Danila KhodjaefandCursor
3934cedc62
Ensure Invoke-Npm returns correct exit code without breaking step logic. Co-authored-by: Cursor <cursoragent@cursor.com>
438 lines
14 KiB
PowerShell
438 lines
14 KiB
PowerShell
# Dev to prod release orchestrator.
|
|
# Usage (from repo root):
|
|
# npm run devtoprod:release
|
|
# npm run devtoprod:release -- -DryRun
|
|
# npm run devtoprod:release -- -Config infra/deploy/devtoprod.config.json
|
|
#
|
|
# Requires infra/deploy/devtoprod.config.json (copy from devtoprod.config.example.json).
|
|
|
|
param(
|
|
[string]$Config = (Join-Path $PSScriptRoot "..\deploy\devtoprod.config.json"),
|
|
[switch]$DryRun
|
|
)
|
|
|
|
$ErrorActionPreference = "Stop"
|
|
. (Join-Path $PSScriptRoot "lib\Deploy-CliResult.ps1")
|
|
|
|
$RepoRoot = (Resolve-Path (Join-Path $PSScriptRoot "..\..")).Path
|
|
Set-Location $RepoRoot
|
|
|
|
$BannerWidth = 64
|
|
$CompletedSteps = [System.Collections.Generic.List[string]]::new()
|
|
$FailedStep = $null
|
|
|
|
function Write-ReleaseBanner {
|
|
param([bool]$Success, [string]$FailedAt = '')
|
|
|
|
Write-Host ''
|
|
Write-Host ('=' * $BannerWidth)
|
|
if ($Success) {
|
|
Write-Host ' RELEASE SUCCEEDED - production promoted'
|
|
Write-Host (' Steps: ' + ($CompletedSteps -join ', '))
|
|
Write-Host ' Next: open https://gallery.mysuperlab.netcraze.pro/'
|
|
} else {
|
|
Write-Host " RELEASE FAILED at step: $FailedAt"
|
|
if ($CompletedSteps.Count -gt 0) {
|
|
Write-Host (' Completed: ' + ($CompletedSteps -join ', '))
|
|
}
|
|
Write-Host " Failed: $FailedAt"
|
|
}
|
|
Write-Host ('=' * $BannerWidth)
|
|
}
|
|
|
|
function Get-StepEnabled {
|
|
param([hashtable]$Steps, [string]$Name)
|
|
if ($Steps.ContainsKey($Name)) {
|
|
return [bool]$Steps[$Name]
|
|
}
|
|
return $false
|
|
}
|
|
|
|
function Invoke-Npm {
|
|
param([string]$Script, [string[]]$ExtraArgs = @())
|
|
$npmArgs = @('run', $Script)
|
|
if ($ExtraArgs.Count -gt 0) {
|
|
$npmArgs += '--'
|
|
$npmArgs += $ExtraArgs
|
|
}
|
|
# Important: callers assign the return value of this function to a variable
|
|
# (e.g. `$code = Invoke-Npm 'prod:build'`).
|
|
# If npm output is sent to the pipeline, PowerShell can accidentally capture
|
|
# stdout/stderr along with the function return value, breaking exit-code logic.
|
|
# So we stream npm output to $null and return only the exit code.
|
|
Write-Host ("Running npm: npm " + ($npmArgs -join ' ')) -ForegroundColor DarkGray
|
|
# Capture stdout/stderr so the function does not emit pipeline output.
|
|
$prevEap = $ErrorActionPreference
|
|
$ErrorActionPreference = 'Continue'
|
|
$npmOutput = & npm @npmArgs 2>&1
|
|
$ErrorActionPreference = $prevEap
|
|
|
|
foreach ($line in $npmOutput) {
|
|
Write-Host $line
|
|
}
|
|
return $LASTEXITCODE
|
|
}
|
|
|
|
function Invoke-Step {
|
|
param(
|
|
[string]$Name,
|
|
[scriptblock]$Action
|
|
)
|
|
|
|
if ($DryRun) {
|
|
Write-Host "[dry-run] Would run: $Name"
|
|
$script:CompletedSteps.Add($Name)
|
|
return $true
|
|
}
|
|
|
|
Write-Host ''
|
|
Write-Host "--- Step: $Name ---" -ForegroundColor Cyan
|
|
try {
|
|
$code = & $Action
|
|
if ($null -eq $code) {
|
|
$code = if ($null -ne $LASTEXITCODE) { $LASTEXITCODE } else { 0 }
|
|
}
|
|
if ($code -ne 0) {
|
|
$script:FailedStep = $Name
|
|
return $false
|
|
}
|
|
$script:CompletedSteps.Add($Name)
|
|
return $true
|
|
} catch {
|
|
Write-Host $_.Exception.Message -ForegroundColor Red
|
|
$script:FailedStep = $Name
|
|
return $false
|
|
}
|
|
}
|
|
|
|
function Get-ProfileSteps {
|
|
param([string]$Profile, [bool]$SchemaChanged)
|
|
|
|
$base = @{
|
|
validateBuild = $false
|
|
gitCommitPush = $false
|
|
thumbnails = $false
|
|
backupDev = $false
|
|
backupProd = $false
|
|
migrateProdSchema = $false
|
|
restoreProd = $false
|
|
syncImages = $false
|
|
dockerPublish = $false
|
|
truenasRestartPause = $false
|
|
verify = $false
|
|
}
|
|
|
|
switch ($Profile) {
|
|
'code' {
|
|
$base.validateBuild = $true
|
|
$base.gitCommitPush = $true
|
|
$base.dockerPublish = $true
|
|
$base.truenasRestartPause = $true
|
|
$base.verify = $true
|
|
}
|
|
'data' {
|
|
$base.validateBuild = $true
|
|
$base.thumbnails = $true
|
|
$base.backupDev = $true
|
|
$base.backupProd = $true
|
|
$base.restoreProd = $true
|
|
$base.syncImages = $true
|
|
$base.verify = $true
|
|
}
|
|
default {
|
|
$base.validateBuild = $true
|
|
$base.gitCommitPush = $true
|
|
$base.thumbnails = $true
|
|
$base.backupDev = $true
|
|
$base.backupProd = $true
|
|
$base.restoreProd = $true
|
|
$base.syncImages = $true
|
|
$base.dockerPublish = $true
|
|
$base.truenasRestartPause = $true
|
|
$base.verify = $true
|
|
if ($SchemaChanged) {
|
|
$base.migrateProdSchema = $true
|
|
}
|
|
}
|
|
}
|
|
|
|
return $base
|
|
}
|
|
|
|
function Merge-Steps {
|
|
param([hashtable]$ProfileSteps, [object]$ConfigSteps)
|
|
|
|
if ($null -eq $ConfigSteps) { return $ProfileSteps }
|
|
foreach ($key in $ConfigSteps.PSObject.Properties.Name) {
|
|
$ProfileSteps[$key] = [bool]$ConfigSteps.$key
|
|
}
|
|
return $ProfileSteps
|
|
}
|
|
|
|
function Get-LatestDevBackup {
|
|
$backupDir = Join-Path $RepoRoot 'db\DataBackup'
|
|
if (-not (Test-Path $backupDir)) {
|
|
throw "Backup directory not found: $backupDir"
|
|
}
|
|
$latest = Get-ChildItem -Path $backupDir -Filter 'gallery_dev_data_*.txt' |
|
|
Sort-Object LastWriteTime -Descending |
|
|
Select-Object -First 1
|
|
if (-not $latest) {
|
|
throw 'No gallery_dev_data_*.txt backup found in db/DataBackup/'
|
|
}
|
|
return $latest.FullName
|
|
}
|
|
|
|
function Test-BoundsJson {
|
|
param(
|
|
[string]$Url,
|
|
[switch]$Insecure,
|
|
[int]$MaxTimeSeconds = 10,
|
|
[int]$Retries = 3
|
|
)
|
|
|
|
for ($attempt = 1; $attempt -le $Retries; $attempt++) {
|
|
$curlArgs = @('-s', '-f', '--max-time', $MaxTimeSeconds)
|
|
if ($Insecure) { $curlArgs += '-k' }
|
|
$curlArgs += $Url
|
|
|
|
$body = & curl.exe @curlArgs 2>$null
|
|
if ($LASTEXITCODE -eq 0 -and $body) {
|
|
try {
|
|
$json = $body | ConvertFrom-Json
|
|
if ($null -ne $json.min_year -and $null -ne $json.max_year) {
|
|
return $true
|
|
}
|
|
} catch {
|
|
# Continue retries below.
|
|
}
|
|
}
|
|
|
|
if ($attempt -lt $Retries) {
|
|
Start-Sleep -Seconds 2
|
|
}
|
|
}
|
|
|
|
return $false
|
|
}
|
|
|
|
# --- Load config ---
|
|
if (-not (Test-Path $Config)) {
|
|
Write-Host "Config not found: $Config" -ForegroundColor Red
|
|
Write-Host 'Copy infra/deploy/devtoprod.config.example.json to infra/deploy/devtoprod.config.json and edit it.'
|
|
Write-ReleaseBanner -Success $false -FailedAt 'loadConfig'
|
|
exit 1
|
|
}
|
|
|
|
$raw = Get-Content -LiteralPath $Config -Raw -Encoding UTF8
|
|
$cfg = $raw | ConvertFrom-Json
|
|
|
|
$profile = if ($cfg.profile) { $cfg.profile } else { 'full' }
|
|
$schemaChanged = [bool]$cfg.schemaChanged
|
|
$steps = Merge-Steps (Get-ProfileSteps -Profile $profile -SchemaChanged $schemaChanged) $cfg.steps
|
|
|
|
if ($cfg.autoConfirm) {
|
|
$env:CONFIRM_PROD = '1'
|
|
}
|
|
|
|
if ($cfg.smb.user) { $env:SMB_USER = $cfg.smb.user }
|
|
if ($cfg.smb.password) { $env:SMB_PASSWORD = $cfg.smb.password }
|
|
|
|
$smbHost = if ($cfg.smb.host) { $cfg.smb.host } else { '192.168.10.122' }
|
|
$smbShare = if ($cfg.smb.share) { $cfg.smb.share } else { 'Gallery' }
|
|
$imageDest = "\\$smbHost\$smbShare\data\images"
|
|
|
|
$script:backupFile = ''
|
|
if ($cfg.backupFile -and $cfg.backupFile.Trim()) {
|
|
$script:backupFile = (Resolve-Path (Join-Path $RepoRoot $cfg.backupFile) -ErrorAction Stop).Path
|
|
}
|
|
|
|
Write-Host "Gallery dev -> prod release"
|
|
Write-Host "Config: $Config"
|
|
Write-Host "Profile: $profile"
|
|
if ($DryRun) { Write-Host 'Mode: DRY RUN (no changes)' -ForegroundColor Yellow }
|
|
|
|
$enabled = @($steps.Keys | Where-Object { $steps[$_] } | Sort-Object)
|
|
Write-Host ('Steps: ' + ($enabled -join ', '))
|
|
|
|
# --- Steps ---
|
|
if (Get-StepEnabled $steps 'validateBuild') {
|
|
$ok = Invoke-Step 'validateBuild' {
|
|
$code = Invoke-Npm 'prod:build'
|
|
Write-Host ("prod:build exit code: " + $code)
|
|
if ($code -ne 0) { return $code }
|
|
|
|
# Always prefer the dev host on LAN (192.168.10.70) because the HTTPS dev domain
|
|
# can return transient 504 HTML pages during load.
|
|
$devCandidates = @()
|
|
if ($cfg.verify.devLanUrl) { $devCandidates += $cfg.verify.devLanUrl }
|
|
$devCandidates += 'http://192.168.10.70:5173/api/bounds'
|
|
if ($cfg.verify.lanUrl) { $devCandidates += $cfg.verify.lanUrl }
|
|
if ($cfg.verify.devUrl) { $devCandidates += $cfg.verify.devUrl }
|
|
$devCandidates = $devCandidates | Select-Object -Unique
|
|
|
|
$devOk = $false
|
|
foreach ($u in $devCandidates) {
|
|
Write-Host "Checking dev /api/bounds: $u"
|
|
$useInsecure = $u.StartsWith('https://', [System.StringComparison]::OrdinalIgnoreCase)
|
|
if (Test-BoundsJson -Url $u -Insecure:$useInsecure -MaxTimeSeconds 10 -Retries 3) {
|
|
Write-Host "Dev API OK: $u"
|
|
$devOk = $true
|
|
break
|
|
}
|
|
Write-Host "Dev API check failed for: $u" -ForegroundColor DarkYellow
|
|
}
|
|
|
|
if (-not $devOk) {
|
|
Write-Host "Dev API check failed on all URLs." -ForegroundColor Red
|
|
return 1
|
|
}
|
|
return 0
|
|
}
|
|
if (-not $ok) { Write-ReleaseBanner -Success $false -FailedAt $FailedStep; exit 1 }
|
|
}
|
|
|
|
if (Get-StepEnabled $steps 'gitCommitPush') {
|
|
$ok = Invoke-Step 'gitCommitPush' {
|
|
$branch = if ($cfg.git.branch) { $cfg.git.branch } else { 'main' }
|
|
$message = if ($cfg.git.message) { $cfg.git.message } else { 'Release: deploy' }
|
|
$stageAll = if ($null -ne $cfg.git.stageAll) { [bool]$cfg.git.stageAll } else { $true }
|
|
|
|
if ($stageAll) {
|
|
git add -A
|
|
if ($LASTEXITCODE -ne 0) { return $LASTEXITCODE }
|
|
}
|
|
|
|
$status = git status --porcelain
|
|
if (-not $status) {
|
|
Write-Host 'Git: working tree clean, skipping commit.'
|
|
} else {
|
|
git commit -m $message
|
|
if ($LASTEXITCODE -ne 0) { return $LASTEXITCODE }
|
|
}
|
|
|
|
git push origin $branch
|
|
if ($LASTEXITCODE -ne 0) { return $LASTEXITCODE }
|
|
return 0
|
|
}
|
|
if (-not $ok) { Write-ReleaseBanner -Success $false -FailedAt $FailedStep; exit 1 }
|
|
}
|
|
|
|
if (Get-StepEnabled $steps 'thumbnails') {
|
|
$ok = Invoke-Step 'thumbnails' {
|
|
$code = Invoke-Npm 'devtoprod:thumbnails'
|
|
return $code
|
|
}
|
|
if (-not $ok) { Write-ReleaseBanner -Success $false -FailedAt $FailedStep; exit 1 }
|
|
}
|
|
|
|
if (Get-StepEnabled $steps 'backupDev') {
|
|
$ok = Invoke-Step 'backupDev' {
|
|
$code = Invoke-Npm 'dev:db:backup'
|
|
if ($code -ne 0) { return $code }
|
|
if (-not $script:backupFile) {
|
|
$script:backupFile = Get-LatestDevBackup
|
|
Write-Host "Using latest dev backup: $($script:backupFile)"
|
|
}
|
|
return 0
|
|
}
|
|
if (-not $ok) { Write-ReleaseBanner -Success $false -FailedAt $FailedStep; exit 1 }
|
|
}
|
|
|
|
if (Get-StepEnabled $steps 'backupProd') {
|
|
$ok = Invoke-Step 'backupProd' {
|
|
$code = Invoke-Npm 'prod:db:backup'
|
|
return $code
|
|
}
|
|
if (-not $ok) { Write-ReleaseBanner -Success $false -FailedAt $FailedStep; exit 1 }
|
|
}
|
|
|
|
if (Get-StepEnabled $steps 'migrateProdSchema') {
|
|
$ok = Invoke-Step 'migrateProdSchema' {
|
|
$env:DB_NAME = 'gallery_prod'
|
|
try {
|
|
$code = Invoke-Npm 'dev:migrate'
|
|
return $code
|
|
} finally {
|
|
Remove-Item Env:\DB_NAME -ErrorAction SilentlyContinue
|
|
}
|
|
}
|
|
if (-not $ok) { Write-ReleaseBanner -Success $false -FailedAt $FailedStep; exit 1 }
|
|
}
|
|
|
|
if (Get-StepEnabled $steps 'restoreProd') {
|
|
$ok = Invoke-Step 'restoreProd' {
|
|
if (-not $script:backupFile) {
|
|
if ($cfg.backupFile -and $cfg.backupFile.Trim()) {
|
|
$script:backupFile = (Resolve-Path (Join-Path $RepoRoot $cfg.backupFile)).Path
|
|
} else {
|
|
$script:backupFile = Get-LatestDevBackup
|
|
}
|
|
}
|
|
$rel = $script:backupFile.Replace($RepoRoot, '').TrimStart('\', '/').Replace('\', '/')
|
|
Write-Host "Restore file: $rel"
|
|
$code = Invoke-Npm 'devtoprod:db:restore' @('--file', $rel)
|
|
return $code
|
|
}
|
|
if (-not $ok) { Write-ReleaseBanner -Success $false -FailedAt $FailedStep; exit 1 }
|
|
}
|
|
|
|
if (Get-StepEnabled $steps 'syncImages') {
|
|
$ok = Invoke-Step 'syncImages' {
|
|
$syncScript = Join-Path $PSScriptRoot 'sync-images-to-prod.ps1'
|
|
if ($cfg.autoConfirm) {
|
|
& $syncScript -Dest $imageDest -SkipConfirm
|
|
} else {
|
|
& $syncScript -Dest $imageDest
|
|
}
|
|
return $LASTEXITCODE
|
|
}
|
|
if (-not $ok) { Write-ReleaseBanner -Success $false -FailedAt $FailedStep; exit 1 }
|
|
}
|
|
|
|
if (Get-StepEnabled $steps 'dockerPublish') {
|
|
$ok = Invoke-Step 'dockerPublish' {
|
|
$code = Invoke-Npm 'prod:docker:publish'
|
|
return $code
|
|
}
|
|
if (-not $ok) { Write-ReleaseBanner -Success $false -FailedAt $FailedStep; exit 1 }
|
|
}
|
|
|
|
if (Get-StepEnabled $steps 'truenasRestartPause') {
|
|
if ($DryRun) {
|
|
Write-Host '[dry-run] Would pause for TrueNAS gallery-web restart'
|
|
$CompletedSteps.Add('truenasRestartPause')
|
|
} else {
|
|
Write-Host ''
|
|
Write-Host '--- Manual: restart gallery-web on TrueNAS ---' -ForegroundColor Yellow
|
|
Write-Host '1. TrueNAS Web UI -> Apps -> gallery-web -> Restart'
|
|
Write-Host '2. Wait until status is Running'
|
|
Read-Host 'Press Enter after restarting gallery-web on TrueNAS'
|
|
$CompletedSteps.Add('truenasRestartPause')
|
|
}
|
|
}
|
|
|
|
if (Get-StepEnabled $steps 'verify') {
|
|
$ok = Invoke-Step 'verify' {
|
|
$lanUrl = if ($cfg.verify.lanUrl) { $cfg.verify.lanUrl } else { 'http://192.168.10.122:5173/api/bounds' }
|
|
$publicUrl = if ($cfg.verify.publicUrl) { $cfg.verify.publicUrl } else { 'https://gallery.mysuperlab.netcraze.pro/api/bounds' }
|
|
|
|
if (-not (Test-BoundsJson -Url $lanUrl)) {
|
|
Write-Host "LAN verify failed: $lanUrl" -ForegroundColor Red
|
|
return 1
|
|
}
|
|
Write-Host "LAN API OK: $lanUrl"
|
|
|
|
if (-not (Test-BoundsJson -Url $publicUrl -Insecure)) {
|
|
Write-Host "Public verify failed: $publicUrl" -ForegroundColor Red
|
|
return 1
|
|
}
|
|
Write-Host "Public API OK: $publicUrl"
|
|
return 0
|
|
}
|
|
if (-not $ok) { Write-ReleaseBanner -Success $false -FailedAt $FailedStep; exit 1 }
|
|
}
|
|
|
|
Write-ReleaseBanner -Success $true
|
|
exit 0
|