api-server/.gitea/workflows/deploy.yml

name: Deploy API Server

on:
  push:
    branches: [main]

env:
  DATABASE_URL: mysql://zhixi_user:hKHQ+N0wBjJAiLukFu5OMEI8@127.0.0.1:3306/zhixi_prod

jobs:
  build-and-deploy:
    runs-on: prod
    steps:
      - name: Checkout latest code
        run: |
          if [ -d /tmp/api-server ]; then
            cd /tmp/api-server && git fetch origin && git reset --hard origin/main
          else
            git clone http://10.2.0.7:3000/wangdl/api-server.git /tmp/api-server
          fi

      - name: Install dependencies
        run: |
          cd /tmp/api-server
          npm ci

      - name: Build
        run: |
          cd /tmp/api-server
          npx prisma generate
          npm run build

      - name: Ensure infrastructure is ready
        run: |
          docker start mysql redis qdrant 2>/dev/null || true
          sleep 2

      - name: Resolve failed migrations
        run: |
          MYSQL_CMD="docker exec mysql mysql -u zhixi_user -phKHQ+N0wBjJAiLukFu5OMEI8 zhixi_prod"
          FAILED=$($MYSQL_CMD -N -e \
            "SELECT migration_name FROM _prisma_migrations WHERE logs LIKE '%failed%' LIMIT 1;" 2>/dev/null || true)
          if [ -n "$FAILED" ]; then
            echo "[deploy] Found failed migration: $FAILED, cleaning up..."
            $MYSQL_CMD -e "DROP TABLE IF EXISTS AiUsageLog;" 2>/dev/null || true
            $MYSQL_CMD -e "DROP TABLE IF EXISTS WaitlistEntry;" 2>/dev/null || true
            $MYSQL_CMD -e "DROP TABLE IF EXISTS ModelRoute;" 2>/dev/null || true
            $MYSQL_CMD -e "DROP TABLE IF EXISTS ProviderConfig;" 2>/dev/null || true
            $MYSQL_CMD -e "DROP TABLE IF EXISTS FallbackEvent;" 2>/dev/null || true
            $MYSQL_CMD -e "DROP TABLE IF EXISTS ViolationRecord;" 2>/dev/null || true
            $MYSQL_CMD -e "DROP TABLE IF EXISTS UserDevice;" 2>/dev/null || true
            $MYSQL_CMD -e "DROP TABLE IF EXISTS AccountDeletionRequest;" 2>/dev/null || true
            $MYSQL_CMD -e "ALTER TABLE UploadedFile DROP COLUMN objectKey;" 2>/dev/null || true
            $MYSQL_CMD -e "ALTER TABLE UploadedFile DROP COLUMN bucket;" 2>/dev/null || true
            $MYSQL_CMD -e "DROP INDEX UploadedFile_objectKey_idx ON UploadedFile;" 2>/dev/null || true
            $MYSQL_CMD -e "DELETE FROM _prisma_migrations WHERE migration_name = '$FAILED';"
            echo "[deploy] Cleaned up failed migration $FAILED"
          else
            echo "[deploy] No failed migrations found"
          fi

      - name: Run database migrations
        run: |
          cd /tmp/api-server
          npx prisma migrate deploy

      - name: Deploy NestJS API
        run: |
          rsync -av --delete \
            /tmp/api-server/dist/ /opt/zhixi/backend/dist/
          rsync -av --delete \
            /tmp/api-server/node_modules/ /opt/zhixi/backend/node_modules/
          rsync -av \
            /tmp/api-server/prisma/ /opt/zhixi/backend/prisma/
          rsync -av \
            /tmp/api-server/package.json /opt/zhixi/backend/package.json

      - name: Generate Prisma client
        run: |
          cd /opt/zhixi/backend && npx prisma generate

      - name: Start API service
        run: |
          cd /opt/zhixi/backend
          PORT=3000 nohup node dist/main.js > /tmp/zhixi-direct.log 2>&1 &
          DIRECT_PID=$!
          HEALTHY=0
          for i in $(seq 1 15); do
            sleep 1
            if curl -sf http://localhost:3000/api > /dev/null 2>&1; then
              echo "[deploy] App healthy after ${i}s"
              HEALTHY=1
              break
            fi
            if ! kill -0 $DIRECT_PID 2>/dev/null; then
              echo "[deploy] App crashed — log:"
              tail -30 /tmp/zhixi-direct.log
              break
            fi
          done
          kill $DIRECT_PID 2>/dev/null
          wait $DIRECT_PID 2>/dev/null || true
          if [ "$HEALTHY" = "1" ]; then
            echo "[deploy] App verified OK, restarting via systemd..."
            sudo systemctl reset-failed zhixi-api 2>/dev/null || true
            sudo systemctl restart zhixi-api || true
            sleep 3
            curl -sf http://localhost:3000/api > /dev/null && echo "[deploy] systemd health OK" || echo "[deploy] systemd restart pending (app verified working)"
          else
            echo "[deploy] App failed to start"
            exit 1
          fi

      - name: Deploy RAG Worker
        run: |
          set -e
          WORKER_DIR="/opt/zhixi/backend/rag-worker"
          mkdir -p "$WORKER_DIR"
          rsync -av --delete --exclude='.env' --exclude='__pycache__' \
            /tmp/api-server/rag-worker/ "$WORKER_DIR/"
          sudo cp "$WORKER_DIR/zhixi-worker.service" /etc/systemd/system/
          sudo systemctl daemon-reload
          sudo systemctl restart zhixi-worker
          sleep 5
          sudo systemctl is-active zhixi-worker
          echo "[deploy] zhixi-worker active OK"