diff --git a/docs/BRD_PRODUCTION_MIGRATION_RUNBOOK.md b/docs/BRD_PRODUCTION_MIGRATION_RUNBOOK.md index d5d760a2..a6c1d515 100644 --- a/docs/BRD_PRODUCTION_MIGRATION_RUNBOOK.md +++ b/docs/BRD_PRODUCTION_MIGRATION_RUNBOOK.md @@ -16,7 +16,7 @@ ## 发布前置条件 1. 确认发布窗口、DB 备份和回滚负责人;迁移脚本包含 `ALTER TABLE`,不能在无备份状态执行。 -2. 先执行 `scripts/release-preflight.sh` 的只读检查;生产静态资源、后端包和当前提交必须一致。 +2. 先执行 `scripts/release-preflight.sh` 的只读检查;生产静态资源、后端包和当前提交必须一致。若要同时核对线上结构,追加 `RELEASE_VERIFY_REMOTE_SCHEMA=true`,该开关只读检查必需表,不执行迁移。 3. 确认迁移目标库、租户和字符集为 MySQL 8 / `utf8mb4`;脚本只允许在目标业务库执行。 4. 生产组织同步凭据、AI 供应商留存/费用口径和正式试点窗口仍未闭合时,不要把迁移完成宣称为 BRD 验收完成。 diff --git a/scripts/release-preflight.sh b/scripts/release-preflight.sh index ad925972..6a33926c 100755 --- a/scripts/release-preflight.sh +++ b/scripts/release-preflight.sh @@ -68,6 +68,9 @@ grep -q '/h5/' "$mobile_index" || fail "mobile H5 index does not contain the /h5 if [[ "${RELEASE_VERIFY_REMOTE_BACKEND:-false}" == "true" && "${RELEASE_VERIFY_REMOTE_MATCH:-false}" != "true" ]]; then fail "RELEASE_VERIFY_REMOTE_BACKEND=true requires RELEASE_VERIFY_REMOTE_MATCH=true" fi +if [[ "${RELEASE_VERIFY_REMOTE_SCHEMA:-false}" == "true" && "${RELEASE_VERIFY_REMOTE_MATCH:-false}" != "true" ]]; then + fail "RELEASE_VERIFY_REMOTE_SCHEMA=true requires RELEASE_VERIFY_REMOTE_MATCH=true" +fi head_epoch="$(git show -s --format=%ct HEAD)" @@ -103,6 +106,47 @@ require_remote_business_success() { echo "$label=200 $url" } +require_remote_schema() { + local remote_ssh="${RELEASE_REMOTE_SSH:-YCWY}" + local remote_db="${RELEASE_REMOTE_DB_NAME:-ry-vue}" + [[ "$remote_db" =~ ^[A-Za-z0-9_-]+$ ]] || fail "remote database name is invalid: $remote_db" + + local missing + missing="$(ssh -o BatchMode=yes -o ConnectTimeout=10 "$remote_ssh" bash -s -- "$remote_db" <<'REMOTE' +set -euo pipefail +db="$1" +mysql --batch --skip-column-names --connect-timeout=5 "$db" <<'SQL' +SELECT required.table_name +FROM ( + SELECT 'aihr_prompt_template' AS table_name + UNION ALL SELECT 'aihr_practice_scenario' + UNION ALL SELECT 'aihr_practice_rubric' + UNION ALL SELECT 'aihr_practice_rubric_dimension' + UNION ALL SELECT 'aihr_practice_audio' + UNION ALL SELECT 'aihr_practice_audio_upload' + UNION ALL SELECT 'aihr_practice_calibration' + UNION ALL SELECT 'aihr_knowledge_gap' + UNION ALL SELECT 'aihr_knowledge_answer_feedback' + UNION ALL SELECT 'aihr_candidate_material' + UNION ALL SELECT 'aihr_interview_result' + UNION ALL SELECT 'aihr_candidate_employee_link' + UNION ALL SELECT 'aihr_position_responsibility' + UNION ALL SELECT 'aihr_sop_applicability' + UNION ALL SELECT 'aihr_onboard_task' + UNION ALL SELECT 'aihr_qualification_gate' +) required +LEFT JOIN information_schema.tables actual + ON actual.table_schema = DATABASE() AND actual.table_name = required.table_name +WHERE actual.table_name IS NULL +ORDER BY required.table_name; +SQL +REMOTE + )" || fail "remote schema check failed: $remote_ssh:$remote_db" + + [[ -z "$missing" ]] || fail "remote schema missing required tables: $(printf '%s' "$missing" | tr '\n' ', ' | sed 's/, $//')" + echo "remote_schema=16/16 $remote_ssh:$remote_db" +} + changed_files="$(git status --porcelain)" [[ -z "$changed_files" ]] || fail "worktree has uncommitted changes; commit the release batch before publishing" @@ -124,6 +168,10 @@ if [[ -n "${RELEASE_REMOTE_URL:-}" ]]; then require_remote_business_success "remote_tenant_list" "$remote/prod-api/auth/tenant/list" require_remote_business_success "remote_mobile_home" "$remote/prod-api/api/aihr/mobile/home/user" + if [[ "${RELEASE_VERIFY_REMOTE_SCHEMA:-false}" == "true" ]]; then + require_remote_schema + fi + if [[ "${RELEASE_VERIFY_REMOTE_MATCH:-false}" == "true" ]]; then remote_frontend_asset="$(curl -fsS --max-time 15 "$remote/" | sed -nE 's/.*src="(\/assets\/[^" ]+\.js)".*/\1/p' | head -n 1)" remote_mobile_asset="$(curl -fsS --max-time 15 "$remote/h5/" | sed -nE 's/.*src="(\/h5\/assets\/[^" ]+\.js)".*/\1/p' | head -n 1)"