food-market/deploy/swagger-diff.sh

#!/usr/bin/env bash
#
# Sprint 24: контракт-тест — diff /openapi.json между двумя
# окружениями. Используется ПЕРЕД blue-green деплоем чтобы понять что
# меняется в публичном API и не сломать клиентов (Web admin, POS WPF,
# партнёрские интеграции).
#
# Usage:
#   deploy/swagger-diff.sh [--from URL] [--to URL]
#
# Default:
#   from = https://admin.food-market.kz      (prod)
#   to   = https://test.admin.food-market.kz (stage)
#
# Что показывает:
#   - removed endpoints (path+method) — BREAKING ⚠️
#   - added endpoints                  — NEW (нормально)
#   - changed request/response schemas — нужен ручной обзор
#
# Без зависимости от swagger-diff CLI: парсим JSON через python3.
#
# Exit codes:
#   0 — изменений нет ИЛИ только additions
#   1 — есть removed (BREAKING) или changed schemas
#   2 — ошибка получения swagger.json

set -uo pipefail

FROM_URL="${FM_SWAGGER_FROM:-https://admin.food-market.kz}"
TO_URL="${FM_SWAGGER_TO:-https://test.admin.food-market.kz}"

while [[ $# -gt 0 ]]; do
  case "$1" in
    --from) FROM_URL="$2"; shift 2 ;;
    --to)   TO_URL="$2"; shift 2 ;;
    --help|-h) grep -E '^#( |$)' "$0" | sed 's/^# \?//'; exit 0 ;;
    *) echo "Unknown: $1" >&2; exit 2 ;;
  esac
done

TMP=$(mktemp -d)
trap "rm -rf $TMP" EXIT

# Пытаемся несколько канонических путей: Swashbuckle default + alt-routes.
fetch_swagger() {
  local base="$1" out="$2"
  for path in /swagger/v1/swagger.json /v1/swagger.json /api/v1/swagger.json; do
    if curl -fsS --max-time 30 "$base$path" -o "$out" 2>/dev/null; then
      # Должен быть JSON, не HTML (фронт SPA отдаёт index.html на unknown path).
      if python3 -c 'import json,sys; json.load(open(sys.argv[1]))' "$out" 2>/dev/null; then
        echo "  found at $path" >&2
        return 0
      fi
    fi
  done
  return 1
}

echo "Fetching from $FROM_URL…" >&2
fetch_swagger "$FROM_URL" "$TMP/from.json" \
  || { echo "FAIL: $FROM_URL не отдаёт swagger.json. Проверьте IncludeSwagger=true в appsettings или ASPNETCORE_ENVIRONMENT=Development." >&2; exit 2; }
echo "Fetching from $TO_URL…" >&2
fetch_swagger "$TO_URL" "$TMP/to.json" \
  || { echo "FAIL: $TO_URL не отдаёт swagger.json." >&2; exit 2; }

python3 - <<PY
import json, sys
def endpoints(s):
    out = set()
    for path, methods in s.get('paths', {}).items():
        for method, op in methods.items():
            if method.lower() in {'get','post','put','patch','delete','head','options'}:
                out.add(f"{method.upper()} {path}")
    return out

def schemas(s):
    return set(s.get('components', {}).get('schemas', {}).keys())

with open('$TMP/from.json') as f: src = json.load(f)
with open('$TMP/to.json') as f: dst = json.load(f)
e_src, e_dst = endpoints(src), endpoints(dst)
s_src, s_dst = schemas(src), schemas(dst)

added_ep  = sorted(e_dst - e_src)
removed_ep = sorted(e_src - e_dst)
added_sc  = sorted(s_dst - s_src)
removed_sc = sorted(s_src - s_dst)

print(f"=== Swagger diff: $FROM_URL → $TO_URL ===")
print(f"endpoints: from={len(e_src)} to={len(e_dst)} added={len(added_ep)} removed={len(removed_ep)}")
print(f"schemas:   from={len(s_src)} to={len(s_dst)} added={len(added_sc)} removed={len(removed_sc)}")
print()

if added_ep:
    print("### Added endpoints (новые, нормально):")
    for e in added_ep: print(f"  + {e}")
    print()

if removed_ep:
    print("### ⚠️  REMOVED endpoints (BREAKING для клиентов!):")
    for e in removed_ep: print(f"  - {e}")
    print()

if added_sc:
    print(f"### Added schemas: {len(added_sc)} (показано первые 20)")
    for s in added_sc[:20]: print(f"  + {s}")
    print()

if removed_sc:
    print(f"### ⚠️  REMOVED schemas: {len(removed_sc)}")
    for s in removed_sc[:20]: print(f"  - {s}")
    print()

# Изменения операций (опц.): сравнить parameters/responses для shared endpoint'ов.
# Пока — высокоуровневое diff'a достаточно для blue-green safety check.

# Exit code
if removed_ep or removed_sc:
    print("RESULT: BREAKING changes detected.")
    sys.exit(1)
elif not added_ep and not added_sc:
    print("RESULT: schemas identical.")
    sys.exit(0)
else:
    print("RESULT: только additions, безопасно деплоить.")
    sys.exit(0)
PY