ci: add rollback-aware production smoke checks

scripts/deploy_production.sh

@@ -13,6 +13,8 @@ MYSQLDUMP_BIN="${MYSQLDUMP_BIN:-}"
 MYSQL_CONTAINER="${MYSQL_CONTAINER:-}"
 PREVIOUS_REVISION="${PREVIOUS_REVISION:-}"
 HEALTH_HOST="${DEPLOY_HEALTH_HOST:-}"
+SMOKE_BASE_URL="${DEPLOY_SMOKE_BASE_URL:-}"
+SMOKE_WS_URL="${DEPLOY_SMOKE_WS_URL:-}"
 ROLLBACK_ENABLED=0
 MYSQL_CREDENTIALS_FILE=""
 MYSQL_CONTAINER_CREDENTIALS_PATH=""
@@ -291,6 +293,17 @@ async def check():
 asyncio.run(check())
 PY
 
+if [ -n "$SMOKE_BASE_URL" ] || [ -n "$SMOKE_WS_URL" ]; then
+  [ -n "$SMOKE_BASE_URL" ] && [ -n "$SMOKE_WS_URL" ] \
+    || fail "DEPLOY_SMOKE_BASE_URL 和 DEPLOY_SMOKE_WS_URL 必须同时设置"
+  [ -f "$PROJECT_DIR/scripts/smoke_production.py" ] \
+    || fail "缺少生产冒烟脚本: scripts/smoke_production.py"
+  log "检查 Nginx、业务页面与公网 WebSocket"
+  "$VENV_DIR/bin/python" "$PROJECT_DIR/scripts/smoke_production.py" \
+    --base-url "$SMOKE_BASE_URL" \
+    --ws-url "$SMOKE_WS_URL"
+fi
+
 trap - ERR
 ROLLBACK_ENABLED=0
 log "部署完成，当前版本: $(git rev-parse --short HEAD)"