{
  "cab_version": "1.0",
  "task_id": "CAB-20260418-001",
  "created_at": "2026-04-18T02:30:00Z",
  "created_by": "TCS-0002∞",
  "status": "pending",
  "authorization": {
    "sovereign": "冰朔 · TCS-0002∞",
    "authorized_agent": "glada",
    "scope": "full-auto-development",
    "confirmation": false
  },
  "architecture": {
    "summary": "光湖智库节点(guanghu.online)部署修复后的稳定性加固+SSL配置+健康监控完善",
    "decisions": [
      "Phase 3修复已完成(builtin-source部署缺失导致服务器崩溃)·需要合并PR后验证",
      "Phase 4: SSL证书申请(certbot+nginx) + HTTPS完整配置",
      "Phase 4: 健康监控加强(/api/health完整自检 + PM2日志轮转)",
      "Phase 4: 定时备份data目录到COS桶",
      "验证邮箱SMTP配置(ZY_SMTP_USER + ZY_SMTP_PASS)是否正确"
    ],
    "target_files": [
      ".github/workflows/deploy-zhiku-guanghu-online.yml",
      "server/zhiku-node/server/server.js",
      "server/nginx/zhiku-guanghu-online.conf"
    ],
    "target_modules": ["zhiku-node", "deploy-workflow"]
  },
  "development_plan": {
    "title": "光湖智库 Phase 4: SSL + 监控 + 稳定性加固",
    "description": "在Phase 3修复(服务器崩溃问题)合并部署后，执行Phase 4的SSL证书配置、健康监控完善和稳定性加固",
    "steps": [
      "Step 1: 触发deploy-zhiku-guanghu-online.yml的deploy动作 → 验证zhiku-api启动成功(pm2 list显示online)",
      "Step 2: 验证/api/health返回正常JSON → 确认SMTP配置状态",
      "Step 3: 如果SMTP已配置 → 测试邮箱验证码发送流程",
      "Step 4: 触发setup-ssl动作申请SSL证书(certbot + Let's Encrypt)",
      "Step 5: SSL证书申请成功后 → 恢复HTTPS完整nginx配置 → 验证HTTPS访问",
      "Step 6: 加强/api/health端点(添加磁盘使用率+内存使用率+最后请求时间)",
      "Step 7: 配置PM2日志轮转(pm2-logrotate + 保留7天日志)",
      "Step 8: 创建data目录定时备份脚本(cron → tar → COS桶)"
    ],
    "priority": "high",
    "estimated_scope": "medium"
  },
  "execution_plan": {
    "executor": "glada",
    "execution_strategy": "sequential",
    "rollback_on_failure": true,
    "preserve_context": true,
    "checkpoint_interval": "step",
    "execution_timeout_ms": 7200000,
    "retry_policy": {
      "max_retries": 3,
      "backoff_ms": 5000
    },
    "model_preference": "deepseek-chat",
    "auto_test": true,
    "auto_commit": true,
    "auto_notify": true
  },
  "constraints": {
    "no_touch_files": [
      ".github/brain/",
      ".github/persona-brain/",
      "server/zhiku-node/server/mirror-shield/",
      "server/zhiku-node/server/shulan-agent/",
      "server/zhiku-node/server/mirror-agent/"
    ],
    "required_tests": false,
    "deploy_after": true,
    "max_files_changed": 15
  },
  "reasoning_context": {
    "chat_summary": "智库节点邮箱验证码登录失效·根因是部署workflow缺失builtin-source目录导致服务器启动崩溃(PM2 errored 36次)·Safari/iOS显示TypeError: The string did not match the expected pattern·已修复builtin-source部署+可选加载+前端错误处理·下一步需要合并部署验证+SSL证书+监控加固",
    "key_decisions": [
      "builtin-source改为可选加载(try/catch)·非核心模块不应阻塞整个服务",
      "前端不再直接显示底层error.message·使用友好提示替代",
      "部署workflow每添加新子模块必须同步添加上传步骤",
      "Phase 4优先SSL证书·然后监控·然后备份"
    ],
    "architecture_notes": "zhiku-node是单体Express服务(1671行·20端点·4子系统)·部署在ZY-SVR-006(新加坡43.153.203.105)·Nginx反代端口3006·PM2守护·数据存储在/opt/zhiku/data/(JSON文件)·日志在/var/log/zhiku/"
  },
  "completion": {
    "completed_at": null,
    "result": null,
    "pr_number": null,
    "files_changed": []
  }
}