chore(release): add read-only preflight manifest

2026-07-14 07:07:20 +08:00
parent 893bc78e9c
commit 84b51a0398
3 changed files with 78 additions and 0 deletions
@@ -0,0 +1,68 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+ROOT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
+cd "$ROOT_DIR"
+
+fail() {
+  echo "release-preflight: $*" >&2
+  exit 1
+}
+
+require_file() {
+  [[ -f "$1" ]] || fail "missing artifact: $1; build it before release"
+}
+
+sha256() {
+  if command -v shasum >/dev/null 2>&1; then
+    shasum -a 256 "$1" | awk '{print $1}'
+  else
+    sha256sum "$1" | awk '{print $1}'
+  fi
+}
+
+frontend_index="frontend/dist/index.html"
+mobile_index="mobile-uni/dist/build/h5/index.html"
+backend_jar="backend/ruoyi-admin/target/ruoyi-admin.jar"
+require_file "$frontend_index"
+require_file "$mobile_index"
+require_file "$backend_jar"
+
+frontend_asset="$(sed -nE 's/.*src="([^"]+\.js)".*/\1/p' "$frontend_index" | head -1)"
+mobile_asset="$(sed -nE 's/.*src="([^"]+\.js)".*/\1/p' "$mobile_index" | head -1)"
+[[ -n "$frontend_asset" ]] || fail "frontend index does not reference a JavaScript entry"
+[[ -n "$mobile_asset" ]] || fail "mobile H5 index does not reference a JavaScript entry"
+
+frontend_asset_path="frontend/dist/${frontend_asset#/}"
+mobile_asset_rel="${mobile_asset#/}"
+mobile_asset_rel="${mobile_asset_rel#h5/}"
+mobile_asset_path="mobile-uni/dist/build/h5/$mobile_asset_rel"
+require_file "$frontend_asset_path"
+require_file "$mobile_asset_path"
+grep -q '/h5/' "$mobile_index" || fail "mobile H5 index does not contain the /h5/ base path"
+
+changed_files="$(git status --porcelain)"
+[[ -z "$changed_files" ]] || fail "worktree has uncommitted changes; commit the release batch before publishing"
+
+echo "commit=$(git rev-parse HEAD)"
+echo "worktree=clean"
+echo "frontend_index_sha256=$(sha256 "$frontend_index")"
+echo "frontend_asset=$frontend_asset"
+echo "frontend_asset_sha256=$(sha256 "$frontend_asset_path")"
+echo "mobile_index_sha256=$(sha256 "$mobile_index")"
+echo "mobile_asset=$mobile_asset"
+echo "mobile_asset_sha256=$(sha256 "$mobile_asset_path")"
+echo "backend_jar_sha256=$(sha256 "$backend_jar")"
+
+if [[ -n "${RELEASE_REMOTE_URL:-}" ]]; then
+  remote="${RELEASE_REMOTE_URL%/}"
+  curl -fsS --max-time 15 "$remote/" >/dev/null || fail "remote root check failed: $remote/"
+  echo "remote_root=200 $remote/"
+  if curl -fsS --max-time 15 "$remote/prod-api/auth/tenant/list" >/dev/null; then
+    echo "remote_tenant_list=200 $remote/prod-api/auth/tenant/list"
+  else
+    fail "remote tenant list check failed: $remote/prod-api/auth/tenant/list"
+  fi
+fi
+
+echo "release-preflight: read-only checks passed"