom-it-desk/frontend-agent/dist
+ls /opt/wecom-it-desk/frontend-agent/dist | head
+grep -o 'assets/[^"]*' /opt/wecom-it-desk/frontend-agent/dist/index.html | sort -u
+docker restart wecom_it_nginx
+sleep 6
+docker ps --filter name=wecom_it_nginx
+curl -s -o /dev/null -w 'itagent_http=%{http_code}\n' http://127.0.0.1/itagent/
+curl -s http://127.0.0.1/itagent/index.html | grep -o 'assets/[^"]*' | sort -u

jumpserver-webcli/diag_0802_compare.txt

@@ -0,0 +1,12 @@
+echo '=== HOST: /opt/wecom-it-desk/frontend-agent/dist ===' 
+ls -la /opt/wecom-it-desk/frontend-agent/dist
+echo '=== HOST index.html head ===' 
+head -5 /opt/wecom-it-desk/frontend-agent/dist/index.html
+echo '=== HOST index.html assets ===' 
+grep -o 'assets/[^"]*' /opt/wecom-it-desk/frontend-agent/dist/index.html | sort -u
+echo '=== CONTAINER: nginx view of /usr/share/nginx/html/itagent ===' 
+docker exec wecom_it_nginx ls -la /usr/share/nginx/html/itagent/
+echo '=== SERVED /itagent/index.html (full) ===' 
+curl -s http://127.0.0.1/itagent/index.html
+echo '=== SERVED assets ===' 
+curl -s http://127.0.0.1/itagent/index.html | grep -o 'assets/[^"]*' | sort -u

jumpserver-webcli/diag_0802_perm.txt

@@ -0,0 +1,7 @@
+whoami
+id
+sudo -n true 2>&1
+echo SUDO_EXIT=$?
+ls -ld /opt/wecom-it-desk
+ls -ld /opt/wecom-it-desk/frontend-agent
+ls -ld /opt/wecom-it-desk/frontend-agent/dist

jumpserver-webcli/diag_0802_served.txt

@@ -0,0 +1,12 @@
+echo '=== served index.html assets ==='
+curl -s http://127.0.0.1/itagent/index.html | grep -o 'assets/[^"]*' | sort -u
+echo '=== NEW Workspace chunk (served): TodoPanel refs (expect 0) ==='
+curl -s http://127.0.0.1/itagent/assets/Workspace-D0Lbi52U.js | grep -o 'TodoPanel' | wc -l
+echo '=== NEW AiAssistantPanel chunk (served): TodoPanel refs (expect >0) ==='
+curl -s http://127.0.0.1/itagent/assets/AiAssistantPanel-DEzJ9GRb.js | grep -o 'TodoPanel' | wc -l
+echo '=== ALL Workspace chunks on server ==='
+ls /opt/wecom-it-desk/frontend-agent/dist/assets/Workspace-*.js
+echo '=== service worker / PWA files? ==='
+ls /opt/wecom-it-desk/frontend-agent/dist/ | grep -i -E 'sw|service|register|manifest|workbox'
+echo '=== nginx proxy cache headers on index.html ==='
+curl -sI http://127.0.0.1/itagent/index.html | grep -i -E 'cache|age|expires|etag|last-modified|x-cache'

jumpserver-webcli/diag_184715.txt

@@ -0,0 +1,24 @@
+=== DNS jumpserver.dc.servyou-it.com ===
+
+Name                                           Type   TTL   Section    IPAddress
+----                                           ----   ---   -------    ---------
+jumpserver.dc.servyou-it.com                   A      3600  Answer     10.212.189.210
+
+=== TCP 443 ===
+True
+=== TCP 2222 ===
+True
+=== VPN/Tailscale adapters ===
+
+Name      InterfaceDescription Status
+----      -------------------- ------
+Tailscale Tailscale Tunnel     Up
+
+
+=== Tailscale ===
+100.123.220.118  desktop-e7m9qr2     7pgjn49kym@  windows  -                           
+100.85.152.112   ds923plus           7pgjn49kym@  linux    -                           
+100.64.82.84     servyoumacbook-pro  7pgjn49kym@  macOS    offline, last seen 16d ago  
+
+=== asset 10.90.5.110 reach ===
+False