Gabriel Radureau
00d86b47a3
The human-gated path that carries a reviewed sandbox change to prod.
- promote-plan.sh: render a manifest (JSON array of write ops with symbolic @refs
instead of ids — portable sandbox->prod) as a human-readable change-set.
- promote-apply.sh <manifest> --target sandbox|prod: replay it, resolving each
@ref to the id actually created during the run (dependent ops wire up). sandbox
rehearses via dol-write.sh; prod via dol-prod-write.sh.
- dol-prod-write.sh: the ONLY prod-write path. Prod key read from the ENVIRONMENT
only (DOLIBARR_PROD_WRITE_KEY, never a stored .env); every write refused unless
ARCO_PROMOTE_CONFIRM=I-UNDERSTAND-THIS-WRITES-PROD.
- create scripts take a DOL_WRITE override so promote-apply reuses them per target.
- bin/arcodange: `promote {plan|apply}` group + example manifest.
- payment-record.sh: fixed supplier payments (payment_mode_id + closepaidinvoices).
Proven live: plan renders; apply --target sandbox replays a 3-op chain with refs
resolved (@tp1->id, invoice socid=@tp1, payment invoice=@inv1); --target prod
without the confirm flag is REFUSED before sending. Supplier payment now works
end-to-end via the script.
Limitation (documented): manifests reference entities they create (@ref);
pre-existing prod entities need business-key resolution (follow-up).
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
41 lines
2.6 KiB
Bash
Executable File
41 lines
2.6 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
# Render a promote manifest as a human-readable change-set for review.
|
|
#
|
|
# A manifest is a JSON array of operations using SYMBOLIC refs (@name) instead of
|
|
# ids, so the SAME manifest replays on sandbox or prod:
|
|
# [ {"op":"thirdparty","ref":"tp1","input":{"name":"OVH","role":"supplier"}},
|
|
# {"op":"invoice","ref":"inv1","input":{"socid":"@tp1","kind":"supplier",
|
|
# "ref_supplier":"X","validate":true,"lines":[{"desc":"Hosting","qty":1,"price_ht":80,"tva":20,"type":"service"}]}},
|
|
# {"op":"payment","input":{"invoice_id":"@inv1","mode":"VIR","account_id":1}} ]
|
|
set -euo pipefail
|
|
MANIFEST="${1:?usage: promote-plan.sh <manifest.json>}"
|
|
python3 - "$MANIFEST" <<'PY'
|
|
import json, sys
|
|
ops = json.load(open(sys.argv[1]))
|
|
print("Promote plan — %d operation(s) (symbolic refs resolve at apply time):\n" % len(ops))
|
|
for i, op in enumerate(ops, 1):
|
|
t = op["op"]; inp = op.get("input", {}); ref = op.get("ref")
|
|
print(" %d. %s%s" % (i, t, (" => @%s" % ref) if ref else ""))
|
|
if t == "thirdparty":
|
|
print(" name=%r role=%s%s" % (inp.get("name"), inp.get("role", "client"),
|
|
(" tva=%s" % inp["tva_intra"]) if inp.get("tva_intra") else ""))
|
|
elif t == "invoice":
|
|
print(" socid=%s kind=%s%s validate=%s" % (inp.get("socid"), inp.get("kind", "customer"),
|
|
(" ref_supplier=%s" % inp["ref_supplier"]) if inp.get("ref_supplier") else "", bool(inp.get("validate"))))
|
|
for ln in inp.get("lines", []):
|
|
print(" - %r qty=%s pu_ht=%s tva=%s%% [%s]" % (ln.get("desc", ""), ln.get("qty", 1),
|
|
ln.get("price_ht", ln.get("subprice")), ln.get("tva", ln.get("tva_tx", 20)), ln.get("type", "service")))
|
|
elif t == "creditnote":
|
|
print(" socid=%s source_invoice=%s validate=%s" % (inp.get("socid"), inp.get("source_invoice"), bool(inp.get("validate"))))
|
|
for ln in inp.get("lines", []):
|
|
print(" - %r qty=%s pu_ht=%s tva=%s%%" % (ln.get("desc", ""), ln.get("qty", 1),
|
|
ln.get("price_ht", ln.get("subprice")), ln.get("tva", ln.get("tva_tx", 20))))
|
|
elif t == "payment":
|
|
print(" invoice=%s mode=%s account=%s %s" % (inp.get("invoice_id"), inp.get("mode", "VIR"),
|
|
inp.get("account_id"), ("amount=%s" % inp["amount"]) if inp.get("amount") else "(full)"))
|
|
print("\nNext:")
|
|
print(" promote-apply.sh <manifest> --target sandbox # rehearse the replay (safe)")
|
|
print(" promote-apply.sh <manifest> --target prod # WRITES PROD — needs DOLIBARR_PROD_WRITE_KEY")
|
|
print(" # + ARCO_PROMOTE_CONFIRM=I-UNDERSTAND-THIS-WRITES-PROD")
|
|
PY
|