75f0a57821
Two fixes to the lean-site build. The closure resolution moves out of an inline heredoc into scripts/resolve_plugin_closure.py. The Windows builder needs the same answer, and a PowerShell reimplementation would have been a second copy of the rules, free to drift and produce a bundle whose plugin set did not match its profile. The backend staging step copied all of deploy/ into the output tree. The Windows installer stages its bundle at deploy/windows/installer/bundle, so that copy recursed into its own destination and cp aborted with 'cannot copy a directory into itself' - the documented build could not complete. Only deploy/windows/web.config is read at install time, so only that is staged; the rest of deploy/ is installer source and does not belong on an application server.
99 lines
4.8 KiB
Bash
Executable File
99 lines
4.8 KiB
Bash
Executable File
#!/bin/bash
|
|
# Build a LEAN per-site artifact from a site profile (ADR-013 Phase 5).
|
|
#
|
|
# A site declares its plugins in a profile (deploy/site-profile.example.json).
|
|
# This resolves the hard-dependency closure, builds the frontend carrying only
|
|
# those plugins (via SITE_PLUGINS -> scripts/stage-frontend.mjs), and stages a
|
|
# backend tree containing core + only the chosen plugin dirs. A plugin a site
|
|
# did not choose ends up in neither the bundle nor the image.
|
|
#
|
|
# Usage: scripts/build-site.sh <site-profile.json> [output-dir]
|
|
set -euo pipefail
|
|
|
|
REPO="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
|
|
PROFILE="${1:?usage: build-site.sh <site-profile.json> [output-dir]}"
|
|
OUT="${2:-$REPO/build/site}"
|
|
|
|
[ -f "$PROFILE" ] || { echo "profile not found: $PROFILE"; exit 1; }
|
|
|
|
# Resolve the chosen plugins + their hard-dependency closure from the manifests.
|
|
# Shared with the Windows builder (deploy/windows/installer/build-installer.ps1)
|
|
# so both stage the same set from the same profile.
|
|
CLOSURE=$(python3 "$REPO/scripts/resolve_plugin_closure.py" "$PROFILE" "$REPO")
|
|
|
|
echo "Site profile: $PROFILE"
|
|
echo "Plugin closure: $CLOSURE"
|
|
|
|
# Frontend: TWO builds, because Vite compiles the mount path into the bundle and
|
|
# it therefore cannot be chosen at install time from a single build - the page
|
|
# would load and then request its assets from the wrong path.
|
|
# dist -> own IIS site (method A, the default)
|
|
# dist-subpath -> IIS Application under an existing site (method B)
|
|
# SUBPATH_ALIAS is fixed per bundle so the three places that must agree - the IIS
|
|
# application alias, MOUNT_PATH and this base - cannot drift apart.
|
|
SUBPATH_ALIAS="${SUBPATH_ALIAS:-shopdb}"
|
|
SUBPATH_TMP="$(mktemp -d)"
|
|
trap 'rm -rf "$SUBPATH_TMP"' EXIT
|
|
|
|
echo "==> Building frontend for /$SUBPATH_ALIAS/ (SITE_PLUGINS=$CLOSURE) ..."
|
|
( cd "$REPO/frontend" && SITE_PLUGINS="$CLOSURE" VITE_BASE_PATH="/$SUBPATH_ALIAS/" npm run build --silent )
|
|
cp -r "$REPO/frontend/dist" "$SUBPATH_TMP/dist-subpath"
|
|
echo "$SUBPATH_ALIAS" > "$SUBPATH_TMP/dist-subpath/.alias"
|
|
|
|
# Root build LAST, so frontend/dist is left in the state a developer expects.
|
|
echo "==> Building frontend for / (SITE_PLUGINS=$CLOSURE) ..."
|
|
( cd "$REPO/frontend" && SITE_PLUGINS="$CLOSURE" npm run build --silent )
|
|
|
|
# Backend: stage core + only the chosen plugin dirs.
|
|
echo "==> Staging backend into $OUT ..."
|
|
rm -rf "$OUT"
|
|
mkdir -p "$OUT/plugins"
|
|
# cp (not rsync) so a minimal runner/deploy box without rsync can stage;
|
|
# bytecode is pruned afterwards to match the old --exclude filters.
|
|
cp -a "$REPO/shopdb" "$OUT/"
|
|
for name in ${CLOSURE//,/ }; do
|
|
cp -a "$REPO/plugins/$name" "$OUT/plugins/"
|
|
done
|
|
cp -r "$REPO/frontend/dist" "$OUT/frontend-dist"
|
|
# Staged after the rm -rf above, or it would be deleted with everything else.
|
|
cp -r "$SUBPATH_TMP/dist-subpath" "$OUT/frontend-dist-subpath"
|
|
|
|
# Runtime files a deployable tree needs beyond the Python packages. Without these
|
|
# the staged tree can be imported but not actually run or migrated, so the
|
|
# Windows installer (which consumes this output as its app\ payload) had to
|
|
# assemble them separately - and could assemble a tree whose plugin set did not
|
|
# match the profile it was built from.
|
|
cp "$REPO/wsgi.py" "$REPO/requirements.txt" "$OUT/"
|
|
cp -a "$REPO/migrations" "$OUT/"
|
|
# ONLY web.config, not all of deploy/. Two reasons, and the first is fatal:
|
|
# the Windows builder stages its output at deploy/windows/installer/bundle, so
|
|
# copying deploy/ wholesale recursed into the destination and cp aborted with
|
|
# "cannot copy a directory into itself" - the documented build could not finish.
|
|
# Second, the rest of deploy/ is installer SOURCE (scripts, artwork, MSIs); none
|
|
# of it belongs in an application tree that gets copied onto a server.
|
|
# shopdb-install.ps1 reads it from exactly this path.
|
|
if [ -f "$REPO/deploy/windows/web.config" ]; then
|
|
mkdir -p "$OUT/deploy/windows"
|
|
cp -a "$REPO/deploy/windows/web.config" "$OUT/deploy/windows/"
|
|
fi
|
|
|
|
# Stage the profile INTO the tree. This is what makes the set self-describing:
|
|
# `flask plugin apply-profile` at provisioning time reads the same profile the
|
|
# tree was staged from, so the installed plugin set and the shipped plugin code
|
|
# cannot drift. It is also what `flask plugin prune-schema` effectively keys off
|
|
# (via what ends up installed), so a mismatch here would drop the wrong tables.
|
|
cp "$PROFILE" "$OUT/site-profile.json"
|
|
|
|
find "$OUT" -type d -name '__pycache__' -prune -exec rm -rf {} +
|
|
find "$OUT" -type f -name '*.pyc' -delete
|
|
|
|
echo ""
|
|
echo "Lean site staged at: $OUT"
|
|
echo " backend plugins: $(ls "$OUT/plugins" | tr '\n' ' ')"
|
|
echo " (a plugin not listed is absent from both the backend tree and the bundle)"
|
|
echo " profile staged as: $OUT/site-profile.json"
|
|
echo ""
|
|
echo "At provisioning, after 'flask db upgrade' and 'flask plugin upgrade-all':"
|
|
echo " flask plugin apply-profile site-profile.json"
|
|
echo " flask plugin prune-schema --yes --force # ADR-014; BOTH flags required"
|