chore: unify production pipelines on linux

jenkins/Jenkinsfile.production-stdb-module-build

@@ -1,27 +1,6 @@
-def runWindowsPowerShell(String scriptName, String scriptBody) {
-  def scriptPath = ".jenkins-${scriptName}.ps1"
-  writeFile file: scriptPath, text: scriptBody, encoding: 'UTF-8'
-  bat label: "PowerShell ${scriptName}", script: """
-@echo off
-setlocal
-set "GENARRATIVE_POWERSHELL=%SystemRoot%\\System32\\WindowsPowerShell\\v1.0\\powershell.exe"
-if not exist "%GENARRATIVE_POWERSHELL%" (
-  echo [jenkins-powershell] powershell.exe not found: %GENARRATIVE_POWERSHELL%
-  exit /b 1
-)
-echo [jenkins-powershell] user:
-whoami
-echo [jenkins-powershell] exe: %GENARRATIVE_POWERSHELL%
-"%GENARRATIVE_POWERSHELL%" -NoLogo -NoProfile -NonInteractive -ExecutionPolicy Bypass -Command "\$path = '%CD%\\${scriptPath}'; \$text = [System.IO.File]::ReadAllText(\$path, [System.Text.Encoding]::UTF8); \$utf8Bom = New-Object System.Text.UTF8Encoding(\$true); [System.IO.File]::WriteAllText(\$path, \$text, \$utf8Bom)"
-if errorlevel 1 exit /b %ERRORLEVEL%
-"%GENARRATIVE_POWERSHELL%" -NoLogo -NoProfile -NonInteractive -ExecutionPolicy Bypass -File "%CD%\\${scriptPath}"
-exit /b %ERRORLEVEL%
-"""
-}
-
 pipeline {
   agent {
-    label 'windows'
+    label 'linux && genarrative-build'
   }
 
   options {
@@ -31,12 +10,10 @@ pipeline {
   }
 
   environment {
-    GIT_REMOTE_URL = 'https://git.genarrative.world/GenarrativeAI/Genarrative.git'
-    CARGO_HOME = '${env.WORKSPACE_TMP}/cargo-home'
-    CARGO_TARGET_DIR = '${env.WORKSPACE_TMP}/cargo-target/prod-release'
+    GIT_REMOTE_URL = 'http://127.0.0.1:3000/GenarrativeAI/Genarrative.git'
+    GIT_REMOTE_FALLBACK_URL = 'https://git.genarrative.world/GenarrativeAI/Genarrative.git'
     CARGO_INCREMENTAL = '0'
     RUSTC_WRAPPER = 'sccache'
-    SCCACHE_DIR = '${env.USERPROFILE}\\.cache\\sccache-stdb-module'
     SCCACHE_CACHE_SIZE = '30G'
   }
 
@@ -56,106 +33,42 @@ pipeline {
   stages {
     stage('Checkout') {
       steps {
-        checkout([
-          $class: 'GitSCM',
-          branches: [[name: "*/${params.SOURCE_BRANCH}"]],
-          doGenerateSubmoduleConfigurations: false,
-          extensions: [
-            [$class: 'CleanBeforeCheckout'],
-            [$class: 'CloneOption', shallow: true, depth: 1, noTags: true, timeout: 30, honorRefspec: true],
-          ],
-          userRemoteConfigs: [[url: "${GIT_REMOTE_URL}", refspec: "+refs/heads/${params.SOURCE_BRANCH}:refs/remotes/origin/${params.SOURCE_BRANCH}"]],
-        ])
         script {
-          runWindowsPowerShell('stdb-checkout', '''
-            $ErrorActionPreference = 'Stop'
-            $sourceBranch = if ($env:SOURCE_BRANCH) { $env:SOURCE_BRANCH } else { 'master' }
-            $commitHash = if ($env:COMMIT_HASH) { $env:COMMIT_HASH } else { '' }
-            $gitRemoteUrl = if ($env:GIT_REMOTE_URL) { $env:GIT_REMOTE_URL } else { 'https://git.genarrative.world/GenarrativeAI/Genarrative.git' }
-
-            function Invoke-GitCommand {
-              param(
-                [string]$Label,
-                [string[]]$Arguments
-              )
-
-              Write-Host "[stdb-checkout] $Label"
-              & git @Arguments
-              $exitCode = $LASTEXITCODE
-              if ($exitCode -ne 0) {
-                throw "[stdb-checkout] $Label failed with exit code $exitCode"
-              }
-            }
-
-            Write-Host "[stdb-checkout] sourceBranch: $sourceBranch"
-            Write-Host "[stdb-checkout] remote: $gitRemoteUrl"
-            $currentCommit = (git rev-parse HEAD).Trim()
-            if ($LASTEXITCODE -ne 0 -or -not $currentCommit) {
-              throw '[stdb-checkout] cannot resolve current HEAD'
-            }
-            Write-Host "[stdb-checkout] current HEAD: $currentCommit"
-
-            if ($commitHash) {
-              Write-Host "[stdb-checkout] requested commit: $commitHash"
-              $resolvedCommit = (git rev-parse --verify "${commitHash}^{commit}" 2>$null).Trim()
-              if ($LASTEXITCODE -eq 0 -and $resolvedCommit -eq $currentCommit) {
-                Write-Host '[stdb-checkout] requested commit already matches Jenkins GitSCM checkout'
-              } else {
-                Invoke-GitCommand -Label 'fetch source branch history' -Arguments @(
-                  'fetch',
-                  '--no-tags',
-                  '--prune',
-                  $gitRemoteUrl,
-                  "+refs/heads/${sourceBranch}:refs/remotes/origin/${sourceBranch}"
-                )
-                $isShallowRepository = (git rev-parse --is-shallow-repository 2>$null).Trim()
-                if ($LASTEXITCODE -ne 0) {
-                  throw '[stdb-checkout] cannot determine whether repository is shallow'
-                }
-                if ($isShallowRepository -eq 'true') {
-                  Invoke-GitCommand -Label 'deepen source branch history' -Arguments @(
-                    'fetch',
-                    '--unshallow',
-                    '--no-tags',
-                    $gitRemoteUrl,
-                    "+refs/heads/${sourceBranch}:refs/remotes/origin/${sourceBranch}"
-                  )
-                }
-                Invoke-GitCommand -Label 'validate source branch ref' -Arguments @(
-                  'cat-file',
-                  '-e',
-                  "refs/remotes/origin/${sourceBranch}^{commit}"
-                )
-                Invoke-GitCommand -Label 'validate requested commit' -Arguments @(
-                  'cat-file',
-                  '-e',
-                  "${commitHash}^{commit}"
-                )
-                $resolvedCommit = (git rev-parse --verify "${commitHash}^{commit}").Trim()
-                if ($LASTEXITCODE -ne 0 -or -not $resolvedCommit) {
-                  throw "[stdb-checkout] cannot resolve requested commit: $commitHash"
-                }
-                Invoke-GitCommand -Label 'validate requested commit belongs to branch' -Arguments @(
-                  'merge-base',
-                  '--is-ancestor',
-                  $resolvedCommit,
-                  "refs/remotes/origin/${sourceBranch}"
-                )
-                Invoke-GitCommand -Label "checkout commit $resolvedCommit" -Arguments @(
-                  'checkout',
-                  '--force',
-                  $resolvedCommit
-                )
-              }
-            } else {
-              Write-Host "[stdb-checkout] COMMIT_HASH empty, reusing Jenkins GitSCM checkout result"
-            }
-
-            $resolvedCommit = (git rev-parse HEAD).Trim()
-            $utf8NoBom = New-Object System.Text.UTF8Encoding $false
-            [System.IO.File]::WriteAllText((Join-Path (Get-Location) '.jenkins-source-commit'), "$resolvedCommit`n", $utf8NoBom)
-          ''')
-          env.SOURCE_COMMIT = readFile('.jenkins-source-commit').replace('\uFEFF', '').trim()
+          def checkoutFromRemote = { String remoteUrl ->
+            checkout([
+              $class: 'GitSCM',
+              branches: [[name: "*/${params.SOURCE_BRANCH}"]],
+              doGenerateSubmoduleConfigurations: false,
+              extensions: [
+                [$class: 'CleanBeforeCheckout'],
+                [$class: 'CloneOption', shallow: true, depth: 1, noTags: true, timeout: 30, honorRefspec: true],
+              ],
+              userRemoteConfigs: [[url: remoteUrl, refspec: "+refs/heads/${params.SOURCE_BRANCH}:refs/remotes/origin/${params.SOURCE_BRANCH}"]],
+            ])
+          }
+          try {
+            checkoutFromRemote(env.GIT_REMOTE_URL)
+            env.EFFECTIVE_GIT_REMOTE_URL = env.GIT_REMOTE_URL
+          } catch (error) {
+            echo "Git 主地址拉取失败: ${env.GIT_REMOTE_URL}，改用备用地址: ${env.GIT_REMOTE_FALLBACK_URL}"
+            checkoutFromRemote(env.GIT_REMOTE_FALLBACK_URL)
+            env.EFFECTIVE_GIT_REMOTE_URL = env.GIT_REMOTE_FALLBACK_URL
+          }
+        }
+        sh '''
+          bash -lc '
+            set -euo pipefail
+            chmod +x scripts/jenkins-checkout-source.sh
+            SOURCE_BRANCH="${SOURCE_BRANCH:-master}" \
+            COMMIT_HASH="${COMMIT_HASH:-}" \
+            GIT_REMOTE_URL="${EFFECTIVE_GIT_REMOTE_URL:-${GIT_REMOTE_URL}}" \
+            GIT_REMOTE_FALLBACK_URL="${GIT_REMOTE_FALLBACK_URL:-}" \
+            SOURCE_COMMIT_FILE=".jenkins-source-commit" \
+            scripts/jenkins-checkout-source.sh
+          '
+        '''
+        script {
+          env.SOURCE_COMMIT = readFile('.jenkins-source-commit').trim()
           env.EFFECTIVE_BUILD_VERSION = params.BUILD_VERSION?.trim() ? params.BUILD_VERSION.trim() : env.BUILD_NUMBER
         }
       }
@@ -165,45 +78,27 @@ pipeline {
       steps {
         script {
           def buildStep = {
-            runWindowsPowerShell('stdb-build', '''
-              $ErrorActionPreference = 'Stop'
-              $workspaceTmp = if ($env:WORKSPACE_TMP) { $env:WORKSPACE_TMP } else { "$env:WORKSPACE@tmp" }
-              $env:CARGO_HOME = "$workspaceTmp/cargo-home"
-              $env:CARGO_TARGET_DIR = "$workspaceTmp/cargo-target/prod-release"
-              $env:SCCACHE_DIR = "$env:USERPROFILE/.cache/sccache-stdb-module"
-              $env:PATH = "$env:CARGO_HOME/bin;$env:PATH"
-              $gitBash = @(
-                $env:GENARRATIVE_BASH,
-                'C:/Program Files/Git/bin/bash.exe',
-                'C:/Program Files/Git/usr/bin/bash.exe',
-                'C:/msys64/usr/bin/bash.exe',
-                'bash'
-              ) | Where-Object { $_ -and (($_ -eq 'bash') -or (Test-Path $_)) } | Select-Object -First 1
-              if (-not $gitBash) {
-                throw '[stdb-build] Windows 构建节点缺少 Git Bash，无法执行仓库现有生产构建脚本。请先安装 Git for Windows，并确保 bash 在 PATH 中。'
-              }
-              $env:GENARRATIVE_BASH = $gitBash
-              if (-not (Get-Command cargo -ErrorAction SilentlyContinue)) {
-                throw '[stdb-build] 缺少 cargo。请先在 Windows 构建节点安装 Rust 工具链，并确保 cargo 在 PATH 中。'
-              }
-              # sccache 只是可选缓存；PATH 中存在但不可执行时必须回退到 rustc。
-              $sccacheCommand = Get-Command sccache -ErrorAction SilentlyContinue
-              $sccacheUsable = $false
-              if ($sccacheCommand) {
-                try {
-                  & $sccacheCommand.Source --version | Out-Host
-                  $sccacheUsable = $true
-                } catch {
-                  Write-Host "[stdb-build] sccache 无法执行：$($_.Exception.Message)"
-                }
-              }
-              if (-not $sccacheUsable) {
-                Write-Host '[stdb-build] 未找到可用 sccache，改用 rustc 直接构建。'
-                Remove-Item Env:RUSTC_WRAPPER -ErrorAction SilentlyContinue
-              }
-              npm run build:production-release -- --component spacetime-module --name "$env:EFFECTIVE_BUILD_VERSION"
+            sh '''
+              bash -lc '
+                set -euo pipefail
+                workspace_tmp="${WORKSPACE_TMP:-${WORKSPACE}@tmp}"
+                export CARGO_HOME="${workspace_tmp}/cargo-home"
+                export CARGO_TARGET_DIR="${workspace_tmp}/cargo-target/prod-release"
+                export CARGO_INCREMENTAL=0
+                export RUSTC_WRAPPER=sccache
+                export SCCACHE_DIR="${workspace_tmp}/sccache-stdb-module"
+                export SCCACHE_CACHE_SIZE=30G
+                mkdir -p "${CARGO_HOME}" "${CARGO_TARGET_DIR}" "${SCCACHE_DIR}"
+                chmod +x scripts/jenkins-prepare-cargo-env.sh
+                source scripts/jenkins-prepare-cargo-env.sh
+                if ! command -v sccache >/dev/null 2>&1; then
+                  echo "[stdb-build] 未找到可用 sccache，改用 rustc 直接构建。"
+                  unset RUSTC_WRAPPER
+                fi
+                SOURCE_BRANCH="${SOURCE_BRANCH}" SOURCE_COMMIT="${SOURCE_COMMIT}" \
+                npm run build:production-release -- --component spacetime-module --name "${EFFECTIVE_BUILD_VERSION}"
+              '
             '''
-            )
           }
           if (params.MIGRATION_BOOTSTRAP_SECRET_CREDENTIAL_ID?.trim()) {
             withCredentials([