forked from bai/curriculum-project-hub
hongjr03
ce767e9cab
FeishuRead(ADR-0003): feishuContextTool 从 stub 换成真实 lark im.v1.message.get(单条 trigger/reply/status_card)+ list(thread 回复); ADR-0003 chat 授权不变式不变(handler 已 gate)。 StatusCard: sendCard + buildRunStatusCard——完成/出错发 interactive card (status 文案 + model 选择器 + 取消按钮带 runId),替代纯文本。 Permission(ADR-0004, project-wise): triggerAgent 查 PermissionGrant 对 project 的 edit+ 能力(manage⊇edit 单调);sender open_id 当 principal (子类型学 OPEN,务实选择,permission.ts 标注);per-artifact OPEN; settings 组合规则 OPEN。无权限回 '无权限触发'。 Deploy: cph-hub.service systemd unit(ExecStartPre 跑 prisma migrate)+ install_service.sh(idempotent,seed env)+ deploy_platform.sh (rsync + npm ci + build + restart + healthz)。 client.ts 抽 createLarkClient/startFeishuListenerWithClient,tools 与 ws 共用同一 client。 tsc rc=0;prisma validate 通过;deploy 脚本 bash -n 通过。
48 lines
2.0 KiB
Bash
Executable File
48 lines
2.0 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
# Deploy the Hub to a host: rsync the repo, install deps, build, restart service.
|
|
#
|
|
# Configure these env vars (e.g. in CI secrets):
|
|
# PLATFORM_DEPLOY_HOST required
|
|
# PLATFORM_DEPLOY_SSH_KEY required (private key for the deploy user)
|
|
# PLATFORM_DEPLOY_USER optional, defaults to deploy
|
|
# PLATFORM_DEPLOY_PORT optional, defaults to 22
|
|
# PLATFORM_DEPLOY_BASE optional, defaults to /srv/curriculum-project-hub
|
|
#
|
|
# The target host must have Node.js, npm, rsync, PostgreSQL, systemd, and a
|
|
# writable $PLATFORM_DEPLOY_BASE. Use a dedicated `deploy` user that has
|
|
# passwordless sudo for:
|
|
# systemctl restart cph-hub.service
|
|
# systemctl is-active --quiet cph-hub.service
|
|
set -euo pipefail
|
|
|
|
HOST="${PLATFORM_DEPLOY_HOST:?PLATFORM_DEPLOY_HOST required}"
|
|
SSH_KEY="${PLATFORM_DEPLOY_SSH_KEY:?PLATFORM_DEPLOY_SSH_KEY required}"
|
|
DEPLOY_USER="${PLATFORM_DEPLOY_USER:-deploy}"
|
|
PORT="${PLATFORM_DEPLOY_PORT:-22}"
|
|
BASE="${PLATFORM_DEPLOY_BASE:-/srv/curriculum-project-hub}"
|
|
HUB_DIR="$BASE/hub"
|
|
SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
|
|
REPO_ROOT="$(cd "$SCRIPT_DIR/../.." && pwd)"
|
|
|
|
SSH_OPTS=(-i "$SSH_KEY" -p "$PORT" -o StrictHostKeyChecking=accept-new)
|
|
|
|
# 1. Rsync the hub/ directory (exclude node_modules/dist, they rebuild on host).
|
|
rsync -az --delete \
|
|
--exclude node_modules --exclude dist --exclude .env \
|
|
-e "ssh ${SSH_OPTS[*]}" \
|
|
"$REPO_ROOT/hub/" "$DEPLOY_USER@$HOST:$HUB_DIR/"
|
|
|
|
# 2. Install deps + build on the host.
|
|
ssh "${SSH_OPTS[@]}" "$DEPLOY_USER@$HOST" "cd '$HUB_DIR' && npm ci && npm run build"
|
|
|
|
# 3. Ensure the service is installed (idempotent), then restart.
|
|
ssh "${SSH_OPTS[@]}" "$DEPLOY_USER@$HOST" "
|
|
BASE='$BASE' HUB_DIR='$HUB_DIR' bash '$HUB_DIR/deploy/install_service.sh' || true
|
|
sudo systemctl restart cph-hub.service
|
|
sleep 2
|
|
sudo systemctl is-active --quiet cph-hub.service || { echo 'service failed to start'; exit 1; }
|
|
curl -sf http://127.0.0.1:8788/api/healthz || { echo 'healthz failed'; exit 1; }
|
|
"
|
|
|
|
echo "Deployed cph-hub to $HOST ($HUB_DIR)"
|