Diff

/var/www/vhosts/3dshawn.com/site1/named_releases.cgi

modified on local at 2026-07-12 00:48:49

Added

+86

lines

Removed

-4

lines

Context

110

unchanged

Blobs

from c958968f6b22
to 3b5abff71074

Restore this content →

Unified diff

Naive LCS-based line diff. Additions in emerald, deletions in rose. Both sides decompressed live from BLOB_STORE.

1	1	#!/usr/bin/perl
2	2	#======================================================================
3	3	# DriftSense -- /named_releases.cgi
4	4	#
5	5	# List + create named releases. Each release is a bookmark that pins
6	6	# every blob referenced by FILE_CHANGES rows in a chosen scope. A
7	7	# release can be portfolio-wide (scope_monitor_id NULL) or scoped to
8	8	# a single site (scope_monitor_id set). Pinned blobs are exempt from
9	9	# auto-purge.
10	10	#======================================================================
11	11	use strict;
12	12	use warnings;
13	13	use CGI ();
14	14	use MODS::Config; use MODS::DBConnect; use MODS::Template; use MODS::PageWrapper;
	15	use MODS::Webhook;
	16	use JSON::PP ();
15	17	my $cgi = CGI->new; my $db = MODS::DBConnect->new; my $tpl = MODS::Template->new;
16	18	$\|=1;
17	19
18	20	my $dbh = $db->db_connect or die "DB connect failed\n";
19	21
20	22	# ---- POST: create ---------------------------------------------------
21	23	if (($ENV{REQUEST_METHOD} \|\| '') eq 'POST' && $cgi->param('save')) {
22	24	my $name = $cgi->param('name') \|\| '';
23	25	my $desc = $cgi->param('description') \|\| '';
24	26	my $by = $cgi->param('released_by') \|\| 'Operator';
25	27	my $scope_mid = int($cgi->param('scope_monitor_id') \|\| 0);
26	28	my $scope_sid = int($cgi->param('scope_server_id') \|\| 0);
27	29	my $dkind = $cgi->param('alert_delivery_kind') \|\| 'none';
28	30	$dkind = 'none' unless $dkind =~ /^(none\|generic_webhook\|slack\|discord)$/;
29	31	my $durl = $cgi->param('alert_delivery_url') \|\| '';
	32	my $tier = $cgi->param('tier') \|\| 'draft';
	33	$tier = 'draft' unless $tier =~ /^(draft\|working\|stable)$/;
	34	my $vlabel = $cgi->param('version_label') \|\| '';
30	35
31	36	if (length $name) {
32	37	my $q_name = $dbh->quote($name);
33	38	my $q_desc = $dbh->quote($desc);
34	39	my $q_by = $dbh->quote($by);
35	40	my $q_dk = $dbh->quote($dkind);
36	41	my $q_du = $dbh->quote($durl);
	42	my $q_tier = $dbh->quote($tier);
	43	my $q_vl = $dbh->quote($vlabel);
37	44	my $mid_expr = $scope_mid ? $scope_mid : 'NULL';
38	45	my $sid_expr = $scope_sid ? $scope_sid : 'NULL';
39	46	$db->db_readwrite($dbh, qq~
40	47	INSERT INTO NAMED_RELEASES
41	48	(name, description, released_at, released_by, is_locked, created_at,
42	49	scope_monitor_id, scope_server_id,
43		alert_delivery_kind, alert_delivery_url)
	50	alert_delivery_kind, alert_delivery_url,
	51	tier, version_label)
44	52	VALUES
45	53	($q_name, $q_desc, NOW(), $q_by, 1, NOW(),
46	54	$mid_expr, $sid_expr,
47		$q_dk, $q_du)
	55	$q_dk, $q_du,
	56	$q_tier, $q_vl)
48	57	~, __FILE__, __LINE__);
	58	# Extra scopes for cross-scope releases (Wave 5 F5): multi-select
	59	# scope_monitor_ids[] additive
	60	my $new_rel = $db->db_readwrite($dbh, "SELECT LAST_INSERT_ID() AS id", __FILE__, __LINE__);
	61	my $rid = $new_rel && $new_rel->{id};
	62	if ($rid) {
	63	foreach my $extra ($cgi->param('extra_monitor_ids')) {
	64	my $eid = int($extra \|\| 0);
	65	next unless $eid && $eid != $scope_mid;
	66	$db->db_readwrite($dbh, qq~
	67	INSERT INTO NAMED_RELEASE_SCOPES
	68	(named_release_id, file_monitor_list_id)
	69	VALUES ($rid, $eid)
	70	~, __FILE__, __LINE__);
	71	}
	72	}
	73	}
	74	print "Status: 302 Found\nLocation: /named_releases.cgi\n\n"; exit;
	75	}
	76
	77	# ---- AJAX: test alert delivery ------------------------------------
	78	if ($cgi->param('op') && $cgi->param('op') eq 'test_alert') {
	79	my $rid = int($cgi->param('release_id') \|\| 0);
	80	print "Content-Type: application/json\nCache-Control: no-cache\n\n";
	81	my $r = $db->db_readwrite($dbh, qq~
	82	SELECT name, alert_delivery_kind, alert_delivery_url
	83	FROM NAMED_RELEASES WHERE named_release_id = $rid LIMIT 1
	84	~, __FILE__, __LINE__);
	85	unless ($r && $r->{alert_delivery_url}) {
	86	print JSON::PP::encode_json({ ok => \0, message => 'no delivery URL configured' });
	87	exit;
49	88	}
	89	my $summary = "TEST alert from DriftSense -- release '$r->{name}' -- ignore me";
	90	my $body = ($r->{alert_delivery_kind} eq 'slack') ? {
	91	text => "DriftSense TEST: $summary",
	92	attachments => [{ color => '#f59e0b', text => 'This is a synthetic drift payload. No files actually drifted.' }],
	93	} : ($r->{alert_delivery_kind} eq 'discord') ? {
	94	content => "DriftSense TEST: $summary",
	95	} : {
	96	source => 'drift_sense', alert_type => 'test',
	97	release_name => $r->{name}, summary => $summary,
	98	};
	99	my ($code, $rbody, $err) = MODS::Webhook::post_json(
	100	$r->{alert_delivery_url}, $body,
	101	timeout => 8,
	102	user_agent => 'DriftSense/1.0 (test-alert)',
	103	);
	104	my $ok = (!$err && $code >= 200 && $code < 400) ? \1 : \0;
	105	print JSON::PP::encode_json({
	106	ok => $ok, http_code => $code, message => $err ? $err : "HTTP $code",
	107	});
	108	exit;
	109	}
	110
	111	# ---- POST: promote / demote tier -----------------------------------
	112	if (($ENV{REQUEST_METHOD} \|\| '') eq 'POST' && $cgi->param('promote')) {
	113	my $rid = int($cgi->param('release_id') \|\| 0);
	114	my $tier = $cgi->param('to_tier') \|\| 'stable';
	115	$tier = 'draft' unless $tier =~ /^(draft\|working\|stable)$/;
	116	my $q_tier = $dbh->quote($tier);
	117	$db->db_readwrite($dbh,
	118	"UPDATE NAMED_RELEASES SET tier = $q_tier WHERE named_release_id = $rid",
	119	__FILE__, __LINE__);
50	120	print "Status: 302 Found\nLocation: /named_releases.cgi\n\n"; exit;
51	121	}
52	122
53	123	print "Content-Type: text/html; charset=utf-8\nCache-Control: no-cache\n\n";
54	124
55	125	# ---- Existing releases + count how many blobs each pins -------------
56	126	my @rows = $db->db_readwrite_multiple($dbh, q~
57		SELECT nr.named_release_id AS id, nr.name, nr.description,
	127	SELECT nr.named_release_id AS id, nr.name, nr.description, nr.tier, nr.version_label,
58	128	DATE_FORMAT(nr.released_at, '%b %d, %Y %H:%i') AS released_h,
59	129	UNIX_TIMESTAMP(nr.released_at) AS released_epoch,
60	130	nr.released_by, nr.is_locked,
61	131	nr.scope_monitor_id, nr.scope_server_id,
62	132	m.scan_name, s.server_name
63	133	FROM NAMED_RELEASES nr
64	134	LEFT JOIN FILE_MONITOR_SETTINGS m ON m.file_monitor_list_id = nr.scope_monitor_id
65	135	LEFT JOIN SERVERS s ON s.server_id = nr.scope_server_id
66		ORDER BY nr.released_at DESC
	136	ORDER BY (nr.tier = 'stable') DESC,
	137	(nr.tier = 'working') DESC,
	138	nr.released_at DESC
67	139	LIMIT 100
68	140	~, __FILE__, __LINE__);
69	141	foreach my $r (@rows) {
70	142	$r->{lock_pill} = $r->{is_locked} ? 'pill-ok' : 'pill-mute';
71	143	$r->{lock_lbl} = $r->{is_locked} ? 'PROTECTED' : 'UNLOCKED';
72	144	$r->{released_epoch} //= 0;
	145	$r->{tier} //= 'draft';
	146	$r->{tier_pill} = $r->{tier} eq 'stable' ? 'pill-ok'
	147	: $r->{tier} eq 'working' ? 'pill-info'
	148	: 'pill-mute';
	149	$r->{tier_lbl} = uc($r->{tier});
	150	$r->{display_label} = $r->{version_label} \|\| $r->{name};
	151	$r->{is_stable} = $r->{tier} eq 'stable' ? 1 : 0;
	152	$r->{is_draft} = $r->{tier} eq 'draft' ? 1 : 0;
	153	$r->{is_working} = $r->{tier} eq 'working'? 1 : 0;
	154	$r->{restore_url} = "/restore_release.cgi?release_id=$r->{id}";
73	155	if ($r->{scope_monitor_id}) {
74	156	$r->{scope_pill} = 'pill-info';
75	157	$r->{scope_lbl} = 'per-site';
76	158	$r->{scope_h} = $r->{scan_name} \|\| "monitor #$r->{scope_monitor_id}";
77	159	} elsif ($r->{scope_server_id}) {
78	160	$r->{scope_pill} = 'pill-info';
79	161	$r->{scope_lbl} = 'per-server';
80	162	$r->{scope_h} = $r->{server_name} \|\| "server #$r->{scope_server_id}";
81	163	} else {
82	164	$r->{scope_pill} = 'pill-mute';
83	165	$r->{scope_lbl} = 'portfolio';
84	166	$r->{scope_h} = 'All monitored sites';
85	167	}
86	168	}
87	169
88	170	# ---- All monitors + servers for scope picker ------------------------
89	171	my @monitors = $db->db_readwrite_multiple($dbh, q~
90	172	SELECT m.file_monitor_list_id AS mid, m.scan_name, s.server_name
91	173	FROM FILE_MONITOR_SETTINGS m
92	174	LEFT JOIN SERVERS s ON s.server_id = m.server_id
93	175	WHERE m.status = 1
94	176	ORDER BY s.server_id ASC, m.file_monitor_list_id ASC
95	177	~, __FILE__, __LINE__);
96	178	foreach my $m (@monitors) {
97	179	$m->{label} = ($m->{scan_name} // '?') . ' (on ' . ($m->{server_name} // '?') . ')';
98	180	}
99	181
100	182	my $total = scalar @rows;
101	183	$db->db_disconnect($dbh);
102	184
103	185	my $tvars = {
104	186	rows => \@rows,
105	187	has_rows => $total ? 1 : 0,
106	188	total => $total,
107	189	monitors => \@monitors,
108	190	has_monitors=> scalar(@monitors) ? 1 : 0,
109	191	};
110	192	my @body = $tpl->template('named_releases.html', $tvars);
111	193	MODS::PageWrapper->new->wrapper(
112	194	page_title => 'Named releases', page_key => 'named_releases',
113	195	body_html => join('', @body), userinfo => { display_name => 'Operator' },
114	196	);