Files

147 lines
6.8 KiB
Bash
Executable File

#!/usr/bin/env bash
set -Eeuo pipefail
ROOT="${ROOT:-/var/www/dhv2.korexlabs.com}"
ZIP="${ZIP:-$ROOT/DH_V2_FASE_D5_6_SOURCE.zip}"
STAMP="$(date +%Y%m%d_%H%M%S)"
STAGE="/root/dhv2-d56-stage-$STAMP"
BACKUP_ROOT="/root/DH_V2_BACKUPS"
PRE_BACKUP="$BACKUP_ROOT/D5_6_PRE_$STAMP"
POST_BACKUP="$BACKUP_ROOT/D5_6_OK_$STAMP"
CLOSURE_BACKUP="$BACKUP_ROOT/FASE_D_CERRADA_$STAMP"
MIGRATION_LOG="/tmp/dhv2-d56-migration-$STAMP.log"
TEST_LOG="/tmp/dhv2-d56-tests-$STAMP.log"
HEALTH_FILE="/tmp/dhv2-d56-health-$STAMP.json"
MIN_FREE_KB=$((4 * 1024 * 1024))
cleanup() {
rm -rf "$STAGE"
rm -f "$MIGRATION_LOG" "$TEST_LOG" "$HEALTH_FILE"
docker image rm dhv2-api:d56-test dhv2-web:d56-test >/dev/null 2>&1 || true
}
trap cleanup EXIT
trap 'echo; echo "ERROR D5.6 en línea $LINENO: $BASH_COMMAND"' ERR
cd "$ROOT"
test -f "$ZIP"
CURRENT_API="$(node -p "require('./api-v3/package.json').version")"
CURRENT_WEB="$(node -p "require('./web-v2/package.json').version")"
[[ "$CURRENT_API" == "0.19.5-2" ]]
[[ "$CURRENT_WEB" == "0.19.5-2" ]]
echo "[1/10] Preflight y staging"
FREE_KB="$(df -Pk "$ROOT" | awk 'NR==2 {print $4}')"
if [[ ! "$FREE_KB" =~ ^[0-9]+$ ]] || (( FREE_KB < MIN_FREE_KB )); then
echo "ERROR: espacio libre insuficiente. Libre: $(( FREE_KB / 1024 )) MB"
exit 1
fi
[[ "$(docker inspect dhv2-db --format '{{.State.Health.Status}}' 2>/dev/null || true)" == "healthy" ]]
docker compose exec -T db sh -lc 'pg_isready -U "$POSTGRES_USER" -d "$POSTGRES_DB"'
mkdir -p "$STAGE"
unzip -q "$ZIP" -d "$STAGE"
[[ "$(node -p "require('$STAGE/api-v3/package.json').version")" == "0.19.6" ]]
[[ "$(node -p "require('$STAGE/web-v2/package.json').version")" == "0.19.6" ]]
grep -Fq "API_PHASE = 'D5.6'" "$STAGE/api-v3/src/version.ts"
grep -Fq "APP_PHASE = 'Fase D5.6 · Cierre integral de Fase D'" "$STAGE/web-v2/src/config/version.ts"
if find "$STAGE/api-v3/src/database/migrations" -maxdepth 1 -type f -iname '*d5-6*' | grep -q .; then
echo "ERROR: D5.6 no debe agregar una migración"
exit 1
fi
echo "[2/10] Compilando API en staging"
docker build --target builder -t dhv2-api:d56-test "$STAGE/api-v3"
echo "[3/10] Ejecutando suite integral en staging"
docker run --rm \
-v "$STAGE/api-v3/test:/app/test:ro" \
-v "$STAGE/api-v3/tsconfig.test.json:/app/tsconfig.test.json:ro" \
dhv2-api:d56-test npm test 2>&1 | tee "$TEST_LOG"
grep -Eq 'tests[[:space:]]+260' "$TEST_LOG"
grep -Eq 'pass[[:space:]]+260' "$TEST_LOG"
grep -Eq 'fail[[:space:]]+0' "$TEST_LOG"
echo "[4/10] Compilando web y auditando terminología"
docker build -t dhv2-web:d56-test "$STAGE/web-v2"
grep -Fq 'ARCHIVOS DEL INVENTARIO' "$STAGE/web-v2/src/features/assets/AssetMediaPanel.tsx"
grep -Fq 'INVENTARIO DEL ACTA' "$STAGE/web-v2/src/pages/InspectionActEditorPage.tsx"
if grep -RnhE --include='*.tsx' 'ARCHIVOS DEL ACTIVO|ACTIVOS DEL ACTA' "$STAGE/web-v2/src"; then exit 1; fi
grep -Fq 'debe iniciar la visita desde la APK' "$STAGE/web-v2/src/pages/InspectionVisitEditorPage.tsx"
echo "[5/10] Backup PRE D5.6"
mkdir -p "$PRE_BACKUP"
chmod 700 "$PRE_BACKUP"
docker compose exec -T db sh -lc 'pg_dump -U "$POSTGRES_USER" -d "$POSTGRES_DB" -Fc' > "$PRE_BACKUP/database.dump"
tar -czf "$PRE_BACKUP/source.tar.gz" \
--exclude='api-v3/node_modules' --exclude='api-v3/dist' \
--exclude='web-v2/node_modules' --exclude='web-v2/dist' \
api-v3 web-v2 scripts docs docker-compose.yml .env.example .gitignore README.md
if [[ -f .env ]]; then cp -a .env "$PRE_BACKUP/.env"; chmod 600 "$PRE_BACKUP/.env"; fi
STRONG_BACKUP="$(find "$BACKUP_ROOT" -maxdepth 1 -type d -name 'INVENTARIO_A_REVISAR_*' -printf '%T@ %p\n' | sort -nr | head -n1 | cut -d' ' -f2-)"
printf 'Backup fuerte conceptual previo: %s\nPalabra clave: INVENTARIO A REVISAR\n' "$STRONG_BACKUP" > "$PRE_BACKUP/INVENTARIO_A_REVISAR_REFERENCE.txt"
(
cd "$PRE_BACKUP"
sha256sum database.dump source.tar.gz INVENTARIO_A_REVISAR_REFERENCE.txt > SHA256SUMS.txt
[[ ! -f .env ]] || sha256sum .env >> SHA256SUMS.txt
sha256sum -c SHA256SUMS.txt
)
echo "[6/10] Instalando source D5.6"
unzip -oq "$ZIP" -d "$ROOT"
chmod +x "$ROOT/scripts/deploy-phase-d5-6.sh" "$ROOT/scripts/phase-d5-6-acceptance.sh"
echo "API source: $(node -p "require('./api-v3/package.json').version")"
echo "WEB source: $(node -p "require('./web-v2/package.json').version")"
echo "[7/10] Construyendo imágenes finales"
docker compose build api migrate web
echo "[8/10] Verificando que D5.6 no requiere migración"
docker compose --profile tools run --rm migrate npm run migration:show 2>&1 | tee "$MIGRATION_LOG"
grep -Fq 'Pending migrations: no' "$MIGRATION_LOG"
echo "[9/10] Recreando API/web y aceptación integral"
docker compose up -d --force-recreate api web
for i in $(seq 1 40); do
if curl -fsS http://127.0.0.1:3101/api/v3/health >"$HEALTH_FILE" 2>/dev/null; then break; fi
if [[ "$i" == "40" ]]; then docker compose logs --tail=200 api; exit 1; fi
sleep 2
done
cat "$HEALTH_FILE"; echo
grep -Fq '"version":"0.19.6"' "$HEALTH_FILE"
grep -Fq '"phase":"D5.6"' "$HEALTH_FILE"
grep -Fq '"database":"ok"' "$HEALTH_FILE"
bash "$ROOT/scripts/phase-d5-6-acceptance.sh"
echo "[10/10] Backup POST y cierre formal de Fase D"
mkdir -p "$POST_BACKUP" "$CLOSURE_BACKUP"
chmod 700 "$POST_BACKUP" "$CLOSURE_BACKUP"
docker compose exec -T db sh -lc 'pg_dump -U "$POSTGRES_USER" -d "$POSTGRES_DB" -Fc' > "$POST_BACKUP/database.dump"
tar -czf "$POST_BACKUP/source.tar.gz" \
--exclude='api-v3/node_modules' --exclude='api-v3/dist' \
--exclude='web-v2/node_modules' --exclude='web-v2/dist' \
api-v3 web-v2 scripts docs docker-compose.yml .env.example .gitignore README.md
docker compose ps -a > "$POST_BACKUP/docker-status.txt"
cp -a "$ZIP" "$POST_BACKUP/"
if [[ -f .env ]]; then cp -a .env "$POST_BACKUP/.env"; chmod 600 "$POST_BACKUP/.env"; fi
printf 'PRE D5.6: %s\nINVENTARIO A REVISAR: %s\nFASE D: CERRADA\n' "$PRE_BACKUP" "$STRONG_BACKUP" > "$POST_BACKUP/BACKUP_REFERENCES.txt"
printf 'FASE D CERRADA\nVersión API/WEB: 0.19.6\nBackup fuente: %s\nFecha: %s\n' "$POST_BACKUP" "$(date -Is)" > "$POST_BACKUP/FASE_D_CERRADA.txt"
(
cd "$POST_BACKUP"
sha256sum database.dump source.tar.gz "$(basename "$ZIP")" BACKUP_REFERENCES.txt FASE_D_CERRADA.txt > SHA256SUMS.txt
[[ ! -f .env ]] || sha256sum .env >> SHA256SUMS.txt
sha256sum -c SHA256SUMS.txt
)
# Hard links preserve a second strong closure label without duplicating large files.
ln "$POST_BACKUP/database.dump" "$CLOSURE_BACKUP/database.dump"
ln "$POST_BACKUP/source.tar.gz" "$CLOSURE_BACKUP/source.tar.gz"
ln "$POST_BACKUP/$(basename "$ZIP")" "$CLOSURE_BACKUP/$(basename "$ZIP")"
cp "$POST_BACKUP/SHA256SUMS.txt" "$CLOSURE_BACKUP/SHA256SUMS.txt"
printf 'FASE D CERRADA\nBackup canónico: %s\nVersión: 0.19.6\n' "$POST_BACKUP" > "$CLOSURE_BACKUP/BACKUP_OK.txt"
echo
echo "ACEPTACIÓN INTEGRAL DE FASE D: OK"
echo "FASE D: CERRADA"
echo "D5.6 desplegada correctamente"
echo "Backup PRE: $PRE_BACKUP"
echo "Backup POST: $POST_BACKUP"
echo "Backup fuerte FASE D CERRADA: $CLOSURE_BACKUP"