set -euo pipefail
release=/home/ps/knowledge-v2-20260916
cd "$release"
mkdir -m 700 payload
tar -xzf payload.tar.gz -C payload
python3 - <<'PY'
from pathlib import Path
import json,hashlib
root=Path('/home/ps/knowledge-v2-20260916')
manifest=json.loads((root/'manifest.json').read_text(encoding='utf-8-sig'))
for row in manifest:
    data=(root/'payload'/row['path']).read_bytes()
    assert len(data)==row['bytes'] and hashlib.sha256(data).hexdigest()==row['sha256'],row['path']
print('Release files verified:',len(manifest),flush=True)
PY
docker exec -i im-admin-api-1 python -u - <<'PY' | tee "$release/backup-verification.json"
from pathlib import Path
import sqlite3,shutil,json,os,time
folder=Path('/data/backups/knowledge-v2-20260916')
folder.mkdir(mode=0o700)
started=time.monotonic()
with sqlite3.connect('/data/backend.db',timeout=30) as source, sqlite3.connect(folder/'backend.db') as backup:
    source.backup(backup,pages=4096,sleep=0.05)
    check=backup.execute('PRAGMA quick_check').fetchone()[0]
    assert check=='ok',check
    tables=['archive_message','archive_conversation','archive_person','archive_source_account','desktop_accounts','model_providers','users','knowledge_item','knowledge_job','knowledge_watch']
    counts={t:backup.execute('SELECT COUNT(*) FROM '+t).fetchone()[0] for t in tables}
os.chmod(folder/'backend.db',0o600)
keys=[]
for key in Path('/data').glob('*.key'):
    shutil.copy2(key,folder/key.name)
    os.chmod(folder/key.name,0o600)
    keys.append(key.name)
assert keys,'No key file backed up'
print(json.dumps({'backup':str(folder),'bytes':(folder/'backend.db').stat().st_size,'quick_check':check,'counts':counts,'key_files':keys,'seconds':round(time.monotonic()-started,1)}),flush=True)
PY
docker build --network=none --build-arg BASE_IMAGE=zyt/wecom-admin:before-knowledge-v2-20260916 -f Dockerfile.overlay -t zyt/wecom-admin:knowledge-v2-20260916 . 2>&1 | tee build.log
docker run --rm --network=none --read-only --tmpfs /tmp:size=256m,mode=1777 zyt/wecom-admin:knowledge-v2-20260916 python -X utf8 -m unittest test_knowledge test_model_gateway -q 2>&1 | tee candidate-tests.log