AI Gateway Go 0.10.0 源码快照 + 旗舰版需求规划报告

M0-M7 已完成:核心网关(身份/RBAC/TOTP/OIDC/SAML/Provider/配额/路由/内容策略/审计/定价)+ 资源市场(MCP/Skills/数字员工)。含 22 个 PostgreSQL 迁移、管理端/门户端前端源码、OpenAPI 契约、部署 compose。 Co-Authored-By: Claude <noreply@anthropic.com>
2026-08-12 11:45:54 +08:00
commit 5759c1862e
807 changed files with 114727 additions and 0 deletions
@@ -0,0 +1,84 @@
+#!/bin/sh
+set -eu
+
+# Atomic Nginx upstream switch with validation and automatic config rollback.
+# This script performs no action unless invoked with preflight, go, legacy, or status.
+
+action=${1:-status}
+active_include=${NGINX_ACTIVE_INCLUDE:-}
+go_upstream=${GO_UPSTREAM:-gateway-api:8080}
+legacy_upstream=${LEGACY_UPSTREAM:-legacy-gateway:8000}
+go_health=${GO_HEALTH_URL:-http://127.0.0.1:8080/readyz}
+legacy_health=${LEGACY_HEALTH_URL:-http://127.0.0.1:8000/readyz}
+public_health=${PUBLIC_HEALTH_URL:-}
+nginx_bin=${NGINX_BIN:-nginx}
+
+probe() {
+  curl -fsS --max-time 5 "$1" >/dev/null
+}
+
+preflight() {
+  probe "$go_health"
+  probe "$legacy_health"
+  "$nginx_bin" -t
+  echo "preflight ok: Go and legacy are ready; Nginx configuration is valid"
+}
+
+status() {
+  if [ -z "$active_include" ] || [ ! -f "$active_include" ]; then
+    echo "active upstream include is not configured or does not exist"
+    exit 1
+  fi
+  sed -n '1,3p' "$active_include"
+}
+
+switch_to() {
+  target_name=$1
+  target_address=$2
+  target_health=$3
+  if [ -z "$active_include" ]; then
+    echo "NGINX_ACTIVE_INCLUDE is required" >&2
+    exit 2
+  fi
+  probe "$target_health"
+  directory=$(dirname "$active_include")
+  timestamp=$(date -u +%Y%m%dT%H%M%SZ)
+  backup="${active_include}.backup.${timestamp}"
+  temporary="${directory}/.ai-gateway-upstream.${timestamp}.tmp"
+  if [ -f "$active_include" ]; then
+    cp -p "$active_include" "$backup"
+  fi
+  umask 027
+  {
+    echo "# ai-gateway-active=${target_name} switched_at=${timestamp}"
+    echo "upstream ai_gateway_active {"
+    echo "    server ${target_address};"
+    echo "    keepalive 128;"
+    echo "}"
+  } >"$temporary"
+  mv "$temporary" "$active_include"
+  if ! "$nginx_bin" -t; then
+    if [ -f "$backup" ]; then mv "$backup" "$active_include"; fi
+    echo "Nginx validation failed; previous include restored" >&2
+    exit 1
+  fi
+  if ! "$nginx_bin" -s reload; then
+    if [ -f "$backup" ]; then mv "$backup" "$active_include"; "$nginx_bin" -s reload || true; fi
+    echo "Nginx reload failed; previous include restored" >&2
+    exit 1
+  fi
+  if [ -n "$public_health" ] && ! probe "$public_health"; then
+    if [ -f "$backup" ]; then mv "$backup" "$active_include"; "$nginx_bin" -t; "$nginx_bin" -s reload; fi
+    echo "public health probe failed; traffic rolled back" >&2
+    exit 1
+  fi
+  echo "active upstream switched to ${target_name}; backup: ${backup}"
+}
+
+case "$action" in
+  preflight) preflight ;;
+  status) status ;;
+  go) switch_to go "$go_upstream" "$go_health" ;;
+  legacy|rollback) switch_to legacy "$legacy_upstream" "$legacy_health" ;;
+  *) echo "usage: $0 {preflight|status|go|legacy|rollback}" >&2; exit 2 ;;
+esac