-
This commit is contained in:
Kerod-Fresenbet-Gebremedhin2660
commit
25f1a76803
111
.cursor/rules/use-bun-instead-of-node-vite-npm-pnpm.mdc
Normal file
111
.cursor/rules/use-bun-instead-of-node-vite-npm-pnpm.mdc
Normal file
|
|
@ -0,0 +1,111 @@
|
||||||
|
---
|
||||||
|
description: Use Bun instead of Node.js, npm, pnpm, or vite.
|
||||||
|
globs: "*.ts, *.tsx, *.html, *.css, *.js, *.jsx, package.json"
|
||||||
|
alwaysApply: false
|
||||||
|
---
|
||||||
|
|
||||||
|
Default to using Bun instead of Node.js.
|
||||||
|
|
||||||
|
- Use `bun <file>` instead of `node <file>` or `ts-node <file>`
|
||||||
|
- Use `bun test` instead of `jest` or `vitest`
|
||||||
|
- Use `bun build <file.html|file.ts|file.css>` instead of `webpack` or `esbuild`
|
||||||
|
- Use `bun install` instead of `npm install` or `yarn install` or `pnpm install`
|
||||||
|
- Use `bun run <script>` instead of `npm run <script>` or `yarn run <script>` or `pnpm run <script>`
|
||||||
|
- Bun automatically loads .env, so don't use dotenv.
|
||||||
|
|
||||||
|
## APIs
|
||||||
|
|
||||||
|
- `Bun.serve()` supports WebSockets, HTTPS, and routes. Don't use `express`.
|
||||||
|
- `bun:sqlite` for SQLite. Don't use `better-sqlite3`.
|
||||||
|
- `Bun.redis` for Redis. Don't use `ioredis`.
|
||||||
|
- `Bun.sql` for Postgres. Don't use `pg` or `postgres.js`.
|
||||||
|
- `WebSocket` is built-in. Don't use `ws`.
|
||||||
|
- Prefer `Bun.file` over `node:fs`'s readFile/writeFile
|
||||||
|
- Bun.$`ls` instead of execa.
|
||||||
|
|
||||||
|
## Testing
|
||||||
|
|
||||||
|
Use `bun test` to run tests.
|
||||||
|
|
||||||
|
```ts#index.test.ts
|
||||||
|
import { test, expect } from "bun:test";
|
||||||
|
|
||||||
|
test("hello world", () => {
|
||||||
|
expect(1).toBe(1);
|
||||||
|
});
|
||||||
|
```
|
||||||
|
|
||||||
|
## Frontend
|
||||||
|
|
||||||
|
Use HTML imports with `Bun.serve()`. Don't use `vite`. HTML imports fully support React, CSS, Tailwind.
|
||||||
|
|
||||||
|
Server:
|
||||||
|
|
||||||
|
```ts#index.ts
|
||||||
|
import index from "./index.html"
|
||||||
|
|
||||||
|
Bun.serve({
|
||||||
|
routes: {
|
||||||
|
"/": index,
|
||||||
|
"/api/users/:id": {
|
||||||
|
GET: (req) => {
|
||||||
|
return new Response(JSON.stringify({ id: req.params.id }));
|
||||||
|
},
|
||||||
|
},
|
||||||
|
},
|
||||||
|
// optional websocket support
|
||||||
|
websocket: {
|
||||||
|
open: (ws) => {
|
||||||
|
ws.send("Hello, world!");
|
||||||
|
},
|
||||||
|
message: (ws, message) => {
|
||||||
|
ws.send(message);
|
||||||
|
},
|
||||||
|
close: (ws) => {
|
||||||
|
// handle close
|
||||||
|
}
|
||||||
|
},
|
||||||
|
development: {
|
||||||
|
hmr: true,
|
||||||
|
console: true,
|
||||||
|
}
|
||||||
|
})
|
||||||
|
```
|
||||||
|
|
||||||
|
HTML files can import .tsx, .jsx or .js files directly and Bun's bundler will transpile & bundle automatically. `<link>` tags can point to stylesheets and Bun's CSS bundler will bundle.
|
||||||
|
|
||||||
|
```html#index.html
|
||||||
|
<html>
|
||||||
|
<body>
|
||||||
|
<h1>Hello, world!</h1>
|
||||||
|
<script type="module" src="./frontend.tsx"></script>
|
||||||
|
</body>
|
||||||
|
</html>
|
||||||
|
```
|
||||||
|
|
||||||
|
With the following `frontend.tsx`:
|
||||||
|
|
||||||
|
```tsx#frontend.tsx
|
||||||
|
import React from "react";
|
||||||
|
|
||||||
|
// import .css files directly and it works
|
||||||
|
import './index.css';
|
||||||
|
|
||||||
|
import { createRoot } from "react-dom/client";
|
||||||
|
|
||||||
|
const root = createRoot(document.body);
|
||||||
|
|
||||||
|
export default function Frontend() {
|
||||||
|
return <h1>Hello, world!</h1>;
|
||||||
|
}
|
||||||
|
|
||||||
|
root.render(<Frontend />);
|
||||||
|
```
|
||||||
|
|
||||||
|
Then, run index.ts
|
||||||
|
|
||||||
|
```sh
|
||||||
|
bun --hot ./index.ts
|
||||||
|
```
|
||||||
|
|
||||||
|
For more information, read the Bun API docs in `node_modules/bun-types/docs/**.md`.
|
||||||
34
.gitignore
vendored
Normal file
34
.gitignore
vendored
Normal file
|
|
@ -0,0 +1,34 @@
|
||||||
|
# dependencies (bun install)
|
||||||
|
node_modules
|
||||||
|
|
||||||
|
# output
|
||||||
|
out
|
||||||
|
dist
|
||||||
|
*.tgz
|
||||||
|
|
||||||
|
# code coverage
|
||||||
|
coverage
|
||||||
|
*.lcov
|
||||||
|
|
||||||
|
# logs
|
||||||
|
logs
|
||||||
|
_.log
|
||||||
|
report.[0-9]_.[0-9]_.[0-9]_.[0-9]_.json
|
||||||
|
|
||||||
|
# dotenv environment variable files
|
||||||
|
.env
|
||||||
|
.env.development.local
|
||||||
|
.env.test.local
|
||||||
|
.env.production.local
|
||||||
|
.env.local
|
||||||
|
|
||||||
|
# caches
|
||||||
|
.eslintcache
|
||||||
|
.cache
|
||||||
|
*.tsbuildinfo
|
||||||
|
|
||||||
|
# IntelliJ based IDEs
|
||||||
|
.idea
|
||||||
|
|
||||||
|
# Finder (MacOS) folder config
|
||||||
|
.DS_Store
|
||||||
35
README.md
Normal file
35
README.md
Normal file
|
|
@ -0,0 +1,35 @@
|
||||||
|
# yimaru-cicd
|
||||||
|
|
||||||
|
Gitea webhook CD server for:
|
||||||
|
- Yimaru admin repository (git pull)
|
||||||
|
- Yimaru backend repository (git pull)
|
||||||
|
|
||||||
|
## Setup
|
||||||
|
|
||||||
|
Install dependencies:
|
||||||
|
|
||||||
|
```bash
|
||||||
|
bun install
|
||||||
|
```
|
||||||
|
|
||||||
|
Create a `.env` with at least:
|
||||||
|
|
||||||
|
```
|
||||||
|
PORT=3000
|
||||||
|
PRODUCTION_BRANCH=main
|
||||||
|
GITEA_WEBHOOK_SECRET=...
|
||||||
|
GITEA_WEBHOOK_AUTH_HEADER=...
|
||||||
|
GITEA_USERNAME=...
|
||||||
|
GITEA_PASSWORD=...
|
||||||
|
|
||||||
|
YIMARU_ADMIN_PATH=/srv/apps/yimaru_admin
|
||||||
|
YIMARU_BACKEND_PATH=/srv/apps/Yimaru-BackEnd
|
||||||
|
```
|
||||||
|
|
||||||
|
Run locally:
|
||||||
|
|
||||||
|
```bash
|
||||||
|
bun run index.ts
|
||||||
|
```
|
||||||
|
|
||||||
|
This project was created using `bun init` in bun v1.3.2. [Bun](https://bun.com) is a fast all-in-one JavaScript runtime.
|
||||||
31
bun.lock
Normal file
31
bun.lock
Normal file
|
|
@ -0,0 +1,31 @@
|
||||||
|
{
|
||||||
|
"lockfileVersion": 1,
|
||||||
|
"configVersion": 1,
|
||||||
|
"workspaces": {
|
||||||
|
"": {
|
||||||
|
"name": "yimaru-cicd",
|
||||||
|
"dependencies": {
|
||||||
|
"hono": "^4.11.7",
|
||||||
|
},
|
||||||
|
"devDependencies": {
|
||||||
|
"@types/bun": "latest",
|
||||||
|
},
|
||||||
|
"peerDependencies": {
|
||||||
|
"typescript": "^5",
|
||||||
|
},
|
||||||
|
},
|
||||||
|
},
|
||||||
|
"packages": {
|
||||||
|
"@types/bun": ["@types/bun@1.3.6", "", { "dependencies": { "bun-types": "1.3.6" } }, "sha512-uWCv6FO/8LcpREhenN1d1b6fcspAB+cefwD7uti8C8VffIv0Um08TKMn98FynpTiU38+y2dUO55T11NgDt8VAA=="],
|
||||||
|
|
||||||
|
"@types/node": ["@types/node@25.0.10", "", { "dependencies": { "undici-types": "~7.16.0" } }, "sha512-zWW5KPngR/yvakJgGOmZ5vTBemDoSqF3AcV/LrO5u5wTWyEAVVh+IT39G4gtyAkh3CtTZs8aX/yRM82OfzHJRg=="],
|
||||||
|
|
||||||
|
"bun-types": ["bun-types@1.3.6", "", { "dependencies": { "@types/node": "*" } }, "sha512-OlFwHcnNV99r//9v5IIOgQ9Uk37gZqrNMCcqEaExdkVq3Avwqok1bJFmvGMCkCE0FqzdY8VMOZpfpR3lwI+CsQ=="],
|
||||||
|
|
||||||
|
"hono": ["hono@4.11.7", "", {}, "sha512-l7qMiNee7t82bH3SeyUCt9UF15EVmaBvsppY2zQtrbIhl/yzBTny+YUxsVjSjQ6gaqaeVtZmGocom8TzBlA4Yw=="],
|
||||||
|
|
||||||
|
"typescript": ["typescript@5.9.3", "", { "bin": { "tsc": "bin/tsc", "tsserver": "bin/tsserver" } }, "sha512-jl1vZzPDinLr9eUt3J/t7V6FgNEw9QjvBPdysz9KfQDD41fQrC2Y4vKQdiaUpFT4bXlb1RHhLpp8wtm6M5TgSw=="],
|
||||||
|
|
||||||
|
"undici-types": ["undici-types@7.16.0", "", {}, "sha512-Zz+aZWSj8LE6zoxD+xrjh4VfkIG8Ya6LvYkZqtUQGJPZjYl53ypCaUwWqo7eI0x66KBGeRo+mlBEkMSeSZ38Nw=="],
|
||||||
|
}
|
||||||
|
}
|
||||||
268
components/Layout.ts
Normal file
268
components/Layout.ts
Normal file
|
|
@ -0,0 +1,268 @@
|
||||||
|
interface LayoutProps {
|
||||||
|
title: string;
|
||||||
|
children: string;
|
||||||
|
}
|
||||||
|
|
||||||
|
const styles = `
|
||||||
|
:root {
|
||||||
|
--primary-green: #0F7B4A;
|
||||||
|
--primary-green-dark: #0a5c37;
|
||||||
|
--secondary-orange: #FFB668;
|
||||||
|
--secondary-orange-dark: #e9a050;
|
||||||
|
--error-red: #EF4444;
|
||||||
|
--error-red-light: #FEE2E2;
|
||||||
|
--text-dark: #1a1a1a;
|
||||||
|
--text-muted: #6b7280;
|
||||||
|
--bg-white: #ffffff;
|
||||||
|
--bg-light: #f9fafb;
|
||||||
|
--border-light: #e5e7eb;
|
||||||
|
}
|
||||||
|
* {
|
||||||
|
margin: 0;
|
||||||
|
padding: 0;
|
||||||
|
box-sizing: border-box;
|
||||||
|
}
|
||||||
|
body {
|
||||||
|
font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Oxygen, Ubuntu, Cantarell, sans-serif;
|
||||||
|
background: var(--bg-light);
|
||||||
|
color: var(--text-dark);
|
||||||
|
line-height: 1.6;
|
||||||
|
}
|
||||||
|
.container {
|
||||||
|
max-width: 1200px;
|
||||||
|
margin: 0 auto;
|
||||||
|
padding: 20px;
|
||||||
|
}
|
||||||
|
header {
|
||||||
|
background: var(--primary-green);
|
||||||
|
color: white;
|
||||||
|
padding: 20px 0;
|
||||||
|
margin-bottom: 30px;
|
||||||
|
box-shadow: 0 2px 8px rgba(15, 123, 74, 0.3);
|
||||||
|
}
|
||||||
|
header h1 {
|
||||||
|
font-size: 24px;
|
||||||
|
font-weight: 600;
|
||||||
|
}
|
||||||
|
nav {
|
||||||
|
margin-top: 10px;
|
||||||
|
}
|
||||||
|
nav a {
|
||||||
|
color: rgba(255, 255, 255, 0.9);
|
||||||
|
text-decoration: none;
|
||||||
|
margin-right: 20px;
|
||||||
|
padding: 6px 14px;
|
||||||
|
border-radius: 6px;
|
||||||
|
transition: all 0.2s ease;
|
||||||
|
font-weight: 500;
|
||||||
|
}
|
||||||
|
nav a:hover {
|
||||||
|
background: rgba(255, 255, 255, 0.15);
|
||||||
|
color: white;
|
||||||
|
}
|
||||||
|
h2, h3 {
|
||||||
|
color: var(--primary-green);
|
||||||
|
}
|
||||||
|
.card {
|
||||||
|
background: var(--bg-white);
|
||||||
|
border-radius: 12px;
|
||||||
|
padding: 24px;
|
||||||
|
margin-bottom: 20px;
|
||||||
|
box-shadow: 0 1px 3px rgba(0, 0, 0, 0.1);
|
||||||
|
border: 1px solid var(--border-light);
|
||||||
|
}
|
||||||
|
.badge {
|
||||||
|
display: inline-block;
|
||||||
|
padding: 4px 12px;
|
||||||
|
border-radius: 20px;
|
||||||
|
font-size: 11px;
|
||||||
|
font-weight: 600;
|
||||||
|
text-transform: uppercase;
|
||||||
|
letter-spacing: 0.5px;
|
||||||
|
}
|
||||||
|
.badge-success {
|
||||||
|
background: var(--primary-green);
|
||||||
|
color: white;
|
||||||
|
}
|
||||||
|
.badge-failed {
|
||||||
|
background: var(--error-red);
|
||||||
|
color: white;
|
||||||
|
}
|
||||||
|
.badge-in_progress, .badge-pending {
|
||||||
|
background: var(--secondary-orange);
|
||||||
|
color: var(--text-dark);
|
||||||
|
}
|
||||||
|
table {
|
||||||
|
width: 100%;
|
||||||
|
border-collapse: collapse;
|
||||||
|
margin-top: 20px;
|
||||||
|
}
|
||||||
|
th, td {
|
||||||
|
padding: 14px 12px;
|
||||||
|
text-align: left;
|
||||||
|
border-bottom: 1px solid var(--border-light);
|
||||||
|
}
|
||||||
|
th {
|
||||||
|
background: var(--bg-light);
|
||||||
|
font-weight: 600;
|
||||||
|
color: var(--text-dark);
|
||||||
|
font-size: 13px;
|
||||||
|
text-transform: uppercase;
|
||||||
|
letter-spacing: 0.5px;
|
||||||
|
}
|
||||||
|
tr:hover {
|
||||||
|
background: var(--bg-light);
|
||||||
|
}
|
||||||
|
.command {
|
||||||
|
background: var(--bg-light);
|
||||||
|
padding: 16px;
|
||||||
|
border-radius: 8px;
|
||||||
|
margin-bottom: 16px;
|
||||||
|
font-family: 'Monaco', 'Menlo', 'Courier New', monospace;
|
||||||
|
font-size: 13px;
|
||||||
|
border: 1px solid var(--border-light);
|
||||||
|
}
|
||||||
|
.command-header {
|
||||||
|
display: flex;
|
||||||
|
justify-content: space-between;
|
||||||
|
align-items: center;
|
||||||
|
margin-bottom: 12px;
|
||||||
|
flex-wrap: wrap;
|
||||||
|
gap: 8px;
|
||||||
|
}
|
||||||
|
.command-header strong {
|
||||||
|
color: var(--text-dark);
|
||||||
|
word-break: break-all;
|
||||||
|
}
|
||||||
|
.command-text {
|
||||||
|
color: var(--text-muted);
|
||||||
|
margin-bottom: 10px;
|
||||||
|
}
|
||||||
|
.command-output, .command-error {
|
||||||
|
margin-top: 12px;
|
||||||
|
padding: 12px;
|
||||||
|
border-radius: 6px;
|
||||||
|
max-height: 300px;
|
||||||
|
overflow: auto;
|
||||||
|
}
|
||||||
|
.command-output {
|
||||||
|
background: #f0fdf4;
|
||||||
|
border: 1px solid #bbf7d0;
|
||||||
|
}
|
||||||
|
.command-output strong {
|
||||||
|
color: var(--primary-green);
|
||||||
|
display: block;
|
||||||
|
margin-bottom: 8px;
|
||||||
|
}
|
||||||
|
.command-output pre {
|
||||||
|
color: var(--primary-green-dark);
|
||||||
|
white-space: pre-wrap;
|
||||||
|
word-break: break-word;
|
||||||
|
margin: 0;
|
||||||
|
font-family: inherit;
|
||||||
|
font-size: 12px;
|
||||||
|
line-height: 1.5;
|
||||||
|
}
|
||||||
|
.command-error {
|
||||||
|
background: var(--error-red-light);
|
||||||
|
border: 1px solid #fecaca;
|
||||||
|
}
|
||||||
|
.command-error strong {
|
||||||
|
color: var(--error-red);
|
||||||
|
display: block;
|
||||||
|
margin-bottom: 8px;
|
||||||
|
}
|
||||||
|
.command-error pre {
|
||||||
|
color: #991b1b;
|
||||||
|
white-space: pre-wrap;
|
||||||
|
word-break: break-word;
|
||||||
|
margin: 0;
|
||||||
|
font-family: inherit;
|
||||||
|
font-size: 12px;
|
||||||
|
line-height: 1.5;
|
||||||
|
}
|
||||||
|
.timestamp {
|
||||||
|
color: var(--text-muted);
|
||||||
|
font-size: 13px;
|
||||||
|
}
|
||||||
|
a {
|
||||||
|
color: var(--primary-green);
|
||||||
|
text-decoration: none;
|
||||||
|
font-weight: 500;
|
||||||
|
}
|
||||||
|
a:hover {
|
||||||
|
color: var(--primary-green-dark);
|
||||||
|
text-decoration: underline;
|
||||||
|
}
|
||||||
|
code {
|
||||||
|
background: var(--bg-light);
|
||||||
|
padding: 2px 6px;
|
||||||
|
border-radius: 4px;
|
||||||
|
font-family: 'Monaco', 'Menlo', 'Courier New', monospace;
|
||||||
|
font-size: 12px;
|
||||||
|
border: 1px solid var(--border-light);
|
||||||
|
}
|
||||||
|
.btn {
|
||||||
|
display: inline-block;
|
||||||
|
padding: 8px 16px;
|
||||||
|
border-radius: 6px;
|
||||||
|
font-weight: 500;
|
||||||
|
text-decoration: none;
|
||||||
|
transition: all 0.2s ease;
|
||||||
|
cursor: pointer;
|
||||||
|
border: none;
|
||||||
|
}
|
||||||
|
.btn-primary {
|
||||||
|
background: var(--primary-green);
|
||||||
|
color: white;
|
||||||
|
}
|
||||||
|
.btn-primary:hover {
|
||||||
|
background: var(--primary-green-dark);
|
||||||
|
text-decoration: none;
|
||||||
|
color: white;
|
||||||
|
}
|
||||||
|
.btn-secondary {
|
||||||
|
background: var(--secondary-orange);
|
||||||
|
color: var(--text-dark);
|
||||||
|
}
|
||||||
|
.btn-secondary:hover {
|
||||||
|
background: var(--secondary-orange-dark);
|
||||||
|
text-decoration: none;
|
||||||
|
}
|
||||||
|
.btn-danger {
|
||||||
|
background: var(--error-red);
|
||||||
|
color: white;
|
||||||
|
}
|
||||||
|
.btn-danger:hover {
|
||||||
|
background: #dc2626;
|
||||||
|
text-decoration: none;
|
||||||
|
color: white;
|
||||||
|
}
|
||||||
|
`;
|
||||||
|
|
||||||
|
export function Layout({ title, children }: LayoutProps): string {
|
||||||
|
return `<!DOCTYPE html>
|
||||||
|
<html lang="en">
|
||||||
|
<head>
|
||||||
|
<meta charset="UTF-8">
|
||||||
|
<meta name="viewport" content="width=device-width, initial-scale=1.0">
|
||||||
|
<title>${title} - Yimaru CI/CD</title>
|
||||||
|
<style>${styles}</style>
|
||||||
|
</head>
|
||||||
|
<body>
|
||||||
|
<header>
|
||||||
|
<div class="container">
|
||||||
|
<h1>🚀 Yimaru CI/CD Dashboard</h1>
|
||||||
|
<nav>
|
||||||
|
<a href="/">Deployments</a>
|
||||||
|
<a href="/health">Health</a>
|
||||||
|
</nav>
|
||||||
|
</div>
|
||||||
|
</header>
|
||||||
|
<div class="container">
|
||||||
|
${children}
|
||||||
|
</div>
|
||||||
|
</body>
|
||||||
|
</html>`;
|
||||||
|
}
|
||||||
|
|
||||||
148
db.ts
Normal file
148
db.ts
Normal file
|
|
@ -0,0 +1,148 @@
|
||||||
|
import { Database } from "bun:sqlite";
|
||||||
|
|
||||||
|
export interface Deployment {
|
||||||
|
id?: number;
|
||||||
|
created_at?: string;
|
||||||
|
repository: string;
|
||||||
|
branch?: string;
|
||||||
|
commit_hash?: string;
|
||||||
|
status: string;
|
||||||
|
}
|
||||||
|
|
||||||
|
export interface Command {
|
||||||
|
id?: number;
|
||||||
|
deployment_id: number;
|
||||||
|
command: string;
|
||||||
|
stdout?: string;
|
||||||
|
stderr?: string;
|
||||||
|
exit_code?: number;
|
||||||
|
success: boolean;
|
||||||
|
}
|
||||||
|
|
||||||
|
let db: Database;
|
||||||
|
|
||||||
|
/**
|
||||||
|
* Initialize SQLite database with schema
|
||||||
|
*/
|
||||||
|
export function initializeDatabase(dbPath?: string): Database {
|
||||||
|
db = new Database(dbPath || "deployments.db");
|
||||||
|
|
||||||
|
// Create deployments table
|
||||||
|
db.exec(`
|
||||||
|
CREATE TABLE IF NOT EXISTS deployments (
|
||||||
|
id INTEGER PRIMARY KEY AUTOINCREMENT,
|
||||||
|
created_at DATETIME DEFAULT CURRENT_TIMESTAMP,
|
||||||
|
repository TEXT NOT NULL,
|
||||||
|
branch TEXT,
|
||||||
|
commit_hash TEXT,
|
||||||
|
status TEXT NOT NULL
|
||||||
|
)
|
||||||
|
`);
|
||||||
|
|
||||||
|
// Create commands table
|
||||||
|
db.exec(`
|
||||||
|
CREATE TABLE IF NOT EXISTS commands (
|
||||||
|
id INTEGER PRIMARY KEY AUTOINCREMENT,
|
||||||
|
deployment_id INTEGER,
|
||||||
|
command TEXT,
|
||||||
|
stdout TEXT,
|
||||||
|
stderr TEXT,
|
||||||
|
exit_code INTEGER,
|
||||||
|
success BOOLEAN,
|
||||||
|
FOREIGN KEY(deployment_id) REFERENCES deployments(id)
|
||||||
|
)
|
||||||
|
`);
|
||||||
|
|
||||||
|
console.log("✅ Database initialized successfully");
|
||||||
|
return db;
|
||||||
|
}
|
||||||
|
|
||||||
|
/**
|
||||||
|
* Get database instance
|
||||||
|
*/
|
||||||
|
export function getDb(): Database {
|
||||||
|
if (!db) {
|
||||||
|
throw new Error("Database not initialized. Call initializeDatabase first.");
|
||||||
|
}
|
||||||
|
return db;
|
||||||
|
}
|
||||||
|
|
||||||
|
/**
|
||||||
|
* Create a deployment record in the database
|
||||||
|
*/
|
||||||
|
export function createDeployment(
|
||||||
|
repository: string,
|
||||||
|
branch?: string,
|
||||||
|
commitHash?: string,
|
||||||
|
status: string = "in_progress"
|
||||||
|
): number {
|
||||||
|
const insertDeployment = getDb().prepare(`
|
||||||
|
INSERT INTO deployments (repository, branch, commit_hash, status)
|
||||||
|
VALUES (?, ?, ?, ?)
|
||||||
|
`);
|
||||||
|
const result = insertDeployment.run(repository, branch || null, commitHash || null, status);
|
||||||
|
return result.lastInsertRowid as number;
|
||||||
|
}
|
||||||
|
|
||||||
|
/**
|
||||||
|
* Update deployment status
|
||||||
|
*/
|
||||||
|
export function updateDeploymentStatus(deploymentId: number, status: string): void {
|
||||||
|
const updateDeployment = getDb().prepare(`
|
||||||
|
UPDATE deployments SET status = ? WHERE id = ?
|
||||||
|
`);
|
||||||
|
updateDeployment.run(status, deploymentId);
|
||||||
|
}
|
||||||
|
|
||||||
|
/**
|
||||||
|
* Insert a command record
|
||||||
|
*/
|
||||||
|
export function insertCommand(
|
||||||
|
deploymentId: number,
|
||||||
|
command: string,
|
||||||
|
stdout: string,
|
||||||
|
stderr: string | null,
|
||||||
|
exitCode: number,
|
||||||
|
success: boolean
|
||||||
|
): void {
|
||||||
|
const insertCmd = getDb().prepare(`
|
||||||
|
INSERT INTO commands (deployment_id, command, stdout, stderr, exit_code, success)
|
||||||
|
VALUES (?, ?, ?, ?, ?, ?)
|
||||||
|
`);
|
||||||
|
insertCmd.run(deploymentId, command, stdout, stderr, exitCode, success ? 1 : 0);
|
||||||
|
}
|
||||||
|
|
||||||
|
/**
|
||||||
|
* Get deployments with optional filtering
|
||||||
|
*/
|
||||||
|
export function getDeployments(limit: number = 50, repository?: string): Deployment[] {
|
||||||
|
let query = "SELECT * FROM deployments";
|
||||||
|
const params: any[] = [];
|
||||||
|
|
||||||
|
if (repository) {
|
||||||
|
query += " WHERE repository = ?";
|
||||||
|
params.push(repository);
|
||||||
|
}
|
||||||
|
|
||||||
|
query += " ORDER BY created_at DESC LIMIT ?";
|
||||||
|
params.push(limit);
|
||||||
|
|
||||||
|
const stmt = getDb().prepare(query);
|
||||||
|
return stmt.all(...params) as Deployment[];
|
||||||
|
}
|
||||||
|
|
||||||
|
/**
|
||||||
|
* Get deployment by ID
|
||||||
|
*/
|
||||||
|
export function getDeploymentById(deploymentId: number): Deployment | undefined {
|
||||||
|
const stmt = getDb().prepare("SELECT * FROM deployments WHERE id = ?");
|
||||||
|
return stmt.get(deploymentId) as Deployment | undefined;
|
||||||
|
}
|
||||||
|
|
||||||
|
/**
|
||||||
|
* Get commands for a deployment
|
||||||
|
*/
|
||||||
|
export function getCommandsByDeploymentId(deploymentId: number): Command[] {
|
||||||
|
const stmt = getDb().prepare("SELECT * FROM commands WHERE deployment_id = ? ORDER BY id ASC");
|
||||||
|
return stmt.all(deploymentId) as Command[];
|
||||||
|
}
|
||||||
379
index.ts
Normal file
379
index.ts
Normal file
|
|
@ -0,0 +1,379 @@
|
||||||
|
import { Hono } from "hono";
|
||||||
|
import type { Context } from "hono";
|
||||||
|
import {
|
||||||
|
initializeDatabase,
|
||||||
|
createDeployment,
|
||||||
|
updateDeploymentStatus,
|
||||||
|
getDeployments,
|
||||||
|
getDeploymentById,
|
||||||
|
getCommandsByDeploymentId,
|
||||||
|
type Deployment,
|
||||||
|
type Command,
|
||||||
|
} from "./db";
|
||||||
|
import {
|
||||||
|
loadEnvConfig,
|
||||||
|
verifySignature,
|
||||||
|
execCommand,
|
||||||
|
gitPullWithAuth,
|
||||||
|
type EnvConfig,
|
||||||
|
} from "./utils";
|
||||||
|
import { basename } from "node:path";
|
||||||
|
|
||||||
|
interface GiteaWebhookPayload {
|
||||||
|
repository?: {
|
||||||
|
name?: string;
|
||||||
|
owner?: {
|
||||||
|
login?: string;
|
||||||
|
};
|
||||||
|
full_name?: string;
|
||||||
|
};
|
||||||
|
ref?: string;
|
||||||
|
commits?: Array<{
|
||||||
|
id?: string;
|
||||||
|
message?: string;
|
||||||
|
}>;
|
||||||
|
}
|
||||||
|
|
||||||
|
// Deploy function signature
|
||||||
|
type DeployFunction = (
|
||||||
|
branch?: string,
|
||||||
|
commitHash?: string,
|
||||||
|
existingDeploymentId?: number
|
||||||
|
) => Promise<{ success: boolean; message: string; deploymentId?: number }>;
|
||||||
|
|
||||||
|
// Repository configuration - maps repo to its deploy function
|
||||||
|
interface RepoEntry {
|
||||||
|
repoName: string;
|
||||||
|
organization: string;
|
||||||
|
deploy: DeployFunction;
|
||||||
|
}
|
||||||
|
|
||||||
|
// Load environment configuration at startup
|
||||||
|
const env: EnvConfig = loadEnvConfig();
|
||||||
|
|
||||||
|
// Initialize database
|
||||||
|
initializeDatabase(process.env.DB_PATH);
|
||||||
|
|
||||||
|
// ============================================================================
|
||||||
|
// Deploy Functions for Each Repository
|
||||||
|
// ============================================================================
|
||||||
|
|
||||||
|
interface RepoMetadata {
|
||||||
|
repoPath: string;
|
||||||
|
organization: string;
|
||||||
|
repoName: string;
|
||||||
|
}
|
||||||
|
|
||||||
|
function resolveRepoMetadata(localPath: string, label: string): RepoMetadata {
|
||||||
|
const proc = Bun.spawnSync(["git", "config", "--get", "remote.origin.url"], {
|
||||||
|
cwd: localPath,
|
||||||
|
stdout: "pipe",
|
||||||
|
stderr: "pipe",
|
||||||
|
});
|
||||||
|
const decoder = new TextDecoder();
|
||||||
|
const remoteUrl = decoder.decode(proc.stdout).trim();
|
||||||
|
|
||||||
|
if (proc.exitCode !== 0 || !remoteUrl) {
|
||||||
|
console.error(`❌ Unable to resolve remote.origin.url for ${label} at ${localPath}`);
|
||||||
|
console.error(decoder.decode(proc.stderr).trim() || "No git remote configured");
|
||||||
|
process.exit(1);
|
||||||
|
}
|
||||||
|
|
||||||
|
const repoPath = normalizeRepoPath(remoteUrl);
|
||||||
|
const { organization, repoName } = extractOrganizationAndRepo(repoPath, localPath);
|
||||||
|
|
||||||
|
return { repoPath, organization, repoName };
|
||||||
|
}
|
||||||
|
|
||||||
|
function normalizeRepoPath(remoteUrl: string): string {
|
||||||
|
if (remoteUrl.startsWith("http://") || remoteUrl.startsWith("https://")) {
|
||||||
|
const url = new URL(remoteUrl);
|
||||||
|
return `${url.host}${url.pathname}`.replace(/^\/+/, "");
|
||||||
|
}
|
||||||
|
|
||||||
|
const sshMatch = remoteUrl.match(/^(?:.+@)?([^:]+):(.+)$/);
|
||||||
|
if (sshMatch) {
|
||||||
|
return `${sshMatch[1]}/${sshMatch[2]}`.replace(/^\/+/, "");
|
||||||
|
}
|
||||||
|
|
||||||
|
return remoteUrl.replace(/^\/+/, "");
|
||||||
|
}
|
||||||
|
|
||||||
|
function extractOrganizationAndRepo(repoPath: string, localPath: string): { organization: string; repoName: string } {
|
||||||
|
const cleaned = repoPath.replace(/\.git$/, "");
|
||||||
|
const parts = cleaned.split("/").filter(Boolean);
|
||||||
|
const organization = parts.at(-2);
|
||||||
|
const repoName = parts.at(-1);
|
||||||
|
if (organization && repoName) {
|
||||||
|
return { organization, repoName };
|
||||||
|
}
|
||||||
|
|
||||||
|
return { organization: "", repoName: basename(localPath) };
|
||||||
|
}
|
||||||
|
|
||||||
|
function createPullOnlyDeploy(
|
||||||
|
label: string,
|
||||||
|
repoPath: string,
|
||||||
|
localPath: string
|
||||||
|
): DeployFunction {
|
||||||
|
return async (
|
||||||
|
branch?: string,
|
||||||
|
commitHash?: string,
|
||||||
|
existingDeploymentId?: number
|
||||||
|
): Promise<{ success: boolean; message: string; deploymentId?: number }> => {
|
||||||
|
const repository = repoPath.replace(/\.git$/, "");
|
||||||
|
const deploymentId = existingDeploymentId ?? createDeployment(repository, branch, commitHash, "in_progress");
|
||||||
|
if (existingDeploymentId) updateDeploymentStatus(deploymentId, "in_progress");
|
||||||
|
|
||||||
|
console.log(`Starting deployment for ${label} (Deployment ID: ${deploymentId})...`);
|
||||||
|
|
||||||
|
try {
|
||||||
|
const gitResult = await gitPullWithAuth(
|
||||||
|
repoPath,
|
||||||
|
localPath,
|
||||||
|
deploymentId,
|
||||||
|
env.productionBranch,
|
||||||
|
env.giteaUsername,
|
||||||
|
env.giteaPassword
|
||||||
|
);
|
||||||
|
|
||||||
|
if (!gitResult.success) {
|
||||||
|
updateDeploymentStatus(deploymentId, "failed");
|
||||||
|
return { success: false, message: gitResult.error!, deploymentId };
|
||||||
|
}
|
||||||
|
|
||||||
|
console.log(`✅ Deployment successful`);
|
||||||
|
updateDeploymentStatus(deploymentId, "success");
|
||||||
|
return { success: true, message: `Successfully updated ${label}`, deploymentId };
|
||||||
|
} catch (error) {
|
||||||
|
updateDeploymentStatus(deploymentId, "failed");
|
||||||
|
return { success: false, message: `Deployment failed: ${error instanceof Error ? error.message : String(error)}`, deploymentId };
|
||||||
|
}
|
||||||
|
};
|
||||||
|
}
|
||||||
|
|
||||||
|
// ============================================================================
|
||||||
|
// Repository Configuration
|
||||||
|
// ============================================================================
|
||||||
|
|
||||||
|
const adminRepo = resolveRepoMetadata(env.yimaruAdminPath, "Yimaru Admin");
|
||||||
|
const backendRepo = resolveRepoMetadata(env.yimaruBackendPath, "Yimaru Backend");
|
||||||
|
|
||||||
|
const REPO_CONFIGS: RepoEntry[] = [
|
||||||
|
{
|
||||||
|
repoName: adminRepo.repoName,
|
||||||
|
organization: adminRepo.organization,
|
||||||
|
deploy: createPullOnlyDeploy("Yimaru Admin", adminRepo.repoPath, env.yimaruAdminPath),
|
||||||
|
},
|
||||||
|
{
|
||||||
|
repoName: backendRepo.repoName,
|
||||||
|
organization: backendRepo.organization,
|
||||||
|
deploy: createPullOnlyDeploy("Yimaru Backend", backendRepo.repoPath, env.yimaruBackendPath),
|
||||||
|
},
|
||||||
|
];
|
||||||
|
|
||||||
|
/**
|
||||||
|
* Find repository entry by name
|
||||||
|
*/
|
||||||
|
function findRepoEntry(repoName: string, organization: string): RepoEntry | undefined {
|
||||||
|
return REPO_CONFIGS.find(
|
||||||
|
(entry) =>
|
||||||
|
entry.repoName === repoName &&
|
||||||
|
(entry.organization.length === 0 || entry.organization === organization)
|
||||||
|
);
|
||||||
|
}
|
||||||
|
|
||||||
|
// ============================================================================
|
||||||
|
// HTTP Handlers
|
||||||
|
// ============================================================================
|
||||||
|
|
||||||
|
/**
|
||||||
|
* Handle webhook request
|
||||||
|
*/
|
||||||
|
async function handleWebhook(c: Context): Promise<Response> {
|
||||||
|
try {
|
||||||
|
// Get signature and auth header from headers
|
||||||
|
const signature = c.req.header("X-Gitea-Signature") || "";
|
||||||
|
const authHeader = c.req.header("Authorization") || c.req.header("X-Gitea-Auth") || "";
|
||||||
|
const payload = await c.req.text();
|
||||||
|
|
||||||
|
// Verify auth header
|
||||||
|
if (authHeader !== env.webhookAuthHeader) {
|
||||||
|
console.error("Invalid webhook auth header");
|
||||||
|
return c.json({ error: "Invalid authorization" }, 401);
|
||||||
|
}
|
||||||
|
|
||||||
|
// Verify signature
|
||||||
|
if (!verifySignature(payload, signature, env.webhookSecret)) {
|
||||||
|
console.error("Invalid webhook signature");
|
||||||
|
return c.json({ error: "Invalid signature" }, 401);
|
||||||
|
}
|
||||||
|
|
||||||
|
// Parse payload
|
||||||
|
const data: GiteaWebhookPayload = JSON.parse(payload);
|
||||||
|
|
||||||
|
// Extract repository information
|
||||||
|
const repoName = data.repository?.name;
|
||||||
|
const organization = data.repository?.owner?.login || data.repository?.full_name?.split("/")[0];
|
||||||
|
const ref = data.ref || "";
|
||||||
|
const commitHash = data.commits?.[0]?.id || "";
|
||||||
|
|
||||||
|
if (!repoName || !organization) {
|
||||||
|
return c.json({ error: "Invalid webhook payload: missing repository information" }, 400);
|
||||||
|
}
|
||||||
|
|
||||||
|
// Extract branch name from ref (e.g., "refs/heads/main" -> "main")
|
||||||
|
const branch = ref.replace("refs/heads/", "") || undefined;
|
||||||
|
|
||||||
|
// Only process pushes to the production branch
|
||||||
|
if (ref !== `refs/heads/${env.productionBranch}`) {
|
||||||
|
console.log(`⚠️ Ignoring push to non-production branch: ${ref}`);
|
||||||
|
return c.json({
|
||||||
|
message: `Ignoring push to ${ref}. Only the production branch (${env.productionBranch}) triggers deployments.`,
|
||||||
|
}, 200);
|
||||||
|
}
|
||||||
|
|
||||||
|
console.log(`Received webhook for ${organization}/${repoName} on ${ref} (commit: ${commitHash})`);
|
||||||
|
|
||||||
|
// Find repository entry
|
||||||
|
const entry = findRepoEntry(repoName, organization);
|
||||||
|
|
||||||
|
if (!entry) {
|
||||||
|
console.warn(`No configuration found for ${organization}/${repoName}`);
|
||||||
|
return c.json({ message: `Repository ${organization}/${repoName} not configured` }, 200);
|
||||||
|
}
|
||||||
|
|
||||||
|
// Create deployment record immediately
|
||||||
|
const deploymentId = createDeployment(
|
||||||
|
`${entry.organization}/${entry.repoName}`,
|
||||||
|
branch,
|
||||||
|
commitHash,
|
||||||
|
"pending"
|
||||||
|
);
|
||||||
|
|
||||||
|
// Run deployment in background (don't await)
|
||||||
|
entry.deploy(branch, commitHash, deploymentId)
|
||||||
|
.then((result) => {
|
||||||
|
if (result.success) {
|
||||||
|
console.log(`✅ Deployment ${deploymentId} completed: ${result.message}`);
|
||||||
|
} else {
|
||||||
|
console.error(`❌ Deployment ${deploymentId} failed: ${result.message}`);
|
||||||
|
}
|
||||||
|
})
|
||||||
|
.catch((error) => {
|
||||||
|
console.error(`❌ Deployment ${deploymentId} error:`, error);
|
||||||
|
updateDeploymentStatus(deploymentId, "failed");
|
||||||
|
});
|
||||||
|
|
||||||
|
// Immediately respond to webhook
|
||||||
|
return c.json({
|
||||||
|
message: "Deployment started",
|
||||||
|
deploymentId,
|
||||||
|
repository: `${entry.organization}/${entry.repoName}`,
|
||||||
|
branch,
|
||||||
|
}, 202);
|
||||||
|
} catch (error) {
|
||||||
|
console.error("Error processing webhook:", error);
|
||||||
|
return c.json({
|
||||||
|
error: "Internal server error",
|
||||||
|
message: error instanceof Error ? error.message : String(error),
|
||||||
|
}, 500);
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
function handleHealthCheck(c: Context): Response {
|
||||||
|
return c.json({
|
||||||
|
status: "ok",
|
||||||
|
timestamp: new Date().toISOString(),
|
||||||
|
repositories: REPO_CONFIGS.map((entry) => ({
|
||||||
|
repo: `${entry.organization}/${entry.repoName}`,
|
||||||
|
})),
|
||||||
|
});
|
||||||
|
}
|
||||||
|
|
||||||
|
function handleGetDeployments(c: Context): Response {
|
||||||
|
const limit = parseInt(c.req.query("limit") || "50", 10);
|
||||||
|
const repository = c.req.query("repository");
|
||||||
|
const deployments = getDeployments(limit, repository);
|
||||||
|
return c.json({ deployments });
|
||||||
|
}
|
||||||
|
|
||||||
|
function handleGetDeployment(c: Context): Response {
|
||||||
|
const deploymentId = parseInt(c.req.param("id"), 10);
|
||||||
|
|
||||||
|
if (isNaN(deploymentId)) {
|
||||||
|
return c.json({ error: "Invalid deployment ID" }, 400);
|
||||||
|
}
|
||||||
|
|
||||||
|
const deployment = getDeploymentById(deploymentId);
|
||||||
|
if (!deployment) {
|
||||||
|
return c.json({ error: "Deployment not found" }, 404);
|
||||||
|
}
|
||||||
|
|
||||||
|
const commands = getCommandsByDeploymentId(deploymentId);
|
||||||
|
return c.json({ deployment, commands });
|
||||||
|
}
|
||||||
|
|
||||||
|
// ============================================================================
|
||||||
|
// Hono App Setup
|
||||||
|
// ============================================================================
|
||||||
|
|
||||||
|
const app = new Hono();
|
||||||
|
|
||||||
|
// HTML Pages
|
||||||
|
app.get("/", async (c: Context) => {
|
||||||
|
const limit = parseInt(c.req.query("limit") || "50", 10);
|
||||||
|
const repository = c.req.query("repository");
|
||||||
|
const deployments = getDeployments(limit, repository);
|
||||||
|
|
||||||
|
const { DeploymentsList } = await import("./pages/DeploymentsList");
|
||||||
|
const html = DeploymentsList({ deployments });
|
||||||
|
return c.html(html);
|
||||||
|
});
|
||||||
|
|
||||||
|
app.get("/deployments/:id", async (c: Context) => {
|
||||||
|
const deploymentId = parseInt(c.req.param("id"), 10);
|
||||||
|
|
||||||
|
if (isNaN(deploymentId)) {
|
||||||
|
return c.html("<html><body><h1>Invalid deployment ID</h1></body></html>", 400);
|
||||||
|
}
|
||||||
|
|
||||||
|
const deployment = getDeploymentById(deploymentId);
|
||||||
|
if (!deployment) {
|
||||||
|
return c.html("<html><body><h1>Deployment not found</h1></body></html>", 404);
|
||||||
|
}
|
||||||
|
|
||||||
|
const commands = getCommandsByDeploymentId(deploymentId);
|
||||||
|
|
||||||
|
const { DeploymentDetail } = await import("./pages/DeploymentDetail");
|
||||||
|
const html = DeploymentDetail({ deployment, commands });
|
||||||
|
return c.html(html);
|
||||||
|
});
|
||||||
|
|
||||||
|
// Health check endpoint
|
||||||
|
app.get("/health", handleHealthCheck);
|
||||||
|
|
||||||
|
// API endpoints (JSON)
|
||||||
|
app.get("/api/deployments", handleGetDeployments);
|
||||||
|
app.get("/api/deployments/:id", handleGetDeployment);
|
||||||
|
|
||||||
|
// Webhook endpoints
|
||||||
|
app.post("/webhook", handleWebhook);
|
||||||
|
app.post("/webhook/gitea", handleWebhook);
|
||||||
|
|
||||||
|
// 404 handler
|
||||||
|
app.notFound((c: Context) => {
|
||||||
|
return c.json({ error: "Not found" }, 404);
|
||||||
|
});
|
||||||
|
|
||||||
|
// Start server
|
||||||
|
const server = Bun.serve({
|
||||||
|
port: env.port,
|
||||||
|
fetch: app.fetch,
|
||||||
|
});
|
||||||
|
|
||||||
|
console.log(`🚀 Gitea Webhook CD Server running on http://localhost:${server.port}`);
|
||||||
|
console.log(`📡 Webhook endpoint: http://localhost:${server.port}/webhook`);
|
||||||
|
console.log(`❤️ Health check: http://localhost:${server.port}/health`);
|
||||||
|
console.log(`📊 Deployments API: http://localhost:${server.port}/deployments`);
|
||||||
|
console.log(`💾 Database: ${process.env.DB_PATH || "deployments.db"}`);
|
||||||
15
package.json
Normal file
15
package.json
Normal file
|
|
@ -0,0 +1,15 @@
|
||||||
|
{
|
||||||
|
"name": "yimaru-cicd",
|
||||||
|
"module": "index.ts",
|
||||||
|
"type": "module",
|
||||||
|
"private": true,
|
||||||
|
"devDependencies": {
|
||||||
|
"@types/bun": "latest"
|
||||||
|
},
|
||||||
|
"peerDependencies": {
|
||||||
|
"typescript": "^5"
|
||||||
|
},
|
||||||
|
"dependencies": {
|
||||||
|
"hono": "^4.11.7"
|
||||||
|
}
|
||||||
|
}
|
||||||
104
pages/DeploymentDetail.ts
Normal file
104
pages/DeploymentDetail.ts
Normal file
|
|
@ -0,0 +1,104 @@
|
||||||
|
import { Layout } from "../components/Layout";
|
||||||
|
import type { Deployment, Command } from "../index";
|
||||||
|
|
||||||
|
interface DeploymentDetailProps {
|
||||||
|
deployment: Deployment;
|
||||||
|
commands: Command[];
|
||||||
|
}
|
||||||
|
|
||||||
|
function getStatusBadge(status: string): string {
|
||||||
|
const statusClass = status === "success" ? "badge-success" :
|
||||||
|
status === "failed" ? "badge-failed" :
|
||||||
|
status === "pending" ? "badge-pending" :
|
||||||
|
"badge-in_progress";
|
||||||
|
return `<span class="badge ${statusClass}">${status}</span>`;
|
||||||
|
}
|
||||||
|
|
||||||
|
function formatDate(dateString: string | undefined): string {
|
||||||
|
if (!dateString) return "N/A";
|
||||||
|
const date = new Date(dateString);
|
||||||
|
return date.toLocaleString();
|
||||||
|
}
|
||||||
|
|
||||||
|
function escapeHtml(text: string | undefined): string {
|
||||||
|
if (!text) return "";
|
||||||
|
return text
|
||||||
|
.replace(/&/g, "&")
|
||||||
|
.replace(/</g, "<")
|
||||||
|
.replace(/>/g, ">")
|
||||||
|
.replace(/"/g, """)
|
||||||
|
.replace(/'/g, "'");
|
||||||
|
}
|
||||||
|
|
||||||
|
export function DeploymentDetail({ deployment, commands }: DeploymentDetailProps): string {
|
||||||
|
const content = `
|
||||||
|
<div class="card">
|
||||||
|
<div style="display: flex; justify-content: space-between; align-items: center; margin-bottom: 24px; flex-wrap: wrap; gap: 12px;">
|
||||||
|
<h2 style="margin: 0;">Deployment #${deployment.id}</h2>
|
||||||
|
<a href="/" class="btn btn-secondary">← Back to List</a>
|
||||||
|
</div>
|
||||||
|
|
||||||
|
<div style="display: grid; grid-template-columns: repeat(auto-fit, minmax(250px, 1fr)); gap: 15px; margin-bottom: 30px;">
|
||||||
|
<div>
|
||||||
|
<strong>Repository:</strong>
|
||||||
|
<p>${escapeHtml(deployment.repository)}</p>
|
||||||
|
</div>
|
||||||
|
<div>
|
||||||
|
<strong>Branch:</strong>
|
||||||
|
<p>${escapeHtml(deployment.branch) || "N/A"}</p>
|
||||||
|
</div>
|
||||||
|
<div>
|
||||||
|
<strong>Commit:</strong>
|
||||||
|
<p>
|
||||||
|
${deployment.commit_hash ?
|
||||||
|
`<code style="font-size: 12px;">${escapeHtml(deployment.commit_hash)}</code>` :
|
||||||
|
"N/A"}
|
||||||
|
</p>
|
||||||
|
</div>
|
||||||
|
<div>
|
||||||
|
<strong>Status:</strong>
|
||||||
|
<p>${getStatusBadge(deployment.status)}</p>
|
||||||
|
</div>
|
||||||
|
<div>
|
||||||
|
<strong>Created At:</strong>
|
||||||
|
<p class="timestamp">${formatDate(deployment.created_at)}</p>
|
||||||
|
</div>
|
||||||
|
</div>
|
||||||
|
|
||||||
|
<h3 style="margin-bottom: 15px;">Commands (${commands.length})</h3>
|
||||||
|
|
||||||
|
${commands.length === 0 ?
|
||||||
|
"<p>No commands executed.</p>" :
|
||||||
|
commands.map((command) => `
|
||||||
|
<div class="command">
|
||||||
|
<div class="command-header">
|
||||||
|
<strong>${escapeHtml(command.command)}</strong>
|
||||||
|
<div>
|
||||||
|
${command.success ?
|
||||||
|
'<span class="badge badge-success">Success</span>' :
|
||||||
|
'<span class="badge badge-failed">Failed</span>'}
|
||||||
|
${command.exit_code !== null ?
|
||||||
|
`<span style="margin-left: 10px; color: #999; font-size: 12px;">Exit: ${command.exit_code}</span>` :
|
||||||
|
""}
|
||||||
|
</div>
|
||||||
|
</div>
|
||||||
|
${command.stdout ? `
|
||||||
|
<div class="command-output">
|
||||||
|
<strong>Output:</strong>
|
||||||
|
<pre>${escapeHtml(command.stdout)}</pre>
|
||||||
|
</div>
|
||||||
|
` : ""}
|
||||||
|
${command.stderr ? `
|
||||||
|
<div class="command-error">
|
||||||
|
<strong>Error:</strong>
|
||||||
|
<pre>${escapeHtml(command.stderr)}</pre>
|
||||||
|
</div>
|
||||||
|
` : ""}
|
||||||
|
</div>
|
||||||
|
`).join("")}
|
||||||
|
</div>
|
||||||
|
`;
|
||||||
|
|
||||||
|
return Layout({ title: `Deployment #${deployment.id}`, children: content });
|
||||||
|
}
|
||||||
|
|
||||||
77
pages/DeploymentsList.ts
Normal file
77
pages/DeploymentsList.ts
Normal file
|
|
@ -0,0 +1,77 @@
|
||||||
|
import { Layout } from "../components/Layout";
|
||||||
|
import type { Deployment } from "../index";
|
||||||
|
|
||||||
|
interface DeploymentsListProps {
|
||||||
|
deployments: Deployment[];
|
||||||
|
}
|
||||||
|
|
||||||
|
function getStatusBadge(status: string): string {
|
||||||
|
const statusClass = status === "success" ? "badge-success" :
|
||||||
|
status === "failed" ? "badge-failed" :
|
||||||
|
status === "pending" ? "badge-pending" :
|
||||||
|
"badge-in_progress";
|
||||||
|
return `<span class="badge ${statusClass}">${status}</span>`;
|
||||||
|
}
|
||||||
|
|
||||||
|
function formatDate(dateString: string | undefined): string {
|
||||||
|
if (!dateString) return "N/A";
|
||||||
|
const date = new Date(dateString);
|
||||||
|
return date.toLocaleString();
|
||||||
|
}
|
||||||
|
|
||||||
|
function escapeHtml(text: string | undefined): string {
|
||||||
|
if (!text) return "";
|
||||||
|
return text
|
||||||
|
.replace(/&/g, "&")
|
||||||
|
.replace(/</g, "<")
|
||||||
|
.replace(/>/g, ">")
|
||||||
|
.replace(/"/g, """)
|
||||||
|
.replace(/'/g, "'");
|
||||||
|
}
|
||||||
|
|
||||||
|
export function DeploymentsList({ deployments }: DeploymentsListProps): string {
|
||||||
|
const content = `
|
||||||
|
<div class="card">
|
||||||
|
<h2>Deployment History</h2>
|
||||||
|
${deployments.length === 0 ?
|
||||||
|
"<p>No deployments yet.</p>" :
|
||||||
|
`<table>
|
||||||
|
<thead>
|
||||||
|
<tr>
|
||||||
|
<th>ID</th>
|
||||||
|
<th>Repository</th>
|
||||||
|
<th>Branch</th>
|
||||||
|
<th>Commit</th>
|
||||||
|
<th>Status</th>
|
||||||
|
<th>Created At</th>
|
||||||
|
<th>Actions</th>
|
||||||
|
</tr>
|
||||||
|
</thead>
|
||||||
|
<tbody>
|
||||||
|
${deployments.map((deployment) => `
|
||||||
|
<tr>
|
||||||
|
<td>${deployment.id}</td>
|
||||||
|
<td>${escapeHtml(deployment.repository)}</td>
|
||||||
|
<td>${escapeHtml(deployment.branch) || "N/A"}</td>
|
||||||
|
<td>
|
||||||
|
${deployment.commit_hash ?
|
||||||
|
`<code style="font-size: 11px;">${escapeHtml(deployment.commit_hash.substring(0, 7))}</code>` :
|
||||||
|
"N/A"}
|
||||||
|
</td>
|
||||||
|
<td>${getStatusBadge(deployment.status)}</td>
|
||||||
|
<td>
|
||||||
|
<span class="timestamp">${formatDate(deployment.created_at)}</span>
|
||||||
|
</td>
|
||||||
|
<td>
|
||||||
|
<a href="/deployments/${deployment.id}" class="btn btn-primary" style="font-size: 12px; padding: 6px 12px;">View</a>
|
||||||
|
</td>
|
||||||
|
</tr>
|
||||||
|
`).join("")}
|
||||||
|
</tbody>
|
||||||
|
</table>`}
|
||||||
|
</div>
|
||||||
|
`;
|
||||||
|
|
||||||
|
return Layout({ title: "Deployments", children: content });
|
||||||
|
}
|
||||||
|
|
||||||
29
tsconfig.json
Normal file
29
tsconfig.json
Normal file
|
|
@ -0,0 +1,29 @@
|
||||||
|
{
|
||||||
|
"compilerOptions": {
|
||||||
|
// Environment setup & latest features
|
||||||
|
"lib": ["ESNext"],
|
||||||
|
"target": "ESNext",
|
||||||
|
"module": "Preserve",
|
||||||
|
"moduleDetection": "force",
|
||||||
|
"jsx": "react-jsx",
|
||||||
|
"allowJs": true,
|
||||||
|
|
||||||
|
// Bundler mode
|
||||||
|
"moduleResolution": "bundler",
|
||||||
|
"allowImportingTsExtensions": true,
|
||||||
|
"verbatimModuleSyntax": true,
|
||||||
|
"noEmit": true,
|
||||||
|
|
||||||
|
// Best practices
|
||||||
|
"strict": true,
|
||||||
|
"skipLibCheck": true,
|
||||||
|
"noFallthroughCasesInSwitch": true,
|
||||||
|
"noUncheckedIndexedAccess": true,
|
||||||
|
"noImplicitOverride": true,
|
||||||
|
|
||||||
|
// Some stricter flags (disabled by default)
|
||||||
|
"noUnusedLocals": false,
|
||||||
|
"noUnusedParameters": false,
|
||||||
|
"noPropertyAccessFromIndexSignature": false
|
||||||
|
}
|
||||||
|
}
|
||||||
259
utils.ts
Normal file
259
utils.ts
Normal file
|
|
@ -0,0 +1,259 @@
|
||||||
|
import { createHmac, timingSafeEqual } from "node:crypto";
|
||||||
|
import { insertCommand } from "./db";
|
||||||
|
|
||||||
|
export interface EnvConfig {
|
||||||
|
webhookSecret: string;
|
||||||
|
webhookAuthHeader: string;
|
||||||
|
giteaUsername: string;
|
||||||
|
giteaPassword: string;
|
||||||
|
yimaruAdminPath: string;
|
||||||
|
yimaruBackendPath: string;
|
||||||
|
port: number;
|
||||||
|
dbPath?: string;
|
||||||
|
productionBranch: string;
|
||||||
|
}
|
||||||
|
|
||||||
|
/**
|
||||||
|
* Load and validate environment variables
|
||||||
|
* Exits the process if any required variable is missing
|
||||||
|
*/
|
||||||
|
export function loadEnvConfig(): EnvConfig {
|
||||||
|
const requiredVars = [
|
||||||
|
"GITEA_WEBHOOK_SECRET",
|
||||||
|
"GITEA_WEBHOOK_AUTH_HEADER",
|
||||||
|
"GITEA_USERNAME",
|
||||||
|
"GITEA_PASSWORD",
|
||||||
|
"YIMARU_ADMIN_PATH",
|
||||||
|
"YIMARU_BACKEND_PATH",
|
||||||
|
];
|
||||||
|
|
||||||
|
const missing: string[] = [];
|
||||||
|
|
||||||
|
for (const varName of requiredVars) {
|
||||||
|
if (!process.env[varName]) {
|
||||||
|
missing.push(varName);
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
if (missing.length > 0) {
|
||||||
|
console.error("❌ Missing required environment variables:");
|
||||||
|
missing.forEach((varName) => console.error(` - ${varName}`));
|
||||||
|
console.error("\nPlease set all required environment variables in your .env file.");
|
||||||
|
process.exit(1);
|
||||||
|
}
|
||||||
|
|
||||||
|
const port = parseInt(process.env.PORT || "", 10);
|
||||||
|
if (isNaN(port) || port < 1 || port > 65535) {
|
||||||
|
console.error(`❌ Invalid PORT value: ${process.env.PORT}`);
|
||||||
|
process.exit(1);
|
||||||
|
}
|
||||||
|
|
||||||
|
// Parse production branch from environment variable
|
||||||
|
const productionBranchRaw = process.env.PRODUCTION_BRANCH;
|
||||||
|
const productionBranch = typeof productionBranchRaw === "string" ? productionBranchRaw.trim() : "";
|
||||||
|
|
||||||
|
if (!productionBranch || productionBranch.length === 0) {
|
||||||
|
console.error("❌ PRODUCTION_BRANCH must contain a valid branch name");
|
||||||
|
process.exit(1);
|
||||||
|
}
|
||||||
|
|
||||||
|
console.log(`✅ Production branch configured: ${productionBranch}`);
|
||||||
|
|
||||||
|
return {
|
||||||
|
webhookSecret: process.env.GITEA_WEBHOOK_SECRET!,
|
||||||
|
webhookAuthHeader: process.env.GITEA_WEBHOOK_AUTH_HEADER!,
|
||||||
|
giteaUsername: process.env.GITEA_USERNAME!,
|
||||||
|
giteaPassword: process.env.GITEA_PASSWORD!,
|
||||||
|
yimaruAdminPath: process.env.YIMARU_ADMIN_PATH!,
|
||||||
|
yimaruBackendPath: process.env.YIMARU_BACKEND_PATH!,
|
||||||
|
port,
|
||||||
|
productionBranch,
|
||||||
|
};
|
||||||
|
}
|
||||||
|
|
||||||
|
/**
|
||||||
|
* Verify Gitea webhook signature
|
||||||
|
*/
|
||||||
|
export function verifySignature(payload: string, signature: string, webhookSecret: string): boolean {
|
||||||
|
const hmac = createHmac("sha256", webhookSecret);
|
||||||
|
hmac.update(payload);
|
||||||
|
const expectedHex = hmac.digest("hex");
|
||||||
|
const expectedSignature = `sha256=${expectedHex}`;
|
||||||
|
|
||||||
|
// Normalize the signature - Gitea may send with or without "sha256=" prefix
|
||||||
|
const normalizedSignature = signature.startsWith("sha256=")
|
||||||
|
? signature
|
||||||
|
: `sha256=${signature}`;
|
||||||
|
|
||||||
|
// Ensure both buffers have the same length before comparing
|
||||||
|
const signatureBuffer = Buffer.from(normalizedSignature);
|
||||||
|
const expectedBuffer = Buffer.from(expectedSignature);
|
||||||
|
|
||||||
|
if (signatureBuffer.length !== expectedBuffer.length) {
|
||||||
|
console.error(`Signature length mismatch: received ${signatureBuffer.length}, expected ${expectedBuffer.length}`);
|
||||||
|
return false;
|
||||||
|
}
|
||||||
|
|
||||||
|
return timingSafeEqual(signatureBuffer, expectedBuffer);
|
||||||
|
}
|
||||||
|
|
||||||
|
/**
|
||||||
|
* Execute shell command and return result
|
||||||
|
*/
|
||||||
|
export async function execCommand(
|
||||||
|
command: string,
|
||||||
|
cwd?: string,
|
||||||
|
deploymentId?: number
|
||||||
|
): Promise<{ success: boolean; output: string; error?: string; exitCode?: number }> {
|
||||||
|
try {
|
||||||
|
// Build PATH that includes node_modules/.bin for local binaries (like tsc)
|
||||||
|
const currentPath = process.env.PATH || "/usr/local/bin:/usr/bin:/bin";
|
||||||
|
const nodeModulesBin = cwd ? `${cwd}/node_modules/.bin` : "";
|
||||||
|
const enhancedPath = nodeModulesBin ? `${nodeModulesBin}:${currentPath}` : currentPath;
|
||||||
|
|
||||||
|
// Use shell to properly handle quoted arguments and special characters
|
||||||
|
const proc = Bun.spawn(["/bin/sh", "-c", command], {
|
||||||
|
cwd,
|
||||||
|
stdout: "pipe",
|
||||||
|
stderr: "pipe",
|
||||||
|
env: {
|
||||||
|
...process.env,
|
||||||
|
PATH: enhancedPath,
|
||||||
|
},
|
||||||
|
});
|
||||||
|
|
||||||
|
const output = await new Response(proc.stdout).text();
|
||||||
|
const error = await new Response(proc.stderr).text();
|
||||||
|
|
||||||
|
await proc.exited;
|
||||||
|
|
||||||
|
const exitCode = proc.exitCode || 0;
|
||||||
|
const success = exitCode === 0;
|
||||||
|
|
||||||
|
// Store command in database if deploymentId is provided
|
||||||
|
if (deploymentId !== undefined) {
|
||||||
|
insertCommand(deploymentId, command, output, error || null, exitCode, success);
|
||||||
|
}
|
||||||
|
|
||||||
|
if (!success) {
|
||||||
|
return {
|
||||||
|
success: false,
|
||||||
|
output,
|
||||||
|
error: error || `Command failed with exit code ${exitCode}`,
|
||||||
|
exitCode,
|
||||||
|
};
|
||||||
|
}
|
||||||
|
|
||||||
|
return {
|
||||||
|
success: true,
|
||||||
|
output,
|
||||||
|
exitCode,
|
||||||
|
};
|
||||||
|
} catch (err) {
|
||||||
|
const errorMessage = err instanceof Error ? err.message : String(err);
|
||||||
|
|
||||||
|
// Store command in database even on exception
|
||||||
|
if (deploymentId !== undefined) {
|
||||||
|
insertCommand(deploymentId, command, "", errorMessage, -1, false);
|
||||||
|
}
|
||||||
|
|
||||||
|
return {
|
||||||
|
success: false,
|
||||||
|
output: "",
|
||||||
|
error: errorMessage,
|
||||||
|
exitCode: -1,
|
||||||
|
};
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
/**
|
||||||
|
* Build authenticated git URL
|
||||||
|
*/
|
||||||
|
export function buildAuthenticatedUrl(
|
||||||
|
repoPath: string,
|
||||||
|
username: string,
|
||||||
|
password: string
|
||||||
|
): { url: string; redacted: string } {
|
||||||
|
const escapedUsername = encodeURIComponent(username);
|
||||||
|
const escapedPassword = encodeURIComponent(password);
|
||||||
|
const url = `https://${escapedUsername}:${escapedPassword}@${repoPath}`;
|
||||||
|
const redacted = `https://***:***@${repoPath}`;
|
||||||
|
return { url, redacted };
|
||||||
|
}
|
||||||
|
|
||||||
|
/**
|
||||||
|
* Git pull with authentication (for PM2 services with writable .git)
|
||||||
|
*/
|
||||||
|
export async function gitPullWithAuth(
|
||||||
|
repoPath: string,
|
||||||
|
localPath: string,
|
||||||
|
deploymentId: number,
|
||||||
|
productionBranch: string,
|
||||||
|
username: string,
|
||||||
|
password: string
|
||||||
|
): Promise<{ success: boolean; error?: string }> {
|
||||||
|
const { url, redacted } = buildAuthenticatedUrl(repoPath, username, password);
|
||||||
|
|
||||||
|
// Stash local changes
|
||||||
|
console.log(`Stashing local changes...`);
|
||||||
|
await execCommand(`git stash save "local changes ${new Date().toISOString()}"`, localPath, deploymentId);
|
||||||
|
|
||||||
|
// Reset to HEAD
|
||||||
|
console.log(`Resetting to HEAD...`);
|
||||||
|
const resetResult = await execCommand("git reset --hard HEAD", localPath, deploymentId);
|
||||||
|
if (!resetResult.success) {
|
||||||
|
return { success: false, error: `Git reset failed: ${resetResult.error || resetResult.output}` };
|
||||||
|
}
|
||||||
|
|
||||||
|
// Fetch
|
||||||
|
console.log(`Fetching from remote...`);
|
||||||
|
const fetchProc = Bun.spawn(
|
||||||
|
["git", "fetch", url, productionBranch],
|
||||||
|
{ cwd: localPath, stdout: "pipe", stderr: "pipe" }
|
||||||
|
);
|
||||||
|
const fetchOutput = await new Response(fetchProc.stdout).text();
|
||||||
|
const fetchError = await new Response(fetchProc.stderr).text();
|
||||||
|
await fetchProc.exited;
|
||||||
|
|
||||||
|
insertCommand(
|
||||||
|
deploymentId,
|
||||||
|
`git fetch ${redacted} ${productionBranch}`,
|
||||||
|
fetchOutput,
|
||||||
|
fetchError || null,
|
||||||
|
fetchProc.exitCode || 0,
|
||||||
|
fetchProc.exitCode === 0
|
||||||
|
);
|
||||||
|
|
||||||
|
if (fetchProc.exitCode !== 0) {
|
||||||
|
return { success: false, error: `Git fetch failed: ${fetchError || fetchOutput}` };
|
||||||
|
}
|
||||||
|
|
||||||
|
// Checkout branch
|
||||||
|
await execCommand(`git checkout ${productionBranch}`, localPath, deploymentId);
|
||||||
|
|
||||||
|
// Pull
|
||||||
|
console.log(`Pulling latest changes...`);
|
||||||
|
const pullProc = Bun.spawn(
|
||||||
|
["git", "pull", url, productionBranch],
|
||||||
|
{ cwd: localPath, stdout: "pipe", stderr: "pipe" }
|
||||||
|
);
|
||||||
|
const pullOutput = await new Response(pullProc.stdout).text();
|
||||||
|
const pullError = await new Response(pullProc.stderr).text();
|
||||||
|
await pullProc.exited;
|
||||||
|
|
||||||
|
insertCommand(
|
||||||
|
deploymentId,
|
||||||
|
`git pull ${redacted} ${productionBranch}`,
|
||||||
|
pullOutput,
|
||||||
|
pullError || null,
|
||||||
|
pullProc.exitCode || 0,
|
||||||
|
pullProc.exitCode === 0
|
||||||
|
);
|
||||||
|
|
||||||
|
if (pullProc.exitCode !== 0) {
|
||||||
|
return { success: false, error: `Git pull failed: ${pullError || pullOutput}` };
|
||||||
|
}
|
||||||
|
|
||||||
|
console.log(`Git pull successful`);
|
||||||
|
return { success: true };
|
||||||
|
}
|
||||||
32
yimaru-cd.service
Normal file
32
yimaru-cd.service
Normal file
|
|
@ -0,0 +1,32 @@
|
||||||
|
[Unit]
|
||||||
|
Description=Yimaru CI/CD Webhook Server
|
||||||
|
After=network.target
|
||||||
|
|
||||||
|
[Service]
|
||||||
|
Type=simple
|
||||||
|
User=yimaru
|
||||||
|
Group=yimaru
|
||||||
|
WorkingDirectory=/home/yimaru/yimaru_services/yimaru_cicd
|
||||||
|
Environment="NODE_ENV=production"
|
||||||
|
Environment="PATH=/home/yimaru/.bun/bin:/home/yimaru/.nvm/versions/node/v20/bin:/home/yimaru/.local/bin:/usr/local/bin:/usr/bin:/bin"
|
||||||
|
EnvironmentFile=/home/yimaru/yimaru_services/yimaru_cicd/.env
|
||||||
|
ExecStart=/home/yimaru/.bun/bin/bun dist/index.js
|
||||||
|
Restart=always
|
||||||
|
RestartSec=10
|
||||||
|
StandardOutput=journal
|
||||||
|
StandardError=journal
|
||||||
|
SyslogIdentifier=yimaru-cd
|
||||||
|
|
||||||
|
# Security settings
|
||||||
|
NoNewPrivileges=true
|
||||||
|
PrivateTmp=true
|
||||||
|
ProtectSystem=strict
|
||||||
|
ProtectHome=read-only
|
||||||
|
ReadWritePaths=/home/yimaru/yimaru_services/yimaru_cicd /home/yimaru/.npm /var/www/html
|
||||||
|
|
||||||
|
# Resource limits
|
||||||
|
LimitNOFILE=65536
|
||||||
|
|
||||||
|
[Install]
|
||||||
|
WantedBy=multi-user.target
|
||||||
|
|
||||||
Loading…
Reference in New Issue
Block a user