Pin account transactions and note deprecated credential flags

Why: the integration tree has to carry the single-transaction account changes, and operators need to see that --dsn and --password still work while warning. Evidence: Backend 545a75b. SELF store tests named in that branch. PostgreSQL, cross-process, and SIGKILL password checks are NOT_RUN locally. Impact: Dev gitlink moves to 545a75b. scripts/svc.sh is unchanged and can keep passing --dsn and --password. Refs: docs/svc-deploy/u7-account-tx-audit.md Co-authored-by: Cursor <cursoragent@cursor.com>
2026-10-12 14:52:29 +00:00
parent c5488426a8
commit 028509caa5
2 changed files with 6 additions and 1 deletions
@@ -550,6 +550,11 @@ scripts/svc.sh help <主题> # 主题详解：model deploy lifecycle accounts db
 # accounts：实例绑定账户 CLI（create/list/reset-password/issue-login-key/revoke-login-key/bootstrap-admin）
 ```

+`agent-system` 的账户命令仍接受 `--dsn` 和 `--password`，并在 stderr 打印弃用警告。
+新调用使用 `AGENT_SYSTEM_DSN` 或模式 0600 的 `--dsn-file`，密码使用 `--password-stdin`，
+明文写入独占创建的 `--out-file`。`agent-system capabilities --json` 不打开数据库。
+`scripts/svc.sh` 仍传 `--dsn` / `--password`，切换留给账户 U5。
+
 ## 7. 命令参考：数据库

 ### 7.1 db create（创建实例）