fix(entrypoint): FUSE-safe chmod/mkdir so /app/data bucket mount cannot crash boot

docker-entrypoint.sh

@@ -1,74 +1,76 @@
-#!/bin/bash
-set -e
-
-# 清理残留锁文件并启动虚拟显示器
-rm -f /tmp/.X99-lock
-Xvfb :99 -screen 0 1280x800x24 &
-export DISPLAY=:99
-
-# 确保数据目录存在且可写
-mkdir -p /app/data /app/data/auths /app/data/screenshots
-chmod -R 777 /app/data
-
-# 数据文件：无条件软链到 data/（确保所有写入都持久化）
-for f in .env accounts.json state.json; do
-    # data 里没有就创建空文件
-    [ -f "/app/data/$f" ] || touch "/app/data/$f"
-    # 删除容器内的真实文件（如果不是软链），然后建软链
-    rm -f "/app/$f"
-    ln -s "/app/data/$f" "/app/$f"
-done
-
-# 目录软链
-for d in auths screenshots; do
-    rm -rf "/app/$d"
-    ln -s "/app/data/$d" "/app/$d"
-done
-
-# ---------------------------------------------------------------------------
-# Self-check: 关键 import 白名单 — 失败即 crash-loop(SPEC-3 §2)
-# ---------------------------------------------------------------------------
-echo "[self-check] verifying critical imports..."
-if ! uv run python - <<'PYEOF'
-import sys
-
-# 核心 web 应用入口
-from autoteam.api import app  # noqa: F401
-
-# accounts.py 全部对外契约符号(典型 typo 高发区)
-from autoteam.accounts import (  # noqa: F401
-    load_accounts,
-    save_accounts,
-    STATUS_ACTIVE,
-    STATUS_EXHAUSTED,
-    STATUS_STANDBY,
-    STATUS_PENDING,
-    STATUS_PERSONAL,
-    STATUS_AUTH_INVALID,
-    STATUS_ORPHAN,
-)
-
-# manager → accounts 链路(覆盖跨模块 typo)
-from autoteam.manager import sync_account_states  # noqa: F401
-
-# 0515 runtime hardening helpers
-from autoteam.runtime_resources import collect_runtime_resource_snapshot  # noqa: F401
-from autoteam.playwright_lifecycle import close_playwright_objects  # noqa: F401
-from autoteam.playwright_probe import main as playwright_probe_main  # noqa: F401
-from autoteam.chatgpt_transport import build_chatgpt_transport  # noqa: F401
-
-print("[self-check] OK: %d critical symbols imported." % 15)
-sys.exit(0)
-PYEOF
-then
-    echo "[self-check] FATAL: critical import failed - image is likely stale or broken." >&2
-    echo "[self-check] If you just pulled new code, the image must be rebuilt:" >&2
-    echo "[self-check]   docker compose down" >&2
-    echo "[self-check]   docker compose build --no-cache --build-arg GIT_SHA=\$(git rev-parse --short HEAD)" >&2
-    echo "[self-check]   docker compose up -d" >&2
-    exit 1
-fi
-echo "[self-check] passed."
-
-# 执行命令
-exec uv run autoteam "$@"
+#!/bin/bash
+set -e
+
+# 清理残留锁文件并启动虚拟显示器
+rm -f /tmp/.X99-lock
+Xvfb :99 -screen 0 1280x800x24 &
+export DISPLAY=:99
+
+# 确保数据目录存在且可写
+# 注意: /app/data 可能是 HF bucket(FUSE) 挂载点。FUSE 不一定支持 chmod，
+# 在 `set -e` 下未加保护的 chmod 失败会让容器崩溃 crash-loop，故用 `|| true` 兜底。
+mkdir -p /app/data /app/data/auths /app/data/screenshots 2>/dev/null || true
+chmod -R 777 /app/data 2>/dev/null || true
+
+# 数据文件：无条件软链到 data/（确保所有写入都持久化）
+for f in .env accounts.json state.json; do
+    # data 里没有就创建空文件
+    [ -f "/app/data/$f" ] || touch "/app/data/$f"
+    # 删除容器内的真实文件（如果不是软链），然后建软链
+    rm -f "/app/$f"
+    ln -s "/app/data/$f" "/app/$f"
+done
+
+# 目录软链
+for d in auths screenshots; do
+    rm -rf "/app/$d"
+    ln -s "/app/data/$d" "/app/$d"
+done
+
+# ---------------------------------------------------------------------------
+# Self-check: 关键 import 白名单 — 失败即 crash-loop(SPEC-3 §2)
+# ---------------------------------------------------------------------------
+echo "[self-check] verifying critical imports..."
+if ! uv run python - <<'PYEOF'
+import sys
+
+# 核心 web 应用入口
+from autoteam.api import app  # noqa: F401
+
+# accounts.py 全部对外契约符号(典型 typo 高发区)
+from autoteam.accounts import (  # noqa: F401
+    load_accounts,
+    save_accounts,
+    STATUS_ACTIVE,
+    STATUS_EXHAUSTED,
+    STATUS_STANDBY,
+    STATUS_PENDING,
+    STATUS_PERSONAL,
+    STATUS_AUTH_INVALID,
+    STATUS_ORPHAN,
+)
+
+# manager → accounts 链路(覆盖跨模块 typo)
+from autoteam.manager import sync_account_states  # noqa: F401
+
+# 0515 runtime hardening helpers
+from autoteam.runtime_resources import collect_runtime_resource_snapshot  # noqa: F401
+from autoteam.playwright_lifecycle import close_playwright_objects  # noqa: F401
+from autoteam.playwright_probe import main as playwright_probe_main  # noqa: F401
+from autoteam.chatgpt_transport import build_chatgpt_transport  # noqa: F401
+
+print("[self-check] OK: %d critical symbols imported." % 15)
+sys.exit(0)
+PYEOF
+then
+    echo "[self-check] FATAL: critical import failed - image is likely stale or broken." >&2
+    echo "[self-check] If you just pulled new code, the image must be rebuilt:" >&2
+    echo "[self-check]   docker compose down" >&2
+    echo "[self-check]   docker compose build --no-cache --build-arg GIT_SHA=\$(git rev-parse --short HEAD)" >&2
+    echo "[self-check]   docker compose up -d" >&2
+    exit 1
+fi
+echo "[self-check] passed."
+
+# 执行命令
+exec uv run autoteam "$@"