chore(deploy): 启动脚本绑定策略统一——8090 默认 0.0.0.0,其余服务默认 127.0.0.1

用户规则:提供客户 UI 的服务(BFF 8090)默认绑 0.0.0.0 面向内网客户
访问;其余内部服务(QA/methodology/legacy/vstore/bioflow)默认绑
127.0.0.1 不对外暴露。

- deploy/bff_restart.sh: BIND 默认 127.0.0.1 → 0.0.0.0(注释同步)
- sdk/run.sh: --host 127.0.0.1 → 0.0.0.0(注释同步)
- deploy/start-dev.sh: BFF 行 127.0.0.1 → 0.0.0.0
- bioflow_service/restart.sh: BIOFLOW_BIND_HOST 默认 0.0.0.0 → 127.0.0.1
- agent/methodology/scripts/start.sh: METHODOLOGY_API_HOST 默认
  0.0.0.0 → 127.0.0.1(部署树副本同改)

实测:8090→0.0.0.0、8091/8092/8093/8094/8098/8099→127.0.0.1,
BFF 上游全 OK,8092/8098 已按新默认值重启,残留 methodology 旧
进程已清理。

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

agent/methodology/scripts/start.sh

@@ -8,7 +8,7 @@ ENV_FILE="${METHODOLOGY_ENV_FILE:-$AGENT_ROOT/env/prod.env}"
 LOG_FILE="${METHODOLOGY_LOG_FILE:-/tmp/plantai-agent-methodology-$PORT.log}"
 PID_FILE="$AGENT_ROOT/run/methodology-$PORT.pid"
 PYTHON="${METHODOLOGY_PYTHON:-/home/xzq/5090/teamWorkspace/zh/plantai-rag-new-venv/bin/python}"
-BIND="${METHODOLOGY_API_HOST:-0.0.0.0}"
+BIND="${METHODOLOGY_API_HOST:-127.0.0.1}"
 
 mkdir -p "$AGENT_ROOT/run"
 [[ -x "$PYTHON" ]] || { echo "Methodology Python 不可执行: $PYTHON" >&2; exit 1; }

bioflow_service/restart.sh

@@ -8,7 +8,7 @@ SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
 REPO_ROOT="$(cd "$SCRIPT_DIR/.." && pwd)"
 PYTHON="${1:-$REPO_ROOT/../plantai-rag-new-venv/bin/python}"
 PORT="${2:-8098}"
-HOST="${BIOFLOW_BIND_HOST:-0.0.0.0}"
+HOST="${BIOFLOW_BIND_HOST:-127.0.0.1}"
 
 [[ -x "$PYTHON" ]] || { echo "Python not found: $PYTHON" >&2; exit 2; }
 

deploy/bff_restart.sh

@@ -1,13 +1,13 @@
 #!/bin/bash
 # deploy/bff_restart.sh —— 远端 BFF 重启(PM 使用,在远端执行)
 # 用法:ssh 192.168.0.175 -p 26518 'bash ~/5090/teamWorkspace/zh/PlantAI-rag-new/deploy/bff_restart.sh [bind_addr]'
-# 参数:可选绑定地址(默认 127.0.0.1;内网演示传 0.0.0.0)
+# 参数:可选绑定地址(默认 0.0.0.0 面向客户内网访问;纯本机调试传 127.0.0.1)
 # 要点:用 setsid 完全脱离 SSH 会话,stdout/stderr 全部落日志。
 # 2026-09-01 统一 Python:conda plantai-bff → plantai-rag-new-venv(py3.12.13)
 set -uo pipefail
 SDK_ROOT="/home/xzq/5090/teamWorkspace/zh/plantai-rag-new-deploy-unified/sdk"
 PYTHON="/home/xzq/5090/teamWorkspace/zh/plantai-rag-new-venv/bin/python"
-BIND="${1:-127.0.0.1}"
+BIND="${1:-0.0.0.0}"
 [[ -x "$PYTHON" ]] || { echo "BFF Python 不可执行: $PYTHON" >&2; exit 1; }
 
 # 杀旧进程：按 8090 端口精确匹配（TL 2026-09-06 修——

deploy/start-dev.sh

@@ -2,9 +2,9 @@
 # deploy/start-dev.sh —— 远端启动 BFF + vite dev（在远端 tmux 中运行）
 set -euo pipefail
 ROOT="/home/xzq/5090/teamWorkspace/zh/PlantAI-rag-new"
-echo "== 启动 BFF (127.0.0.1:8090) =="
+echo "== 启动 BFF (0.0.0.0:8090) =="
 (cd "$ROOT/sdk" && \
- nohup /home/xzq/5090/teamWorkspace/zh/plantai-rag-new-venv/bin/python -m uvicorn app.main:app --host 127.0.0.1 --port 8090 > /tmp/plantai-bff.log 2>&1 &)
+ nohup /home/xzq/5090/teamWorkspace/zh/plantai-rag-new-venv/bin/python -m uvicorn app.main:app --host 0.0.0.0 --port 8090 > /tmp/plantai-bff.log 2>&1 &)
 echo "== 启动 Vite dev (127.0.0.1:5180) =="
 (cd "$ROOT/ui" && nohup npm run dev > /tmp/plantai-vite.log 2>&1 &)
 sleep 3

sdk/run.sh

@@ -1,5 +1,5 @@
 #!/usr/bin/env bash
-# run.sh —— 本地起 BFF(ARCHITECTURE.md §3:127.0.0.1:8090,占用则退 8091)。
+# run.sh —— 本地起 BFF(ARCHITECTURE.md §3:0.0.0.0:8090,占用则退 8091)。
 # 用法:bash sdk/run.sh
 # 2026-09-01 统一 Python:conda plantai-bff → plantai-rag-new-venv(py3.12.13)
 set -euo pipefail
@@ -9,4 +9,4 @@ PORT="${PORT:-8090}"
 PYTHON="${PLANTAI_BFF_PYTHON:-/home/xzq/5090/teamWorkspace/zh/plantai-rag-new-venv/bin/python}"
 
 [[ -x "$PYTHON" ]] || { echo "run.sh: 统一 venv 不可执行: $PYTHON" >&2; exit 1; }
-exec "$PYTHON" -m uvicorn app.main:app --host 127.0.0.1 --port "$PORT"
+exec "$PYTHON" -m uvicorn app.main:app --host 0.0.0.0 --port "$PORT"