Flynor Server
轻量运行面，负责身份校验、管理快照验签、任务包、项目智能中转、节点调度、状态与回执；可从受控 Ed25519 私钥文件为 Test Worker 领取的任务签发最小权限 Capability Lease。
职责与边界
负责
- 校验身份与已发布权限
- 验证并加载 Management 签名快照
- 生成和下发任务包与任务级 Capability Lease
- 管理项目节点连接和队列
- 中转标准远程能力调用但不执行 Provider
- 管理测试任务状态、执行记录、策略命令与逐动作回执
- 接收运行状态与交付回执
不负责
- 不维护管理主数据
- 不提供 HTML 管理界面
- 不执行重型索引和模型任务
数据与接口
拥有的数据
- 执行快照
- 任务包
- 运行状态与事件
- 只读治理投影
输入
已签名的发布定义；执行请求；节点心跳与结果
输出
已验签的只读发布定义；任务包与 Capability Lease；节点调度；状态与审计事件
协议
HTTPS；GET /v1/platform/definitions；flynor/management-snapshot-envelope/v1；flynor/project-capsule/v1；flynor/context-plan/v1；flynor/capability-lease/v1alpha1；目标 flynor/capability-invocation/v1
依赖
management；protocol；sdk；capability-adapter
运行与部署
运行平台组 · production · active；升级路径：运行平台组 → 平台治理组
standalone · supported；独立 Node.js 服务，默认使用 systemd 与受控 TLS 反向代理。
环境变量、server 配置、Management 快照/公钥/keyId 三元组，以及可选且必须成组配置的 Capability Lease 私钥文件引用/keyId/issuer；不接受私钥正文环境变量
自包含 Server Runtime 归档 + 不可变版本目录/current + systemd + 受控 TLS 反向代理；目标机不安装 Monorepo 依赖
回环监听、运行诊断接口，以及 Management 快照和 Capability Lease issuer 的 ready/disabled 状态
Server 测试记录与诊断聚合均保存 executionId/traceId；管理员诊断列表支持按 executionId 精确过滤
干净提交构建并隔离演练归档，原子切换 current；数据迁移与回退遵循存储 Schema 和协议兼容矩阵
Server 标准生产部署
轻量运行中枢，强制回环监听并由受控代理终止 TLS
server-production · server · self-contained-node-systemd-reverse-proxy · immutable-release-directory / atomic-current-link / loopback-node-service / systemd / tls-reverse-proxy / persistent-data-directory / verified-local-management-snapshot查看完整部署契约
前置条件
- Node.js 20+
- rehearsed self-contained Server Runtime archive
- dedicated non-login user
- TLS reverse proxy
- external secret file
配置与交付物
- infra/server/server.env.example
- /etc/flynor/server.env
- /var/lib/flynor/management-releases/management-snapshot.json
- /etc/flynor/management-snapshot.pub
- infra/server/flynor-server.service
- infra/server/nginx.conf.example
健康与验收
- isolated Server Runtime release rehearsal
- sh bin/accept-host
- systemd active
- loopback listener
- HTTPS diagnostic check
- Management snapshot ready or explicitly disabled
- authenticated published-definition read fixture
备份范围
- persistent data directory
- verified Management snapshot and public key
- external environment file through secret-management process
install and rehearse an immutable compatible archive, back up persistent data and external configuration, atomically switch current, restart, then verify storage schema, protocol compatibility, diagnostics, Management snapshot and authenticated fixtures
atomically switch current to the previous compatible immutable release and restore the pre-upgrade data backup when a migration is not backward compatible; restore the last verified Management .previous snapshot when only publication is wrong