修复(08-08-production-deployment-execution): 校验候选 Compose 构建标识

deploy/trialrun/production-preflight-remote.sh

@@ -15,7 +15,8 @@ pass() {
 
 for key in REMOTE_DIR REMOTE_ENV_FILE COMPOSE_FILE COMPOSE_PROJECT_NAME \
   POSTGRES_DATA_DIR STORAGE_HOST_DIR EXPECTED_PRODUCTION_ORIGIN_SHA256 \
-  EXPECTED_PRODUCTION_DB_NAME_SHA256 CANDIDATE_MIGRATIONS_CSV \
+  EXPECTED_PRODUCTION_DB_NAME_SHA256 BUILD_SHA VITE_BUILD_SHA \
+  CANDIDATE_MIGRATIONS_CSV \
   EXPECTED_PENDING_MIGRATIONS_CSV; do
   [[ -n "${!key:-}" || "$key" == "EXPECTED_PENDING_MIGRATIONS_CSV" ]] \
     || fail "${key}_MISSING"
@@ -25,6 +26,12 @@ done
   || fail "PROD_TARGET_ORIGIN_HASH_INVALID"
 [[ "$EXPECTED_PRODUCTION_DB_NAME_SHA256" =~ ^[0-9a-f]{64}$ ]] \
   || fail "PROD_TARGET_DB_HASH_INVALID"
+[[ "$BUILD_SHA" =~ ^[0-9a-f]{40,64}$ ]] \
+  || fail "PROD_TARGET_BUILD_SHA_INVALID"
+[[ "$VITE_BUILD_SHA" =~ ^[0-9a-f]{12}$ ]] \
+  || fail "PROD_TARGET_VITE_BUILD_SHA_INVALID"
+[[ "${BUILD_SHA:0:12}" == "$VITE_BUILD_SHA" ]] \
+  || fail "PROD_TARGET_BUILD_SHA_MISMATCH"
 
 cd "$REMOTE_DIR"
 [[ -f "$REMOTE_ENV_FILE" && ! -L "$REMOTE_ENV_FILE" && -r "$REMOTE_ENV_FILE" ]] \