mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2026-11-08 03:38:23 +00:00
kevinveenbirkenbachandClaude Opus 4.7
286408fa91
Move utils/roles/applications/files.py to utils/roles/mapping.py and add a data-driven role-type detector in utils/roles/type.py. Each entry in ROLE_FILES carries per-role-type allowed/mandatory flags plus marker entries that drive get_role_types(); a role MAY belong to several types (e.g. an application that also ships a system service). Add cli/meta/roles/mapping with files / types / markers subcommands so contributors can query the schema in text or JSON. Move cli/meta/applications/ to cli/meta/roles/applications/ and adjust PROJECT_ROOT parents indices accordingly. Move docs/contributing/design/services/ to docs/contributing/design/role/services/ and document the mapping in docs/contributing/design/role/mapping.md per documentation.md. Replace the narrow test_app_only_files with a generalist tests/integration/roles/meta/test_mapping.py that walks every role and every ROLE_FILES entry and reports forbidden files, missing mandatory files, forbidden entries, and missing mandatory entries in one structured fail report. meta/info.yml and meta/users.yml are now allowed across every role type. Create the seven mandatory files surfaced by the generalist test (README.md for desk-keepassxc, desk-obs, web-svc-cdn following readme_md.md, plus tasks/main.yml stubs for svc-db-memcached, svc-db-redis, sys-svc-proxy, web-app-socialhome). Audit and rewrite touched markdown for documentation.md compliance: replace em-dashes with fluent sentences, drop SPOT self-labels, fix all broken relative links introduced by the services/ move. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
119 lines
3.4 KiB
Bash
Executable File
119 lines
3.4 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
#
|
|
# Compute which roles are affected by the current branch's diff against
|
|
# `origin/main`, expanded transitively over run_after + dependencies +
|
|
# services edges via cli.meta.roles.applications.resolution.affected.
|
|
#
|
|
# Output (single line on stdout):
|
|
# __ALL__ full deploy needed. Emitted when:
|
|
# * the diff is empty, OR
|
|
# * any changed path lives outside
|
|
# roles/<role>/, OR
|
|
# * any seed role is non-modellable
|
|
# in the reverse resolver
|
|
# (resolver exit 2), OR
|
|
# * the resolver itself errors out
|
|
# (any other non-zero exit).
|
|
# <role-id> [<role-id> ...] restricted deploy set (whitelist).
|
|
#
|
|
# Pre-conditions:
|
|
# - The container started by `make up` is running (the Python resolver
|
|
# is invoked via `docker compose ... exec infinito`, identical to the
|
|
# pattern used in scripts/meta/resolve/apps.sh).
|
|
# - `git fetch origin main` is reachable (caller already did checkout).
|
|
#
|
|
# Exit codes:
|
|
# 0 in all defined output cases (including the fail-safe __ALL__).
|
|
# The script is fail-safe by design: any resolver failure widens the
|
|
# deploy matrix to "all", it never narrows it.
|
|
|
|
set -euo pipefail
|
|
|
|
PYTHON="${PYTHON:-python3}"
|
|
|
|
SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
|
|
REPO_ROOT="$(cd "$SCRIPT_DIR/../../../.." && pwd)"
|
|
cd "$REPO_ROOT"
|
|
|
|
if [[ -f "scripts/meta/env/all.sh" ]]; then
|
|
# shellcheck source=scripts/meta/env/all.sh
|
|
source "scripts/meta/env/all.sh"
|
|
fi
|
|
|
|
compose_ci_exec() {
|
|
local -a compose_args=(docker compose --env-file env.ci)
|
|
|
|
if [[ -f "env.development" ]]; then
|
|
compose_args+=(--env-file env.development)
|
|
fi
|
|
|
|
compose_args+=(--profile ci exec -T infinito)
|
|
|
|
NIX_CONFIG="${NIX_CONFIG:-}" \
|
|
INFINITO_DISTRO="${INFINITO_DISTRO}" \
|
|
"${compose_args[@]}" "$@"
|
|
}
|
|
|
|
emit_all() {
|
|
echo "__ALL__"
|
|
exit 0
|
|
}
|
|
|
|
git fetch --quiet --no-tags --prune --depth=50 origin main >/dev/null 2>&1 ||
|
|
git fetch --quiet --no-tags --prune origin main
|
|
|
|
if base="$(git merge-base origin/main HEAD 2>/dev/null)"; then
|
|
mapfile -t changed_paths < <(git diff --name-only "${base}" HEAD --)
|
|
else
|
|
mapfile -t changed_paths < <(git diff --name-only origin/main HEAD --)
|
|
fi
|
|
|
|
if ((${#changed_paths[@]} == 0)); then
|
|
emit_all
|
|
fi
|
|
|
|
declare -A seed_roles=()
|
|
|
|
for path in "${changed_paths[@]}"; do
|
|
[[ -z "${path}" ]] && continue
|
|
if [[ "${path}" != roles/*/* ]]; then
|
|
emit_all
|
|
fi
|
|
role="${path#roles/}"
|
|
role="${role%%/*}"
|
|
[[ -z "${role}" ]] && emit_all
|
|
seed_roles["${role}"]=1
|
|
done
|
|
|
|
if ((${#seed_roles[@]} == 0)); then
|
|
emit_all
|
|
fi
|
|
|
|
mapfile -t seed_list < <(printf '%s\n' "${!seed_roles[@]}" | sort)
|
|
|
|
set +e
|
|
resolved="$(
|
|
compose_ci_exec \
|
|
"${PYTHON}" -m cli.meta.roles.applications.resolution.affected \
|
|
--changed-roles "${seed_list[@]}"
|
|
)"
|
|
resolver_rc=$?
|
|
set -e
|
|
|
|
# Exit 2 means "non-modellable seed; fall back to full deploy".
|
|
# Any other non-zero is a resolver/runtime error; we still fail-safe to
|
|
# __ALL__ rather than risk silently shrinking the deploy matrix.
|
|
if ((resolver_rc != 0)); then
|
|
emit_all
|
|
fi
|
|
|
|
resolved="${resolved//$'\r'/}"
|
|
resolved="${resolved#"${resolved%%[![:space:]]*}"}"
|
|
resolved="${resolved%"${resolved##*[![:space:]]}"}"
|
|
|
|
if [[ -z "${resolved}" ]]; then
|
|
emit_all
|
|
fi
|
|
|
|
printf '%s\n' "${resolved}"
|