ci: 增加 Client 生产部署流程

src/deployment/nginxConfig.test.mjs

@@ -5,6 +5,7 @@ import test from 'node:test'
 const config = readFileSync(new URL('../../nginx/default.conf.template', import.meta.url), 'utf8')
 const testCompose = readFileSync(new URL('../../docker-compose.test.yml', import.meta.url), 'utf8')
 const developmentCompose = readFileSync(new URL('../../docker-compose.development.yml', import.meta.url), 'utf8')
+const productionCompose = readFileSync(new URL('../../docker-compose.production.yml', import.meta.url), 'utf8')
 const jenkinsfile = readFileSync(new URL('../../Jenkinsfile', import.meta.url), 'utf8')
 const dockerfile = readFileSync(new URL('../../Dockerfile', import.meta.url), 'utf8')
 
@@ -38,11 +39,16 @@ test('connects the development client proxy to both development gateways', () =>
   assert.doesNotMatch(developmentCompose, /test-api|prod(?:uction)?/i)
 })
 
-test('runs each deployment on its target node without controller-local SSH files', () => {
-  assert.match(jenkinsfile, /env\.JOB_BASE_NAME\?\.endsWith\('-dev'\) \? 'java-dev' : 'java-test'/)
+test('keeps local environments on target nodes and uses credential-managed SSH for production', () => {
+  assert.match(jenkinsfile, /env\.JOB_BASE_NAME\?\.endsWith\('-prod'\) \? 'java-builder'/)
   assert.match(jenkinsfile, /DEVELOPMENT_COMPOSE_PROJECT = 'client-web'/)
   assert.match(jenkinsfile, /docker compose -p "\$DEVELOPMENT_COMPOSE_PROJECT" -f "\$DEVELOPMENT_COMPOSE_FILE" up -d/)
-  assert.doesNotMatch(jenkinsfile, /\/var\/jenkins_home\/\.ssh|docker save|\bssh\b/)
+  assert.doesNotMatch(jenkinsfile, /\/var\/jenkins_home\/\.ssh|docker save/)
+  assert.match(jenkinsfile, /credentialsId: 'firstleg-production-ssh'/)
+  assert.match(jenkinsfile, /git rev-parse origin\/main/)
+  assert.match(productionCompose, /127\.0\.0\.1:\$\{HOST_PORT:-9002\}:80/)
+  assert.match(productionCompose, /API_UPSTREAM: "http:\/\/gateway:9000"/)
+  assert.match(productionCompose, /name: firstleg-prod-infra-network/)
 })
 
 test('uses authenticated internal base images in CI', () => {