持续集成流水线：强化最终自动部署流水线、测试门禁与生产冒烟自检

.gitlab-ci.yml

@@ -16,6 +16,7 @@ build_backend:
     - railway-deploy
   rules:
     - if: '$CI_COMMIT_BRANCH'
+    - if: '$CI_PIPELINE_SOURCE == "merge_request_event"'
   script:
     - echo "=== 开始编译后端 RuoYi-Vue ==="
     - export JAVA_HOME=/data2/wzb/tools/jdk8
@@ -24,7 +25,9 @@ build_backend:
     - bash scripts/bootstrap/check-kingbase-jdbc.sh
     - cd RuoYi-Vue
     - mvn clean package
-    - echo "=== 后端编译成功 ==="
+    - |
+      python3 -c 'import glob, re; runs = [int(m.group(1)) for f in glob.glob("ruoyi-*/target/surefire-reports/*.txt") for m in re.finditer(r"Tests run:\s*(\d+)", open(f, errors="ignore").read())]; print("=== 后端测试执行统计: Tests run: %d ===" % sum(runs))'
+    - echo "=== 后端测试与构建成功 ==="
   artifacts:
     expire_in: 2 days
     paths:
@@ -37,6 +40,7 @@ build_frontend:
     - railway-deploy
   rules:
     - if: '$CI_COMMIT_BRANCH'
+    - if: '$CI_PIPELINE_SOURCE == "merge_request_event"'
   script:
     - echo "=== 开始编译前端 build_ui ==="
     - export NODE_OPTIONS="--openssl-legacy-provider --dns-result-order=ipv4first"
@@ -46,7 +50,11 @@ build_frontend:
         ln -sfn /data2/wzb/tools/frontend-cache/node_modules ./node_modules;
       fi
     - npm run build:prod
-    - echo "=== 前端编译成功 ==="
+    - if [ ! -d "dist" ] || [ ! -f "dist/index.html" ]; then
+        echo "错误：前端构建产物 build_ui/dist/index.html 不存在，构建失败";
+        exit 1;
+      fi
+    - echo "=== 前端编译成功，build_ui/dist/index.html 校验通过 ==="
   artifacts:
     expire_in: 2 days
     paths:
@@ -59,13 +67,37 @@ deploy_production:
     - railway-deploy
   rules:
     - if: '$CI_COMMIT_BRANCH == "feat/cicd-pipeline"'
+    - when: never
   script:
-    - echo "=== 开始部署应用 ==="
-    # 部署前端静态资源到发布目录
+    - echo "=== 0. 验证部署运行时环境配置 ==="
+    - if [ -z "${TRAIN_STUDENT_IDENTITY_ENCRYPTION_KEY:-}" ] || [ -z "${TRAIN_STUDENT_IDENTITY_HASH_KEY:-}" ] || [ -z "${SPRING_REDIS_PASSWORD:-}" ]; then
+        echo "错误：缺少必需的运行时配置";
+        exit 1;
+      fi
+    - echo "required runtime configuration present."
+    - echo "=== 1. 执行部署备份 (Rollback 兜底) ==="
+    - if [ -d "/data2/wzb/deploy/frontend" ] && [ "$(ls -A /data2/wzb/deploy/frontend 2>/dev/null)" ]; then
+        echo "备份现有前端资源到 /data2/wzb/deploy/frontend.bak ...";
+        mkdir -p /data2/wzb/deploy/frontend.bak;
+        cp -a /data2/wzb/deploy/frontend/. /data2/wzb/deploy/frontend.bak/;
+      fi
+    - if [ -f "/data2/wzb/deploy/backend/ruoyi-admin.jar" ]; then
+        echo "备份现有后端 Jar 到 /data2/wzb/deploy/backend/ruoyi-admin.jar.bak ...";
+        cp -p /data2/wzb/deploy/backend/ruoyi-admin.jar /data2/wzb/deploy/backend/ruoyi-admin.jar.bak;
+      fi
+    - echo "=== 2. 部署前端静态资源与文档中心 ==="
+    - mkdir -p /data2/wzb/deploy/frontend
     - rm -rf /data2/wzb/deploy/frontend/*
     - cp -r build_ui/dist/* /data2/wzb/deploy/frontend/
-    # 部署后端 Jar 包并执行平滑重启
+    - mkdir -p /data2/wzb/deploy/frontend/docs
+    - cp -r docs/* /data2/wzb/deploy/frontend/docs/
+    - echo "=== 3. 部署后端 Jar 包 ==="
+    - mkdir -p /data2/wzb/deploy/backend
     - cp RuoYi-Vue/ruoyi-admin/target/ruoyi-admin.jar /data2/wzb/deploy/backend/
+    - echo "=== 4. 执行平滑重启与生产自检 ==="
     - chmod +x deploy/restart-all.sh
     - bash deploy/restart-all.sh
+    - echo "=== 5. 输出访问地址 ==="
+    - echo "APPLICATION_URL=http://192.168.139.230:8082/"
+    - echo "DOCUMENTATION_URL=http://192.168.139.230:8082/docs/visual/index.html"
     - echo "=== 部署与自检成功完成！ ==="